chore: bump the npm-all group with 6 updates by dependabot[bot] · Pull Request #8 · hexlet-components/fastify-rest-api

dependabot · 2026-10-01T00:46:32Z

Bumps the npm-all group with 6 updates:

Package	From	To
@fastify/sensible	`6.0.5`	`6.0.6`
fastify	`5.12.1`	`5.12.5`
fastify-cli	`8.0.0`	`8.0.2`
oxfmt	`0.65.0`	`0.70.0`
oxlint	`1.80.0`	`1.85.0`
vitest	`4.1.11`	`5.0.2`

Updates @fastify/sensible from 6.0.5 to 6.0.6

Release notes

Sourced from @fastify/sensible's releases.

v6.0.6

What's Changed

fix(request): support variadic request.is types by @lprnmns in fastify/fastify-sensible#235

New Contributors

@lprnmns made their first contribution in fastify/fastify-sensible#235

Full Changelog: fastify/fastify-sensible@v6.0.5...v6.0.6

Commits

d313b33 Bumped v6.0.6
233a70d fix(request): support variadic request.is types (#235)
See full diff in compare view

Maintainer changes

This version was pushed to npm by tony133, a new releaser for @fastify/sensible since your current version.

Updates fastify from 5.12.1 to 5.12.5

Release notes

Sourced from fastify's releases.

v5.12.5

⚠️ Security release

Fix for GHSA-4mh8-r7rc-xpvc

What's Changed

[Backport 5.x] perf: reduce content-type parser overhead by @github-actions[bot] in fastify/fastify#7019

[Backport 5.x] perf: avoid redundant request-part reads during validation by @github-actions[bot] in fastify/fastify#7020

Full Changelog: fastify/fastify@v5.12.4...v5.12.5

v5.12.4

Fixed the fastify.js version mismatch.

Full Changelog: fastify/fastify@v5.12.2...v5.12.4

v5.12.2

⚠️ Security release

Fix for GHSA-9q9j-q6p8-xq58

Fix for GHSA-hwr6-493r-vm6h

Fix for GHSA-p68q-wchp-6fh7

Fix for GHSA-667r-xxjv-c9mm

What's Changed

[Backport 5.x] fix: callNotFound should run not-found preHandler regardless of registration order by @github-actions[bot] in fastify/fastify#6973

[Backport 5.x] chore: npm ignore remaining agent files by @github-actions[bot] in fastify/fastify#7003

Full Changelog: fastify/fastify@v5.12.1...v5.12.2

Commits

ba235fd Bumped v5.12.5
ad06a4c Merge commit from fork
7af0d77 [Backport 5.x] perf: avoid redundant request-part reads during validation (#7...
990ebef [Backport 5.x] perf: reduce content-type parser overhead (#7019)
1690e35 Bumped v5.12.4
1c991c4 Bumped v5.12.3
942a2be Bumped v5.12.2
853f6e2 test(validation): cover normalization and async branches
f02d8d4 fix(validation): do not unwrap async validator results
93c239a fix: reject malformed URLs before custom 404 handlers
Additional commits viewable in compare view

Updates fastify-cli from 8.0.0 to 8.0.2

Release notes

Sourced from fastify-cli's releases.

v8.0.2

What's Changed

fix: restore yargs-parser compatible argument parsing by @Tony133 in fastify/fastify-cli#913

fix: make the test runner execute the full suite by @mcollina in fastify/fastify-cli#917

Full Changelog: fastify/fastify-cli@v8.0.1...v8.0.2

v8.0.1

What's Changed

chore(deps): bump fastify/workflows/.github/workflows/plugins-ci.yml from 5 to 6 by @dependabot[bot] in fastify/fastify-cli#874

chore(deps-dev): bump typescript from 5.9.3 to 6.0.2 by @dependabot[bot] in fastify/fastify-cli#875

chore(deps-dev): bump neostandard from 0.12.2 to 0.13.0 by @dependabot[bot] in fastify/fastify-cli#877

ci: add lock-threads workflow by @Fdawgs in fastify/fastify-cli#879

chore(.gitattributes): retain binary file eol style by @Fdawgs in fastify/fastify-cli#882

refactor(types): migrate from tsd to tstyche by @Tony133 in fastify/fastify-cli#886

Replace yargs-parser with Node.js built-in util.parseArgs by @mcollina in fastify/fastify-cli#887

docs: document --follow-watch, --ignore-watch, and --verbose-watch flags by @Ankurjain1121 in fastify/fastify-cli#880

Correctly use watcher and dev and remove redundant dev:start when using experimental-strip-types by @segevfiner in fastify/fastify-cli#881

chore: update example ESM-plugin-with-custom-server-options.js by @Tony133 in fastify/fastify-cli#872

chore(deps-dev): bump sinon from 21.1.2 to 22.0.0 by @dependabot[bot] in fastify/fastify-cli#888

chore(deps-dev): bump concurrently from 9.2.1 to 10.0.1 by @dependabot[bot] in fastify/fastify-cli#890

chore: update depedabot setting by @climba03003 in fastify/fastify-cli#891

chore: bump the dependencies group with 3 updates by @dependabot[bot] in fastify/fastify-cli#896

docs: add .nyc_output to the default --ignore-watch list by @NickitaChe in fastify/fastify-cli#894

chore: replace http with https in urls by @Fdawgs in fastify/fastify-cli#898

chore(package.json): fix delvedor's personal url by @Fdawgs in fastify/fastify-cli#897

chore: bump @types/node from 25.9.4 to 26.0.0 in the dev-dependencies-typescript group by @dependabot[bot] in fastify/fastify-cli#899

ci: pin actions to commit-hash by @Fdawgs in fastify/fastify-cli#900

chore: bump c8 from 11.0.0 to 12.0.0 by @dependabot[bot] in fastify/fastify-cli#903

ci: update dependabot.yml by @Tony133 in fastify/fastify-cli#904

chore(.npmrc): add min-release-age by @Fdawgs in fastify/fastify-cli#905

chore: bump fastify/workflows/.github/workflows/plugins-ci.yml from 6.0.0 to 7.0.0 by @dependabot[bot] in fastify/fastify-cli#906

chore: bump fastify/workflows/.github/workflows/lock-threads.yml from 6.0.0 to 7.0.0 by @dependabot[bot] in fastify/fastify-cli#907

chore: bump chalk from 4.1.2 to 6.0.0 in the dependencies group by @dependabot[bot] in fastify/fastify-cli#908

Fix command-specific --help handling by @TibJnt in fastify/fastify-cli#892

fix: clean dist/ before build:ts in TypeScript template by @winnrz in fastify/fastify-cli#883

New Contributors

@Ankurjain1121 made their first contribution in fastify/fastify-cli#880

@climba03003 made their first contribution in fastify/fastify-cli#891

@NickitaChe made their first contribution in fastify/fastify-cli#894

@TibJnt made their first contribution in fastify/fastify-cli#892

@winnrz made their first contribution in fastify/fastify-cli#883

Full Changelog: fastify/fastify-cli@v8.0.0...v8.0.1

Commits

52e6842 Bumped 8.0.2
83bcdd2 fix: restore test execution and CLI compatibility
a81a231 fix: restore yargs-parser compatible argument parsing (#913)
a710b45 Bumped v8.0.1
6e2f434 ignore AI files
816a40a Merge commit from fork
1c63433 fix: clean dist/ before build:ts in TypeScript template (#883)
44db164 Fix command-specific --help handling (#892)
ea960d3 chore: bump chalk from 4.1.2 to 6.0.0 in the dependencies group (#908)
e70186b chore: bump fastify/workflows/.github/workflows/lock-threads.yml (#907)
Additional commits viewable in compare view

Updates oxfmt from 0.65.0 to 0.70.0

Release notes

Sourced from oxfmt's releases.

oxfmt v0.70.0

🚀 Features

415b742 oxlint,oxfmt: Do not discover nested config in Vite+ mode (#26763) (leaysgur)

Commits

288d8cc release(apps): oxlint v1.85.0 && oxfmt v0.70.0 (#26903)
f02a64a release(apps): oxlint v1.84.0 && oxfmt v0.69.0 (#26874)
7bf68f7 release(apps): oxlint v1.83.0 && oxfmt v0.68.0 (#26631)
b4da00b release(apps): oxlint v1.82.0 && oxfmt v0.67.0 (#26384)
9a612d5 chore(deps): update npm packages (#26178)
0b4e2e6 release(apps): oxlint v1.81.0 && oxfmt v0.66.0 (#26199)
5ff57f8 fix(formatter/sort-imports): handle custom side effect groups (#26217)
63bc313 chore(npm): update funding URL (#26066)
See full diff in compare view

Updates oxlint from 1.80.0 to 1.85.0

Release notes

Sourced from oxlint's releases.

oxlint v1.85.0

🚀 Features

415b742 oxlint,oxfmt: Do not discover nested config in Vite+ mode (#26763) (leaysgur)

Commits

288d8cc release(apps): oxlint v1.85.0 && oxfmt v0.70.0 (#26903)
f02a64a release(apps): oxlint v1.84.0 && oxfmt v0.69.0 (#26874)
7bf68f7 release(apps): oxlint v1.83.0 && oxfmt v0.68.0 (#26631)
b4da00b release(apps): oxlint v1.82.0 && oxfmt v0.67.0 (#26384)
aa38ddf fix(linter/unicorn/numeric-separators-style): correct schema defaults (#26393)
6a0e19c feat(linter/eslint/no-unmodified-loop-condition): support `checkConditionalEx...
0b4e2e6 release(apps): oxlint v1.81.0 && oxfmt v0.66.0 (#26199)
d5be037 docs(linter/typescript/switch-exhaustiveness-check): clarify default case com...
63bc313 chore(npm): update funding URL (#26066)
See full diff in compare view

Updates vitest from 4.1.11 to 5.0.2

Release notes

Sourced from vitest's releases.

v5.0.2

   🐞 Bug Fixes

Bind process in case global is overwritten - by @AriPerkkio in vitest-dev/vitest#11343 (0b792)

detect-async-leaks:

Ignore process.stdio handles - by @AriPerkkio in vitest-dev/vitest#11333 (0fd6b)

expect:

Fix toMatchObject with asymmetric matchers - by @ShreeBohara, Claude Opus 5, @hi-ogawa, Hiroshi Ogawa and Codex (GPT-5) in vitest-dev/vitest#11100 (42523)

jsdom:

Fix Request with Blob body on jsdom 28+ - by @harshit-d3v in vitest-dev/vitest#11295 (d1c3e)

reporter:

agent to respect --silent - by @Raj4478 and @AriPerkkio in vitest-dev/vitest#11271 (5b95e)

reporters:

Handle concurrent createReport calls - by @7rulnik in vitest-dev/vitest#11278 (e8e55)

hanging-process to use ESM entrypoint - by @AriPerkkio in vitest-dev/vitest#11316 (4e91e)

spy:

Fix stack overflow when spying Set.prototype.add - by @fengmk2 in vitest-dev/vitest#11299 (a0a93)

ui:

Persist authentication cookie beyond current browser session - by @hi-ogawa, Hiroshi Ogawa and OpenCode (gpt-5.6-sol) in vitest-dev/vitest#11066 (f8819)

    View changes on GitHub

v5.0.1

   🚀 Features

ui:

Move trace attempts selector to viewer header - by @hi-ogawa, Hiroshi Ogawa and Codex in vitest-dev/vitest#11189 (5dc4b)

Add focused trace view layout mode - by @hi-ogawa, Hiroshi Ogawa, OpenCode (gpt-5.6-sol) and Codex in vitest-dev/vitest#11190 (376dc)

   🐞 Bug Fixes

Exit 1 when vitest list fails collection - by @hamed-bavar in vitest-dev/vitest#11145 and vitest-dev/vitest#11146 (6108b)

Keep parse error details in static collection - by @hamed-bavar in vitest-dev/vitest#11150 and vitest-dev/vitest#11151 (7c818)

Avoid recursive prototype in automocking - by @sheremet-va in vitest-dev/vitest#11195 (99fc5)

Prevent false Vitest import resolution - by @sheremet-va in vitest-dev/vitest#11196 (b426c)

Keep metadata file when clearing the cache - by @sheremet-va in vitest-dev/vitest#11199 (73614)

Correct typos in error message and comments - by @shinji00222 and Shinji in vitest-dev/vitest#11187 (115c3)

Resolve ResolvedConfig exactOptionalPropertyTypes errors - by @LukeAbby in vitest-dev/vitest#11175 (498fb)

Share the server on self-referencing extends - by @sheremet-va in vitest-dev/vitest#11034 (23dda)

Warn when deprecated deps.optimizer.web is used - by @im10furry in vitest-dev/vitest#11214 (2ce29)

browser:

Avoid double quotes in config.define - by @sheremet-va in vitest-dev/vitest#11198 (972e2)

doctor:

Measure vm pools for custom environments - by @sheremet-va in vitest-dev/vitest#11212 (91ab1)

expect:

Correct return value in toMatchAriaSnapshot - by @sheremet-va in vitest-dev/vitest#11208 (c119b)

fakeTimers:

Force queueMicrotask and nextTick in toNotFake - by @kingmakeruix, kingmakeruix, Hiroshi Ogawa, Codex and @hi-ogawa in vitest-dev/vitest#11261 (a47d7)

snapshot:

Report obsolete keys next to skipped tests - by @hamed-bavar, Hiroshi Ogawa and OpenCode (gpt-5.6-sol) in vitest-dev/vitest#11157 and vitest-dev/vitest#11158 (17e2b)

... (truncated)

Commits

428e2e5 chore: release v5.0.2 (#11357)
0b79231 fix: bind process in case global is overwritten (#11343)
597df56 docs: correct stale config defaults (#11354)
ea1c44f docs: sequence.setupFiles default is 'list' (#11351)
0fd6b97 fix(detect-async-leaks): ignore process.stdio handles (#11333)
4e91e56 fix(reporters): hanging-process to use ESM entrypoint (#11316)
1a57929 docs(browser): fix locators.exact default (#11338)
5b95efb fix(reporter): agent to respect --silent (#11271)
f58a209 docs: correct benchmark.exclude and watch defaults (#11268)
d1c3ecc fix(jsdom): fix Request with Blob body on jsdom 28+ (#11295)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the npm-all group with 6 updates: | Package | From | To | | --- | --- | --- | | [@fastify/sensible](https://github.com/fastify/fastify-sensible) | `6.0.5` | `6.0.6` | | [fastify](https://github.com/fastify/fastify) | `5.12.1` | `5.12.5` | | [fastify-cli](https://github.com/fastify/fastify-cli) | `8.0.0` | `8.0.2` | | [oxfmt](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxfmt) | `0.65.0` | `0.70.0` | | [oxlint](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint) | `1.80.0` | `1.85.0` | | [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.11` | `5.0.2` | Updates `@fastify/sensible` from 6.0.5 to 6.0.6 - [Release notes](https://github.com/fastify/fastify-sensible/releases) - [Commits](fastify/fastify-sensible@v6.0.5...v6.0.6) Updates `fastify` from 5.12.1 to 5.12.5 - [Release notes](https://github.com/fastify/fastify/releases) - [Commits](fastify/fastify@v5.12.1...v5.12.5) Updates `fastify-cli` from 8.0.0 to 8.0.2 - [Release notes](https://github.com/fastify/fastify-cli/releases) - [Commits](fastify/fastify-cli@v8.0.0...v8.0.2) Updates `oxfmt` from 0.65.0 to 0.70.0 - [Release notes](https://github.com/oxc-project/oxc/releases) - [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxfmt/CHANGELOG.md) - [Commits](https://github.com/oxc-project/oxc/commits/oxfmt_v0.70.0/npm/oxfmt) Updates `oxlint` from 1.80.0 to 1.85.0 - [Release notes](https://github.com/oxc-project/oxc/releases) - [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxlint/CHANGELOG.md) - [Commits](https://github.com/oxc-project/oxc/commits/oxlint_v1.85.0/npm/oxlint) Updates `vitest` from 4.1.11 to 5.0.2 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.2/packages/vitest) --- updated-dependencies: - dependency-name: "@fastify/sensible" dependency-version: 6.0.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-all - dependency-name: fastify dependency-version: 5.12.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-all - dependency-name: fastify-cli dependency-version: 8.0.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-all - dependency-name: oxfmt dependency-version: 0.70.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-all - dependency-name: oxlint dependency-version: 1.85.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-all - dependency-name: vitest dependency-version: 5.0.2 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm-all ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-10-01T00:46:33Z

Labels

The following labels could not be found: automated. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

dependabot Bot added the dependencies Pull requests that update a dependency file label Oct 1, 2026

Navigation Menu

chore: bump the npm-all group with 6 updates - #8

chore: bump the npm-all group with 6 updates#8
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-all-2e69d3c765

dependabot Bot commented on behalf of github Oct 1, 2026

Uh oh!

dependabot Bot commented on behalf of github Oct 1, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Oct 1, 2026

v6.0.6

What's Changed

New Contributors

v5.12.5

⚠️ Security release

What's Changed

v5.12.4

v5.12.2

⚠️ Security release

What's Changed

v8.0.2

What's Changed

v8.0.1

What's Changed

New Contributors

oxfmt v0.70.0

🚀 Features

oxlint v1.85.0

🚀 Features

v5.0.2

🐞 Bug Fixes

View changes on GitHub

v5.0.1

🚀 Features

🐞 Bug Fixes

Uh oh!

dependabot Bot commented on behalf of github Oct 1, 2026

Labels

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants