Skip to content

build(deps): bump fastify from 5.12.5 to 5.12.6 - #333

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/fastify-5.12.6
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/fastify-5.12.6

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 23, 2026 •

Copy link
Copy Markdown
Contributor

Bumps fastify from 5.12.5 to 5.12.6.

Release notes

Sourced from fastify's releases.

v5.12.6

⚠️ Security Release

What's Changed

Full Changelog: fastify/fastify@v5.12.5...v5.12.6

Commits
  • 16469b9 Bumped v5.12.6
  • 63496de [Backport 5.x] docs: document fastify.query() shorthand for RFC 10008 (#7094)
  • 20b55d4 [Backport 5.x] fix: remove error when HTTP QUERY request has empty body (#7060)
  • 38d2b63 [Backport 5.x] fix: copy a set-cookie array passed to reply.header instead of...
  • 3241fbd [Backport 5.x] fix(validation): lowercase header names in propertyNames enum/...
  • 1a46b1b [Backport 5.x] perf: use a FIFO cache for parsed content-types (#7072)
  • 7e06676 [Backport 5.x] fix: resolve reply.mediaType from raw response headers (#7067)
  • 1b0eb32 [Backport 5.x] perf: avoid resetting the level of request child loggers (#7058)
  • a636a10 [Backport 5.x] perf: decode string bodies once instead of per chunk (#7053)
  • 1a047cc [Backport 5.x] types: restrict route lookup methods (#7048)
  • See full diff in compare view

Copilot AI balanced review requested due to automatic review settings October 23, 2026 09:11
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 23, 2026

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟢 Approval recommended

The dependency-only update is internally consistent, with no blocking compatibility or correctness issues identified.

No open issues 🎉

1 file not reviewed
  • pnpm-lock.yaml: Generated file
What changed in this PR

Updates Fastify from 5.12.5 to the 5.12.6 security release across the server and agentlet host package.

Changes:

  • Raises the server dependency and agentlet host peer/development requirements to ^5.12.6.
  • Updates the lockfile to resolve Fastify 5.12.6 and related transitive dependencies.

The manifest and lockfile updates are consistent. Tests were not run.

File Description
pnpm-lock.yaml Updates Fastify and transitive resolutions; removes an explicit Undici tarball URL.
external/​agenetes/​packages/​agentlet-host/​package.json Updates Fastify peer and development requirements.
apps/​server/​package.json Updates the server’s Fastify dependency requirement.

Review effort: Balanced

Bumps [fastify](https://github.com/fastify/fastify) from 5.12.5 to 5.12.6.
- [Release notes](https://github.com/fastify/fastify/releases)
- [Commits](fastify/fastify@v5.12.5...v5.12.6)

---
updated-dependencies:
- dependency-name: fastify
  dependency-version: 5.12.6
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/fastify-5.12.6 branch from 95e80a1 to 50d1207 Compare October 28, 2026 08:14
Copilot AI balanced review requested due to automatic review settings October 28, 2026 08:14

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟢 Approval recommended

No active review issues are reported for the Fastify security dependency update.

No open issues 🎉

1 file not reviewed
  • pnpm-lock.yaml: Generated file

Review effort: Balanced

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant