hono-knowledge-patchlisted

# Hono 4.8–4.12 Knowledge Patch Baseline: Hono through v4.7.x (core routing, middleware, `hc`, JSX/SSR, WebSocket helpers, and Cloudflare Workers/Pages, Deno, Bun, and Node.js adapters); covered range: v4.8.0 through v4.12.x plus the included topical guidance current to 2026-07-12. ## Use this patch - Read the security section before changing authentication, caching, static serving, CORS, IP restrictions, cookies, JSX/CSS SSR, or streaming. - Read the relevant topic reference before implementing or reviewing Hono code. - Preserve explicit JWT/JWK algorithms and the current patch-level security floor. - Treat client path/query inputs as wire-format strings even when server validation coerces them. - Use runtime-specific exports for adapters and static generation. ## Reference index | Reference | Topics | | --- | --- | | [Routing and requests](references/routing-and-requests.md) | HEAD dispatch, route introspection, trailing slashes, raw requests and bytes, query/body behavior, proxy headers, locale fallback, Unix sockets | | [Client, RPC, validation, and testing](references/client-rpc-validation-testing.md) | `hc` URLs and inputs, response typing/parsing, query serialization, validator rules, Standard Schema, `testClient`, `app.request()` | | [Security and authentication](references/security-and-auth.md) | JWT/JWK algorithms and sources, Basic Auth hooks, CSP, bot blocking, security patch floors | | [Middleware, runtimes, and integrations](references/middleware-runtimes-i