[dependabot]

Bumps the production-minor-patch group with 2 updates: @fastify/cookie and @fastify/jwt.

Updates @fastify/cookie from 11.1.3 to 11.1.5

Release notes

Sourced from @​fastify/cookie's releases.

v11.1.5

What's Changed

• refactor: pass only encode option to cookie serializer, add tests by @​ezefernandezyf in fastify/fastify-cookie#377

New Contributors

• @​ezefernandezyf made their first contribution in fastify/fastify-cookie#377

Full Changelog: fastify/fastify-cookie@v11.1.4...v11.1.5

v11.1.4

What's Changed

• perf(signer): early exit on missing delimiter in unsign to avoid redundant HMAC calculations by @​TalhaHunter101 in fastify/fastify-cookie#379
• fix: forward encode option to cookie serializer by @​lprnmns in fastify/fastify-cookie#374

New Contributors

• @​TalhaHunter101 made their first contribution in fastify/fastify-cookie#379
• @​lprnmns made their first contribution in fastify/fastify-cookie#374

Full Changelog: fastify/fastify-cookie@v11.1.3...v11.1.4

Commits

• a96460b Bumped v11.1.5
• 7f9551e fix: forward custom encode option to cookie serializer (#377)
• 4f47cf1 Bumped v11.1.4
• c07e472 fix: forward encode option to cookie serializer (#374)
• d27beb4 perf(signer): add early delimiter check in unsign to avoid redundant HMAC com...
• See full diff in compare view

Updates @fastify/jwt from 10.2.5 to 10.2.6

Release notes

Sourced from @​fastify/jwt's releases.

v10.2.6

What's Changed

• fix(types): trusted must return a boolean by @​mcollina in fastify/fastify-jwt#433

Note for TypeScript users

The trusted option is now typed as (request, decodedToken) => boolean | Promise<boolean>. Its return value has never been used as request.user (since #278), so if you were returning an object, return a boolean instead (e.g. Boolean(record)) and use formatUser to shape the claims exposed on request.user. No runtime change.

Full Changelog: fastify/fastify-jwt@v10.2.5...v10.2.6

Commits

• 71eec13 Bumped v10.2.6
• eaf80e4 fix(types): trusted must return a boolean
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions