Skip to content

chore(deps): bump @hono/node-server from 2.0.5 to 2.0.10 in /agent#7

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/agent/hono/node-server-2.0.8
Closed

chore(deps): bump @hono/node-server from 2.0.5 to 2.0.10 in /agent#7
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/agent/hono/node-server-2.0.8

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 7, 2026

Copy link
Copy Markdown

Bumps @hono/node-server from 2.0.5 to 2.0.10.

Release notes

Sourced from @​hono/node-server's releases.

v2.0.10

Security fixes

This release includes a fix for the following security issue:

Unauthenticated memory-leak DoS via aborted WebSocket handshake

Affects: upgradeWebSocket. A WebSocket upgrade request with a missing or malformed Sec-WebSocket-Key header leaked the request's IncomingMessage and left a promise pending, even though no connection was established. Since the route is reachable pre-handshake without authentication, an attacker could flood it to gradually exhaust memory. GHSA-9mqv-5hh9-4cgg


Users of upgradeWebSocket are encouraged to upgrade to this version.

v2.0.9

What's Changed

New Contributors

Full Changelog: honojs/node-server@v2.0.8...v2.0.9

v2.0.8

What's Changed

Full Changelog: honojs/node-server@v2.0.7...v2.0.8

v2.0.7

What's Changed

Full Changelog: honojs/node-server@v2.0.6...v2.0.7

v2.0.6

What's Changed

Full Changelog: honojs/node-server@v2.0.5...v2.0.6

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​hono/node-server since your current version.


@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 7, 2026
@vercel

vercel Bot commented Jul 7, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
earlynotwrong Ready Ready Preview, Comment Jul 18, 2026 8:55am

@socket-security

socket-security Bot commented Jul 7, 2026

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatednpm/​@​hono/​node-server@​2.0.5 ⏵ 2.0.1098 -110010096 +1100

View full report

@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/agent/hono/node-server-2.0.8 branch from da2c9a3 to 6fe0552 Compare July 14, 2026 17:08
thisyearnofear pushed a commit that referenced this pull request Jul 16, 2026
Seven improvements to surface all chains, capabilities, and connect
the conviction side to the trading side:

#1 Multi-chain anchor status panel (src/components/recent-anchors.tsx)
   - Replaced flat history list with a 3-column panel: Casper, Mantle, Aleo
   - Each chain gets equal visual weight with its own colored border/bg
   - Shows latest anchor status, tx hash, and explorer link per chain
   - Fetches from both /conviction (anchorResults) and /casper/anchors
   - Rolling history list below, grouped by chain with color-coded labels

#2 Aleo added to dashboard narrative
   - Aleo now appears as the third column in the anchor panel
   - Role label: "Privacy-preserving thesis proof"
   - No longer buried in /analyzer's Strategist tab only

#3 Chain legend
   - One-line legend under the 3-column panel:
     "Casper = public registry · Mantle = EVM mirror · Aleo = privacy proof"
   - Tells a judge why there are three chains, not just that there are three

#4 Conviction-to-trade flow (src/app/agent/page.tsx)
   - Held positions now show the conviction score that motivated entry
   - "scored 72" annotation in signal color, with rationale on hover
   - Conviction Ledger card title shows "positions ← signals" hint
   - The connection between scoring and trading is now visible

#5 Shared conviction-core framework surfaced
   - Row 0 orientation text now mentions conviction-core:
     "The same conviction-core framework that scores the agent's trades
      also powers the wallet analyzer"
   - Links to /analyzer to connect the two sides of the product

#6 MCP/CAP story reframed (ReputationApiCard)
   - Renamed from "Agent Reputation API" to "Agent-to-Agent Reputation"
   - Badge now shows "MCP · x402 · CROO CAP" (all three protocols)
   - Description rewritten to lead with the unique capability:
     "Other AI agents query this agent's verifiable track record over
      Model Context Protocol, paying per call through x402 micropayments
      on Casper. The agent also advertises reputation services on the
      CROO network, settled in USDC on Base — agent-to-agent commerce,
      no human in the loop."

#7 Cycle timeline strip
   - Horizontal strip in Row 0 showing the 6 pipeline steps with checkmarks:
     "Cycle 127: ✓ data → ✓ score → ✓ manage → ✓ execute → ✓ anchor → ✓ narrate"
   - Shows "next in Xm" countdown to the next cycle
   - Proves the agent is a complete autonomous loop, not just a trader

Generated with [Devin](https://devin.ai)

Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>
Bumps [@hono/node-server](https://github.com/honojs/node-server) from 2.0.5 to 2.0.10.
- [Release notes](https://github.com/honojs/node-server/releases)
- [Commits](honojs/node-server@v2.0.5...v2.0.10)

---
updated-dependencies:
- dependency-name: "@hono/node-server"
  dependency-version: 2.0.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title chore(deps): bump @hono/node-server from 2.0.5 to 2.0.8 in /agent chore(deps): bump @hono/node-server from 2.0.5 to 2.0.10 in /agent Jul 18, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/agent/hono/node-server-2.0.8 branch from 6fe0552 to 3098d17 Compare July 18, 2026 08:51
@dependabot @github

dependabot Bot commented on behalf of github Jul 21, 2026

Copy link
Copy Markdown
Author

Superseded by #24.

@dependabot dependabot Bot closed this Jul 21, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/agent/hono/node-server-2.0.8 branch July 21, 2026 09:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants