Skip to content

deps(server): bump the server-minor-and-patch group across 1 directory with 10 updates - #246

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/server/server-minor-and-patch-d0d7d75ec7
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/server/server-minor-and-patch-d0d7d75ec7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 12, 2026

Copy link
Copy Markdown
Contributor

Bumps the server-minor-and-patch group with 10 updates in the /server directory:

Package From To
@fastify/cookie 11.1.2 11.1.3
@fastify/helmet 13.1.0 13.1.2
@fastify/rate-limit 11.2.0 11.2.1
@fastify/sensible 6.0.4 6.0.7
fastify 5.11.0 5.12.5
pg 8.22.0 8.23.1
pino 10.3.1 10.4.0
vite 8.2.0 8.3.4
vitest 4.1.10 4.1.11
nodemailer 9.0.3 9.1.1

Updates @fastify/cookie from 11.1.2 to 11.1.3

Release notes

Sourced from @​fastify/cookie's releases.

v11.1.3

What's Changed

New Contributors

Full Changelog: fastify/fastify-cookie@v11.1.2...v11.1.3

Commits
  • 576e0dd Bumped v11.1.3
  • 19a1307 ci: enable trusted publishing releases
  • 104aca7 chore: bump fastify/workflows/.github/workflows/plugins-ci.yml (#368)
  • c838334 chore: bump fastify/workflows/.github/workflows/lock-threads.yml (#369)
  • 916538c chore(.npmrc): add min-release-age
  • 0c569e6 docs: fix signed cookie request examples (#366)
  • 56d895f chore: bump c8 from 11.0.0 to 12.0.0 (#365)
  • fb92235 ci: pin actions to commit-hash
  • See full diff in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​fastify/cookie since your current version.


Updates @fastify/helmet from 13.1.0 to 13.1.2

Release notes

Sourced from @​fastify/helmet's releases.

v13.1.2

What's Changed

New Contributors

Full Changelog: fastify/fastify-helmet@v13.1.1...v13.1.2

v13.1.1

What's Changed

Full Changelog: fastify/fastify-helmet@v13.1.0...v13.1.1

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​fastify/helmet since your current version.


Updates @fastify/rate-limit from 11.2.0 to 11.2.1

Release notes

Sourced from @​fastify/rate-limit's releases.

v11.2.1

What's Changed

New Contributors

Full Changelog: fastify/fastify-rate-limit@v11.2.0...v11.2.1

Commits
  • 4cc3d70 Bumped v11.2.1
  • f2dc235 ci: enable trusted publishing releases
  • 78a7d41 chore: Bump ioredis from 5.11.1 to 6.0.0 (#461)
  • a7fbb20 chore: Bump fastify/workflows/.github/workflows/lock-threads.yml (#460)
  • 258e4ae chore: Bump fastify/workflows/.github/workflows/plugins-ci-redis.yml (#459)
  • 25aaf33 chore(.npmrc): add min-release-age
  • See full diff in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​fastify/rate-limit since your current version.


Updates @fastify/sensible from 6.0.4 to 6.0.7

Release notes

Sourced from @​fastify/sensible's releases.

v6.0.7

What's Changed

New Contributors

Full Changelog: fastify/fastify-sensible@v6.0.6...v6.0.7

v6.0.6

What's Changed

New Contributors

Full Changelog: fastify/fastify-sensible@v6.0.5...v6.0.6

v6.0.5

What's Changed

New Contributors

Full Changelog: fastify/fastify-sensible@v6.0.4...v6.0.5

Commits
  • e3908a1 Bumped v6.0.7
  • 9362646 ci: enable trusted publishing releases
  • d313b33 Bumped v6.0.6
  • 233a70d fix(request): support variadic request.is types (#235)
  • 7974df0 Bumped v6.0.5
  • 4d03816 chore: bump fastify/workflows/.github/workflows/plugins-ci.yml (#234)
  • e189219 chore: bump fastify/workflows/.github/workflows/lock-threads.yml (#233)
  • 15806e0 chore(.npmrc): add min-release-age
  • d07f3d9 ci: pin actions to commit-hash
  • 05910cb chore: bump @​types/node in the dev-dependencies-typescript group (#230)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​fastify/sensible since your current version.


Updates fastify from 5.11.0 to 5.12.5

Release notes

Sourced from fastify's releases.

v5.12.5

⚠️ Security release

What's Changed

Full Changelog: fastify/fastify@v5.12.4...v5.12.5

v5.12.4

Fixed the fastify.js version mismatch.

Full Changelog: fastify/fastify@v5.12.2...v5.12.4

v5.12.2

⚠️ Security release

What's Changed

Full Changelog: fastify/fastify@v5.12.1...v5.12.2

v5.12.1

⚠️ Security release

What's Changed

Full Changelog: fastify/fastify@v5.12.0...v5.12.1

v5.12.0

What's Changed

... (truncated)

Commits
  • ba235fd Bumped v5.12.5
  • ad06a4c Merge commit from fork
  • 7af0d77 [Backport 5.x] perf: avoid redundant request-part reads during validation (#7...
  • 990ebef [Backport 5.x] perf: reduce content-type parser overhead (#7019)
  • 1690e35 Bumped v5.12.4
  • 1c991c4 Bumped v5.12.3
  • 942a2be Bumped v5.12.2
  • 853f6e2 test(validation): cover normalization and async branches
  • f02d8d4 fix(validation): do not unwrap async validator results
  • 93c239a fix: reject malformed URLs before custom 404 handlers
  • Additional commits viewable in compare view

Updates pg from 8.22.0 to 8.23.1

Changelog

Sourced from pg's changelog.

All major and minor releases are briefly explained below.

For richer information consult the commit log on github with referenced pull requests.

We do not include break-fix version release in this file.

pg@8.23.0

Commits
  • 0980cef Publish
  • 2759b2c fix(pg): run a named statement with an empty text more than once (#3781)
  • 7feb7df fix(pg): expose detail and hint on errors from the native client (#3780)
  • 9683053 fix(pg): do not treat Sync as connection ending (#3772)
  • 4589038 fix: validate server certificate against host when connecting to an IP addres...
  • 9808955 cleanup: Fix typo in comment
  • 2b02f64 fix: avoid mutating query config (#3720)
  • 0cef6af Reject portal based queries in pipeline mode instead of misrouting rows (#3737)
  • 2991480 Deprecate serializing invalid Dates (#3731)
  • c940d7c Fail pipelined queries when the connection dies instead of hanging (#3736)
  • Additional commits viewable in compare view

Updates pino from 10.3.1 to 10.4.0

Release notes

Sourced from pino's releases.

v10.4.0

What's Changed

... (truncated)

Commits
  • b29dbe9 Bumped v10.4.0
  • 6ba157b docs: fix the pino-pretty flush explanation after thread-stream#198 (#2524)
  • 6429c14 docs: Note that serializers run on child bindings at creation time (#2518)
  • 6c71bc9 Add bindings method to browser logger (#2504)
  • b557f72 ci: pin lock-threads to upstream v6.0.2 to fix token validation failure (#2525)
  • 1de1212 docs: document the APIs that are unavailable in the browser (#2521)
  • af2fe10 Delete .github/dependabot.yml (#2517)
  • 5aa6230 build(deps-dev): bump eslint-plugin-n from 18.2.2 to 18.3.0 (#2515)
  • 6f5af07 build(deps-dev): bump docsify-cli from 4.4.4 to 5.0.0 (#2513)
  • 2ffe576 ci: check pull requests target main (#2500)
  • Additional commits viewable in compare view

Updates vite from 8.2.0 to 8.3.4

Release notes

Sourced from vite's releases.

v8.3.4

Features

  • bundled-dev: support import.meta.hot.acceptExports (#23463) (bc0f21c)

Bug Fixes

  • avoid mutating hmr defaults (fix #23575) (#23576) (574d5e3)
  • build: correct preloads when chunkImportMap is enabled with non-root base (#23698) (2a8c0f0)
  • build: wait for in-flight stylesheets in preload helper (fix #23652) (#23662) (036b745)
  • bundled-dev: serve /@vite/client and stub @vite/env (#23664) (5afc5a8)
  • client: skip rewriting unchanged adopted styles (#23697) (fa71469)
  • css: resolve imported preprocessors from their file path with lightningcss (#23688) (cf52011)
  • deps: update all non-major dependencies (#23648) (8a4c19c)
  • deps: update rolldown-related dependencies (#23649) (794516d)
  • dev: a restart requested during a restart used to be dropped (fix #23392) (#23484) (70d56ea)
  • don't treat modules ending with js-like query as js (#23687) (fcb6f12)
  • html: avoid adding filesystem root to watcher (#23689) (3a7f2ae)
  • html: skip caching CSS of chunks in a cycle (fix #23628) (#23636) (15d82f7)
  • optimizer: scan deep imports with custom extensions (#23678) (8579189)
  • remove input option unescaping for now (#23694) (facc2fb)
  • server: match static aliases on path boundaries (#23643) (b28db28)
  • watcher: normalize file before root check in ensureWatchedFile (#23673) (12bb28c)

Performance Improvements

  • module-runner: skip cloning call sites that have no source map (#23646) (3d67486)

Code Refactoring

  • bundled-dev: import CSS HMR helpers from /@vite/client (#23674) (182f5b2)

v8.3.3

Bug Fixes

  • deps: update launch-editor to v2.14.2 (#23654) (22fd1d5)
  • html: filename passed to transformIndexHtml should not include queries (#23653) (7dafd8e)
  • server: check fs.serve for ?vite-wasm-instance (#23655) (ba8b7ab)
  • server: store ids to safeModulePaths rather than URLs (#23656) (c3e06f9)

v8.3.2

Bug Fixes

  • build: preload CSS correctly when renderBuiltUrl returns URLs with queries (#23611) (64e0a21)
  • bundled-dev: serve lazy chunk sourcemaps (#23026) (eb7aa9a)
  • bundled-dev: serve the rolldown runtime from the installed rolldown (#23568) (bc598a6)
  • deps: update all non-major dependencies (#23601) (9944fa6)
  • deps: update rolldown-related dependencies (#23602) (88c1741)
  • html: resolve percent-encoded srcset urls (#23609) (53f1ce7)
  • limit size of object and array printing via forwardConsole (#23565) (e64a587)

... (truncated)

Changelog

Sourced from vite's changelog.

8.3.4 (2026-10-08)

Features

  • bundled-dev: support import.meta.hot.acceptExports (#23463) (bc0f21c)

Bug Fixes

  • avoid mutating hmr defaults (fix #23575) (#23576) (574d5e3)
  • build: correct preloads when chunkImportMap is enabled with non-root base (#23698) (2a8c0f0)
  • build: wait for in-flight stylesheets in preload helper (fix #23652) (#23662) (036b745)
  • bundled-dev: serve /@vite/client and stub @vite/env (#23664) (5afc5a8)
  • client: skip rewriting unchanged adopted styles (#23697) (fa71469)
  • css: resolve imported preprocessors from their file path with lightningcss (#23688) (cf52011)
  • deps: update all non-major dependencies (#23648) (8a4c19c)
  • deps: update rolldown-related dependencies (#23649) (794516d)
  • dev: a restart requested during a restart used to be dropped (fix #23392) (#23484) (70d56ea)
  • don't treat modules ending with js-like query as js (#23687) (fcb6f12)
  • html: avoid adding filesystem root to watcher (#23689) (3a7f2ae)
  • html: skip caching CSS of chunks in a cycle (fix #23628) (#23636) (15d82f7)
  • optimizer: scan deep imports with custom extensions (#23678) (8579189)
  • remove input option unescaping for now (#23694) (facc2fb)
  • server: match static aliases on path boundaries (#23643) (b28db28)
  • watcher: normalize file before root check in ensureWatchedFile (#23673) (12bb28c)

Performance Improvements

  • module-runner: skip cloning call sites that have no source map (#23646) (3d67486)

Code Refactoring

  • bundled-dev: import CSS HMR helpers from /@vite/client (#23674) (182f5b2)

8.3.3 (2026-10-06)

Bug Fixes

  • deps: update launch-editor to v2.14.2 (#23654) (22fd1d5)
  • html: filename passed to transformIndexHtml should not include queries (#23653) (7dafd8e)
  • server: check fs.serve for ?vite-wasm-instance (#23655) (ba8b7ab)
  • server: store ids to safeModulePaths rather than URLs (#23656) (c3e06f9)

8.3.2 (2026-10-01)

Bug Fixes

  • build: preload CSS correctly when renderBuiltUrl returns URLs with queries (#23611) (64e0a21)
  • bundled-dev: serve lazy chunk sourcemaps (#23026) (eb7aa9a)
  • bundled-dev: serve the rolldown runtime from the installed rolldown (#23568) (bc598a6)
  • deps: update all non-major dependencies (#23601) (9944fa6)
  • deps: update rolldown-related dependencies (#23602) (88c1741)
  • html: resolve percent-encoded srcset urls (#23609) (53f1ce7)
  • limit size of object and array printing via forwardConsole (#23565) (e64a587)

... (truncated)

Commits

…y with 10 updates

Bumps the server-minor-and-patch group with 10 updates in the /server directory:

| Package | From | To |
| --- | --- | --- |
| [@fastify/cookie](https://github.com/fastify/fastify-cookie) | `11.1.2` | `11.1.3` |
| [@fastify/helmet](https://github.com/fastify/fastify-helmet) | `13.1.0` | `13.1.2` |
| [@fastify/rate-limit](https://github.com/fastify/fastify-rate-limit) | `11.2.0` | `11.2.1` |
| [@fastify/sensible](https://github.com/fastify/fastify-sensible) | `6.0.4` | `6.0.7` |
| [fastify](https://github.com/fastify/fastify) | `5.11.0` | `5.12.5` |
| [pg](https://github.com/brianc/node-postgres/tree/HEAD/packages/pg) | `8.22.0` | `8.23.1` |
| [pino](https://github.com/pinojs/pino) | `10.3.1` | `10.4.0` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.2.0` | `8.3.4` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.10` | `4.1.11` |
| [nodemailer](https://github.com/nodemailer/nodemailer) | `9.0.3` | `9.1.1` |



Updates `@fastify/cookie` from 11.1.2 to 11.1.3
- [Release notes](https://github.com/fastify/fastify-cookie/releases)
- [Commits](fastify/fastify-cookie@v11.1.2...v11.1.3)

Updates `@fastify/helmet` from 13.1.0 to 13.1.2
- [Release notes](https://github.com/fastify/fastify-helmet/releases)
- [Commits](fastify/fastify-helmet@v13.1.0...v13.1.2)

Updates `@fastify/rate-limit` from 11.2.0 to 11.2.1
- [Release notes](https://github.com/fastify/fastify-rate-limit/releases)
- [Commits](fastify/fastify-rate-limit@v11.2.0...v11.2.1)

Updates `@fastify/sensible` from 6.0.4 to 6.0.7
- [Release notes](https://github.com/fastify/fastify-sensible/releases)
- [Commits](fastify/fastify-sensible@v6.0.4...v6.0.7)

Updates `fastify` from 5.11.0 to 5.12.5
- [Release notes](https://github.com/fastify/fastify/releases)
- [Commits](fastify/fastify@v5.11.0...v5.12.5)

Updates `pg` from 8.22.0 to 8.23.1
- [Changelog](https://github.com/brianc/node-postgres/blob/master/CHANGELOG.md)
- [Commits](https://github.com/brianc/node-postgres/commits/pg@8.23.1/packages/pg)

Updates `pino` from 10.3.1 to 10.4.0
- [Release notes](https://github.com/pinojs/pino/releases)
- [Commits](pinojs/pino@v10.3.1...v10.4.0)

Updates `vite` from 8.2.0 to 8.3.4
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v8.3.4/packages/vite)

Updates `vitest` from 4.1.10 to 4.1.11
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.11/packages/vitest)

Updates `nodemailer` from 9.0.3 to 9.1.1
- [Release notes](https://github.com/nodemailer/nodemailer/releases)
- [Changelog](https://github.com/nodemailer/nodemailer/blob/master/CHANGELOG.md)
- [Commits](nodemailer/nodemailer@v9.0.3...v9.1.1)

---
updated-dependencies:
- dependency-name: "@fastify/cookie"
  dependency-version: 11.1.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: server-minor-and-patch
- dependency-name: "@fastify/helmet"
  dependency-version: 13.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: server-minor-and-patch
- dependency-name: "@fastify/rate-limit"
  dependency-version: 11.2.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: server-minor-and-patch
- dependency-name: "@fastify/sensible"
  dependency-version: 6.0.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: server-minor-and-patch
- dependency-name: fastify
  dependency-version: 5.12.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: server-minor-and-patch
- dependency-name: pg
  dependency-version: 8.23.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: server-minor-and-patch
- dependency-name: pino
  dependency-version: 10.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: server-minor-and-patch
- dependency-name: vite
  dependency-version: 8.3.4
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: server-minor-and-patch
- dependency-name: vitest
  dependency-version: 4.1.11
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: server-minor-and-patch
- dependency-name: nodemailer
  dependency-version: 9.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: server-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Oct 12, 2026
@dependabot @github

dependabot Bot commented on behalf of github Oct 12, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: server. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@strix-security

Copy link
Copy Markdown

Strix is installed on this repository, but we couldn't run this PR security review because this workspace's trial has ended. Add a card to resume code reviews here.

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants