# dev-news log, Sunday, 1 November 2026

Source: https://dev-news.anonyfox.com/log/2026-11-01/

**Hono 4.13.16** {hono} (2026-11-01). The second Hono release today, 60 minutes after 4.13.15, fixes five advisories: GHSA-4m76-xfj5-7975, GHSA-h7mg-cq63-vhpq, GHSA-4h7h-rv7c-7m2v, GHSA-3gg2-335m-rxc6 and GHSA-46wx-v44x-9hh2. These cover mount and router middleware bypasses, skipped form validation, CSS HTML injection and unchecked hyperlink-auditing requests. Regenerate `PreparedRegExpRouter` data; some route patterns now throw instead of being accepted. [notes](https://github.com/honojs/hono/releases/tag/v4.13.16)

**Mistral v3.7.0** {mistral} (2026-11-01). The recorded stable release history jumps from v3.2.0 on 9 October to v3.7.0, a 23-day gap with no v3.3 through v3.6 releases recorded. The notes explicitly mark changes to voice `gender` and removal of the voice-create `slug` field as breaking. Counting the beta operations listed as removed gives 14, all under `sdk.beta.rag.managed_indexes`; the additions put search-index operations under `sdk.beta.context.search_indexes`. [notes](https://github.com/mistralai/client-python/releases/tag/v3.7.0)