Snyk has created this PR to upgrade fastify from 4.10.2 to 4.12.0.
:information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
The recommended version is 2 versions ahead of your current version.
The recommended version was released a month ago, on 2023-01-21.
Snyk has created this PR to upgrade fastify from 4.10.2 to 4.12.0.
:information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
Release notes
Package name: fastify
-
4.12.0 - 2023-01-21
- build(deps-dev): bump markdownlint-cli2 from 0.5.1 to 0.6.0 by @ dependabot in #4492
- nodenext compatibility by @ Uzlopak in #4438
- fix: content-type parserRegExpList when plugin override by @ climba03003 in #4496
- docs: upgrade migration guide for v4 by @ metcoder95 in #4503
- replace content-type with fast-content-type-parse by @ Uzlopak in #4505
- Add fastify-postgres-dot-js plugin to ecosystem docs. by @ kylerush in #4514
- chore(license): update licensing year by @ Fdawgs in #4516
- docs(Ecosystem): add metcoder95/fastify-ip by @ metcoder95 in #4517
- #4523 Add types for fastifyInstance.addresses() by @ Baptiste-Garcin in #4524
- @ kylerush made their first contribution in #4514
- @ Baptiste-Garcin made their first contribution in #4524
-
4.11.0 - 2023-01-01 Read more
-
4.10.2 - 2022-11-21
⚠️ Security Release ⚠️
- Fix for "Incorrect Content-Type parsing can lead to CSRF attack"
from fastify GitHub release notesWhat's Changed
New Contributors
Full Changelog: v4.11.0...v4.12.0
and CVE-2022-41919
Full Changelog: v4.10.1...v4.10.2
Commit messages
Package name: fastify
- d34f81b Bumped v4.12.0
- 2cf0c32 #4523 Add types for fastifyInstance.addresses() (#4524)
- 5bdf76c docs(Ecosystem): add metcoder95/fastify-ip (#4517)
- a6e4843 chore(license): update licensing year (#4516)
- baf0f06 Add fastify-postgres-dot-js plugin to ecosystem docs. (#4514)
- 8ebe376 replace content-type with fast-content-type-parse (#4505)
- da047e6 docs: upgrade migration guide for v4 (#4503)
- 687459a fix: content-type parserRegExpList when plugin override (#4496)
- d89b4f4 nodenext compatibility (#4438)
- 45a1df5 build(deps-dev): bump markdownlint-cli2 from 0.5.1 to 0.6.0 (#4492)
- 1b2b383 Bumped v4.11.0
- 0557c0a improve `setErrorHandler` example (#4484)
- 0d7264c build(deps): bump xt0rted/markdownlint-problem-matcher (#4490)
- 6b65f20 build(deps): bump thollander/actions-comment-pull-request from 1 to 2 (#4489)
- 10fd294 fix: re-thrown error crash with async handler and sync custom error handler (#4488)
- 003eae6 docs(reference/reply): When using async-await, need return (#4429)
- fc81c70 lib: deprecate fastify default route
- dbef642 doc: improve setDefaultRoute documentation
- 897360a perf: only check for isEssence once in RegExp for content-type-parser (#4481)
- 4bde0e0 docs(ecosystem): add fastify-at-postgres plugin (#4475)
- 35e7c1a fix: make res.statusCode optional (#4471)
- f0455e7 docs(ecosystem): add fastify-at-mysql plugin (#4473)
- 1651e0b chore(ecosystem): rename fastify-lyra plugin (#4474)
- cf5bbf8 docs: add fastify-user-agent (#4466)
CompareNote: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information:
🧐 View latest project report
🛠 Adjust upgrade PR settings
🔕 Ignore this dependency or unsubscribe from future upgrade PRs