build(deps): bump fastify from 4.5.2 to 4.8.1 #9

Closed

dependabot[bot] wants to merge 1 commit from dependabot/npm_and_yarn/fastify-4.8.1 into 2021

dependabot[bot] commented

2022-10-11 13:50:59 +00:00

(Migrated from github.com)

Bumps fastify from 4.5.2 to 4.8.1.

Release notes

Sourced from fastify's releases.

v4.8.1

⚠️ Security Release ⚠️

This release fixes https://github.com/fastify/fastify/security/advisories/GHSA-455w-c45v-86rg for the v4.x line. This is a HIGH vulnerability that can lead to a crash, resulting in a total loss of availability. The CVE for this vulnerability is CVE-2022-39288.

Full Changelog: https://github.com/fastify/fastify/compare/v4.8.0...v4.8.1

v4.8.0

What's Changed

Correct github url for fastify-qs package by @VanoDevium in fastify/fastify#4321

docs: add test examples with undici and fetch by @CristiTeo in fastify/fastify#4300

update onRoute hook docs by @matthyk in fastify/fastify#4322

Export error codes by @fitiskin in fastify/fastify#4266

feat: support async constraint by @climba03003 in fastify/fastify#4323

New Contributors

@fitiskin made their first contribution in fastify/fastify#4266

Full Changelog: https://github.com/fastify/fastify/compare/v4.7.0...v4.8.0

v4.7.0

What's Changed

fix: prevent reuse mutated route option for head by @climba03003 in fastify/fastify#4273

docs(ecosystem): add fastify-sqlite by @Eomm in fastify/fastify#4274

Add RavenDB to community plugins by @drakhart in fastify/fastify#4277

ci: reduce ci test when linting fails by @Eomm in fastify/fastify#4280

chore: update dependencies by @anonrig in fastify/fastify#4284

Check if route exist before checking Content-Type of body by @mage1k99 in fastify/fastify#4286

Replace parseInt with Number at get 6% boost by @anonrig in fastify/fastify#4289

fix: type of validation function by @budarin in fastify/fastify#4283

GitHub Workflows security hardening by @sashashura in fastify/fastify#4290

docs: onRoute hooks in plugins by @philsch in fastify/fastify#4285

chore: Lint eco system error by @zrosenbauer in fastify/fastify#4275

docs(ecosystem): Add @fastify/one-line-logger by @nooreldeensalah in fastify/fastify#4293

docs(ecosystem): capitalization fixes by @Fdawgs in fastify/fastify#4294

docs(ecosystem): add slow down plugin by @CristiTeo in fastify/fastify#4292

fix: custom validator should not mutate headers schema by @climba03003 in fastify/fastify#4295

feat: parse request body for http SEARCH requests by @kalvenschraut in fastify/fastify#4298

Fix typo in the comment to Context object (lib/context.js) by @yakovenkodenis in fastify/fastify#4301

docs(type-providers): replace FastifyLoggerInstance with FastifyBaseLogger by @samialdury in fastify/fastify#4304

docs(contributing): clarify teams for joiners by @Eomm in fastify/fastify#4303

test: add number coersion related tests by @anonrig in fastify/fastify#4297

feat: add routeSchema and routeConfig + switching context handling by @metcoder95 in fastify/fastify#4216

docs(ecosystem): add fastify-s3-buckets by @kibertoad in fastify/fastify#4311

fix: Fix typo in docs/Reference/Type-Providers.md by @SnowSuno in fastify/fastify#4312

build(deps): bump tiny-lru from 8.0.2 to 9.0.2 by @dependabot in fastify/fastify#4305

New Contributors

... (truncated)

Commits

6b2aff6 Bumped v4.8.1
fbb07e8 Merge pull request from GHSA-455w-c45v-86rg
5053ad9 Bumped v4.8.0
2df8712 feat: support async constraint (#4323)
6511ef4 Export error codes (#4266)
da7471f docs: update onRoute hook docs (#4322)
62d2c94 docs: add test examples with undici and fetch (#4300)
a4bb8ad Correct github url for fastify-qs package (#4321)
2394f76 Bumped v4.7.0
3dd23fe build(deps): bump tiny-lru from 8.0.2 to 9.0.2 (#4305)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
@dependabot use these labels will set the current labels as the default for future PRs for this repo and language
@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [fastify](https://github.com/fastify/fastify) from 4.5.2 to 4.8.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/fastify/fastify/releases">fastify's releases</a>.</em></p> <blockquote> <h2>v4.8.1</h2> <h1>⚠️ Security Release ⚠️</h1> <p>This release fixes <a href="https://github.com/fastify/fastify/security/advisories/GHSA-455w-c45v-86rg">https://github.com/fastify/fastify/security/advisories/GHSA-455w-c45v-86rg</a> for the v4.x line. This is a HIGH vulnerability that can lead to a crash, resulting in a total loss of availability. The CVE for this vulnerability is CVE-2022-39288.</p> <p><strong>Full Changelog</strong>: <a href="https://github.com/fastify/fastify/compare/v4.8.0...v4.8.1">https://github.com/fastify/fastify/compare/v4.8.0...v4.8.1</a></p> <h2>v4.8.0</h2> <h2>What's Changed</h2> <ul> <li>Correct github url for fastify-qs package by <a href="https://github.com/VanoDevium"><code>@VanoDevium</code></a> in <a href="https://github-redirect.dependabot.com/fastify/fastify/pull/4321">fastify/fastify#4321</a></li> <li>docs: add test examples with undici and fetch by <a href="https://github.com/CristiTeo"><code>@CristiTeo</code></a> in <a href="https://github-redirect.dependabot.com/fastify/fastify/pull/4300">fastify/fastify#4300</a></li> <li>update onRoute hook docs by <a href="https://github.com/matthyk"><code>@matthyk</code></a> in <a href="https://github-redirect.dependabot.com/fastify/fastify/pull/4322">fastify/fastify#4322</a></li> <li>Export error codes by <a href="https://github.com/fitiskin"><code>@fitiskin</code></a> in <a href="https://github-redirect.dependabot.com/fastify/fastify/pull/4266">fastify/fastify#4266</a></li> <li>feat: support async constraint by <a href="https://github.com/climba03003"><code>@climba03003</code></a> in <a href="https://github-redirect.dependabot.com/fastify/fastify/pull/4323">fastify/fastify#4323</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/fitiskin"><code>@fitiskin</code></a> made their first contribution in <a href="https://github-redirect.dependabot.com/fastify/fastify/pull/4266">fastify/fastify#4266</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/fastify/fastify/compare/v4.7.0...v4.8.0">https://github.com/fastify/fastify/compare/v4.7.0...v4.8.0</a></p> <h2>v4.7.0</h2> <h2>What's Changed</h2> <ul> <li>fix: prevent reuse mutated route option for head by <a href="https://github.com/climba03003"><code>@climba03003</code></a> in <a href="https://github-redirect.dependabot.com/fastify/fastify/pull/4273">fastify/fastify#4273</a></li> <li>docs(ecosystem): add fastify-sqlite by <a href="https://github.com/Eomm"><code>@Eomm</code></a> in <a href="https://github-redirect.dependabot.com/fastify/fastify/pull/4274">fastify/fastify#4274</a></li> <li>Add RavenDB to community plugins by <a href="https://github.com/drakhart"><code>@drakhart</code></a> in <a href="https://github-redirect.dependabot.com/fastify/fastify/pull/4277">fastify/fastify#4277</a></li> <li>ci: reduce ci test when linting fails by <a href="https://github.com/Eomm"><code>@Eomm</code></a> in <a href="https://github-redirect.dependabot.com/fastify/fastify/pull/4280">fastify/fastify#4280</a></li> <li>chore: update dependencies by <a href="https://github.com/anonrig"><code>@anonrig</code></a> in <a href="https://github-redirect.dependabot.com/fastify/fastify/pull/4284">fastify/fastify#4284</a></li> <li>Check if route exist before checking Content-Type of body by <a href="https://github.com/mage1k99"><code>@mage1k99</code></a> in <a href="https://github-redirect.dependabot.com/fastify/fastify/pull/4286">fastify/fastify#4286</a></li> <li>Replace parseInt with Number at get 6% boost by <a href="https://github.com/anonrig"><code>@anonrig</code></a> in <a href="https://github-redirect.dependabot.com/fastify/fastify/pull/4289">fastify/fastify#4289</a></li> <li>fix: type of validation function by <a href="https://github.com/budarin"><code>@budarin</code></a> in <a href="https://github-redirect.dependabot.com/fastify/fastify/pull/4283">fastify/fastify#4283</a></li> <li>GitHub Workflows security hardening by <a href="https://github.com/sashashura"><code>@sashashura</code></a> in <a href="https://github-redirect.dependabot.com/fastify/fastify/pull/4290">fastify/fastify#4290</a></li> <li>docs: onRoute hooks in plugins by <a href="https://github.com/philsch"><code>@philsch</code></a> in <a href="https://github-redirect.dependabot.com/fastify/fastify/pull/4285">fastify/fastify#4285</a></li> <li>chore: Lint eco system error by <a href="https://github.com/zrosenbauer"><code>@zrosenbauer</code></a> in <a href="https://github-redirect.dependabot.com/fastify/fastify/pull/4275">fastify/fastify#4275</a></li> <li>docs(ecosystem): Add <code>@fastify/one-line-logger</code> by <a href="https://github.com/nooreldeensalah"><code>@nooreldeensalah</code></a> in <a href="https://github-redirect.dependabot.com/fastify/fastify/pull/4293">fastify/fastify#4293</a></li> <li>docs(ecosystem): capitalization fixes by <a href="https://github.com/Fdawgs"><code>@Fdawgs</code></a> in <a href="https://github-redirect.dependabot.com/fastify/fastify/pull/4294">fastify/fastify#4294</a></li> <li>docs(ecosystem): add slow down plugin by <a href="https://github.com/CristiTeo"><code>@CristiTeo</code></a> in <a href="https://github-redirect.dependabot.com/fastify/fastify/pull/4292">fastify/fastify#4292</a></li> <li>fix: custom validator should not mutate headers schema by <a href="https://github.com/climba03003"><code>@climba03003</code></a> in <a href="https://github-redirect.dependabot.com/fastify/fastify/pull/4295">fastify/fastify#4295</a></li> <li>feat: parse request body for http SEARCH requests by <a href="https://github.com/kalvenschraut"><code>@kalvenschraut</code></a> in <a href="https://github-redirect.dependabot.com/fastify/fastify/pull/4298">fastify/fastify#4298</a></li> <li>Fix typo in the comment to Context object (lib/context.js) by <a href="https://github.com/yakovenkodenis"><code>@yakovenkodenis</code></a> in <a href="https://github-redirect.dependabot.com/fastify/fastify/pull/4301">fastify/fastify#4301</a></li> <li>docs(type-providers): replace FastifyLoggerInstance with FastifyBaseLogger by <a href="https://github.com/samialdury"><code>@samialdury</code></a> in <a href="https://github-redirect.dependabot.com/fastify/fastify/pull/4304">fastify/fastify#4304</a></li> <li>docs(contributing): clarify teams for joiners by <a href="https://github.com/Eomm"><code>@Eomm</code></a> in <a href="https://github-redirect.dependabot.com/fastify/fastify/pull/4303">fastify/fastify#4303</a></li> <li>test: add number coersion related tests by <a href="https://github.com/anonrig"><code>@anonrig</code></a> in <a href="https://github-redirect.dependabot.com/fastify/fastify/pull/4297">fastify/fastify#4297</a></li> <li>feat: add routeSchema and routeConfig + switching context handling by <a href="https://github.com/metcoder95"><code>@metcoder95</code></a> in <a href="https://github-redirect.dependabot.com/fastify/fastify/pull/4216">fastify/fastify#4216</a></li> <li>docs(ecosystem): add fastify-s3-buckets by <a href="https://github.com/kibertoad"><code>@kibertoad</code></a> in <a href="https://github-redirect.dependabot.com/fastify/fastify/pull/4311">fastify/fastify#4311</a></li> <li>fix: Fix typo in docs/Reference/Type-Providers.md by <a href="https://github.com/SnowSuno"><code>@SnowSuno</code></a> in <a href="https://github-redirect.dependabot.com/fastify/fastify/pull/4312">fastify/fastify#4312</a></li> <li>build(deps): bump tiny-lru from 8.0.2 to 9.0.2 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://github-redirect.dependabot.com/fastify/fastify/pull/4305">fastify/fastify#4305</a></li> </ul> <h2>New Contributors</h2>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/fastify/fastify/commit/6b2aff6c6808bdc162b461ce68c025e00c58e878"><code>6b2aff6</code></a> Bumped v4.8.1</li> <li><a href="https://github.com/fastify/fastify/commit/fbb07e8dfad74c69cd4cd2211aedab87194618e3"><code>fbb07e8</code></a> Merge pull request from GHSA-455w-c45v-86rg</li> <li><a href="https://github.com/fastify/fastify/commit/5053ad91177f16fb4bcfd06ca65f6a6df6acd2b1"><code>5053ad9</code></a> Bumped v4.8.0</li> <li><a href="https://github.com/fastify/fastify/commit/2df8712dd92d5cf9e24292417f43059481f78535"><code>2df8712</code></a> feat: support async constraint (<a href="https://github-redirect.dependabot.com/fastify/fastify/issues/4323">#4323</a>)</li> <li><a href="https://github.com/fastify/fastify/commit/6511ef405a4ba887922d1a446d03dde05fb55ddd"><code>6511ef4</code></a> Export error codes (<a href="https://github-redirect.dependabot.com/fastify/fastify/issues/4266">#4266</a>)</li> <li><a href="https://github.com/fastify/fastify/commit/da7471f1e43822cba2a2b090cd34a54a6e1469dd"><code>da7471f</code></a> docs: update onRoute hook docs (<a href="https://github-redirect.dependabot.com/fastify/fastify/issues/4322">#4322</a>)</li> <li><a href="https://github.com/fastify/fastify/commit/62d2c94a26ac619e95e16d99e5d6d2646a60a119"><code>62d2c94</code></a> docs: add test examples with undici and fetch (<a href="https://github-redirect.dependabot.com/fastify/fastify/issues/4300">#4300</a>)</li> <li><a href="https://github.com/fastify/fastify/commit/a4bb8ad161f6de802e4617fff6b4477fd1c084b2"><code>a4bb8ad</code></a> Correct github url for fastify-qs package (<a href="https://github-redirect.dependabot.com/fastify/fastify/issues/4321">#4321</a>)</li> <li><a href="https://github.com/fastify/fastify/commit/2394f76b1eebf9fca3ce4f78e17be0a6a81b79dd"><code>2394f76</code></a> Bumped v4.7.0</li> <li><a href="https://github.com/fastify/fastify/commit/3dd23fec705c6d2662fbf4fdf1dfc1480fa03793"><code>3dd23fe</code></a> build(deps): bump tiny-lru from 8.0.2 to 9.0.2 (<a href="https://github-redirect.dependabot.com/fastify/fastify/issues/4305">#4305</a>)</li> <li>Additional commits viewable in <a href="https://github.com/fastify/fastify/compare/v4.5.2...v4.8.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=fastify&package-manager=npm_and_yarn&previous-version=4.5.2&new-version=4.8.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/katlyn/katlyn.dev/network/alerts). </details>

dependabot[bot] commented

2022-10-18 21:50:55 +00:00

(Migrated from github.com)

Looks like fastify is up-to-date now, so this is no longer needed.