Skip to content

chore(deps): bump the production-deps group across 1 directory with 29 updates - #27

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-deps-2dbaa61b21
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-deps-2dbaa61b21

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 15, 2026 •

Copy link
Copy Markdown

Bumps the production-deps group with 29 updates in the / directory:

Package From To
@fastify/cookie 11.1.2 11.1.3
@fastify/cors 10.1.0 11.3.1
@fastify/helmet 13.1.0 13.1.2
@fastify/jwt 10.2.1 10.2.4
@fastify/rate-limit 10.3.0 11.2.1
@fastify/sensible 6.0.4 6.0.7
@fastify/static 10.1.2 10.1.6
@fastify/swagger 9.8.1 9.9.2
@fastify/swagger-ui 6.1.1 6.1.2
@fastify/websocket 11.3.0 11.3.4
dotenv 16.6.1 18.0.7
fastify 5.11.2 5.12.5
fastify-plugin 5.1.0 6.0.1
otpauth 9.5.1 9.5.2
pino 9.14.0 10.4.0
undici 8.10.0 8.11.2
yaml 2.9.0 2.9.1
zod 3.25.76 4.6.6
@codemirror/commands 6.11.0 6.11.1
@codemirror/language 6.12.4 6.13.1
@codemirror/state 6.7.1 6.7.6
@codemirror/view 6.43.9 6.43.14
@lezer/highlight 1.2.3 1.2.5
@uiw/react-codemirror 4.25.11 4.25.12
@xyflow/react 12.11.2 12.12.0
next 15.5.22 16.4.0
react 19.2.8 19.3.0
react-dom 19.2.8 19.3.0
tailwind-merge 2.6.1 3.7.0

Updates @fastify/cookie from 11.1.2 to 11.1.3

Release notes

Sourced from @​fastify/cookie's releases.

v11.1.3

What's Changed

New Contributors

Full Changelog: fastify/fastify-cookie@v11.1.2...v11.1.3

Commits
  • 576e0dd Bumped v11.1.3
  • 19a1307 ci: enable trusted publishing releases
  • 104aca7 chore: bump fastify/workflows/.github/workflows/plugins-ci.yml (#368)
  • c838334 chore: bump fastify/workflows/.github/workflows/lock-threads.yml (#369)
  • 916538c chore(.npmrc): add min-release-age
  • 0c569e6 docs: fix signed cookie request examples (#366)
  • 56d895f chore: bump c8 from 11.0.0 to 12.0.0 (#365)
  • fb92235 ci: pin actions to commit-hash
  • See full diff in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​fastify/cookie since your current version.


Updates @fastify/cors from 10.1.0 to 11.3.1

Release notes

Sourced from @​fastify/cors's releases.

v11.3.1

What's Changed

New Contributors

Full Changelog: fastify/fastify-cors@v11.3.0...v11.3.1

v11.3.0

What's Changed

New Contributors

Full Changelog: fastify/fastify-cors@v11.2.0...v11.3.0

v11.2.0

What's Changed

... (truncated)

Commits
  • a4fb482 Bumped v11.3.1
  • 4627a17 ci: enable trusted publishing releases
  • 7670483 chore: bump fastify/workflows/.github/workflows/lock-threads.yml (#418)
  • d03ec98 chore: bump fastify/workflows/.github/workflows/plugins-ci.yml (#417)
  • 5a2e0d0 chore(.npmrc): add min-release-age
  • 2a47537 chore: return to typescript v6.x
  • 10c73be chore: bump typescript (#412)
  • b9f74b7 chore: bump c8 from 11.0.0 to 12.0.0 (#414)
  • 61789f1 ci: pin actions to commit-hash
  • 2c60caa Bumped v11.3.0
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​fastify/cors since your current version.


Updates @fastify/helmet from 13.1.0 to 13.1.2

Release notes

Sourced from @​fastify/helmet's releases.

v13.1.2

What's Changed

New Contributors

Full Changelog: fastify/fastify-helmet@v13.1.1...v13.1.2

v13.1.1

What's Changed

Full Changelog: fastify/fastify-helmet@v13.1.0...v13.1.1

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​fastify/helmet since your current version.


Updates @fastify/jwt from 10.2.1 to 10.2.4

Release notes

Sourced from @​fastify/jwt's releases.

v10.2.4

Full Changelog: fastify/fastify-jwt@v10.2.3...v10.2.4

v10.2.3

⚠️ Security Release

What's Changed

New Contributors

Full Changelog: fastify/fastify-jwt@v10.2.2...v10.2.3

v10.2.2

⚠️ Security Release

What's Changed

Full Changelog: fastify/fastify-jwt@v10.2.1...v10.2.2

Commits
  • b15eed5 Bumped v10.2.4
  • bc12d10 Bumped v10.2.3
  • 7b15f6c Merge commit from fork
  • 5737c6a ci: enable trusted publishing releases
  • 0fa8941 Bumped v10.2.2
  • 2bb1a9a Merge commit from fork
  • 36c7b70 chore: bump fastify/workflows/.github/workflows/lock-threads.yml (#429)
  • faf9718 chore: bump fastify/workflows/.github/workflows/plugins-ci.yml
  • 165bbd1 chore(.npmrc): add min-release-age (#426)
  • 6b6caa9 test: update expected error message for clockTimestamp (fast-jwt) (#427)
  • See full diff in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​fastify/jwt since your current version.


Updates @fastify/rate-limit from 10.3.0 to 11.2.1

Release notes

Sourced from @​fastify/rate-limit's releases.

v11.2.1

What's Changed

New Contributors

Full Changelog: fastify/fastify-rate-limit@v11.2.0...v11.2.1

v11.2.0

⚠️ Security Release

What's Changed

Full Changelog: fastify/fastify-rate-limit@v11.1.0...v11.2.0

v11.1.0

What's Changed

New Contributors

Full Changelog: fastify/fastify-rate-limit@v11.0.0...v11.1.0

v11.0.0

What's Changed

... (truncated)

Commits
  • 4cc3d70 Bumped v11.2.1
  • f2dc235 ci: enable trusted publishing releases
  • 78a7d41 chore: Bump ioredis from 5.11.1 to 6.0.0 (#461)
  • a7fbb20 chore: Bump fastify/workflows/.github/workflows/lock-threads.yml (#460)
  • 258e4ae chore: Bump fastify/workflows/.github/workflows/plugins-ci-redis.yml (#459)
  • 25aaf33 chore(.npmrc): add min-release-age
  • 92da964 Bumped v11.2.0
  • 1aee036 Merge commit from fork
  • 65e9965 chore: Bump c8 from 11.0.0 to 12.0.0 (#457)
  • d9d6100 ci: pin actions to commit-hash
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​fastify/rate-limit since your current version.


Updates @fastify/sensible from 6.0.4 to 6.0.7

Release notes

Sourced from @​fastify/sensible's releases.

v6.0.7

What's Changed

New Contributors

Full Changelog: fastify/fastify-sensible@v6.0.6...v6.0.7

v6.0.6

What's Changed

New Contributors

Full Changelog: fastify/fastify-sensible@v6.0.5...v6.0.6

v6.0.5

What's Changed

New Contributors

Full Changelog: fastify/fastify-sensible@v6.0.4...v6.0.5

Commits
  • e3908a1 Bumped v6.0.7
  • 9362646 ci: enable trusted publishing releases
  • d313b33 Bumped v6.0.6
  • 233a70d fix(request): support variadic request.is types (#235)
  • 7974df0 Bumped v6.0.5
  • 4d03816 chore: bump fastify/workflows/.github/workflows/plugins-ci.yml (#234)
  • e189219 chore: bump fastify/workflows/.github/workflows/lock-threads.yml (#233)
  • 15806e0 chore(.npmrc): add min-release-age
  • d07f3d9 ci: pin actions to commit-hash
  • 05910cb chore: bump @​types/node in the dev-dependencies-typescript group (#230)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​fastify/sensible since your current version.


Updates @fastify/static from 10.1.2 to 10.1.6

Release notes

Sourced from @​fastify/static's releases.

v10.1.6

What's Changed

Full Changelog: fastify/fastify-static@v10.1.5...v10.1.6

v10.1.5

What's Changed

New Contributors

Full Changelog: fastify/fastify-static@v10.1.4...v10.1.5

v10.1.4

This is a security release for GHSA-r799-r9gc-m956 (CVE-2026-90982).

It fixes a route guard and allowedPath bypass on case-insensitive filesystems. Users should upgrade to @fastify/static 10.1.4.

Full Changelog: fastify/fastify-static@v10.1.3...v10.1.4

v10.1.3

What's Changed

Full Changelog: fastify/fastify-static@v10.1.2...v10.1.3

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​fastify/static since your current version.


Updates @fastify/swagger from 9.8.1 to 9.9.2

Release notes

Sourced from @​fastify/swagger's releases.

v9.9.2

What's Changed

New Contributors

Full Changelog: fastify/fastify-swagger@v9.9.1...v9.9.2

v9.9.1

What's Changed

New Contributors

Full Changelog: fastify/fastify-swagger@v9.9.0...v9.9.1

v9.9.0

What's Changed

Full Changelog: fastify/fastify-swagger@v9.8.2...v9.9.0

v9.8.2

What's Changed

Full Changelog: fastify/fastify-swagger@v9.8.1...v9.8.2

Commits
  • a072a9a Bumped v9.9.2
  • d7bd51d ci: enable trusted publishing releases
  • f3ecd63 Bumped v9.9.1
  • 697b192 fix(openapi): support untyped oneOf query properties (#945)
  • 50b6f3f fix: convert nullable and keep examples for OpenAPI 3.1+ (#955)
  • 5285637 fix: support $ref to definitions of shared schemas (#952)
  • d31c75e Bumped v9.9.0
  • 74d98db feat: OpenAPI 3.2.0 compatibility (#949)
  • 56b8971 Bumped v9.8.2
  • c1218bc fix(openapi): support null types and type arrays in OpenAPI 3.0 documents
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​fastify/swagger since your current version.


Updates @fastify/swagger-ui from 6.1.1 to 6.1.2

Release notes

Sourced from @​fastify/swagger-ui's releases.

v6.1.2

What's Changed

New Contributors

Full Changelog: fastify/fastify-swagger-ui@v6.1.1...v6.1.2

Commits
  • 1e67864 Bumped v6.1.2
  • ed92262 fix: run prepare in release:build script
  • a02606a chore: update package.json (#296)
  • caa809d ci: enable trusted publishing releases (#294)
  • 1c82bef Add security note about apiKey in README (#293)
  • 7843639 chore: bump @​apidevtools/swagger-parser from 12.1.0 to 13.0.0 (

…9 updates

---
updated-dependencies:
- dependency-name: "@fastify/cookie"
  dependency-version: 11.1.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-deps
- dependency-name: "@fastify/cors"
  dependency-version: 11.3.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-deps
- dependency-name: "@fastify/helmet"
  dependency-version: 13.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-deps
- dependency-name: "@fastify/jwt"
  dependency-version: 10.2.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-deps
- dependency-name: "@fastify/rate-limit"
  dependency-version: 11.2.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-deps
- dependency-name: "@fastify/sensible"
  dependency-version: 6.0.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-deps
- dependency-name: "@fastify/static"
  dependency-version: 10.1.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-deps
- dependency-name: "@fastify/swagger"
  dependency-version: 9.9.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-deps
- dependency-name: "@fastify/swagger-ui"
  dependency-version: 6.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-deps
- dependency-name: "@fastify/websocket"
  dependency-version: 11.3.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-deps
- dependency-name: dotenv
  dependency-version: 18.0.7
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-deps
- dependency-name: fastify
  dependency-version: 5.12.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-deps
- dependency-name: fastify-plugin
  dependency-version: 6.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-deps
- dependency-name: otpauth
  dependency-version: 9.5.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-deps
- dependency-name: pino
  dependency-version: 10.4.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-deps
- dependency-name: undici
  dependency-version: 8.11.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-deps
- dependency-name: yaml
  dependency-version: 2.9.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-deps
- dependency-name: zod
  dependency-version: 4.6.6
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-deps
- dependency-name: "@codemirror/commands"
  dependency-version: 6.11.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-deps
- dependency-name: "@codemirror/language"
  dependency-version: 6.13.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-deps
- dependency-name: "@codemirror/state"
  dependency-version: 6.7.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-deps
- dependency-name: "@codemirror/view"
  dependency-version: 6.43.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-deps
- dependency-name: "@lezer/highlight"
  dependency-version: 1.2.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-deps
- dependency-name: "@uiw/react-codemirror"
  dependency-version: 4.25.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-deps
- dependency-name: "@xyflow/react"
  dependency-version: 12.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-deps
- dependency-name: next
  dependency-version: 16.4.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-deps
- dependency-name: react
  dependency-version: 19.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-deps
- dependency-name: react-dom
  dependency-version: 19.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-deps
- dependency-name: tailwind-merge
  dependency-version: 3.7.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 15, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants