Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Snyk] Upgrade fastify from 4.13.0 to 4.28.1 #74

Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

[Snyk] Upgrade fastify from 4.13.0 to 4.28.1 #74

wants to merge 1 commit into from

Conversation

gjovs
Copy link
Owner

@gjovs gjovs commented Oct 9, 2024

Snyk has created this PR to upgrade fastify from 4.13.0 to 4.28.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

  • The recommended version is 33 versions ahead of your current version.
  • The recommended version was released 3 months ago, on 2024-06-29.

The recommended version fixes:

Severity Issue PriorityScore (*) Exploit Maturity
Regular Expression Denial of Service (ReDoS)
SNYK-JS-SEMVER-3247795		 696/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5		 Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-FINDMYWAY-8055229		 696/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5		 No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes
Package name: fastify from fastify GitHub release notes
Commit messages
Package name: fastify
  • ee0ae68 fix: update .npmignore (#5538)
  • ca1987c test: fix test finished earlier than expected (#5540) (#5541)
  • ff88853 fix: server.listen listener is not cleanup properly (#5522) (#5523)
  • 4212551 Bumped v4.28.0
  • db01168 auxilliary hook handler type fix + test fix (#5518)
  • 1d7b955 refactor(backport v4.x): hasRoute method comparison with case insensitive (#5513)
  • 369858d [Backport 4.x] refactor: change `reply.redirect()` signature (#5483) (#5484)
  • d2d6d9a test: fix closing - pipelining (#5486)
  • fe25981 Bumped v4.27.0
  • 445e41a types: request route schema might be undefined (#5394)
  • b8cbd33 feat: handle synchronous errors in errorHandler (#5445)
  • bf64e47 feat: add mkcalendar and report methods (#5439)
  • 6dbe833 update readme (#5442)
  • f2835db feat: disable request logging (#5435)
  • 8d66924 docs(guides/abort): suggest explicit use of the `aborted` property (#5438)
  • bf5d447 docs: update indentation on snippet code (#5418)
  • 345c85e chore: Bump lycheeverse/lychee-action from 1.9.3 to 1.10.0 (#5436)
  • d643885 exclude node 14 and 16 on macos (#5433)
  • 31f391d chore: Bump pino from 8.21.0 to 9.0.0 in the dependencies-major group (#5431)
  • 20e3e35 `reply.getSerializationFunction` can return `undefined` (#5384)
  • fea36e3 chore(ecosystem): Add Fastify asyncforge plugin (#5429)
  • f9f0c9f chore: add new sponsor (#5424)
  • 6258d8a docs: improve onError docs by specifying what the error handler is (#5358)
  • 69dcea1 feat: adds webdav methods that require body & content type parsing (#5411)

Compare

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@gjovs @snyk-bot