{
 "date": "2026-11-01",
 "url": "https://dev-news.anonyfox.com/log/2026-11-01/",
 "items": [
  {
   "n": 1,
   "node": "hono",
   "node_url": "https://dev-news.anonyfox.com/hono/",
   "title": "Hono 4.13.16",
   "date": "2026-11-01",
   "text": "The second Hono release today, 60 minutes after 4.13.15, fixes five advisories: GHSA-4m76-xfj5-7975, GHSA-h7mg-cq63-vhpq, GHSA-4h7h-rv7c-7m2v, GHSA-3gg2-335m-rxc6 and GHSA-46wx-v44x-9hh2. These cover mount and router middleware bypasses, skipped form validation, CSS HTML injection and unchecked hyperlink-auditing requests. Regenerate PreparedRegExpRouter data; some route patterns now throw instead of being accepted.",
   "sources": [
    {
     "label": "notes",
     "url": "https://github.com/honojs/hono/releases/tag/v4.13.16"
    }
   ]
  },
  {
   "n": 2,
   "node": "mistral",
   "node_url": "https://dev-news.anonyfox.com/mistral/",
   "title": "Mistral v3.7.0",
   "date": "2026-11-01",
   "text": "The recorded stable release history jumps from v3.2.0 on 9 October to v3.7.0, a 23-day gap with no v3.3 through v3.6 releases recorded. The notes explicitly mark changes to voice gender and removal of the voice-create slug field as breaking. Counting the beta operations listed as removed gives 14, all under sdk.beta.rag.managed_indexes; the additions put search-index operations under sdk.beta.context.search_indexes.",
   "sources": [
    {
     "label": "notes",
     "url": "https://github.com/mistralai/client-python/releases/tag/v3.7.0"
    }
   ]
  }
 ]
}