New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

chore(deps): update dependency fastify to v4 [security] - autoclosed #12

Closed

renovate wants to merge 1 commit into main from renovate/npm-fastify-vulnerability

renovate bot commented Aug 6, 2024 •

edited

Loading

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
fastify (source)	`^3 \|\| ^4` -> `^4.10.2 ^4.10.2`

GitHub Vulnerability Alerts

CVE-2022-41919

Impact

The attacker can use the incorrect Content-Type to bypass the Pre-Flight checking of fetch. fetch() requests with Content-Type’s essence as "application/x-www-form-urlencoded", "multipart/form-data", or "text/plain", could potentially be used to invoke routes that only accepts application/json content type, thus bypassing any CORS protection, and therefore they could lead to a Cross-Site Request Forgery attack.

Patches

For 4.x users, please update to at least 4.10.2
For 3.x users, please update to at least 3.29.4

Workarounds

Implement Cross-Site Request Forgery protection using @fastify/csrf.

References

Check out the HackerOne report: https://hackerone.com/reports/1763832.

For more information

Fastify security policy

Release Notes

fastify/fastify (fastify)

`v4.10.2`

⚠️ Security Release ⚠️

Fix for "Incorrect Content-Type parsing can lead to CSRF attack"
and CVE-2022-41919

Full Changelog: fastify/fastify@v4.10.1...v4.10.2

`v4.10.1`

What's Changed

fix node 19.1.0 port validation test by @Uzlopak in https://github.com/fastify/fastify/pull/4427
Add fastify-constraints to community plugins by @Ceres6 in https://github.com/fastify/fastify/pull/4428
build(deps-dev): bump @sinonjs/fake-timers from 9.1.2 to 10.0.0 by @dependabot in https://github.com/fastify/fastify/pull/4421
add silent option to LogLevel by @Uzlopak in https://github.com/fastify/fastify/pull/4432

New Contributors

@Ceres6 made their first contribution in https://github.com/fastify/fastify/pull/4428

Full Changelog: fastify/fastify@v4.10.0...v4.10.1

`v4.10.0`

What's Changed

docs(reference/reply): spelling fixes by @Fdawgs in https://github.com/fastify/fastify/pull/4358
Support different content-type typed reply with TypeProvider by @rain714 in https://github.com/fastify/fastify/pull/4360
chore: remove leading empty lines by @LinusU in https://github.com/fastify/fastify/pull/4364
fix types after pino 8.7.0 change by @mcollina in https://github.com/fastify/fastify/pull/4365
Node.js V19 support by @mcollina in https://github.com/fastify/fastify/pull/4366
fix: no check on null or undefined values passed as fn by @metcoder95 in https://github.com/fastify/fastify/pull/4367
docs(server): config is lost when reply.call not found() is called by @cesarvspr in https://github.com/fastify/fastify/pull/4368
Fix typo - 'sever' to 'server' by @utsav91 in https://github.com/fastify/fastify/pull/4372
Add platformatic to the Acknowledgements by @mcollina in https://github.com/fastify/fastify/pull/4378
docs: add Simone Busoli to plugin maintainers by @simoneb in https://github.com/fastify/fastify/pull/4379
add missing 'validationContext' field to FastifyError type by @jakubburzynski in https://github.com/fastify/fastify/pull/4363
fix(type-providers): assignability of instance with enabled type provider by @driimus in https://github.com/fastify/fastify/pull/4371
feat: support async trailer by @climba03003 in https://github.com/fastify/fastify/pull/4380
fix: trailers async race condition by @climba03003 in https://github.com/fastify/fastify/pull/4383
docs(ecosystem): Add fastify-list-routes by @chuongtrh in https://github.com/fastify/fastify/pull/4385
build(deps-dev): bump @sinclair/typebox from 0.24.51 to 0.25.2 by @dependabot in https://github.com/fastify/fastify/pull/4388
[ Fix ] Improve error message for hooks check by @debadutta98 in https://github.com/fastify/fastify/pull/4387
fix: tiny-lru usage by @climba03003 in https://github.com/fastify/fastify/pull/4391
Removes old note about named imports in ESM by @fox1t in https://github.com/fastify/fastify/pull/4392
docs: Add section about capacity planning by @kibertoad in https://github.com/fastify/fastify/pull/4386
docs(recommendations): grammar fixes by @Fdawgs in https://github.com/fastify/fastify/pull/4396
chore(doc): duplicated menu item by @Eomm in https://github.com/fastify/fastify/pull/4398
feat: add request.routeOptions object by @debadutta98 in https://github.com/fastify/fastify/pull/4397
docs: Document multiple app approach by @kibertoad in https://github.com/fastify/fastify/pull/4393
fix example using db decorator on fastify instance by @mmarti in https://github.com/fastify/fastify/pull/4406
docs: fix removeAdditional refer by @shunyue1320 in https://github.com/fastify/fastify/pull/4410

New Contributors

@rain714 made their first contribution in https://github.com/fastify/fastify/pull/4360
@LinusU made their first contribution in https://github.com/fastify/fastify/pull/4364
@cesarvspr made their first contribution in https://github.com/fastify/fastify/pull/4368
@utsav91 made their first contribution in https://github.com/fastify/fastify/pull/4372
@jakubburzynski made their first contribution in https://github.com/fastify/fastify/pull/4363
@driimus made their first contribution in https://github.com/fastify/fastify/pull/4371
@chuongtrh made their first contribution in https://github.com/fastify/fastify/pull/4385
@debadutta98 made their first contribution in https://github.com/fastify/fastify/pull/4387
@mmarti made their first contribution in https://github.com/fastify/fastify/pull/4406
@shunyue1320 made their first contribution in https://github.com/fastify/fastify/pull/4410

Full Changelog: fastify/fastify@v4.9.2...v4.10.0

`v4.9.2`

What's Changed

types: Add missing context types by @kibertoad in https://github.com/fastify/fastify/pull/4352
Revert "fix(logger): lost setBindings type in FastifyBaseLogger" by @climba03003 in https://github.com/fastify/fastify/pull/4355

Full Changelog: fastify/fastify@v4.9.1...v4.9.2

`v4.9.1`

What's Changed

docs(reply): specify streams content-type by @D10f in https://github.com/fastify/fastify/pull/4337
fix(logger): lost setBindings type in FastifyBaseLogger by @BlackHole1 in https://github.com/fastify/fastify/pull/4346
docs(reference): grammar and structure fixes by @Fdawgs in https://github.com/fastify/fastify/pull/4348
docs: example how decorators dependencies works by @leandroandrade in https://github.com/fastify/fastify/pull/4343
Undefined is a valid value for if set as a single hook by @mcollina in https://github.com/fastify/fastify/pull/4351

New Contributors

@D10f made their first contribution in https://github.com/fastify/fastify/pull/4337

Full Changelog: fastify/fastify@v4.9.0...v4.9.1

`v4.9.0`

What's Changed

fix: error handler content-type guessing by @climba03003 in https://github.com/fastify/fastify/pull/4329
build(deps-dev): bump fluent-json-schema from 3.1.0 to 4.0.0 by @dependabot in https://github.com/fastify/fastify/pull/4331
feat: Supporting different content-type responses by @iifawzi in https://github.com/fastify/fastify/pull/4264
fix: should now call default schema compilers by @Eomm in https://github.com/fastify/fastify/pull/4340
docs(ecosystem): replace heply -> beliven due to rebranding by @zuck in https://github.com/fastify/fastify/pull/4334
docs(ecosystem): add @fastify-userland plugins and tools by @BlackHole1 in https://github.com/fastify/fastify/pull/4345
Validate and throws a custom error when attempting to register invalid hook functions by @jhhom in https://github.com/fastify/fastify/pull/4332

New Contributors

@jhhom made their first contribution in https://github.com/fastify/fastify/pull/4332

Full Changelog: fastify/fastify@v4.8.1...v4.9.0

`v4.8.1`

⚠️ Security Release ⚠️

This release fixes GHSA-455w-c45v-86rg for the v4.x line.
This is a HIGH vulnerability that can lead to a crash, resulting in a total loss of availability.
The CVE for this vulnerability is CVE-2022-39288.

Full Changelog: fastify/fastify@v4.8.0...v4.8.1

`v4.8.0`

What's Changed

Correct github url for fastify-qs package by @VanoDevium in https://github.com/fastify/fastify/pull/4321
docs: add test examples with undici and fetch by @CristiTeo in https://github.com/fastify/fastify/pull/4300
update onRoute hook docs by @matthyk in https://github.com/fastify/fastify/pull/4322
Export error codes by @fitiskin in https://github.com/fastify/fastify/pull/4266
feat: support async constraint by @climba03003 in https://github.com/fastify/fastify/pull/4323

New Contributors

@fitiskin made their first contribution in https://github.com/fastify/fastify/pull/4266

Full Changelog: fastify/fastify@v4.7.0...v4.8.0

`v4.7.0`

What's Changed

fix: prevent reuse mutated route option for head by @climba03003 in https://github.com/fastify/fastify/pull/4273
docs(ecosystem): add fastify-sqlite by @Eomm in https://github.com/fastify/fastify/pull/4274
Add RavenDB to community plugins by @drakhart in https://github.com/fastify/fastify/pull/4277
ci: reduce ci test when linting fails by @Eomm in https://github.com/fastify/fastify/pull/4280
chore: update dependencies by @anonrig in https://github.com/fastify/fastify/pull/4284
Check if route exist before checking Content-Type of body by @mage1k99 in https://github.com/fastify/fastify/pull/4286
Replace parseInt with Number at get 6% boost by @anonrig in https://github.com/fastify/fastify/pull/4289
fix: type of validation function by @budarin in https://github.com/fastify/fastify/pull/4283
GitHub Workflows security hardening by @sashashura in https://github.com/fastify/fastify/pull/4290
docs: onRoute hooks in plugins by @philsch in https://github.com/fastify/fastify/pull/4285
chore: Lint eco system error by @zrosenbauer in https://github.com/fastify/fastify/pull/4275
docs(ecosystem): Add @fastify/one-line-logger by @nooreldeensalah in https://github.com/fastify/fastify/pull/4293
docs(ecosystem): capitalization fixes by @Fdawgs in https://github.com/fastify/fastify/pull/4294
docs(ecosystem): add slow down plugin by @CristiTeo in https://github.com/fastify/fastify/pull/4292
fix: custom validator should not mutate headers schema by @climba03003 in https://github.com/fastify/fastify/pull/4295
feat: parse request body for http SEARCH requests by @kalvenschraut in https://github.com/fastify/fastify/pull/4298
Fix typo in the comment to Context object (lib/context.js) by @yakovenkodenis in https://github.com/fastify/fastify/pull/4301
docs(type-providers): replace FastifyLoggerInstance with FastifyBaseLogger by @samialdury in https://github.com/fastify/fastify/pull/4304
docs(contributing): clarify teams for joiners by @Eomm in https://github.com/fastify/fastify/pull/4303
test: add number coersion related tests by @anonrig in https://github.com/fastify/fastify/pull/4297
feat: add routeSchema and routeConfig + switching context handling by @metcoder95 in https://github.com/fastify/fastify/pull/4216
docs(ecosystem): add fastify-s3-buckets by @kibertoad in https://github.com/fastify/fastify/pull/4311
fix: Fix typo in docs/Reference/Type-Providers.md by @SnowSuno in https://github.com/fastify/fastify/pull/4312
build(deps): bump tiny-lru from 8.0.2 to 9.0.2 by @dependabot in https://github.com/fastify/fastify/pull/4305

New Contributors

@mage1k99 made their first contribution in https://github.com/fastify/fastify/pull/4286
@budarin made their first contribution in https://github.com/fastify/fastify/pull/4283
@sashashura made their first contribution in https://github.com/fastify/fastify/pull/4290
@philsch made their first contribution in https://github.com/fastify/fastify/pull/4285
@zrosenbauer made their first contribution in https://github.com/fastify/fastify/pull/4275
@CristiTeo made their first contribution in https://github.com/fastify/fastify/pull/4292
@kalvenschraut made their first contribution in https://github.com/fastify/fastify/pull/4298
@yakovenkodenis made their first contribution in https://github.com/fastify/fastify/pull/4301
@samialdury made their first contribution in https://github.com/fastify/fastify/pull/4304
@SnowSuno made their first contribution in https://github.com/fastify/fastify/pull/4312

Full Changelog: fastify/fastify@v4.6.0...v4.7.0

`v4.6.0`

What's Changed

chore: replace deprecated FastifyLoggerInstance occurences in typings with FastifyBaseLogger by @Uzlopak in https://github.com/fastify/fastify/pull/4224
fix(types): allow fastify.https to be null by @SuperchupuDev in https://github.com/fastify/fastify/pull/4226
chore: fix typo in docs for typescript chapter by @soomtong in https://github.com/fastify/fastify/pull/4227
build(deps-dev): bump tsd from 0.22.0 to 0.23.0 by @dependabot in https://github.com/fastify/fastify/pull/4231
chore: update dependabot link by @leandroandrade in https://github.com/fastify/fastify/pull/4232
docs: improved migration guide for onRoute by @ShogunPanda in https://github.com/fastify/fastify/pull/4233
docs: clarify setDefaultRoute scope by @jacobpgn in https://github.com/fastify/fastify/pull/4236
docs(ecosystem): add fastify-aws-timestream and fastify-aws-sns by @gzileni in https://github.com/fastify/fastify/pull/4230
docs(guides/migration-guide-v4): update content by @Fdawgs in https://github.com/fastify/fastify/pull/4242
Improve doc about configuring pino-pretty with TypeScript by @giacomorebonato in https://github.com/fastify/fastify/pull/4243
build(deps): bump jsumners/lock-threads from b27edac to 3 by @dependabot in https://github.com/fastify/fastify/pull/4244
Revert "build(deps): bump jsumners/lock-threads from b27edac to 3" by @climba03003 in https://github.com/fastify/fastify/pull/4245
docs: Remove Ajv configuration from TypeBox Type Provider examples by @msmolens in https://github.com/fastify/fastify/pull/4249
fix: visit schemas with custom prototype by @Eomm in https://github.com/fastify/fastify/pull/4248
feat: add hasRoute by @Uzlopak in https://github.com/fastify/fastify/pull/4238
Docs: Fixing #schema-validator url at ./Reference/Server/#ajv by @wilbert-abreu in https://github.com/fastify/fastify/pull/4253
chore(doc): fix format by @Eomm in https://github.com/fastify/fastify/pull/4255
chore: export RouteGenericInterface by @ChrisCrewdson in https://github.com/fastify/fastify/pull/4234
chore: improve Ecosystem.md linter to check for improper module name patterns by @nooreldeensalah in https://github.com/fastify/fastify/pull/4257
test: remove assert to invalid HTTP version by @RafaelGSS in https://github.com/fastify/fastify/pull/4260
chore: improve Ecosystem.md linter to lint all sections by @nooreldeensalah in https://github.com/fastify/fastify/pull/4258
Fixing #4259 - Updating typescript example according to the validation changes by @iifawzi in https://github.com/fastify/fastify/pull/4261
docs: add pubsub-http-handler by @cobraz in https://github.com/fastify/fastify/pull/4263
Variadic listen signature allows string port by @marco-ippolito in https://github.com/fastify/fastify/pull/4269
doc: Remove Ajv configuration for TypeBox in TS examples by @pmbanugo in https://github.com/fastify/fastify/pull/4268
docs(ecosystem): add 2 new fastify v3.x+ plugins by @WNemencha in https://github.com/fastify/fastify/pull/4270
docs(typescript): fix #4241 by @mortifia in https://github.com/fastify/fastify/pull/4247

New Contributors

@SuperchupuDev made their first contribution in https://github.com/fastify/fastify/pull/4226
@soomtong made their first contribution in https://github.com/fastify/fastify/pull/4227
@leandroandrade made their first contribution in https://github.com/fastify/fastify/pull/4232
@jacobpgn made their first contribution in https://github.com/fastify/fastify/pull/4236
@giacomorebonato made their first contribution in https://github.com/fastify/fastify/pull/4243
@msmolens made their first contribution in https://github.com/fastify/fastify/pull/4249
@wilbert-abreu made their first contribution in https://github.com/fastify/fastify/pull/4253
@ChrisCrewdson made their first contribution in https://github.com/fastify/fastify/pull/4234
@iifawzi made their first contribution in https://github.com/fastify/fastify/pull/4261
@cobraz made their first contribution in https://github.com/fastify/fastify/pull/4263
@marco-ippolito made their first contribution in https://github.com/fastify/fastify/pull/4269
@pmbanugo made their first contribution in https://github.com/fastify/fastify/pull/4268
@WNemencha made their first contribution in https://github.com/fastify/fastify/pull/4270
@mortifia made their first contribution in https://github.com/fastify/fastify/pull/4247

Full Changelog: fastify/fastify@v4.5.3...v4.6.0

`v4.5.3`

What's Changed

ecosystem.md: move fastify-secure-session and fastify-soap-client to core plugins by @Uzlopak in https://github.com/fastify/fastify/pull/4212
fix: inject hangs with undefined promise resolve by @simoneb in https://github.com/fastify/fastify/pull/4211
use hasOwnProperty from Object.prototype by @Uzlopak in https://github.com/fastify/fastify/pull/4214
chore: fastify branch list by @Eomm in https://github.com/fastify/fastify/pull/4218
chore: add support for TypeScript 4.8 by @SimenB in https://github.com/fastify/fastify/pull/4222

Full Changelog: fastify/fastify@v4.5.2...v4.5.3

`v4.5.2`

What's Changed

Fix 4204 by @mcollina in https://github.com/fastify/fastify/pull/4205

Full Changelog: fastify/fastify@v4.5.1...v4.5.2

`v4.5.1`

What's Changed

make sure preSerialization hooks are null by default by @mcollina in https://github.com/fastify/fastify/pull/4203

Full Changelog: fastify/fastify@v4.5.0...v4.5.1

`v4.5.0`

What's Changed

Add fastify-osm by @gzileni in https://github.com/fastify/fastify/pull/4185
docs(reference/routes): fix onSend example by @Fdawgs in https://github.com/fastify/fastify/pull/4188
chore: clean dev-dependancies by @Eomm in https://github.com/fastify/fastify/pull/4189
Forward upgrade from secondary server to primary by @mcollina in https://github.com/fastify/fastify/pull/4190
add unit test for ajv-formats by @Uzlopak in https://github.com/fastify/fastify/pull/4187
add option to disable/ignore request-id header by @philippviereck in https://github.com/fastify/fastify/pull/4193
doc: add fastify.display-name symbol by @Eomm in https://github.com/fastify/fastify/pull/4191
docs(validation-and-serialization): Fix example on query string coercion by @galiarmero in https://github.com/fastify/fastify/pull/4198
Add fastify-https-always to Ecosystem doc. by @mattbishop in https://github.com/fastify/fastify/pull/4201

New Contributors

@gzileni made their first contribution in https://github.com/fastify/fastify/pull/4185
@philippviereck made their first contribution in https://github.com/fastify/fastify/pull/4193
@galiarmero made their first contribution in https://github.com/fastify/fastify/pull/4198

Full Changelog: fastify/fastify@v4.4.0...v4.5.0

`v4.4.0`

What's Changed

fix(types): bad naming of validateInput by @metcoder95 in https://github.com/fastify/fastify/pull/4151
feat: add webdav http methods by @hungtcs in https://github.com/fastify/fastify/pull/3836
fix(types): reply.getHeader can return numbers and arrays by @seanparmelee in https://github.com/fastify/fastify/pull/4154
feat(logger): use pino.BaseLogger as main interface for fastify logger by @sgrigorev in https://github.com/fastify/fastify/pull/4150
docs(ecosystem): Add fastify-bugsnag as community plugin by @ZigaStrgar in https://github.com/fastify/fastify/pull/4155
fix typo in docs/reference/Server.md by @developerHet in https://github.com/fastify/fastify/pull/4163
Make ResolveFastifyReplyType union-aware by @cm-ayf in https://github.com/fastify/fastify/pull/4164
docs: update code snippet for accurate use by @lirantal in https://github.com/fastify/fastify/pull/4167
build(deps): bump lycheeverse/lychee-action from 1.5.0 to 1.5.1 by @dependabot in https://github.com/fastify/fastify/pull/4169
build(deps-dev): bump markdownlint-cli2 from 0.4.0 to 0.5.0 by @dependabot in https://github.com/fastify/fastify/pull/4170
types: adjust and add testing by @metcoder95 in https://github.com/fastify/fastify/pull/4158
docs(ecosystem): add fastify-lyra by @mateonunez in https://github.com/fastify/fastify/pull/4176
Add links to type providers by @kibertoad in https://github.com/fastify/fastify/pull/4177
docs(ecosystem): add fastify-keycloak-adapter by @yubinTW in https://github.com/fastify/fastify/pull/4180
Docs: onResponse hook error logging by @avanelli in https://github.com/fastify/fastify/pull/4178

New Contributors

@hungtcs made their first contribution in https://github.com/fastify/fastify/pull/3836
@seanparmelee made their first contribution in https://github.com/fastify/fastify/pull/4154
@sgrigorev made their first contribution in https://github.com/fastify/fastify/pull/4150
@ZigaStrgar made their first contribution in https://github.com/fastify/fastify/pull/4155
@developerHet made their first contribution in https://github.com/fastify/fastify/pull/4163
@cm-ayf made their first contribution in https://github.com/fastify/fastify/pull/4164
@lirantal made their first contribution in https://github.com/fastify/fastify/pull/4167
@mateonunez made their first contribution in https://github.com/fastify/fastify/pull/4176
@yubinTW made their first contribution in https://github.com/fastify/fastify/pull/4180
@avanelli made their first contribution in https://github.com/fastify/fastify/pull/4178

Full Changelog: fastify/fastify@v4.3.0...v4.4.0

`v4.3.0`

What's Changed

dont cache unnecessary content types by @Uzlopak in https://github.com/fastify/fastify/pull/4134
fix: default clientError replies on reused connection (#4101) by @katreniak in https://github.com/fastify/fastify/pull/4133
docs(ecosystem): add electron-server by @anonrig in https://github.com/fastify/fastify/pull/4136
feat: expose validate/serialize functions through Request and Reply by @metcoder95 in https://github.com/fastify/fastify/pull/3970
types: re-export FastifyListenOptions in top-level types by @kyranet in https://github.com/fastify/fastify/pull/4135
docs: remove http2 experimental status (#4142) by @SebastianZimmer in https://github.com/fastify/fastify/pull/4144
refactor: rename request.validate to request.validateInput by @metcoder95 in https://github.com/fastify/fastify/pull/4139
Fix #4120: Defer resolution of FastifyRequestType until FastifyRequest by @sinclairzx81 in https://github.com/fastify/fastify/pull/4123

New Contributors

@katreniak made their first contribution in https://github.com/fastify/fastify/pull/4133
@SebastianZimmer made their first contribution in https://github.com/fastify/fastify/pull/4144

Full Changelog: fastify/fastify@v4.2.1...v4.3.0

`v4.2.1`

What's Changed

Update Migration-Guide-V4.md by @denes-fekeshazy in https://github.com/fastify/fastify/pull/4091
ci: reference actions using tags by @Fdawgs in https://github.com/fastify/fastify/pull/4086
Remove redundant docs on TypeBox properties by @simonplend in https://github.com/fastify/fastify/pull/4095
Add typeorm-fastify-plugin in Alphabetic order by @jclemens24 in https://github.com/fastify/fastify/pull/4096
Add ecosystem linting by @jsumners in https://github.com/fastify/fastify/pull/4097
fix: FastifySchemaValidationError type insufficient by @BlackHole1 in https://github.com/fastify/fastify/pull/4094
build(deps): bump actions/dependency-review-action from 1 to 2 by @dependabot in https://github.com/fastify/fastify/pull/4102
refactor: update Reply module by @denshakhov in https://github.com/fastify/fastify/pull/4072
fix: Add types to server properties by @TommyDew42 in https://github.com/fastify/fastify/pull/4100
docs(TypeScript): Fix a few typos by @Eldemarkki in https://github.com/fastify/fastify/pull/4106
fix: no store compiled schema ids by @Eomm in https://github.com/fastify/fastify/pull/4109
build(deps-dev): bump @sinclair/typebox from 0.23.5 to 0.24.9 by @dependabot in https://github.com/fastify/fastify/pull/4113
build(deps-dev): bump tsd from 0.21.0 to 0.22.0 by @dependabot in https://github.com/fastify/fastify/pull/4114
docs: fix links on README by @gerardmarquinarubio in https://github.com/fastify/fastify/pull/4116
docs(Guides/Plugins-Guide.md) : add reminder by @mrdcvlsc in https://github.com/fastify/fastify/pull/4117
docs(ecosystem): add simple-tjscli (#4112) by @imjuni in https://github.com/fastify/fastify/pull/4118
refactor(types): deduplicate listen options and export it by @kyranet in https://github.com/fastify/fastify/pull/4013
sample usage code fixed by @indatawetrust in https://github.com/fastify/fastify/pull/4128
Update TypeScript.md by @mikicho in https://github.com/fastify/fastify/pull/4126
run error serializer check only before release by @mcollina in https://github.com/fastify/fastify/pull/4130
build(deps-dev): bump fastify-plugin from 3.0.1 to 4.0.0 by @dependabot in https://github.com/fastify/fastify/pull/4131
Update README.md by @davidekete in https://github.com/fastify/fastify/pull/4132

New Contributors

@denes-fekeshazy made their first contribution in https://github.com/fastify/fastify/pull/4091
@jclemens24 made their first contribution in https://github.com/fastify/fastify/pull/4096
@BlackHole1 made their first contribution in https://github.com/fastify/fastify/pull/4094
@denshakhov made their first contribution in https://github.com/fastify/fastify/pull/4072
@TommyDew42 made their first contribution in https://github.com/fastify/fastify/pull/4100
@Eldemarkki made their first contribution in https://github.com/fastify/fastify/pull/4106
@gerardmarquinarubio made their first contribution in https://github.com/fastify/fastify/pull/4116
@mrdcvlsc made their first contribution in https://github.com/fastify/fastify/pull/4117
@kyranet made their first contribution in https://github.com/fastify/fastify/pull/4013
@indatawetrust made their first contribution in https://github.com/fastify/fastify/pull/4128
@mikicho made their first contribution in https://github.com/fastify/fastify/pull/4126
@davidekete made their first contribution in https://github.com/fastify/fastify/pull/4132

Full Changelog: fastify/fastify@v4.2.0...v4.2.1

`v4.2.0`

What's Changed

docs: add @h4ad/serverless-adapter to ecosystem by @H4ad in https://github.com/fastify/fastify/pull/4056
feat: make sure all validation errors have a statusCode set by @mcollina in https://github.com/fastify/fastify/pull/4061
docs(ecosystem): add fastify-ssr-vite to community plugins by @nineohnine in https://github.com/fastify/fastify/pull/4058
Add internal link check action by @luisorbaiceta in https://github.com/fastify/fastify/pull/4069
hotfix: fix ValidationResult interface (#4045) by @alex-laz in https://github.com/fastify/fastify/pull/4070
fix: use ajv for schema ref resolving by @ivan-tymoshenko in https://github.com/fastify/fastify/pull/4049
docs(ecosystem): adding @eropple/fastify-openapi3 to community plugins by @eropple in https://github.com/fastify/fastify/pull/4067
Remove comments from links check action by @mcollina in https://github.com/fastify/fastify/pull/4080
Add lightweight cache plugin to fastify ecosystem by @denbon05 in https://github.com/fastify/fastify/pull/4079
Add plugin lcache by alphabetic order by @denbon05 in https://github.com/fastify/fastify/pull/4082
fix: onRoute hook should not be called when it registered after route by @climba03003 in https://github.com/fastify/fastify/pull/4052
Adds integration CI step by @marcelfranca in https://github.com/fastify/fastify/pull/4075
Use a union-aware keyof operator by @A5rocks in https://github.com/fastify/fastify/pull/4076
docs: Update TypeScript docs regarding typebox #4073 by @dancastillo in https://github.com/fastify/fastify/pull/4077
chore(guide): fulfil error handler and trailers by @Eomm in https://github.com/fastify/fastify/pull/4087
Make type provider-provided return types be enforced by @A5rocks in https://github.com/fastify/fastify/pull/4089
build(deps): bump find-my-way from 6.4.0 to 7.0.0 by @dependabot in https://github.com/fastify/fastify/pull/4090
docs: explain common usage for injection into request instances by @Mazuh in https://github.com/fastify/fastify/pull/4084

New Contributors

@H4ad made their first contribution in https://github.com/fastify/fastify/pull/4056
@nineohnine made their first contribution in https://github.com/fastify/fastify/pull/4058
@alex-laz made their first contribution in https://github.com/fastify/fastify/pull/4070
@eropple made their first contribution in https://github.com/fastify/fastify/pull/4067
@denbon05 made their first contribution in https://github.com/fastify/fastify/pull/4079
@marcelfranca made their first contribution in https://github.com/fastify/fastify/pull/4075
@A5rocks made their first contribution in https://github.com/fastify/fastify/pull/4076
@dancastillo made their first contribution in https://github.com/fastify/fastify/pull/4077
@Mazuh made their first contribution in https://github.com/fastify/fastify/pull/4084

Full Changelog: fastify/fastify@v4.1.0...v4.2.0

`v4.1.0`

What's Changed

test: fix request terminated should not crash fastify test by @ivan-tymoshenko in https://github.com/fastify/fastify/pull/4024
Fix port settings for deprecation warnings. by @phasetr in https://github.com/fastify/fastify/pull/4042
fix: propagate generics from FastifyRegister to plugin type by @stefee in https://github.com/fastify/fastify/pull/4034
chore(.eslintrc): limit eslint config to project by @Fdawgs in [https://github.com/chore(.eslintrc): limit eslint config to project fastify/fastify#4038](https://togithub.com/f

Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.


          chore(deps): update dependency fastify to v4 [security]

2feb264

renovate bot changed the title ~~chore(deps): update dependency fastify to v4 [security]~~ chore(deps): update dependency fastify to v4 [security] - autoclosed

renovate bot closed this

renovate bot deleted the renovate/npm-fastify-vulnerability branch

October 9, 2024 09:37

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet