deps: update fastify to 5.8.1 #10

Open
minori wants to merge 1 commits from dependencies/update-fastify into main
Owner

Dependency Update

Updates fastify from 5.7.4 to 5.8.1.

Type

dependencies

Changelog

Changelog

v5.8.1

⚠️ Security Release

Fixes "Missing End Anchor in "subtypeNameReg" Allows Malformed Content-Types to Pass Validation": https://github.com/fastify/fastify/security/advisories/GHSA-573f-x89g-hqp9.

CVE-2026-3419

Full Changelog: https://github.com/fastify/fastify/compare/v5.8.0...v5.8.1

v5.8.0

What's Changed

New Contributors

Full Changelog: https://github.com/fastify/fastify/compare/v5.7.4...v5.8.0


This PR was created by Minori, your friendly dependency updater! 🌸

## Dependency Update Updates **fastify** from `5.7.4` to `5.8.1`. ### Type dependencies ### Changelog ## Changelog ### v5.8.1 ## ⚠️ Security Release Fixes "Missing End Anchor in "subtypeNameReg" Allows Malformed Content-Types to Pass Validation": https://github.com/fastify/fastify/security/advisories/GHSA-573f-x89g-hqp9. CVE-2026-3419 **Full Changelog**: https://github.com/fastify/fastify/compare/v5.8.0...v5.8.1 ### v5.8.0 ## What's Changed * docs(request): add host security warning references by @mcollina in https://github.com/fastify/fastify/pull/6476 * docs: fix note style by @Fdawgs in https://github.com/fastify/fastify/pull/6487 * chore: rename deploy website ci by @Eomm in https://github.com/fastify/fastify/pull/6492 * chore: support pino v9 and v10 by @mcollina in https://github.com/fastify/fastify/pull/6496 * chore: update logger types and fix TODO comment by @Tony133 in https://github.com/fastify/fastify/pull/6470 * refactor(test-types): migrate dummy-plugin to FastifyPluginAsync by @Tony133 in https://github.com/fastify/fastify/pull/6472 * docs: fix markdown typo in README.md by @droppingbeans in https://github.com/fastify/fastify/pull/6491 * test: cover non-numeric content-length client error path by @mcollina in https://github.com/fastify/fastify/pull/6500 * ci: remove tests-checker workflow by @Tony133 in https://github.com/fastify/fastify/pull/6481 * ci: remove stale.yml file by @Tony133 in https://github.com/fastify/fastify/pull/6504 * docs(security): remove hackerone references; change note style by @Fdawgs in https://github.com/fastify/fastify/pull/6501 * chore: rename @sinclair/typebox to typebox by @Tony133 in https://github.com/fastify/fastify/pull/6494 * ci(links-check): add external link checker using linkinator-action by @umxr in https://github.com/fastify/fastify/pull/6386 * chore: upgrade borp to v1.0.0 by @Tony133 in https://github.com/fastify/fastify/pull/6510 * docs: Add OpenJS CNA reference to SECURITY.md by @mcollina in https://github.com/fastify/fastify/pull/6516 * fix: avoid mutating shared routerOptions across instances by @mcollina in https://github.com/fastify/fastify/pull/6515 * fix(types): accept async route hooks in shorthand options by @mcollina in https://github.com/fastify/fastify/pull/6514 * docs: Improve shutdown lifecycle documentation by @kibertoad in https://github.com/fastify/fastify/pull/6517 * chore: remove unused `tsconfig.eslint.json` by @mrazauskas in https://github.com/fastify/fastify/pull/6524 * feat: First-class support for handler-level timeouts by @kibertoad in https://github.com/fastify/fastify/pull/6521 * docs(security): clarify insecureHTTPParser threat model scope by @mcollina in https://github.com/fastify/fastify/pull/6533 * chore(license): standardise license notice by @Fdawgs in https://github.com/fastify/fastify/pull/6511 * docs: clarify anyOf nullable coercion behavior with primitive types by @slegarraga in https://github.com/fastify/fastify/pull/6531 * fix: remove format placeholder from FST_ERR_CTP_INVALID_MEDIA_TYPE message by @super-mcgin in https://github.com/fastify/fastify/pull/6528 * docs(reference/hooks): fix note style by @Fdawgs in https://github.com/fastify/fastify/pull/6538 * chore: Bump lycheeverse/lychee-action from 2.7.0 to 2.8.0 by @dependabot[bot] in https://github.com/fastify/fastify/pull/6539 * chore: Bump actions/dependency-review-action from 4.8.2 to 4.8.3 by @dependabot[bot] in https://github.com/fastify/fastify/pull/6540 * chore: Bump markdownlint-cli2 from 0.20.0 to 0.21.0 by @dependabot[bot] in https://github.com/fastify/fastify/pull/6542 * ci: remove broken links and add ecosystem link validator by @mcollina in https://github.com/fastify/fastify/pull/6421 * ci(validate-ecoystem-links): add job level permission by @Fdawgs in https://github.com/fastify/fastify/pull/6545 * style: remove trailing whitespace by @Fdawgs in https://github.com/fastify/fastify/pull/6543 ## New Contributors * @droppingbeans made their first contribution in https://github.com/fastify/fastify/pull/6491 * @umxr made their first contribution in https://github.com/fastify/fastify/pull/6386 * @slegarraga made their first contribution in https://github.com/fastify/fastify/pull/6531 * @super-mcgin made their first contribution in https://github.com/fastify/fastify/pull/6528 **Full Changelog**: https://github.com/fastify/fastify/compare/v5.7.4...v5.8.0 --- ✨ This PR was created by Minori, your friendly dependency updater! 🌸
minori added 1 commit 2026-03-15 07:01:40 -07:00
deps: update fastify to 5.8.1
Node.js CI / CI (pull_request) Successful in 29s
Security Scan and Upload / Security & DefectDojo Upload (pull_request) Successful in 1m20s
b3d1a1526d
Some checks are pending
Node.js CI / CI (pull_request) Successful in 29s
Security Scan and Upload / Security & DefectDojo Upload (pull_request) Successful in 1m20s
This pull request doesn't have enough required approvals yet. 0 of 1 approvals granted from users or teams on the allowlist.
You are not authorized to merge this pull request.
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin dependencies/update-fastify:dependencies/update-fastify
git checkout dependencies/update-fastify
Sign in to join this conversation.
No Reviewers
No Label
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: nhcarrigan/callista#10