Repository navigation
chore(deps): bump the production-deps group across 1 directory with 26 updates - #24
Closed
dependabot[bot] wants to merge 1 commit into
Closed
dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
dependabot
Bot
force-pushed
the
dependabot/npm_and_yarn/production-deps-b35e290099
branch
3 times, most recently
from
October 9, 2026 20:16
df95851 to
7a8832d
Compare
…6 updates Bumps the production-deps group with 26 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@fastify/cors](https://github.com/fastify/fastify-cors) | `10.1.0` | `11.3.0` | | [@fastify/helmet](https://github.com/fastify/fastify-helmet) | `13.1.0` | `13.1.1` | | [@fastify/jwt](https://github.com/fastify/fastify-jwt) | `10.2.1` | `10.2.2` | | [@fastify/rate-limit](https://github.com/fastify/fastify-rate-limit) | `10.3.0` | `11.2.0` | | [@fastify/sensible](https://github.com/fastify/fastify-sensible) | `6.0.4` | `6.0.6` | | [@fastify/static](https://github.com/fastify/fastify-static) | `10.1.2` | `10.1.5` | | [@fastify/swagger](https://github.com/fastify/fastify-swagger) | `9.8.1` | `9.9.1` | | [@fastify/websocket](https://github.com/fastify/fastify-websocket) | `11.3.0` | `11.3.3` | | [dotenv](https://github.com/motdotla/dotenv) | `16.6.1` | `18.0.6` | | [fastify](https://github.com/fastify/fastify) | `5.11.2` | `5.12.5` | | [fastify-plugin](https://github.com/fastify/fastify-plugin) | `5.1.0` | `6.0.0` | | [otpauth](https://github.com/hectorm/otpauth) | `9.5.1` | `9.5.2` | | [pino](https://github.com/pinojs/pino) | `9.14.0` | `10.4.0` | | [undici](https://github.com/nodejs/undici) | `8.10.0` | `8.11.2` | | [yaml](https://github.com/eemeli/yaml) | `2.9.0` | `2.9.1` | | [zod](https://github.com/colinhacks/zod) | `3.25.76` | `4.6.5` | | [@codemirror/commands](https://github.com/codemirror/commands) | `6.11.0` | `6.11.1` | | [@codemirror/state](https://github.com/codemirror/state) | `6.7.1` | `6.7.6` | | [@codemirror/view](https://github.com/codemirror/view) | `6.43.9` | `6.43.13` | | [@lezer/highlight](https://github.com/lezer-parser/highlight) | `1.2.3` | `1.2.5` | | [@uiw/react-codemirror](https://github.com/uiwjs/react-codemirror) | `4.25.11` | `4.25.12` | | [@xyflow/react](https://github.com/xyflow/xyflow/tree/HEAD/packages/react) | `12.11.2` | `12.12.0` | | [next](https://github.com/vercel/next.js) | `15.5.22` | `16.4.0` | | [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.8` | `19.3.0` | | [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.8` | `19.3.0` | | [tailwind-merge](https://github.com/dcastil/tailwind-merge/tree/HEAD/packages/tailwind-merge) | `2.6.1` | `3.7.0` | Updates `@fastify/cors` from 10.1.0 to 11.3.0 - [Release notes](https://github.com/fastify/fastify-cors/releases) - [Commits](fastify/fastify-cors@v10.1.0...v11.3.0) Updates `@fastify/helmet` from 13.1.0 to 13.1.1 - [Release notes](https://github.com/fastify/fastify-helmet/releases) - [Commits](fastify/fastify-helmet@v13.1.0...v13.1.1) Updates `@fastify/jwt` from 10.2.1 to 10.2.2 - [Release notes](https://github.com/fastify/fastify-jwt/releases) - [Commits](fastify/fastify-jwt@v10.2.1...v10.2.2) Updates `@fastify/rate-limit` from 10.3.0 to 11.2.0 - [Release notes](https://github.com/fastify/fastify-rate-limit/releases) - [Commits](fastify/fastify-rate-limit@v10.3.0...v11.2.0) Updates `@fastify/sensible` from 6.0.4 to 6.0.6 - [Release notes](https://github.com/fastify/fastify-sensible/releases) - [Commits](fastify/fastify-sensible@v6.0.4...v6.0.6) Updates `@fastify/static` from 10.1.2 to 10.1.5 - [Release notes](https://github.com/fastify/fastify-static/releases) - [Commits](fastify/fastify-static@v10.1.2...v10.1.5) Updates `@fastify/swagger` from 9.8.1 to 9.9.1 - [Release notes](https://github.com/fastify/fastify-swagger/releases) - [Commits](fastify/fastify-swagger@v9.8.1...v9.9.1) Updates `@fastify/websocket` from 11.3.0 to 11.3.3 - [Release notes](https://github.com/fastify/fastify-websocket/releases) - [Commits](fastify/fastify-websocket@v11.3.0...v11.3.3) Updates `dotenv` from 16.6.1 to 18.0.6 - [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md) - [Commits](motdotla/dotenv@v16.6.1...v18.0.6) Updates `fastify` from 5.11.2 to 5.12.5 - [Release notes](https://github.com/fastify/fastify/releases) - [Commits](fastify/fastify@v5.11.2...v5.12.5) Updates `fastify-plugin` from 5.1.0 to 6.0.0 - [Release notes](https://github.com/fastify/fastify-plugin/releases) - [Commits](fastify/fastify-plugin@v5.1.0...v6.0.0) Updates `otpauth` from 9.5.1 to 9.5.2 - [Release notes](https://github.com/hectorm/otpauth/releases) - [Commits](hectorm/otpauth@v9.5.1...v9.5.2) Updates `pino` from 9.14.0 to 10.4.0 - [Release notes](https://github.com/pinojs/pino/releases) - [Commits](pinojs/pino@v9.14.0...v10.4.0) Updates `undici` from 8.10.0 to 8.11.2 - [Release notes](https://github.com/nodejs/undici/releases) - [Commits](nodejs/undici@v8.10.0...v8.11.2) Updates `yaml` from 2.9.0 to 2.9.1 - [Release notes](https://github.com/eemeli/yaml/releases) - [Commits](eemeli/yaml@v2.9.0...v2.9.1) Updates `zod` from 3.25.76 to 4.6.5 - [Release notes](https://github.com/colinhacks/zod/releases) - [Commits](colinhacks/zod@v3.25.76...v4.6.5) Updates `@codemirror/commands` from 6.11.0 to 6.11.1 - [Changelog](https://github.com/codemirror/commands/blob/main/CHANGELOG.md) - [Commits](https://github.com/codemirror/commands/commits) Updates `@codemirror/state` from 6.7.1 to 6.7.6 - [Changelog](https://github.com/codemirror/state/blob/main/CHANGELOG.md) - [Commits](https://github.com/codemirror/state/commits) Updates `@codemirror/view` from 6.43.9 to 6.43.13 - [Changelog](https://github.com/codemirror/view/blob/main/CHANGELOG.md) - [Commits](https://github.com/codemirror/view/commits) Updates `@lezer/highlight` from 1.2.3 to 1.2.5 - [Changelog](https://github.com/lezer-parser/highlight/blob/main/CHANGELOG.md) - [Commits](https://github.com/lezer-parser/highlight/commits) Updates `@uiw/react-codemirror` from 4.25.11 to 4.25.12 - [Release notes](https://github.com/uiwjs/react-codemirror/releases) - [Commits](uiwjs/react-codemirror@v4.25.11...v4.25.12) Updates `@xyflow/react` from 12.11.2 to 12.12.0 - [Release notes](https://github.com/xyflow/xyflow/releases) - [Changelog](https://github.com/xyflow/xyflow/blob/main/packages/react/CHANGELOG.md) - [Commits](https://github.com/xyflow/xyflow/commits/@xyflow/react@12.12.0/packages/react) Updates `next` from 15.5.22 to 16.4.0 - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](vercel/next.js@v15.5.22...v16.4.0) Updates `react` from 19.2.8 to 19.3.0 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.3.0/packages/react) Updates `react-dom` from 19.2.8 to 19.3.0 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.3.0/packages/react-dom) Updates `tailwind-merge` from 2.6.1 to 3.7.0 - [Release notes](https://github.com/dcastil/tailwind-merge/releases) - [Commits](https://github.com/dcastil/tailwind-merge/commits/tailwind-merge@3.7.0/packages/tailwind-merge) --- updated-dependencies: - dependency-name: "@codemirror/commands" dependency-version: 6.11.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-deps - dependency-name: "@codemirror/state" dependency-version: 6.7.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-deps - dependency-name: "@codemirror/view" dependency-version: 6.43.13 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-deps - dependency-name: "@fastify/cors" dependency-version: 11.3.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-deps - dependency-name: "@fastify/helmet" dependency-version: 13.1.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-deps - dependency-name: "@fastify/jwt" dependency-version: 10.2.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-deps - dependency-name: "@fastify/rate-limit" dependency-version: 11.2.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-deps - dependency-name: "@fastify/sensible" dependency-version: 6.0.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-deps - dependency-name: "@fastify/static" dependency-version: 10.1.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-deps - dependency-name: "@fastify/swagger" dependency-version: 9.9.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-deps - dependency-name: "@fastify/websocket" dependency-version: 11.3.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-deps - dependency-name: "@lezer/highlight" dependency-version: 1.2.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-deps - dependency-name: "@uiw/react-codemirror" dependency-version: 4.25.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-deps - dependency-name: "@xyflow/react" dependency-version: 12.12.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-deps - dependency-name: dotenv dependency-version: 18.0.5 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-deps - dependency-name: fastify dependency-version: 5.12.5 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-deps - dependency-name: fastify-plugin dependency-version: 6.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-deps - dependency-name: next dependency-version: 16.3.8 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-deps - dependency-name: otpauth dependency-version: 9.5.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-deps - dependency-name: pino dependency-version: 10.4.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-deps - dependency-name: react dependency-version: 19.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-deps - dependency-name: react-dom dependency-version: 19.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-deps - dependency-name: tailwind-merge dependency-version: 3.7.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-deps - dependency-name: undici dependency-version: 8.11.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-deps - dependency-name: yaml dependency-version: 2.9.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-deps - dependency-name: zod dependency-version: 4.6.5 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-deps ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
force-pushed
the
dependabot/npm_and_yarn/production-deps-b35e290099
branch
from
October 9, 2026 21:19
7a8832d to
925535f
Compare
Author
|
Looks like these dependencies are updatable in another way, so this is no longer needed. |
dependabot
Bot
deleted the
dependabot/npm_and_yarn/production-deps-b35e290099
branch
October 15, 2026 09:52
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the production-deps group with 26 updates in the / directory:
10.1.011.3.013.1.013.1.110.2.110.2.210.3.011.2.06.0.46.0.610.1.210.1.59.8.19.9.111.3.011.3.316.6.118.0.65.11.25.12.55.1.06.0.09.5.19.5.29.14.010.4.08.10.08.11.22.9.02.9.13.25.764.6.56.11.06.11.16.7.16.7.66.43.96.43.131.2.31.2.54.25.114.25.1212.11.212.12.015.5.2216.4.019.2.819.3.019.2.819.3.02.6.13.7.0Updates
@fastify/corsfrom 10.1.0 to 11.3.0Release notes
Sourced from @fastify/cors's releases.
... (truncated)
Commits
2c60caaBumped v11.3.0cf4986echore: bump@types/nodein the dev-dependencies-typescript group (#411)816d054test: remove remaining tap-style assertions from vary tests (#410)20507eachore(package.json): fix delvedor's personal url (#409)6fe85c4docs(readme): update request origin link (#408)57bdc65chore: bump fastify-plugin from 5.1.0 to 6.0.0 in the dependencies group (#407)a8ae57dchore: update depedabot setting4d34798chore(.gitattributes): retain binary file eol style (#402)675ebefrefactor(types): migrate from tsd to tstyche (#403)ef25e0bci: add lock-threads workflow (#401)Updates
@fastify/helmetfrom 13.1.0 to 13.1.1Release notes
Sourced from @fastify/helmet's releases.
Commits
8854d49Bumped v13.1.1c4bbcb2chore(.npmrc): add min-release-age (#319)8406fa8chore: bump fastify/workflows/.github/workflows/plugins-ci.yml (#321)d8da457chore: bump fastify/workflows/.github/workflows/lock-threads.yml (#320)655cd3achore: bump c8 from 11.0.0 to 12.0.0 (#317)928d9b5ci: pin actions to commit-hash7c9cda3test: fix CSP header order assertions for helmet@8.3.xMaintainer changes
This version was pushed to npm by tony133, a new releaser for
@fastify/helmetsince your current version.Updates
@fastify/jwtfrom 10.2.1 to 10.2.2Release notes
Sourced from @fastify/jwt's releases.
Commits
0fa8941Bumped v10.2.22bb1a9aMerge commit from fork36c7b70chore: bump fastify/workflows/.github/workflows/lock-threads.yml (#429)faf9718chore: bump fastify/workflows/.github/workflows/plugins-ci.yml165bbd1chore(.npmrc): add min-release-age (#426)6b6caa9test: update expected error message for clockTimestamp (fast-jwt) (#427)Updates
@fastify/rate-limitfrom 10.3.0 to 11.2.0Release notes
Sourced from @fastify/rate-limit's releases.
... (truncated)
Commits
92da964Bumped v11.2.01aee036Merge commit from fork65e9965chore: Bump c8 from 11.0.0 to 12.0.0 (#457)d9d6100ci: pin actions to commit-hasha5c9630chore: Bump@types/nodein the dev-dependencies-typescript group (#455)3998ebddocs: fix broken linksd7d6086Bumped v11.1.0c76be97feat: add increment option to createRateLimit (#449)f65adefchore(package.json): fix delvedor's personal urlfd252f0chore: Bump fastify-plugin from 5.1.0 to 6.0.0 in the dependencies group (#450)Updates
@fastify/sensiblefrom 6.0.4 to 6.0.6Release notes
Sourced from @fastify/sensible's releases.
Commits
d313b33Bumped v6.0.6233a70dfix(request): support variadic request.is types (#235)7974df0Bumped v6.0.54d03816chore: bump fastify/workflows/.github/workflows/plugins-ci.yml (#234)e189219chore: bump fastify/workflows/.github/workflows/lock-threads.yml (#233)15806e0chore(.npmrc): add min-release-aged07f3d9ci: pin actions to commit-hash05910cbchore: bump@types/nodein the dev-dependencies-typescript group (#230)d840f75docs: fix broken linksfb3aa00chore(package.json): fix delvedor's personal url (#228)Maintainer changes
This version was pushed to npm by tony133, a new releaser for
@fastify/sensiblesince your current version.Updates
@fastify/staticfrom 10.1.2 to 10.1.5Release notes
Sourced from @fastify/static's releases.
Commits
2f0953aBumped v10.1.5275d87efix: use registered root for relative downloads (#610)a39a464Bumped v10.1.4ac46015Ignore .pi6288466test: consume compressed response bodies04134a4test: cover rootless path validation on Windowsd9a8c0atest: make case-folding fallback portabledbe65e8Merge commit from fork48b821fchore: bump content-disposition in the dependencies group (#607)ee3f89dchore: bump fastify/workflows/.github/workflows/plugins-ci.yml (#604)Updates
@fastify/swaggerfrom 9.8.1 to 9.9.1Release notes
Sourced from @fastify/swagger's releases.
Commits
f3ecd63Bumped v9.9.1697b192fix(openapi): support untyped oneOf query properties (#945)50b6f3ffix: convert nullable and keep examples for OpenAPI 3.1+ (#955)5285637fix: support$refto definitions of shared schemas (#952)d31c75eBumped v9.9.074d98dbfeat: OpenAPI 3.2.0 compatibility (#949)56b8971Bumped v9.8.2c1218bcfix(openapi): support null types and type arrays in OpenAPI 3.0 documents05ce298docs: document OpenAPI specification extensions in TypeScript (#948)d3206d1docs: document static paths in dynamic modeMaintainer changes
This version was pushed to npm by tony133, a new releaser for
@fastify/swaggersince your current version.Updates
@fastify/websocketfrom 11.3.0 to 11.3.3Release notes
Sourced from @fastify/websocket's releases.
Commits
8b58c9fBumped v11.3.351a121cfix(types): type handler as websocket handler in route() with websocket: true...6e034a4Bumped v11.3.25adf931fix: handle socket errors during upgrade hooks6d1dc98Bumped v11.3.19704c20fix: remove custom server upgrade listener on close2ea163achore: Bump fastify/workflows/.github/workflows/lock-threads.yml (#378)b61f137chore: Bump fastify/workflows/.github/workflows/plugins-ci.ymlb956e76chore(.npmrc): add min-release-age24f9600chore: Bump c8 from 11.0.0 to 12.0.0 (#375)Maintainer changes
This version was pushed to npm by tony133, a new releaser for
@fastify/websocketsince your current version.Updates
dotenvfrom 16.6.1 to 18.0.6Changelog
Sourced from dotenv's changelog.
... (truncated)
Commits
5d7cc3918.0.6750ba03changelogcaa14f0Merge pull request #1069 from kevin9327/populate-parse-boolean-optionsa8b9720fix: parse debug and override in populate like config does05215e018.0.525bdd0achangelog2d640d2Merge pull request #1066 from AyanAta42/masterc84e2b4Merge pull request #1068 from matzehecht/fix-typescript570146aOptimize fast parser comment scanning4aa0665add typescript module declaration for dotenv/configUpdates
fastifyfrom 5.11.2 to 5.12.5Release notes
Sourced from fastify's releases.