koa v2.16.4

What's Changed

• fix(security): Host Header Injection via ctx.hostname by @killagu https://github.com/koajs/koa/security/advisories/GHSA-7gcc-r8m5-44qm