Bump fastify from 4.3.0 to 4.10.2
Bumps fastify from 4.3.0 to 4.10.2.
Release notes
Sourced from fastify's releases.
v4.10.2
⚠️ Security Release⚠️
- Fix for "Incorrect Content-Type parsing can lead to CSRF attack" and CVE-2022-41919
Full Changelog: https://github.com/fastify/fastify/compare/v4.10.1...v4.10.2
v4.10.1
What's Changed
- fix node 19.1.0 port validation test by
@Uzlopakin fastify/fastify#4427- Add fastify-constraints to community plugins by
@Ceres6in fastify/fastify#4428- build(deps-dev): bump
@sinonjs/fake-timersfrom 9.1.2 to 10.0.0 by@dependabotin fastify/fastify#4421- add silent option to LogLevel by
@Uzlopakin fastify/fastify#4432New Contributors
@Ceres6made their first contribution in fastify/fastify#4428Full Changelog: https://github.com/fastify/fastify/compare/v4.10.0...v4.10.1
v4.10.0
What's Changed
- docs(reference/reply): spelling fixes by
@Fdawgsin fastify/fastify#4358- Support different content-type typed reply with TypeProvider by
@rain714in fastify/fastify#4360- chore: remove leading empty lines by
@LinusUin fastify/fastify#4364- fix types after pino 8.7.0 change by
@mcollinain fastify/fastify#4365- Node.js V19 support by
@mcollinain fastify/fastify#4366- fix: no check on
nullorundefinedvalues passed as fn by@metcoder95in fastify/fastify#4367- docs(server): config is lost when reply.call not found() is called by
@cesarvsprin fastify/fastify#4368- Fix typo - 'sever' to 'server' by
@utsav91in fastify/fastify#4372- Add platformatic to the Acknowledgements by
@mcollinain fastify/fastify#4378- docs: add Simone Busoli to plugin maintainers by
@simonebin fastify/fastify#4379- add missing 'validationContext' field to FastifyError type by
@jakubburzynskiin fastify/fastify#4363- fix(type-providers): assignability of instance with enabled type provider by
@driimusin fastify/fastify#4371- feat: support async trailer by
@climba03003in fastify/fastify#4380- fix: trailers async race condition by
@climba03003in fastify/fastify#4383- docs(ecosystem): Add fastify-list-routes by
@chuongtrhin fastify/fastify#4385- build(deps-dev): bump
@sinclair/typeboxfrom 0.24.51 to 0.25.2 by@dependabotin fastify/fastify#4388- [ Fix ] Improve error message for hooks check by
@debadutta98in fastify/fastify#4387- fix: tiny-lru usage by
@climba03003in fastify/fastify#4391- Removes old note about named imports in ESM by
@fox1tin fastify/fastify#4392- docs: Add section about capacity planning by
@kibertoadin fastify/fastify#4386- docs(recommendations): grammar fixes by
@Fdawgsin fastify/fastify#4396- chore(doc): duplicated menu item by
@Eommin fastify/fastify#4398- feat: add request.routeOptions object by
@debadutta98in fastify/fastify#4397- docs: Document multiple app approach by
@kibertoadin fastify/fastify#4393- fix example using db decorator on fastify instance by
@mmartiin fastify/fastify#4406- docs: fix removeAdditional refer by
@shunyue1320in fastify/fastify#4410
... (truncated)
Commits
-
62dde76Merge pull request from GHSA-3fjj-p79j-c9hh -
6fc06c1Bumped v4.10.1 -
a8873efadd silent option to LogLevel (#4432) -
9c1be2abuild(deps-dev): bump@sinonjs/fake-timersfrom 9.1.2 to 10.0.0 (#4421) -
9c85bedAdd fastify-constraints to community plugins (#4428) -
36d84bcfix node 19.1.0 port validation test (#4427) -
3767bc2Bumped v4.10.0 -
5c8039cdocs: fix removeAdditional refer (#4410) -
ea58581docs: fix example using db decorator on fastify instance (#4406) -
675b00ddocs: Document multiple app approach (#4393) - Additional commits viewable in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
-
@dependabot rebasewill rebase this PR -
@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it -
@dependabot mergewill merge this PR after your CI passes on it -
@dependabot squash and mergewill squash and merge this PR after your CI passes on it -
@dependabot cancel mergewill cancel a previously requested merge and block automerging -
@dependabot reopenwill reopen this PR if it is closed -
@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually -
@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) -
@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) -
@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) -
@dependabot use these labelswill set the current labels as the default for future PRs for this repo and language -
@dependabot use these reviewerswill set the current reviewers as the default for future PRs for this repo and language -
@dependabot use these assigneeswill set the current assignees as the default for future PRs for this repo and language -
@dependabot use this milestonewill set the current milestone as the default for future PRs for this repo and language
You can disable automated security fix PRs for this repo from the Security Alerts page.