sora/OTM
1
0
Fork 0
Code Issues 1 Pull Requests Projects Releases Wiki Activity

Update dependency fastify to v5.3.2 #185

Merged
bot merged 1 commits from renovate/fastify-5.x-lockfile into master 2025-04-19 04:04:59 +02:00
Conversation 0 Commits 1 Files Changed 1 +3 -3
bot commented 2025-04-19 04:04:59 +02:00
Collaborator
Copy Link

This PR contains the following updates:

Package Type Update Change
fastify (source) dependencies patch 5.3.0 -> 5.3.2

Release Notes

fastify/fastify (fastify)

v5.3.2

Compare Source

⚠️ Security Release ⚠️

Unfortunately, v5.3.1 did not include a complete fix for "Invalid content-type parsing could lead to validation bypass" and CVE-2025-32442. This is a follow-up patch to cover an edge case.

What's Changed

New Contributors

Full Changelog: https://github.com/fastify/fastify/compare/v5.3.1...v5.3.2

v5.3.1

Compare Source

⚠️ Security Release ⚠️

What's Changed

New Contributors

Full Changelog: https://github.com/fastify/fastify/compare/v5.3.0...v5.3.1

Configuration

📅 Schedule: Branch creation - "every weekday,every weekend" (UTC), Automerge - "every weekend" (UTC).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [fastify](https://fastify.dev/) ([source](https://github.com/fastify/fastify)) | dependencies | patch | [`5.3.0` -> `5.3.2`](https://renovatebot.com/diffs/npm/fastify/5.3.0/5.3.2) | --- ### Release Notes <details> <summary>fastify/fastify (fastify)</summary> ### [`v5.3.2`](https://github.com/fastify/fastify/releases/tag/v5.3.2) [Compare Source](https://github.com/fastify/fastify/compare/v5.3.1...v5.3.2) #### ⚠️ Security Release ⚠️ Unfortunately, v5.3.1 did not include a complete fix for ["Invalid content-type parsing could lead to validation bypass"](https://github.com/fastify/fastify/security/advisories/GHSA-mg2h-6x62-wpwc) and CVE-2025-32442. This is a follow-up patch to cover an edge case. #### What's Changed - docs: fix archived concurrently link to point to active repo by [@&#8203;TimTeylor](https://github.com/TimTeylor) in https://github.com/fastify/fastify/pull/6063 - fix: treat space as a delimiter in content-type parsing by [@&#8203;mcollina](https://github.com/mcollina) in https://github.com/fastify/fastify/pull/6064 #### New Contributors - [@&#8203;TimTeylor](https://github.com/TimTeylor) made their first contribution in https://github.com/fastify/fastify/pull/6063 **Full Changelog**: https://github.com/fastify/fastify/compare/v5.3.1...v5.3.2 ### [`v5.3.1`](https://github.com/fastify/fastify/releases/tag/v5.3.1) [Compare Source](https://github.com/fastify/fastify/compare/v5.3.0...v5.3.1) #### ⚠️ Security Release ⚠️ - Fix for ["Invalid content-type parsing could lead to validation bypass"](https://github.com/fastify/fastify/security/advisories/GHSA-mg2h-6x62-wpwc) and CVE-2025-32442 #### What's Changed - test: migrate logger options to node test runner by [@&#8203;ilteoood](https://github.com/ilteoood) in https://github.com/fastify/fastify/pull/6059 - test: migrate logger logging to node test runner by [@&#8203;ilteoood](https://github.com/ilteoood) in https://github.com/fastify/fastify/pull/6060 - test: convert custom parser 1 to node test runner by [@&#8203;ilteoood](https://github.com/ilteoood) in https://github.com/fastify/fastify/pull/6053 - test: custom querystring parser by [@&#8203;ilteoood](https://github.com/ilteoood) in https://github.com/fastify/fastify/pull/6054 - test: migrate stream 4 to node test runner by [@&#8203;ilteoood](https://github.com/ilteoood) in https://github.com/fastify/fastify/pull/6062 - test: migrate request logger to node test runner by [@&#8203;ilteoood](https://github.com/ilteoood) in https://github.com/fastify/fastify/pull/6058 - test: migrate custom parser 0 to node test runner by [@&#8203;ilteoood](https://github.com/ilteoood) in https://github.com/fastify/fastify/pull/6052 - test: migrate logger instantiation to node test runner by [@&#8203;ilteoood](https://github.com/ilteoood) in https://github.com/fastify/fastify/pull/6061 #### New Contributors - [@&#8203;ilteoood](https://github.com/ilteoood) made their first contribution in https://github.com/fastify/fastify/pull/6059 **Full Changelog**: https://github.com/fastify/fastify/compare/v5.3.0...v5.3.1 </details> --- ### Configuration 📅 **Schedule**: Branch creation - "every weekday,every weekend" (UTC), Automerge - "every weekend" (UTC). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yNDAuMSIsInVwZGF0ZWRJblZlciI6IjM5LjI0MC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImJvdCIsInJlbm92YXRlIl19-->
bot added 1 commit 2025-04-19 04:04:59 +02:00
Update dependency fastify to v5.3.2
All checks were successful
continuous-integration/drone/pr Build is passing
Details
continuous-integration/drone/push Build is passing
Details
94161d5be6
bot merged commit 94161d5be6 into master 2025-04-19 04:04:59 +02:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
bot sora-ext sora
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: sora/OTM#185
No description provided.
Delete Branch "renovate/fastify-5.x-lockfile"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?