chore(deps): bump fastify from 5.8.4 to 5.12.1 by dependabot[bot] · Pull Request #109 · Dustin4444/typescript-sdk

dependabot · 2026-09-02T16:39:50Z

Bumps fastify from 5.8.4 to 5.12.1.

Release notes

v5.12.1

⚠️ Security release

Fix for GHSA-w2qp-rph6-63g4

Fix for GHSA-3m5p-2c4r-xxw2

What's Changed

[Backport 5.x] test: fix reply.mediaType by @github-actions[bot] in fastify/fastify#6950

[Backport 5.x] ci: allow backport in pr title by @github-actions[bot] in fastify/fastify#6952

[Backport 5.x] fix: run preClose hook exactly once per declaring instance by @github-actions[bot] in fastify/fastify#6954

[Backport 5.x] fix: report canonical route url for hidden prefix slash route by @github-actions[bot] in fastify/fastify#6961

Full Changelog: fastify/fastify@v5.12.0...v5.12.1

v5.12.0

What's Changed

chore(sponsor): add testmu ai by @Eomm in fastify/fastify#6922

docs: add per-route logging for Google Cloud Functions by @slegarraga in fastify/fastify#6907

test: remove @sinonjs/fake-timers by @climba03003 in fastify/fastify#6934

[Backport 5.x] fix: remove raw response headers by @github-actions[bot] in fastify/fastify#6939

[Backport 5.x] test: use process-warning spyWarning for testing by @github-actions[bot] in fastify/fastify#6945

[Backport 5.x] feat: add Reply.prototype.mediaType by @github-actions[bot] in fastify/fastify#6946

[Backport 5.x] fix(content-type): return undefined for invalid media types by @github-actions[bot] in fastify/fastify#6947

Full Changelog: fastify/fastify@v5.11.3...v5.12.0

v5.11.3

What's Changed

fix: clear trailer state when removing all trailers by @Ram-blip in fastify/fastify#6845

docs: document percent-decoded route params as untrusted input by @mcollina in fastify/fastify#6903

docs(errors): document what the default error handler sends by @basteez in fastify/fastify#6894

docs(readme): fix grammar and cjs capitalization by @minirang in fastify/fastify#6899

fix: pass null instead of undefined to requestCompleted on success by @lazerg in fastify/fastify#6837

docs(encapsulation): clarify nested plugin scopes by @jean-michelet in fastify/fastify#6893

chore: Bump fastify/workflows/.github/workflows/lock-threads.yml from 6.0.0 to 7.0.0 by @dependabot[bot] in fastify/fastify#6916

chore: Bump fastify/workflows/.github/workflows/nested-quality.yml from 6.0.0 to 7.0.0 by @dependabot[bot] in fastify/fastify#6917

fix: recognize constructor-assigned built-in properties as decorator … by @aquie00t in fastify/fastify#6892

fix: reset lastIndex before testing global/sticky content-type RegExp parsers by @zelinewang in fastify/fastify#6846

New Contributors

@minirang made their first contribution in fastify/fastify#6899

@lazerg made their first contribution in fastify/fastify#6837

@zelinewang made their first contribution in fastify/fastify#6846

Full Changelog: fastify/fastify@v5.11.2...v5.11.3

v5.11.2

What's Changed

... (truncated)

Commits

7d196a9 Bumped v5.12.1
1ef8a60 fix(validation): preserve coerced root values
8acfea7 fix: disable numeric trustProxy hop-count trust
268e439 fix: report canonical route url for hidden prefix slash route (#6719) (#6961)
b3b8be1 fix: run preClose hook exactly once per declaring instance (#6940) (#6954)
4708a98 ci: allow backport in pr title (#6948) (#6952)
65d12da test: fix reply.mediaType (#6949) (#6950)
27d1fec Bumped v5.12.0
430dd4e fix(content-type): return undefined for invalid media types (#6942) (#6947)
fd5fe53 feat: add Reply.prototype.mediaType (#6932) (#6946)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.

This change is

Bumps [fastify](https://github.com/fastify/fastify) from 5.8.4 to 5.12.1. - [Release notes](https://github.com/fastify/fastify/releases) - [Commits](fastify/fastify@v5.8.4...v5.12.1) --- updated-dependencies: - dependency-name: fastify dependency-version: 5.12.1 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>

greptile-apps · 2026-09-02T16:39:55Z

Required label not found on this PR.

greptile-apps · 2026-09-02T16:39:55Z

Required label not found on this PR.

greptile-apps · 2026-09-02T16:39:55Z

Required label not found on this PR.

greptile-apps · 2026-09-02T16:39:55Z

Required label not found on this PR.

changeset-bot · 2026-09-02T16:39:58Z

⚠️ No Changeset found

Latest commit: f40bd0b

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

warestack · 2026-09-02T16:40:00Z

Warestack Governance Checks

Warestack is installed for this GitHub account, but this repository is not ready to run governance checks yet.

Warestack lets your team define, enforce, and audit engineering standards directly on GitHub pull requests without leaving your workflow.

Get started in 2 minutes:

Finish Warestack setup to activate governance for Dustin4444/typescript-sdk
Configure rules for pull request quality, CI requirements, commit conventions, and more
Receive automated feedback on every pull request

This message is posted once per new pull request while this repository is not configured.

snyk-io · 2026-09-02T16:40:07Z

✅ Snyk checks have passed. No issues have been found so far.

Status	Scan Engine	Critical	High	Medium	Low	Total (0)
✅	Open Source Security	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

snyk-io · 2026-09-02T16:40:14Z

✅ Snyk checks have passed. No issues have been found so far.

Status	Scan Engine	Critical	High	Medium	Low	Total (0)
✅	Open Source Security	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

snyk-io · 2026-09-02T16:40:20Z

✅ Snyk checks have passed. No issues have been found so far.

Status	Scan Engine	Critical	High	Medium	Low	Total (0)
✅	Open Source Security	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

socket-security · 2026-09-02T16:40:35Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	fastify@5.8.4 ⏵ 5.12.1	^-1	⁺¹⁹		⁺⁹

View full report

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 2, 2026

dependabot Bot mentioned this pull request Sep 2, 2026

chore(deps): bump fastify from 5.8.4 to 5.8.5 #22

Closed

Navigation Menu

chore(deps): bump fastify from 5.8.4 to 5.12.1 - #109

chore(deps): bump fastify from 5.8.4 to 5.12.1#109
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/fastify-5.12.1

dependabot Bot commented on behalf of github Sep 2, 2026 •

edited by Dustin4444

Loading

Uh oh!

greptile-apps Bot commented Sep 2, 2026

Uh oh!

greptile-apps Bot commented Sep 2, 2026

Uh oh!

greptile-apps Bot commented Sep 2, 2026

Uh oh!

greptile-apps Bot commented Sep 2, 2026

Uh oh!

changeset-bot Bot commented Sep 2, 2026

Uh oh!

warestack Bot commented Sep 2, 2026

Uh oh!

snyk-io Bot commented Sep 2, 2026

Uh oh!

snyk-io Bot commented Sep 2, 2026

Uh oh!

snyk-io Bot commented Sep 2, 2026

Uh oh!

socket-security Bot commented Sep 2, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Sep 2, 2026 • edited by Dustin4444 Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v5.12.1

⚠️ Security release

What's Changed

v5.12.0

What's Changed

v5.11.3

What's Changed

New Contributors

v5.11.2

What's Changed

Uh oh!

greptile-apps Bot commented Sep 2, 2026

Uh oh!

greptile-apps Bot commented Sep 2, 2026

Uh oh!

greptile-apps Bot commented Sep 2, 2026

Uh oh!

greptile-apps Bot commented Sep 2, 2026

Uh oh!

changeset-bot Bot commented Sep 2, 2026

⚠️ No Changeset found

Uh oh!

warestack Bot commented Sep 2, 2026

Warestack Governance Checks

Uh oh!

snyk-io Bot commented Sep 2, 2026

✅ Snyk checks have passed. No issues have been found so far.

Uh oh!

snyk-io Bot commented Sep 2, 2026

✅ Snyk checks have passed. No issues have been found so far.

Uh oh!

snyk-io Bot commented Sep 2, 2026

✅ Snyk checks have passed. No issues have been found so far.

Uh oh!

socket-security Bot commented Sep 2, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Sep 2, 2026 •

edited by Dustin4444

Loading