Skip to content

Bump @fastify/static from 10.1.3 to 10.1.8 - #34

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/fastify/static-10.1.8
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/fastify/static-10.1.8

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 2, 2026 •

Copy link
Copy Markdown

Bumps @fastify/static from 10.1.3 to 10.1.8.

Release notes

Sourced from @​fastify/static's releases.

v10.1.8

What's Changed

Full Changelog: fastify/fastify-static@v10.1.7...v10.1.8

v10.1.7

What's Changed

Full Changelog: fastify/fastify-static@v10.1.6...v10.1.7

v10.1.6

What's Changed

Full Changelog: fastify/fastify-static@v10.1.5...v10.1.6

v10.1.5

What's Changed

New Contributors

Full Changelog: fastify/fastify-static@v10.1.4...v10.1.5

v10.1.4

This is a security release for GHSA-r799-r9gc-m956 (CVE-2026-90982).

It fixes a route guard and allowedPath bypass on case-insensitive filesystems. Users should upgrade to @fastify/static 10.1.4.

Full Changelog: fastify/fastify-static@v10.1.3...v10.1.4

Commits
  • 4e0e7e3 Bumped v10.1.8
  • b2974e0 chore: lower min-release-age to 6 days to unblock 10.1.8 release
  • 5b382cd docs: document the dotfiles option and its default
  • 71e2519 Merge commit from fork
  • da31a7d Bumped v10.1.7
  • 9005604 fix: serve and list files with # or ? in their names (#616)
  • b38a463 Bumped v10.1.6
  • a57db88 ci: enable trusted publishing releases
  • 2f0953a Bumped v10.1.5
  • 275d87e fix: use registered root for relative downloads (#610)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​fastify/static since your current version.


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [@fastify/static](https://github.com/fastify/fastify-static) from 10.1.3 to 10.1.8.
- [Release notes](https://github.com/fastify/fastify-static/releases)
- [Commits](fastify/fastify-static@v10.1.3...v10.1.8)

---
updated-dependencies:
- dependency-name: "@fastify/static"
  dependency-version: 10.1.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Nov 2, 2026
@dependabot @github

dependabot Bot commented on behalf of github Nov 5, 2026

Copy link
Copy Markdown
Author

Looks like @fastify/static is up-to-date now, so this is no longer needed.

@dependabot dependabot Bot closed this Nov 5, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/fastify/static-10.1.8 branch November 5, 2026 04:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants