Skip to content

chore(deps): bump fastify from 4.28.1 to 5.8.2#1673

Closed
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/npm_and_yarn/fastify-5.8.2
Closed

chore(deps): bump fastify from 4.28.1 to 5.8.2#1673
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/npm_and_yarn/fastify-5.8.2

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 16, 2026

Bumps fastify from 4.28.1 to 5.8.2.

Release notes

Sourced from fastify's releases.

v5.8.2

What's Changed

New Contributors

Full Changelog: fastify/fastify@v5.8.1...v5.8.2

v5.8.1

⚠️ Security Release

Fixes "Missing End Anchor in "subtypeNameReg" Allows Malformed Content-Types to Pass Validation": GHSA-573f-x89g-hqp9.

CVE-2026-3419

Full Changelog: fastify/fastify@v5.8.0...v5.8.1

v5.8.0

What's Changed

... (truncated)

Commits
  • 375e136 Bumped v5.8.2
  • 25a70ff docs: add @​glidemq/fastify to community plugins list (#6560)
  • 4a5304f docs(guides): update codemod links (#6479)
  • c9bcde4 docs: added note on handling of invalid URLs in setNotFoundHandler (#5661)
  • 3b0f769 fix: anchor keyValuePairsReg to prevent quadratic backtracking (#6558)
  • e4474cf docs: add fastify-svelte-view to Ecosystem list (#6453)
  • deaeb40 docs(ecosystem): add fastify-file-router (#6441)
  • 0d3b560 docs: document body validation with custom content type parsers (#6556)
  • cdcc4de Revert "chore: upgrade borp to v1.0.0 (#6510)" (#6564)
  • b61c362 docs(ecosystem): add @​yeliex/fastify-problem-details (#6546)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Mar 16, 2026
Bumps [fastify](https://github.com/fastify/fastify) from 4.28.1 to 5.8.2.
- [Release notes](https://github.com/fastify/fastify/releases)
- [Commits](fastify/fastify@v4.28.1...v5.8.2)

---
updated-dependencies:
- dependency-name: fastify
  dependency-version: 5.8.2
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/fastify-5.8.2 branch from b28db39 to 7bfc3ca Compare March 16, 2026 11:45
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Mar 17, 2026

Looks like fastify is up-to-date now, so this is no longer needed.

@dependabot dependabot bot closed this Mar 17, 2026
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/fastify-5.8.2 branch March 17, 2026 08:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants