• ci: pin GitHub Actions to SHAs by @yusukebe in https://github.com/honojs/hono/pull/4932
• fix(serveStatic): make options parameter optional in all adapters by @mixelburg in https://github.com/honojs/hono/pull/4934
• fix(cookie): return the first cookie when there are multiple cookies with the same name by @usualoma in https://github.com/honojs/hono/pull/4922
• feat(bearer-auth): make bearerAuth generic for typed context in verifyToken by @justinnais in https://github.com/honojs/hono/pull/4913
• feat(cache): key cache entries by configured vary headers by @usualoma in https://github.com/honojs/hono/pull/4915
• feat(request): add bytes() by @yusukebe in https://github.com/honojs/hono/pull/4921
• fix(stream): upgrade @hono/node-server to v2 and fix abort handling by @yusukebe in https://github.com/honojs/hono/pull/4940

• @justinnais made their first contribution in https://github.com/honojs/hono/pull/4913

Full Changelog: https://github.com/honojs/hono/compare/v4.12.18...v4.12.19

• correct size of [ big delimiter (#4217) (7ba0027), closes #4215

• Prevent cookie attribute injection: CVE-2026-46625 (eb3c40e)
• Add Partitioned attribute to readme (b994768)
• Publish to npm registry via trusted publisher exclusively (4dc71be)
• Ensure consistent behaviour for get('name') + get() (1953d30)

Release 2026-05-16 05:06

• start: add inline CSS runtime controls and asset URL templates (#7380) (2387a2eea0) by @schiller-manuel

• Fix literal underscore paths under pathless layouts (#7408) (742941e2f1) by @schiller-manuel

• @tanstack/react-router@1.170.1
• @tanstack/react-start@1.168.2
• @tanstack/react-start-client@1.167.1
• @tanstack/react-start-rsc@0.1.2
• @tanstack/react-start-server@1.167.1
• @tanstack/router-cli@1.167.2
• @tanstack/router-core@1.170.1
• @tanstack/router-generator@1.167.2
• @tanstack/router-plugin@1.168.2
• @tanstack/router-vite-plugin@1.167.2
• @tanstack/solid-router@1.170.1
• @tanstack/solid-start@1.168.2
• @tanstack/solid-start-client@1.167.1
• @tanstack/solid-start-server@1.167.1
• @tanstack/start-client-core@1.169.1
• @tanstack/start-plugin-core@1.170.2
• @tanstack/start-server-core@1.168.1
• @tanstack/start-static-server-functions@1.167.1
• @tanstack/start-storage-context@1.167.1
• @tanstack/vue-router@1.170.1
• @tanstack/vue-start@1.168.2
• @tanstack/vue-start-client@1.167.1
• @tanstack/vue-start-server@1.167.1

• Updated dependencies [742941e]:
  • @tanstack/router-generator@1.167.2
  • @tanstack/router-plugin@1.168.2

• Updated dependencies []:
  • @tanstack/router-plugin@1.168.2

• Updated dependencies []:
  • @tanstack/start-plugin-core@1.170.2

• Updated dependencies [742941e]:
  • @tanstack/router-generator@1.167.2

• Updated dependencies []:
  • @tanstack/start-plugin-core@1.170.2

• Updated dependencies [742941e]:
  • @tanstack/router-generator@1.167.2