fix(deps): update dependency fastify to ~3.29.4 [security] #56

renovate-bot · 2023-08-03T06:57:59Z

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
fastify (source)	`~3.16.1` -> `~3.29.4`

GitHub Vulnerability Alerts

CVE-2022-41919

Impact

The attacker can use the incorrect Content-Type to bypass the Pre-Flight checking of fetch. fetch() requests with Content-Type’s essence as "application/x-www-form-urlencoded", "multipart/form-data", or "text/plain", could potentially be used to invoke routes that only accepts application/json content type, thus bypassing any CORS protection, and therefore they could lead to a Cross-Site Request Forgery attack.

Patches

For 4.x users, please update to at least 4.10.2
For 3.x users, please update to at least 3.29.4

Workarounds

Implement Cross-Site Request Forgery protection using @fastify/csrf.

References

Check out the HackerOne report: https://hackerone.com/reports/1763832.

For more information

Fastify security policy

Release Notes

fastify/fastify (fastify)

⚠️ Security Release ⚠️

This release backport the fixes of GHSA-455w-c45v-86rg for the v3.x line.
While not being a vulnerability for this line, a backport is still welcome due to the problems highlighted in the report.

Full Changelog: fastify/fastify@v3.29.2...v3.29.3

`v3.29.2`

Compare Source

What's Changed

fix: backport reused connection fix by @salzhrani in https://github.com/fastify/fastify/pull/4217

New Contributors

@salzhrani made their first contribution in https://github.com/fastify/fastify/pull/4217

Full Changelog: fastify/fastify@v3.29.1...v3.29.2

`v3.29.1`

Compare Source

What's Changed

docs: reference new @fastify/* modules by @Fdawgs in https://github.com/fastify/fastify/pull/3860
Child log level in bindings is deprecated by @orov-io in https://github.com/fastify/fastify/pull/3896
Handle aborted requests (#215) by @TimotejR in https://github.com/fastify/fastify/pull/4103

New Contributors

@orov-io made their first contribution in https://github.com/fastify/fastify/pull/3896
@TimotejR made their first contribution in https://github.com/fastify/fastify/pull/4103

Full Changelog: fastify/fastify@v3.29.0...v3.29.1

`v3.29.0`

Compare Source

What's Changed

Update fastify-error dependency by @jsumners in https://github.com/fastify/fastify/pull/3859

Full Changelog: fastify/fastify@v3.28.0...v3.29.0

`v3.28.0`

Compare Source

What's Changed

(v3.x) Allow custom Context Config types for hooks' request properties by @sumbad in https://github.com/fastify/fastify/pull/3787
add generic logger to route handler & FastifyRequest by @MarcoLeko in https://github.com/fastify/fastify/pull/3782
(v3.x) fix: handle invalid url by @climba03003 in https://github.com/fastify/fastify/pull/3806
(v3.x) feat: reply trailers support by @climba03003 in https://github.com/fastify/fastify/pull/3807

Full Changelog: fastify/fastify@v3.27.4...v3.28.0

`v3.27.4`

Compare Source

What's Changed

[Backport v3.x] Fixed Node.js v18/master support by @github-actions in https://github.com/fastify/fastify/pull/3761

Full Changelog: fastify/fastify@v3.27.3...v3.27.4

`v3.27.3`

Compare Source

What's Changed

Drop @typescript-eslint/no-misused-promises (#3741) by @mcollina in https://github.com/fastify/fastify/pull/3757

Full Changelog: fastify/fastify@v3.27.2...v3.27.3

`v3.27.2`

Compare Source

What's Changed

fix: added jsonShorthand in FastifyServerOptions by @DanieleFedeli in https://github.com/fastify/fastify/pull/3681
fix: calling reply.callNotFound uncaught exception by @VigneshMurugan in https://github.com/fastify/fastify/pull/3661
style: fix new standard linting by @Divlo in https://github.com/fastify/fastify/pull/3682
docs(ecosystem): update fastify-jwt plugin with the new internal library it uses by @rluvaton in https://github.com/fastify/fastify/pull/3689
ci(package-manager): run test:ci instead of test by @Divlo in https://github.com/fastify/fastify/pull/3692
docs(ecosystem): adds @immobiliarelabs/fastify-sentry by @simonecorsi in https://github.com/fastify/fastify/pull/3693
chore: fix plugin labeler by @Eomm in https://github.com/fastify/fastify/pull/3694
Add reference to FST_ERR_CTP_INVALID_MEDIA_TYPE error in the docs for validation & content type parser by @AWare in https://github.com/fastify/fastify/pull/3697
fix(types): add opts param to onRegister hook handler signature by @bmenant in https://github.com/fastify/fastify/pull/3641
update Server docs by @matthyk in https://github.com/fastify/fastify/pull/3699
Update middleware docs link by @JamieGrimwood in https://github.com/fastify/fastify/pull/3706
build(deps): bump tiny-lru from 7.0.6 to 8.0.1 by @dependabot in https://github.com/fastify/fastify/pull/3700
build(deps-dev): bump @sinonjs/fake-timers from 8.1.0 to 9.1.0 by @dependabot in https://github.com/fastify/fastify/pull/3683

New Contributors

@Divlo made their first contribution in https://github.com/fastify/fastify/pull/3682
@AWare made their first contribution in https://github.com/fastify/fastify/pull/3697
@bmenant made their first contribution in https://github.com/fastify/fastify/pull/3641
@JamieGrimwood made their first contribution in https://github.com/fastify/fastify/pull/3706

Full Changelog: fastify/fastify@v3.27.1...v3.27.2

`v3.27.1`

Compare Source

What's Changed

docs: fix link to forceCloseConnections option by @RafaelGSS in https://github.com/fastify/fastify/pull/3638
docs(Prototype-Poisoning): invalid content link by @RafaelGSS in https://github.com/fastify/fastify/pull/3639
doc(Guides): fix grammar issue in the Prototype Poisoning file by @rluvaton in https://github.com/fastify/fastify/pull/3640
types: add forceCloseConnection type def by @RafaelGSS in https://github.com/fastify/fastify/pull/3646
Fixes #3648 - URL must be a string by @VigneshMurugan in https://github.com/fastify/fastify/pull/3653
build: reduce dependabot update frequency by @Fdawgs in https://github.com/fastify/fastify/pull/3659
build: correct dependabot config by @Fdawgs in https://github.com/fastify/fastify/pull/3662
add missing types workflow by @KiraPC in https://github.com/fastify/fastify/pull/3668
Serialization errors will be send to errorHandler by @int1ch in https://github.com/fastify/fastify/pull/3674
Add Documentation and TS Types missed for FastifyInstance#setSchemaController by @Grubba27 in https://github.com/fastify/fastify/pull/3480
Add action to lock threads by @jsumners in https://github.com/fastify/fastify/pull/3679

New Contributors

@rluvaton made their first contribution in https://github.com/fastify/fastify/pull/3640
@int1ch made their first contribution in https://github.com/fastify/fastify/pull/3674
@Grubba27 made their first contribution in https://github.com/fastify/fastify/pull/3480

Full Changelog: fastify/fastify@v3.27.0...v3.27.1

`v3.27.0`

Compare Source

What's Changed

Add keep-alive connection tracking and reaping (resolve #3617) by @jsumners in https://github.com/fastify/fastify/pull/3619

Full Changelog: fastify/fastify@v3.26.0...v3.27.0

`v3.26.0`

Compare Source

What's Changed

Documentation: replace fastify.decorate arrow functions with function expressions by @onosendi in https://github.com/fastify/fastify/pull/3577
Update Recommendations.md by @fralonra in https://github.com/fastify/fastify/pull/3583
build(deps-dev): bump helmet from 4.6.0 to 5.0.1 by @dependabot in https://github.com/fastify/fastify/pull/3591
chore: remove duplicated line by @Eomm in https://github.com/fastify/fastify/pull/3599
docs(reference-typescript): fix formatting by @sniperwolf in https://github.com/fastify/fastify/pull/3602
feat: manage display-name meta plugin by @Eomm in https://github.com/fastify/fastify/pull/3608
Add prototype poisoning doc by @jsumners in https://github.com/fastify/fastify/pull/3609
Fix website workflow not triggering by @luisorbaiceta in https://github.com/fastify/fastify/pull/3611
Adding esbuild bundler to the pipeline by @jhonrocha in https://github.com/fastify/fastify/pull/3616
chore (ci): run lint only once by @darkgl0w in https://github.com/fastify/fastify/pull/3623
Fix types to support Ajv plugins with options by @pverdile in https://github.com/fastify/fastify/pull/3601
Update LICENSE by @ravenberg in https://github.com/fastify/fastify/pull/3629
fix: accept-version on default route by @climba03003 in https://github.com/fastify/fastify/pull/3630
fix (test): custom-parser.test.js flaky test by @darkgl0w in https://github.com/fastify/fastify/pull/3627
fix (types): this is FastifyInstance by @darkgl0w in https://github.com/fastify/fastify/pull/3622

New Contributors

@onosendi made their first contribution in https://github.com/fastify/fastify/pull/3577
@sniperwolf made their first contribution in https://github.com/fastify/fastify/pull/3602
@jhonrocha made their first contribution in https://github.com/fastify/fastify/pull/3616
@pverdile made their first contribution in https://github.com/fastify/fastify/pull/3601
@ravenberg made their first contribution in https://github.com/fastify/fastify/pull/3629

Full Changelog: fastify/fastify@v3.25.3...v3.26.0

`v3.25.3`

Compare Source

What's Changed

Move from fastify-warning to process-warning by @mcollina in https://github.com/fastify/fastify/pull/3576
build(deps-dev): bump http-errors from 1.8.1 to 2.0.0 by @dependabot in https://github.com/fastify/fastify/pull/3553

Full Changelog: fastify/fastify@v3.25.2...v3.25.3

`v3.25.2`

Compare Source

What's Changed

docs: Small improvements in the documentation by @DavidIsa in https://github.com/fastify/fastify/pull/3565
Add release trigger for website build by @luisorbaiceta in https://github.com/fastify/fastify/pull/3572
Fix context tracking with als run by @mcollina in https://github.com/fastify/fastify/pull/3571

New Contributors

@DavidIsa made their first contribution in https://github.com/fastify/fastify/pull/3565

Full Changelog: fastify/fastify@v3.25.1...v3.25.2

`v3.25.1`

Compare Source

What's Changed

docs: add fastify-split-validator to Ecosystem by @MetCoder95 in https://github.com/fastify/fastify/pull/3535
docs: fix broken documentation links by @RoXioTD in https://github.com/fastify/fastify/pull/3539
Tests for http2 host constraint server by @luisorbaiceta in https://github.com/fastify/fastify/pull/3504
Fix docs broken links by @luisorbaiceta in https://github.com/fastify/fastify/pull/3542
Fix broken links in README.md by @asaid-0 in https://github.com/fastify/fastify/pull/3545
Add missing types & docs for async onClose hook by @franky47 in https://github.com/fastify/fastify/pull/3541
chore: upgrade github-action-merge-dependabot to v3 by @Eomm in https://github.com/fastify/fastify/pull/3547
Update Ecosystem.md by @DanieleFedeli in https://github.com/fastify/fastify/pull/3548
Fix typo in /docs/index.md by @nooreldeensalah in https://github.com/fastify/fastify/pull/3557
added fastify-file-routes by @spa5k in https://github.com/fastify/fastify/pull/3561
Fixes regressions for function decorators on Request and Reply by @mcollina in https://github.com/fastify/fastify/pull/3560

New Contributors

@RoXioTD made their first contribution in https://github.com/fastify/fastify/pull/3539
@asaid-0 made their first contribution in https://github.com/fastify/fastify/pull/3545
@franky47 made their first contribution in https://github.com/fastify/fastify/pull/3541
@DanieleFedeli made their first contribution in https://github.com/fastify/fastify/pull/3548
@nooreldeensalah made their first contribution in https://github.com/fastify/fastify/pull/3557

Full Changelog: fastify/fastify@v3.25.0...v3.25.1

`v3.25.0`

Compare Source

What's Changed

fix(typescript): use RouteGeneric for setErrorHandler types by @ethanwu10 in https://github.com/fastify/fastify/pull/3493
docs(ecosystem): add middie to core section by @Fdawgs in https://github.com/fastify/fastify/pull/3501
build(deps): bump fastify/github-action-merge-dependabot from 2.6.0 to 2.7.0 by @dependabot in https://github.com/fastify/fastify/pull/3507
add node 17 by @Eomm in https://github.com/fastify/fastify/pull/3456
docs(ecosystem): adds @immobiliarelabs/fastify-metrics by @simonecorsi in https://github.com/fastify/fastify/pull/3509
build(deps): bump fastify/github-action-merge-dependabot from 2.7.0 to 2.7.1 by @dependabot in https://github.com/fastify/fastify/pull/3518
Update logger options to correct properties by @makrandgupta in https://github.com/fastify/fastify/pull/3519
fix: use hasKey to check request dependencies by @RafaelGSS in https://github.com/fastify/fastify/pull/3527
Pass constraint values to the router when checking for a preexisting HEAD route by @airhorns in https://github.com/fastify/fastify/pull/3526
Add Luis Orbaiceta as a contributor by @luisorbaiceta in https://github.com/fastify/fastify/pull/3530
Docs reorganization by @jsumners with help from @lachlancollins in https://github.com/fastify/fastify/pull/3474
Rename index files by @jsumners in https://github.com/fastify/fastify/pull/3533

New Contributors

@ethanwu10 made their first contribution in https://github.com/fastify/fastify/pull/3493
@simonecorsi made their first contribution in https://github.com/fastify/fastify/pull/3509
@makrandgupta made their first contribution in https://github.com/fastify/fastify/pull/3519
@luisorbaiceta made their first contribution in https://github.com/fastify/fastify/pull/3530

Full Changelog: fastify/fastify@v3.24.1...v3.25.0

`v3.24.1`

Compare Source

What's Changed

fix: server.requestTimeout miss when https by @zgoby in https://github.com/fastify/fastify/pull/3447
docs: add Google Cloud Functions example to Serverless Documentation by @etino in https://github.com/fastify/fastify/pull/3445
docs: add fastify-polyglot plugin to the ecosystem by @heplyadm in https://github.com/fastify/fastify/pull/3452
fix(typescript): define instance listen callback error nullable by @sf3ris in https://github.com/fastify/fastify/pull/3449
docs: replace "sons" with "descendants" by @mroderick in https://github.com/fastify/fastify/pull/3453
build(deps): bump fastify/github-action-merge-dependabot from 2.5.0 to 2.6.0 by @dependabot in https://github.com/fastify/fastify/pull/3459
docs(examples): fix ts-server exit code of error by @qin20 in https://github.com/fastify/fastify/pull/3458
docs: add fastify-crud-generator plugin by @zuck in https://github.com/fastify/fastify/pull/3460
fix: server.maxRequestsPerSocket miss by @zgoby in https://github.com/fastify/fastify/pull/3463
fix: logger req serializers by @climba03003 in https://github.com/fastify/fastify/pull/3465
build(deps-dev): bump tsd from 0.18.0 to 0.19.0 by @dependabot in https://github.com/fastify/fastify/pull/3466
docs: add code sample for development logger config by @capaj in https://github.com/fastify/fastify/pull/3464
docs: add post example to intro by @saihaj in https://github.com/fastify/fastify/pull/3438
fix: use current instance schema controller by @MetCoder95 in https://github.com/fastify/fastify/pull/3454
fix(typescript): add type declaration for FastifyRequest.context by @chrskrchr in https://github.com/fastify/fastify/pull/3472
docs: add set-cookie special case by @genzyy in https://github.com/fastify/fastify/pull/3470
docs(reply): grammar and readability fixes for set-cookie section by @Fdawgs in https://github.com/fastify/fastify/pull/3477
build(dependabot): ignore minor and patch github-actions updates by @Fdawgs in https://github.com/fastify/fastify/pull/3451
fix the sentence of serializerCompiler by @mm1995tk in https://github.com/fastify/fastify/pull/3490

New Contributors

@zgoby made their first contribution in https://github.com/fastify/fastify/pull/3447
@etino made their first contribution in https://github.com/fastify/fastify/pull/3445
@sf3ris made their first contribution in https://github.com/fastify/fastify/pull/3449
@qin20 made their first contribution in https://github.com/fastify/fastify/pull/3458
@capaj made their first contribution in https://github.com/fastify/fastify/pull/3464
@saihaj made their first contribution in https://github.com/fastify/fastify/pull/3438
@chrskrchr made their first contribution in https://github.com/fastify/fastify/pull/3472
@genzyy made their first contribution in https://github.com/fastify/fastify/pull/3470
@mm1995tk made their first contribution in https://github.com/fastify/fastify/pull/3490

Full Changelog: fastify/fastify@v3.24.0...v3.24.1

`v3.24.0`

Compare Source

What's Changed

build(deps-dev): bump @sinonjs/fake-timers from 7.1.2 to 8.1.0 by @dependabot in https://github.com/fastify/fastify/pull/3418
feat: make version field deterministic and reliable by @jesec in https://github.com/fastify/fastify/pull/3427
chore(.npmignore): remove default ignored files/paths by @Fdawgs in https://github.com/fastify/fastify/pull/3434
make getResponseTime deterministic by @thomaschaaf in https://github.com/fastify/fastify/pull/3431
docs: clarify on request.body content and usage by @Fdawgs in https://github.com/fastify/fastify/pull/3436
test: add hook tests by @Eomm in https://github.com/fastify/fastify/pull/3439

New Contributors

@thomaschaaf made their first contribution in https://github.com/fastify/fastify/pull/3431

Full Changelog: fastify/fastify@v3.23.1...v3.24.0

`v3.23.1`

Compare Source

What's Changed

fix: setSchemaController not inheriting Schemas from root parent by @MetCoder95 in https://github.com/fastify/fastify/pull/3401
fix: socket null in logger by @codeflyer in https://github.com/fastify/fastify/pull/3422

Full Changelog: fastify/fastify@v3.23.0...v3.23.1

`v3.23.0`

Compare Source

What's Changed

Updated the docs related to AJV plugins by @amis-shokoohi in https://github.com/fastify/fastify/pull/3189
fix: remove unused types imports by @juanpicado in https://github.com/fastify/fastify/pull/3392
docs(test/bundler): grammar and spelling fixes by @Fdawgs in https://github.com/fastify/fastify/pull/3393
build(deps-dev): bump split2 from 3.2.2 to 4.1.0 by @dependabot in https://github.com/fastify/fastify/pull/3395
Update Validation-and-Serialization.md by @Eomm in https://github.com/fastify/fastify/pull/3400
Add requestTimeout option by @fatal10110 in https://github.com/fastify/fastify/pull/3407
fix: verify request socket before access attributes by @codeflyer in https://github.com/fastify/fastify/pull/3420

New Contributors

@amis-shokoohi made their first contribution in https://github.com/fastify/fastify/pull/3189
@juanpicado made their first contribution in https://github.com/fastify/fastify/pull/3392
@fatal10110 made their first contribution in https://github.com/fastify/fastify/pull/3407
@codeflyer made their first contribution in https://github.com/fastify/fastify/pull/3420

Full Changelog: fastify/fastify@v3.22.1...v3.23.0

`v3.22.1`

Compare Source

What's Changed

Update NGINX section with comments and fixes by @weiliddat in https://github.com/fastify/fastify/pull/3352
Update Validation-and-Serialization.md by @fralonra in https://github.com/fastify/fastify/pull/3359
fix(typescript): register missing args for function options by @climba03003 in https://github.com/fastify/fastify/pull/3355
build(deps-dev): bump tsd from 0.17.0 to 0.18.0 by @dependabot in https://github.com/fastify/fastify/pull/3368
test: fix typo in tap test pass message by @tniessen in https://github.com/fastify/fastify/pull/3370
docs:inform user to set target property by @siemah in https://github.com/fastify/fastify/pull/3291
Drop readable-stream dependency by @mcollina in https://github.com/fastify/fastify/pull/3372
fix: pipe stream inside error handler by @climba03003 in https://github.com/fastify/fastify/pull/3375
fix(typescript): types for schemaController by @Krysik in https://github.com/fastify/fastify/pull/3369
fix: spell error by @liuhanqu in https://github.com/fastify/fastify/pull/3379

New Contributors

@siemah made their first contribution in https://github.com/fastify/fastify/pull/3291
@Krysik made their first contribution in https://github.com/fastify/fastify/pull/3369
@liuhanqu made their first contribution in https://github.com/fastify/fastify/pull/3379

Full Changelog: fastify/fastify@v3.22.0...v3.22.1

`v3.22.0`

Compare Source

What's Changed

Update Hooks.md by @NobDod in https://github.com/fastify/fastify/pull/3336
feat: max requests per socket by @climba03003 in https://github.com/fastify/fastify/pull/3335
Fix links to querystringParser by @jakearchibald in https://github.com/fastify/fastify/pull/3345
docs: add fastify-supabase to fastify ecosystem by @darkgl0w in https://github.com/fastify/fastify/pull/3348

New Contributors

@NobDod made their first contribution in https://github.com/fastify/fastify/pull/3336
@jakearchibald made their first contribution in https://github.com/fastify/fastify/pull/3345

Full Changelog: fastify/fastify@v3.21.6...v3.22.0

`v3.21.6`

Compare Source

What's Changed

Do not coerce undefined to null, always set it to decorated value. by @mcollina in https://github.com/fastify/fastify/pull/3337

Full Changelog: fastify/fastify@v3.21.5...v3.21.6

`v3.21.5`

Compare Source

What's Changed

Only null and undefined are valid values for same shape optimization by @mcollina in https://github.com/fastify/fastify/pull/3334

Full Changelog: fastify/fastify@v3.21.4...v3.21.5

`v3.21.4`

Compare Source

What's Changed

Docs: Add and clarify query string handling tips by @sveinnthorarins in https://github.com/fastify/fastify/pull/3319
docs: try to fit the doc with the code by @rubiagatra in https://github.com/fastify/fastify/pull/3325
build(deps): bump fastify/github-action-merge-dependabot from 2.4.0 to 2.5.0 by @dependabot in https://github.com/fastify/fastify/pull/3327
fix decorator checks in plugin definitions by @mcollina in https://github.com/fastify/fastify/pull/3333

New Contributors

@sveinnthorarins made their first contribution in https://github.com/fastify/fastify/pull/3319
@rubiagatra made their first contribution in https://github.com/fastify/fastify/pull/3325

Full Changelog: fastify/fastify@v3.21.3...v3.21.4

`v3.21.3`

Compare Source

What's Changed

docs: link logo to the website by @DRoet in https://github.com/fastify/fastify/pull/3322
docs: grammar, spelling, and readability fixes by @Fdawgs in https://github.com/fastify/fastify/pull/3321
fix: check existence by @climba03003 in https://github.com/fastify/fastify/pull/3324

Full Changelog: fastify/fastify@v3.21.2...v3.21.3

`v3.21.2`

Compare Source

What's Changed

Enforce the same shapes by @mcollina in https://github.com/fastify/fastify/pull/3317
chore(benchmark): use tagged version to comment PR by @RafaelGSS in https://github.com/fastify/fastify/pull/3320
fix: reply object not marked as sent for stream payloads by @adrian-branescu in https://github.com/fastify/fastify/pull/3318

New Contributors

@adrian-branescu made their first contribution in https://github.com/fastify/fastify/pull/3318

Full Changelog: fastify/fastify@v3.21.1...v3.21.2

`v3.21.1`

Compare Source

What's Changed

add nginx to Recommendations by @mhf-ir in https://github.com/fastify/fastify/pull/3298
Add relative links in Readme by @Nazeeh21 in https://github.com/fastify/fastify/pull/3250
fix: check serialized payload by @Eomm in https://github.com/fastify/fastify/pull/3308
FastifyInstance#setErrorHandler supports async handlers by @AnnikaCodes in https://github.com/fastify/fastify/pull/3309
docs: update fastify-websocket description by @DRoet in https://github.com/fastify/fastify/pull/3311
close() returns a Promise, not a PromiseLike by @mcollina in https://github.com/fastify/fastify/pull/3312
Doc - Schema validators per validation types by @alainrk in https://github.com/fastify/fastify/pull/3310

New Contributors

@mhf-ir made their first contribution in https://github.com/fastify/fastify/pull/3298
@Nazeeh21 made their first contribution in https://github.com/fastify/fastify/pull/3250
@AnnikaCodes made their first contribution in https://github.com/fastify/fastify/pull/3309
@DRoet made their first contribution in https://github.com/fastify/fastify/pull/3311
@alainrk made their first contribution in https://github.com/fastify/fastify/pull/3310

Full Changelog: fastify/fastify@v3.21.0...v3.21.1

`v3.21.0`

Compare Source

What's Changed

Add fastify-appwrite plugin by @Dev-Manny in https://github.com/fastify/fastify/pull/3259
Docs: esm syntax by @zekth in https://github.com/fastify/fastify/pull/3253
ci: automerge only minor semver by @Eomm in https://github.com/fastify/fastify/pull/3264
docs: how to use ajv8 within fastify3 by @Eomm in https://github.com/fastify/fastify/pull/3265
Fix schema controller error when adding response schemas by @Eomm in https://github.com/fastify/fastify/pull/3269
Add contributing guide by @jsumners in https://github.com/fastify/fastify/pull/2610
fixes minor typo in ContentTypeParser.md by @kedarv in https://github.com/fastify/fastify/pull/3273
adding type for fastify.routing by @axe-me in https://github.com/fastify/fastify/pull/3270
docs: fix http status on validation by @Eomm in https://github.com/fastify/fastify/pull/3275
docs: fix syntax by @Eomm in https://github.com/fastify/fastify/pull/3276
fix error messages by @matthyk in https://github.com/fastify/fastify/pull/3277
docs: add fastify-bree by @climba03003 in https://github.com/fastify/fastify/pull/3278
add diagnostics_channel publish at initialization time by @bengl in https://github.com/fastify/fastify/pull/3279
feat: webpack test stack by @zekth in https://github.com/fastify/fastify/pull/3240
Fix Schema Documentation Link by @rorymalcolm in https://github.com/fastify/fastify/pull/3290
fixed unresponsive server #3283 by @Krishanu230 in https://github.com/fastify/fastify/pull/3285
fix: add content type parsers after removeAllContentTypeParsers by @diceride in https://github.com/fastify/fastify/pull/3292
chore: fix error message check by @Eomm in https://github.com/fastify/fastify/pull/3297
fix headers no longer readonly by @jonnyynnoj in https://github.com/fastify/fastify/pull/3295

New Contributors

@Dev-Manny made their first contribution in https://github.com/fastify/fastify/pull/3259
@kedarv made their first contribution in https://github.com/fastify/fastify/pull/3273
@axe-me made their first contribution in https://github.com/fastify/fastify/pull/3270
@bengl made their first contribution in https://github.com/fastify/fastify/pull/3279
@rorymalcolm made their first contribution in https://github.com/fastify/fastify/pull/3290
@Krishanu230 made their first contribution in https://github.com/fastify/fastify/pull/3285
@diceride made their first contribution in https://github.com/fastify/fastify/pull/3292
@jonnyynnoj made their first contribution in https://github.com/fastify/fastify/pull/3295

Full Changelog: fastify/fastify@v3.20.2...v3.21.0

`v3.20.2`

Compare Source

What's Changed

docs: add info about Reply generic interface by @shwao in https://github.com/fastify/fastify/pull/3223
doc: update status of session by @zekth in https://github.com/fastify/fastify/pull/3239
Clarify getting started by @hugocaillard in https://github.com/fastify/fastify/pull/3241
build(deps): bump fastify/github-action-merge-dependabot from 2.2.0 to 2.3.0 by @dependabot in https://github.com/fastify/fastify/pull/3243
fix: request set headers by @Eomm in https://github.com/fastify/fastify/pull/2817
docs: fix import wrong statement by @climba03003 in https://github.com/fastify/fastify/pull/3248
Fixed dead link for @fastify/session by @VIEWVIEWVIEW in https://github.com/fastify/fastify/pull/3246
build(deps): bump fastify/github-action-merge-dependabot from 2.3.0 to 2.4.0 by @dependabot in https://github.com/fastify/fastify/pull/3249
Add Fastify-allow plugin reference by @mattbishop in https://github.com/fastify/fastify/pull/3242
Fixed socket leakage in TLS connection by @gugu in https://github.com/fastify/fastify/pull/3254

New Contributors

@hugocaillard made their first contribution in https://github.com/fastify/fastify/pull/3241
@VIEWVIEWVIEW made their first contribution in https://github.com/fastify/fastify/pull/3246
@gugu made their first contribution in https://github.com/fastify/fastify/pull/3254

Full Changelog: fastify/fastify@v3.20.1...v3.20.2

`v3.20.1`

Compare Source

What's Changed

upgrade minimum find-my-way version by @matthyk in https://github.com/fastify/fastify/pull/3232
Add serializerOpts to server option interface by @ddadaal in https://github.com/fastify/fastify/pull/3231
docs: update all nodejs doc links to point to v14.x documentation by @Fdawgs in https://github.com/fastify/fastify/pull/3227
docs: Added fastify-slonik plugin reference in fastify-ecosystem page. by @Unbuttun in https://github.com/fastify/fastify/pull/3226

New Contributors

@ddadaal made their first contribution in https://github.com/fastify/fastify/pull/3231
@Unbuttun made their first contribu

Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

renovate-bot requested a review from a team August 3, 2023 06:58

renovate-bot requested a review from a team as a code owner August 3, 2023 06:58

trusted-contributions-gcf bot added the kokoro:force-run Add this label to force Kokoro to re-run the tests. label Aug 3, 2023

renovate-bot force-pushed the renovate/npm-fastify-vulnerability branch from 0a2f0cf to 384f976 Compare August 9, 2023 13:46

renovate-bot changed the title ~~fix(deps): update dependency fastify to ~3.29.4 [security]~~ fix(deps): update dependency fastify to ~3.29.0 [security] Aug 9, 2023

renovate-bot force-pushed the renovate/npm-fastify-vulnerability branch from 384f976 to f18abac Compare August 9, 2023 18:13

renovate-bot changed the title ~~fix(deps): update dependency fastify to ~3.29.0 [security]~~ fix(deps): update dependency fastify to ~3.29.4 [security] Aug 9, 2023

renovate-bot force-pushed the renovate/npm-fastify-vulnerability branch from f18abac to dee15f7 Compare August 22, 2023 18:52

renovate-bot changed the title ~~fix(deps): update dependency fastify to ~3.29.4 [security]~~ fix(deps): update dependency fastify to ~3.29.0 [security] Aug 22, 2023

renovate-bot changed the title ~~fix(deps): update dependency fastify to ~3.29.0 [security]~~ fix(deps): update dependency fastify to ~3.29.4 [security] Aug 22, 2023

renovate-bot force-pushed the renovate/npm-fastify-vulnerability branch from dee15f7 to 406dfaf Compare August 22, 2023 23:26

renovate-bot changed the title ~~fix(deps): update dependency fastify to ~3.29.4 [security]~~ fix(deps): update dependency fastify to ~3.29.0 [security] Aug 27, 2023

renovate-bot force-pushed the renovate/npm-fastify-vulnerability branch 2 times, most recently from 2cde8da to db09b0e Compare August 27, 2023 14:51

renovate-bot changed the title ~~fix(deps): update dependency fastify to ~3.29.0 [security]~~ fix(deps): update dependency fastify to ~3.29.4 [security] Aug 27, 2023

renovate-bot force-pushed the renovate/npm-fastify-vulnerability branch from db09b0e to a7075cf Compare September 19, 2023 15:12

renovate-bot changed the title ~~fix(deps): update dependency fastify to ~3.29.4 [security]~~ fix(deps): update dependency fastify to ~3.29.0 [security] Sep 19, 2023

renovate-bot force-pushed the renovate/npm-fastify-vulnerability branch from a7075cf to 4fc3fd3 Compare September 19, 2023 18:33

renovate-bot changed the title ~~fix(deps): update dependency fastify to ~3.29.0 [security]~~ fix(deps): update dependency fastify to ~3.29.4 [security] Sep 19, 2023

renovate-bot changed the title ~~fix(deps): update dependency fastify to ~3.29.4 [security]~~ fix(deps): update dependency fastify to ~3.29.0 [security] Oct 1, 2023

renovate-bot force-pushed the renovate/npm-fastify-vulnerability branch 2 times, most recently from a889830 to 372af5d Compare October 1, 2023 09:31

renovate-bot changed the title ~~fix(deps): update dependency fastify to ~3.29.0 [security]~~ fix(deps): update dependency fastify to ~3.29.4 [security] Oct 1, 2023

renovate-bot force-pushed the renovate/npm-fastify-vulnerability branch from 372af5d to 11a58ad Compare October 9, 2023 10:16

renovate-bot changed the title ~~fix(deps): update dependency fastify to ~3.29.4 [security]~~ fix(deps): update dependency fastify to ~3.29.0 [security] Oct 9, 2023

renovate-bot changed the title ~~fix(deps): update dependency fastify to ~3.29.0 [security]~~ fix(deps): update dependency fastify to ~3.29.4 [security] Oct 9, 2023

renovate-bot force-pushed the renovate/npm-fastify-vulnerability branch 2 times, most recently from 09e7547 to 14c5f87 Compare October 15, 2023 09:22

renovate-bot changed the title ~~fix(deps): update dependency fastify to ~3.29.4 [security]~~ fix(deps): update dependency fastify to ~3.29.0 [security] Oct 15, 2023

renovate-bot force-pushed the renovate/npm-fastify-vulnerability branch from 14c5f87 to 01f4862 Compare October 15, 2023 17:39

renovate-bot changed the title ~~fix(deps): update dependency fastify to ~3.29.0 [security]~~ fix(deps): update dependency fastify to ~3.29.4 [security] Apr 1, 2024

renovate-bot force-pushed the renovate/npm-fastify-vulnerability branch from dfe6aab to d900b36 Compare April 14, 2024 09:40

renovate-bot changed the title ~~fix(deps): update dependency fastify to ~3.29.4 [security]~~ fix(deps): update dependency fastify to ~3.29.0 [security] Apr 14, 2024

renovate-bot force-pushed the renovate/npm-fastify-vulnerability branch from d900b36 to 12b6078 Compare April 14, 2024 13:44

renovate-bot changed the title ~~fix(deps): update dependency fastify to ~3.29.0 [security]~~ fix(deps): update dependency fastify to ~3.29.4 [security] Apr 14, 2024

renovate-bot force-pushed the renovate/npm-fastify-vulnerability branch from 12b6078 to e704215 Compare April 21, 2024 08:47

renovate-bot changed the title ~~fix(deps): update dependency fastify to ~3.29.4 [security]~~ fix(deps): update dependency fastify to ~3.29.0 [security] Apr 21, 2024

renovate-bot force-pushed the renovate/npm-fastify-vulnerability branch from e704215 to 7d6eda5 Compare April 21, 2024 09:11

renovate-bot changed the title ~~fix(deps): update dependency fastify to ~3.29.0 [security]~~ fix(deps): update dependency fastify to ~3.29.4 [security] Apr 21, 2024

renovate-bot force-pushed the renovate/npm-fastify-vulnerability branch from 7d6eda5 to 068118f Compare April 25, 2024 07:18

renovate-bot changed the title ~~fix(deps): update dependency fastify to ~3.29.4 [security]~~ fix(deps): update dependency fastify to ~3.29.0 [security] Apr 25, 2024

renovate-bot force-pushed the renovate/npm-fastify-vulnerability branch from 068118f to df09b0d Compare April 25, 2024 09:40

renovate-bot changed the title ~~fix(deps): update dependency fastify to ~3.29.0 [security]~~ fix(deps): update dependency fastify to ~3.29.4 [security] Apr 25, 2024

renovate-bot force-pushed the renovate/npm-fastify-vulnerability branch from df09b0d to 1d14e14 Compare May 1, 2024 10:05

renovate-bot changed the title ~~fix(deps): update dependency fastify to ~3.29.4 [security]~~ fix(deps): update dependency fastify to ~3.29.0 [security] May 1, 2024

renovate-bot force-pushed the renovate/npm-fastify-vulnerability branch from 1d14e14 to d001b92 Compare May 1, 2024 13:42

renovate-bot changed the title ~~fix(deps): update dependency fastify to ~3.29.0 [security]~~ fix(deps): update dependency fastify to ~3.29.4 [security] May 1, 2024

renovate-bot force-pushed the renovate/npm-fastify-vulnerability branch from d001b92 to 0f4c87f Compare May 9, 2024 08:39

renovate-bot changed the title ~~fix(deps): update dependency fastify to ~3.29.4 [security]~~ fix(deps): update dependency fastify to ~3.29.0 [security] May 9, 2024

renovate-bot force-pushed the renovate/npm-fastify-vulnerability branch from 0f4c87f to 664924c Compare May 9, 2024 10:19

renovate-bot changed the title ~~fix(deps): update dependency fastify to ~3.29.0 [security]~~ fix(deps): update dependency fastify to ~3.29.4 [security] May 9, 2024

renovate-bot force-pushed the renovate/npm-fastify-vulnerability branch from 664924c to e39107d Compare May 15, 2024 17:26

renovate-bot changed the title ~~fix(deps): update dependency fastify to ~3.29.4 [security]~~ fix(deps): update dependency fastify to ~3.29.0 [security] May 15, 2024

renovate-bot force-pushed the renovate/npm-fastify-vulnerability branch from e39107d to 4e16d40 Compare May 15, 2024 23:47

renovate-bot changed the title ~~fix(deps): update dependency fastify to ~3.29.0 [security]~~ fix(deps): update dependency fastify to ~3.29.4 [security] May 15, 2024

renovate-bot changed the title ~~fix(deps): update dependency fastify to ~3.29.4 [security]~~ fix(deps): update dependency fastify to ~3.29.0 [security] Jun 4, 2024

renovate-bot force-pushed the renovate/npm-fastify-vulnerability branch from 4e16d40 to 94f6886 Compare June 4, 2024 14:20

fix(deps): update dependency fastify to ~3.29.4 [security]

5fcecbf

renovate-bot force-pushed the renovate/npm-fastify-vulnerability branch from 94f6886 to 5fcecbf Compare June 4, 2024 16:46

renovate-bot changed the title ~~fix(deps): update dependency fastify to ~3.29.0 [security]~~ fix(deps): update dependency fastify to ~3.29.4 [security] Jun 4, 2024

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

fix(deps): update dependency fastify to ~3.29.4 [security] #56

fix(deps): update dependency fastify to ~3.29.4 [security] #56

renovate-bot commented Aug 3, 2023 •

edited

fix(deps): update dependency fastify to ~3.29.4 [security] #56

Are you sure you want to change the base?

fix(deps): update dependency fastify to ~3.29.4 [security] #56

Conversation

renovate-bot commented Aug 3, 2023 • edited

GitHub Vulnerability Alerts

Impact

Patches

Workarounds

References

For more information

Release Notes

⚠️ Security Release ⚠️

⚠️ Security Release ⚠️

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

What's Changed

New Contributors

What's Changed

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

What's Changed

What's Changed

New Contributors

What's Changed

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

Configuration

renovate-bot commented Aug 3, 2023 •

edited