[dependabot]

Bumps the minor-and-patch group with 2 updates in the / directory: @types/node and astro.
Bumps the minor-and-patch group with 4 updates in the /frameworks/node/express directory: @types/node, express, @types/multer and supertest.
Bumps the minor-and-patch group with 14 updates in the /frameworks/node/fastify directory:

Package	From	To
@types/node	26.6.2	26.6.5
@types/node	26.6.2	26.6.5
@fastify/aws-lambda	6.4.1	6.4.2
@fastify/compress	9.2.0	9.2.1
@fastify/cors	11.3.0	11.3.1
@fastify/etag	6.2.0	6.2.1
@fastify/formbody	9.0.0	9.0.1
@fastify/multipart	10.1.2	10.1.3
@fastify/sensible	6.0.5	6.0.7
@fastify/sse	0.6.0	0.6.1
@fastify/static	10.1.4	10.1.6
@fastify/view	12.0.0	12.0.1
fast-json-stringify	7.0.1	7.1.0
@fastify/swagger	9.9.0	9.9.2
@microsoft/kiota	1.35.0	1.36.0
@types/node	26.6.2	26.6.5
@types/node	26.6.2	26.6.5
@types/node	26.6.2	26.6.5
@types/node	26.6.2	26.6.5
@fastify/compress	9.2.0	9.2.1
@fastify/etag	6.2.0	6.2.1
@fastify/multipart	10.1.2	10.1.3
@fastify/static	10.1.4	10.1.6
@fastify/view	12.0.0	12.0.1
@microsoft/kiota	1.35.0	1.36.0
@types/node	26.6.2	26.6.5
@types/node	26.6.2	26.6.5
@types/node	26.6.2	26.6.5

Bumps the minor-and-patch group with 2 updates in the /frameworks/node/h3 directory: @types/node and h3.
Bumps the minor-and-patch group with 3 updates in the /frameworks/node/hono directory: @types/node, @hono/node-server and hono.
Bumps the minor-and-patch group with 3 updates in the /frameworks/node/koa directory: @types/node, @types/multer and supertest.
Bumps the minor-and-patch group with 16 updates in the /frameworks/node/nestjs directory:

Package	From	To
@types/node	26.6.2	26.6.5
@types/node	26.6.2	26.6.5
supertest	7.3.0	7.3.1
@fastify/compress	9.2.0	9.2.1
@fastify/etag	6.2.0	6.2.1
@fastify/multipart	10.1.2	10.1.3
@fastify/static	10.1.4	10.1.6
@fastify/view	12.0.0	12.0.1
@microsoft/kiota	1.35.0	1.36.0
@types/node	26.6.2	26.6.5
@types/node	26.6.2	26.6.5
@types/node	26.6.2	26.6.5
@types/node	26.6.2	26.6.5
supertest	7.3.0	7.3.1
@fastify/compress	9.2.0	9.2.1
@fastify/etag	6.2.0	6.2.1
@fastify/multipart	10.1.2	10.1.3
@fastify/static	10.1.4	10.1.6
@fastify/view	12.0.0	12.0.1
@nestjs/cache-manager	12.0.0	12.0.1
@nestjs/common	12.1.0	12.1.2
@nestjs/core	12.1.0	12.1.2
@nestjs/platform-express	12.1.0	12.1.2
@nestjs/platform-fastify	12.1.0	12.1.2
handlebars	4.7.9	4.7.10
@microsoft/kiota	1.35.0	1.36.0
@nestjs/cli	12.0.7	12.0.8
@types/node	26.6.2	26.6.5
supertest	7.3.0	7.3.1
vitest	5.0.2	5.0.3
@types/node	26.6.2	26.6.5
@types/node	26.6.2	26.6.5

Bumps the minor-and-patch group with 1 update in the /frameworks/python/fastapi/Client directory: @types/node.
Bumps the minor-and-patch group with 1 update in the /frameworks/python/litestar/Client directory: @types/node.

Updates @types/node from 26.6.2 to 26.6.5

Commits

• See full diff in compare view

Updates astro from 7.3.5 to 7.3.8

Release notes

Sourced from astro's releases.

astro@7.3.8

Patch Changes

• #18293 28e7410 Thanks @​astro-factory! - Fixes Astro.cache being undefined when a custom 404 or 500 page is rendered by the error handler, for example after a request to an API route with an HTTP method the route doesn't export

• #18298 0e9e857 Thanks @​matthewp! - Fixes astro add removing existing allowBuilds approvals from pnpm-workspace.yaml with pnpm v11.0–v11.22

• #18263 882dd98 Thanks @​florian-lefebvre! - Refactors internal bundling and code transforms to use Vite's Oxc-based transformWithOxc and Rolldown instead of esbuild. These packages no longer depend on esbuild directly.

• #18290 31f13c3 Thanks @​astro-factory! - Fixes the glob() loader not reloading changed files in dev when the pattern starts with an extglob such as !(drafts)/**/*.md

astro@7.3.7

Patch Changes

• #18266 cba76cc Thanks @​astro-factory! - Fixes a build error when a Markdown content collection entry loaded with glob({ deferRender: true }) has a layout frontmatter property. layout is now ignored for content collection entries, as documented.

• #18287 38f6793 Thanks @​astro-factory! - Fixes astro add cloudflare failing to install dependencies with pnpm v11+ by approving the workerd build script, and shows the package manager's error output when astro add fails to install dependencies

• #18222 fcf6ed6 Thanks @​mingjunlu! - Fixes an issue where AVIF images were served as image/heif instead of image/avif in the dev server.

• #18240 de4df06 Thanks @​astro-factory! - Fixes the cache() handler from astro/hono and astro/fetch throwing a TypeError when a cache provider is configured. It now registers the cache provider before rendering, so Astro.cache is available to downstream handlers like pages().

• #18268 547b572 Thanks @​astro-factory! - Fixes security.checkOrigin rejecting cross-origin requests with non-form content types such as application/json. As documented, the check only applies to unsafe requests that have no content-type header or one of application/x-www-form-urlencoded, multipart/form-data, or text/plain.

astro@7.3.6

Patch Changes

• #18166 5134d0f Thanks @​astro-factory! - Fixes an intermittent dev server crash when using astro:actions inside a server island with adapters that use a pre-bundled SSR environment (e.g. @astrojs/cloudflare)

• #18076 8a2df66 Thanks @​astro-factory! - Fixes stale scoped styles during HMR when both markup and <style> are changed in a single save

• #18252 2d29e7e Thanks @​astro-factory! - Fixes CSS from other pages leaking into a page's <head> in dev when the page imports a module such as astro:config/server.

• #18000 6724575 Thanks @​barclayd! - Fixes a bug where server islands containing framework components rendered empty in the dev server when using a custom src/fetch.ts

• #18241 7c5fd6f Thanks @​astro-factory! - Fixes the composable i18n() handler from astro/fetch and astro/hono returning an empty 404 for paths without a locale prefix. It now renders the custom 404 page, matching astro().

• #18164 1a6997f Thanks @​astro-factory! - Fixes CSS Module HMR in dev when a component is rendered both with and without hydration on the same page. Astro now uses path-based class name hashing in dev mode so that editing CSS declarations no longer changes the generated selectors, allowing Vite's CSS HMR to update styles without a full page reload.

• #18243 dd29d62 Thanks @​astro-factory! - Fixes context.props being null in middleware and endpoints when the composable astro/hono or astro/fetch actions() handler runs before middleware(), or when pages() runs without middleware()

• #18193 95d5d16 Thanks @​astro-factory! - Fixes astro build failing on Windows with Node.js 25+ with ERR_INVALID_ARG_VALUE when clearing the output directory hits a transient EPERM error

• #18220 d6c13a4 Thanks @​astro-factory! - Fixes type errors reported in Astro's built-in <Picture /> and <Font /> components when type-checking a project with tsc and @astrojs/ts-content-mapper

• #18133 faac481 Thanks @​astro-factory! - Fixes lost request state when Vite discovers server dependencies during a request in Cloudflare dev mode

• #18146 2af4516 Thanks @​astro-factory! - Fixes CSS imported from an injectScript('page') script being dropped during build

• #18159 e5f8fe0 Thanks @​astro-factory! - Fixes a hang when a server:defer component is inside a slot of another component in an MDX content collection entry

... (truncated)

Changelog

Sourced from astro's changelog.

7.3.8

Patch Changes

• #18293 28e7410 Thanks @​astro-factory! - Fixes Astro.cache being undefined when a custom 404 or 500 page is rendered by the error handler, for example after a request to an API route with an HTTP method the route doesn't export

• #18298 0e9e857 Thanks @​matthewp! - Fixes astro add removing existing allowBuilds approvals from pnpm-workspace.yaml with pnpm v11.0–v11.22

• #18263 882dd98 Thanks @​florian-lefebvre! - Refactors internal bundling and code transforms to use Vite's Oxc-based transformWithOxc and Rolldown instead of esbuild. These packages no longer depend on esbuild directly.

• #18290 31f13c3 Thanks @​astro-factory! - Fixes the glob() loader not reloading changed files in dev when the pattern starts with an extglob such as !(drafts)/**/*.md

7.3.7

Patch Changes

• #18266 cba76cc Thanks @​astro-factory! - Fixes a build error when a Markdown content collection entry loaded with glob({ deferRender: true }) has a layout frontmatter property. layout is now ignored for content collection entries, as documented.

• #18287 38f6793 Thanks @​astro-factory! - Fixes astro add cloudflare failing to install dependencies with pnpm v11+ by approving the workerd build script, and shows the package manager's error output when astro add fails to install dependencies

• #18222 fcf6ed6 Thanks @​mingjunlu! - Fixes an issue where AVIF images were served as image/heif instead of image/avif in the dev server.

• #18240 de4df06 Thanks @​astro-factory! - Fixes the cache() handler from astro/hono and astro/fetch throwing a TypeError when a cache provider is configured. It now registers the cache provider before rendering, so Astro.cache is available to downstream handlers like pages().

• #18268 547b572 Thanks @​astro-factory! - Fixes security.checkOrigin rejecting cross-origin requests with non-form content types such as application/json. As documented, the check only applies to unsafe requests that have no content-type header or one of application/x-www-form-urlencoded, multipart/form-data, or text/plain.

7.3.6

Patch Changes

• #18166 5134d0f Thanks @​astro-factory! - Fixes an intermittent dev server crash when using astro:actions inside a server island with adapters that use a pre-bundled SSR environment (e.g. @astrojs/cloudflare)

• #18076 8a2df66 Thanks @​astro-factory! - Fixes stale scoped styles during HMR when both markup and <style> are changed in a single save

• #18252 2d29e7e Thanks @​astro-factory! - Fixes CSS from other pages leaking into a page's <head> in dev when the page imports a module such as astro:config/server.

• #18000 6724575 Thanks @​barclayd! - Fixes a bug where server islands containing framework components rendered empty in the dev server when using a custom src/fetch.ts

• #18241 7c5fd6f Thanks @​astro-factory! - Fixes the composable i18n() handler from astro/fetch and astro/hono returning an empty 404 for paths without a locale prefix. It now renders the custom 404 page, matching astro().

• #18164 1a6997f Thanks @​astro-factory! - Fixes CSS Module HMR in dev when a component is rendered both with and without hydration on the same page. Astro now uses path-based class name hashing in dev mode so that editing CSS declarations no longer changes the generated selectors, allowing Vite's CSS HMR to update styles without a full page reload.

• #18243 dd29d62 Thanks @​astro-factory! - Fixes context.props being null in middleware and endpoints when the composable astro/hono or astro/fetch actions() handler runs before middleware(), or when pages() runs without middleware()

• #18193 95d5d16 Thanks @​astro-factory! - Fixes astro build failing on Windows with Node.js 25+ with ERR_INVALID_ARG_VALUE when clearing the output directory hits a transient EPERM error

• #18220 d6c13a4 Thanks @​astro-factory! - Fixes type errors reported in Astro's built-in <Picture /> and <Font /> components when type-checking a project with tsc and @astrojs/ts-content-mapper

• #18133 faac481 Thanks @​astro-factory! - Fixes lost request state when Vite discovers server dependencies during a request in Cloudflare dev mode

... (truncated)

Commits

• 3571e2d [ci] release (#18292)
• 0e9e857 Keep existing pnpm allowBuilds approvals in astro add (#18298)
• 882dd98 Replace esbuild with Vite and Rolldown APIs (#18263)
• 28e7410 fix(astro): provide Astro.cache when rendering error pages (#18293)
• 31f13c3 Fix glob() loader watcher ignoring patterns starting with an extglob like `!(...
• 25c19fa [ci] release (#18272)
• 38f6793 fix(astro): approve workerd builds in astro add cloudflare for pnpm v11+ an...
• 547b572 Restore content-type gate in security.checkOrigin so JSON requests are not bl...
• fcf6ed6 fix(assets): return requested format from Sharp transform (#18222)
• bec7d18 Ignore layout frontmatter in Markdown content collection entries with `defe...
• Additional commits viewable in compare view

Updates @types/node from 26.6.2 to 26.6.5

Commits

• See full diff in compare view

Updates @types/node from 26.6.2 to 26.6.5

Commits

• See full diff in compare view

Updates @types/node from 26.6.2 to 26.6.5

Commits

• See full diff in compare view

Updates @types/node from 26.6.2 to 26.6.5

Commits

• See full diff in compare view

Updates @types/node from 26.6.2 to 26.6.5

Commits

• See full diff in compare view

Updates @types/node from 26.6.2 to 26.6.5

Commits

• See full diff in compare view

Updates @types/node from 26.6.2 to 26.6.5

Commits

• See full diff in compare view

Updates @types/node from 26.6.2 to 26.6.5

Commits

• See full diff in compare view

Updates @types/node from 26.6.2 to 26.6.5

Commits

• See full diff in compare view

Updates express from 5.2.1 to 5.3.0

Release notes

Sourced from express's releases.

v5.3.0

Highlights

🐞 Bug fixes

• Fixed HTTP header conflict between Content-Length and Transfer-Encoding in res.send - by @​YuryShkoda in #4893

  Fixed the behavior of res.send() to prevent conflicts between Content-Length and Transfer-Encoding HTTP headers in responses. The Content-Length header in res.send() is now only added when a Transfer-Encoding header is not present, complying with the HTTP specification that states both headers should not coexist in the same response. ETag generation is unaffected by the presence of a Transfer-Encoding header - by @​cuishuang in #7459

• Upgrade qs to ^6.16.0, which fixes CVE-2026-2391 (GHSA-w7fw-mjwx-w883), CVE-2026-82417 (GHSA-4mjr-xmp4-gh2g) and CVE-2026-82562 (GHSA-x5fp-wj9c-mxmx): arrayLimit bypasses in comma parsing and a denial of service via an attacker-controlled isBuffer - by @​davetashner in #7057 and #7478, and @​cyphercodes in #7305

• Upgrade proxy-addr to ^2.0.8, which fixes CVE-2026-90711 - by @​lazerg in #7474

🚀 Improvements

• Allow conditional revalidation for QUERY requests. req.fresh previously only validated freshness for GET and HEAD requests, so QUERY responses never returned 304 despite a matching validator. Since QUERY is a safe, idempotent, and cacheable method that supports conditional requests, it is now included in the freshness check - by @​Cherry in #7366

  // QUERY /reports with If-None-Match: "12345"
  app.query('/reports', (req, res) => {
    res.set('ETag', '"12345"');
    res.send(results); // now responds 304 Not Modified
  });

• Improve HTML structure in res.redirect() responses when HTML format is accepted by adding <!DOCTYPE html>, <title>, and <body> tags for better browser compatibility - by @​Bernice55231 in #5167

• When calling app.render with options set to null, the locals object is handled correctly, preventing unexpected errors and making the method behave the same as when options is omitted or an empty object is passed - by AkaHarshit in #6903

  app.render('index', null, callback); // now works as expected

• Upgrade content-type to ^2.0.0, bringing a faster parser (~1.5x quicker Content-Type parsing/formatting in res.send()) along with a behavior change: res.send() now keeps any existing parameters when adding the charset and no longer throws on a Content-Type that fails to parse. type-is is upgraded to ^2.1.0 as part of the same change - by @​blakeembrey in #7234

  res.set('Content-Type', 'text/plain; foo=bar').send('hey');
  // -> Content-Type: text/plain; foo=bar; charset=utf-8

• The default error handler now logs the full error object instead of only its stack trace, so nested details such as Error.cause and library-specific properties (e.g. Sequelize's parent/original) are no longer swallowed - by @​Nitin-Mohapatra in #6464

• Upgrade content-disposition to ^2.0.1, which changes the Content-Disposition header emitted by res.download(), res.attachment(), and res.sendFile(): file names that are valid HTTP tokens are no longer wrapped in quotes. This is equivalent per RFC 6266, but applications asserting on the exact header bytes should update their expectations - by @​blakeembrey in #7233

  res.attachment('user.html');
  // before -> Content-Disposition: attachment; filename="user.html"
  // after  -> Content-Disposition: attachment; filename=user.html

... (truncated)

Changelog

Sourced from express's changelog.

5.3.0

🐞 Bug fixes

• Fixed HTTP header conflict between Content-Length and Transfer-Encoding in res.send - by @​YuryShkoda in #4893

  Fixed the behavior of res.send() to prevent conflicts between Content-Length and Transfer-Encoding HTTP headers in responses. The Content-Length header in res.send() is now only added when a Transfer-Encoding header is not present, complying with the HTTP specification that states both headers should not coexist in the same response. ETag generation is unaffected by the presence of a Transfer-Encoding header - by @​cuishuang in #7459

• Upgrade qs to ^6.16.0, which fixes CVE-2026-2391 (GHSA-w7fw-mjwx-w883), CVE-2026-82417 (GHSA-4mjr-xmp4-gh2g) and CVE-2026-82562 (GHSA-x5fp-wj9c-mxmx): arrayLimit bypasses in comma parsing and a denial of service via an attacker-controlled isBuffer - by @​davetashner in #7057 and #7478, and @​cyphercodes in #7305

• Upgrade proxy-addr to ^2.0.8, which fixes CVE-2026-90711 - by @​lazerg in #7474

🚀 Improvements

• Allow conditional revalidation for QUERY requests. req.fresh previously only validated freshness for GET and HEAD requests, so QUERY responses never returned 304 despite a matching validator. Since QUERY is a safe, idempotent, and cacheable method that supports conditional requests, it is now included in the freshness check - by @​Cherry in #7366

  // QUERY /reports with If-None-Match: "12345"
  app.query('/reports', (req, res) => {
    res.set('ETag', '"12345"');
    res.send(results); // now responds 304 Not Modified
  });

• Improve HTML structure in res.redirect() responses when HTML format is accepted by adding <!DOCTYPE html>, <title>, and <body> tags for better browser compatibility - by @​Bernice55231 in #5167

• When calling app.render with options set to null, the locals object is handled correctly, preventing unexpected errors and making the method behave the same as when options is omitted or an empty object is passed - by AkaHarshit in #6903

  app.render('index', null, callback); // now works as expected

• Upgrade content-type to ^2.0.0, bringing a faster parser (~1.5x quicker Content-Type parsing/formatting in res.send()) along with a behavior change: res.send() now keeps any existing parameters when adding the charset and no longer throws on a Content-Type that fails to parse. type-is is upgraded to ^2.1.0 as part of the same change - by @​blakeembrey in #7234

  res.set('Content-Type', 'text/plain; foo=bar').send('hey');
  // -> Content-Type: text/plain; foo=bar; charset=utf-8

• The default error handler now logs the full error object instead of only its stack trace, so nested details such as Error.cause and library-specific properties (e.g. Sequelize's parent/original) are no longer swallowed - by @​Nitin-Mohapatra in #6464

• Upgrade content-disposition to ^2.0.1, which changes the Content-Disposition header emitted by res.download(), res.attachment(), and res.sendFile(): file names that are valid HTTP tokens are no longer wrapped in quotes. This is equivalent per RFC 6266, but applications asserting on the exact header bytes should update their expectations - by @​blakeembrey in #7233

  res.attachment('user.html');
  // before -> Content-Disposition: attachment; filename="user.html"
  // after  -> Content-Disposition: attachment; filename=user.html

... (truncated)

Commits

• cf6722b 5.3.0 (#7468)
• 8c2fcfc docs: fix typos and a stale API reference in lib comments (#7512)
• 9efc29e docs: fix pass-through typos (#7509)
• 2717ae3 build(deps): bump the github-actions group with 3 updates (#7499)
• de77771 build(deps-dev): bump hbs from 4.3.0 to 4.3.1 (#7500)
• 9169cbe docs: add missing apostrophe in example (#7483)
• 7ef9844 build(deps-dev): bump morgan from 1.12.0 to 1.12.1 (#7493)
• 3b7e39f deps: bump qs minimum to 6.16.0 (#7478)
• 98bd4cd deps: proxy-addr@^2.0.8 (#7474)
• 9a34acf fix(res.send): preserve ETag generation with Transfer-Encoding (#7459)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for express since your current version.

Updates @types/multer from 2.2.0 to 2.3.0

Commits

• See full diff in compare view

Updates @types/node from 26.6.2 to 26.6.5

Commits

• See full diff in compare view

Updates supertest from 7.3.0 to 7.3.1

Release notes

Sourced from supertest's releases.

v7.3.1

• Merge pull request #907 from JH8459/fix/ephemeral-loopback-bind 884cd26
• fix: bind ephemeral server to the loopback address it connects to e74a1e0

---

forwardemail/supertest@v7.3.0...v7.3.1

Commits

• 3634bdd 7.3.1
• 884cd26 Merge pull request #907 from JH8459/fix/ephemeral-loopback-bind
• e74a1e0 fix: bind ephemeral server to the loopback address it connects to
• See full diff in compare view

Updates @types/node from 26.6.2 to 26.6.5

Commits

• See full diff in compare view

Updates @types/node from 26.6.2 to 26.6.5

Commits

• See full diff in compare view

Updates @types/node from 26.6.2 to 26.6.5

Commits

• See full diff in compare view

Updates @types/multer from 2.2.0 to 2.3.0

Commits

• See full diff in compare view

Updates @types/node from 26.6.2 to 26.6.5

Commits

• See full diff in compare view

Updates supertest from 7.3.0 to 7.3.1

Release notes

Sourced from supertest's releases.

v7.3.1

• Merge pull request #907 from JH8459/fix/ephemeral-loopback-bind 884cd26
• fix: bind ephemeral server to the loopback address it connects to e74a1e0

---

forwardemail/supertest@v7.3.0...v7.3.1

Commits

• 3634bdd 7.3.1
• 884cd26 Merge pull request #907 from JH8459/fix/ephemeral-loopback-bind
• e74a1e0 fix: bind ephemeral server to the loopback address it connects to
• See full diff in compare view

Updates @types/node from 26.6.2 to 26.6.5

Commits

• See full diff in compare view

Updates supertest from 7.3.0 to 7.3.1

Release notes

Sourced from supertest's releases.

v7.3.1

• Merge pull request #907 from JH8459/fix/ephemeral-loopback-bind 884cd26
• fix: bind ephemeral server to the loopback address it connects to e74a1e0

---

forwardemail/supertest@v7.3.0...v7.3.1

Commits

• 3634bdd 7.3.1
• 884cd26 Merge pull request #907 from JH8459/fix/ephemeral-loopback-bind
• e74a1e0 fix: bind ephemeral server to the loopback address it connects to
• See full diff in compare view

Updates @types/node from 26.6.2 to 26.6.5

Commits

• See full diff in compare view

Updates @types/node from 26.6.2 to 26.6.5

Commits

• See full diff in compare view

Updates @types/node from 26.6.2 to 26.6.5

Commits

• See full diff in compare view

Updates @types/node from 26.6.2 to 26.6.5

Commits

• See full diff in compare view

Updates @fastify/aws-lambda from 6.4.1 to 6.4.2

Release notes

Sourced from @​fastify/aws-lambda's releases.

v6.4.2

What's Changed

• chore: bump fastify/workflows/.github/workflows/lock-threads.yml from 6.0.0 to 7.0.0 by @​dependabot[bot] in fastify/aws-lambda-fastify#317
• chore: bump fastify/workflows/.github/workflows/plugins-ci.yml from 6.0.0 to 7.0.0 by @​dependabot[bot] in fastify/aws-lambda-fastify#318
• chore(.npmrc): add min-release-age by @​Fdawgs in fastify/aws-lambda-fastify#319
• ci: enable trusted publishing releases by @​Puppo in fastify/aws-lambda-fastify#320

Full Changelog: fastify/aws-lambda-fastify@v6.4.1...v6.4.2

Commits

• 8297e16 Bumped v6.4.2
• 4b8d3c7 ci: enable trusted publishing releases (#320)
• 402c265 chore(.npmrc): add min-release-age (#319)
• 2feac86 chore: bump fastify/workflows/.github/workflows/plugins-ci.yml (#318)
• 5a88018 chore: bump fastify/workflows/.github/workflows/lock-threads.yml (#317)
• See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​fastify/aws-lambda since your current version.

Updates @fastify/compress from 9.2.0 to 9.2.1

Release notes

Sourced from @​fastify/compress's releases.

v9.2.1

What's Changed

• docs(readme): complete Past sponsors: label in Acknowledgments section by @​Tony133 in fastify/fastify-compress#424
• test: exclude benchmarks from coverage by @​Puppo in fastify/fastify-compress#426
• build(deps): replace readable-stream and minipass with node:stream by @​Fdawgs in fastify/fastify-compress#430
• ci: enable trusted publishing releases by @​Puppo in fastify/fastify-compress#433

New Contributors

• @​Puppo made their first contribution in fastify/fastify-compress#426

Full Changelog: fastify/fastify-compress@v9.2.0...v9.2.1

Commits

• 80a587d Bumped v9.2.1
• 1e679a4 ci: enable trusted publishing releases
• 98584bc build(deps): replace readable-stream and minipass with node:stream (#430)
• edaaed6 test: exclude benchmarks from coverage
• 10ddcea docs(readme): complete Past sponsors: label in Acknowledgments section (#424)
• See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​fastify/compress since your current version.

Updates @fastify/cors from 11.3.0 to 11.3.1

Release notes

Sourced from @​fastify/cors's releases.

v11.3.1

What's Changed

• ci: pin actions to commit-hash by @​Fdawgs in fastify/fastify-cors#413
• chore: bump c8 from 11.0.0 to 12.0.0 by @​dependabot[bot] in fastify/fastify-cors#414
• chore: bump typescript from 6.0.3 to 7.0.2 in the dev-dependencies-typescript group across 1 directory by @​dependabot[bot] in fastify/fastify-cors#412
• chore: return to typescript v6.x by @​Tony133 in fastify/fastify-cors#415
• chore(.npmrc): add min-release-age by @​Fdawgs in fastify/fastify-cors#416
• chore: bump fastify/workflows/.github/workflows/plugins-ci.yml from 6.0.0 to 7.0.0 by @​dependabot[bot] in fastify/fastify-cors#417
• chore: bump fastify/workflows/.github/workflows/lock-threads.yml from 6.0.0 to 7.0.0 by @​dependabot[bot] in fastify/fastify-cors#418
• ci: enable trusted publishing releases by @​Puppo in fastify/fastify-cors#421

New Contributors

• @​Puppo made their first contribution in fastify/fastify-cors#421

Full Changelog: https://github.com/fastify/fastify-cors/compare/v...

Description has been truncated

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.