nestjs / nest

A progressive Node.js framework for building efficient, scalable, and enterprise-grade server-side applications with TypeScript/JavaScript πŸš€
https://nestjs.com
MIT License
68.02k stars 7.66k forks source link

chore(deps): update dependency @fastify/middie to v8.3.3 #14160

Open renovate[bot] opened 1 week ago

renovate[bot] commented 1 week ago

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
@fastify/middie 8.3.1 -> 8.3.3 age adoption passing confidence

Release Notes

fastify/middie (@​fastify/middie) ### [`v8.3.3`](https://redirect.github.com/fastify/middie/releases/tag/v8.3.3) [Compare Source](https://redirect.github.com/fastify/middie/compare/v8.3.2...v8.3.3) #### Security - `path-to-regexp` is updated to 6.3.0 to prevent ReDOS attack, it is recommended to use the latest version of this package. #### What's Changed - fix(8.x): use path-to-regexp@6.3.0 by [@​climba03003](https://redirect.github.com/climba03003) in [https://github.com/fastify/middie/pull/215](https://redirect.github.com/fastify/middie/pull/215) **Full Changelog**: https://github.com/fastify/middie/compare/v8.3.2...v8.3.3 ### [`v8.3.2`](https://redirect.github.com/fastify/middie/releases/tag/v8.3.2) [Compare Source](https://redirect.github.com/fastify/middie/compare/v8.3.1...v8.3.2) #### Deprecated This version includes too much breaking change due to security patch. Please upgrade to version 8.3.3 which includes the security patch with minimal breakages. #### Security - `path-to-regexp` is updated to 8.1.0 to prevent ReDOS attack, it is recommended to use the latest version of this package. You may see some unexpected breaking due the security patch. Here is the workaround, 1. when you are using wildcard `*`, you must to provides a param name. ```js // before fastify.use('*.css') // after fastify.use('*filename{.css}') ``` #### What's Changed - chore(8.x): bump path-to-regexp to 8.1.0 by [@​climba03003](https://redirect.github.com/climba03003) in [https://github.com/fastify/middie/pull/213](https://redirect.github.com/fastify/middie/pull/213) **Full Changelog**: https://github.com/fastify/middie/compare/v8.3.1...v8.3.2

Configuration

πŸ“… Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

β™» Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

πŸ”• Ignore: Close this PR and you won't be reminded about this update again.



This PR was generated by Mend Renovate. View the repository job log.

coveralls commented 1 week ago

Pull Request Test Coverage Report for Build 40d7209e-1080-4a2f-8eef-1cec1b9b6dcb

Details


Totals Coverage Status
Change from base Build ac1ecdeb-46f3-42a4-b7c7-a2b97ee4914c: 0.0%
Covered Lines: 6814
Relevant Lines: 7412

πŸ’› - Coveralls