Skip to content

chore(deps)(deps): bump fastify from 5.9.0 to 5.12.1 in /nodyx-core - #661

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/nodyx-core/fastify-5.12.1
Closed

chore(deps)(deps): bump fastify from 5.9.0 to 5.12.1 in /nodyx-core#661
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/nodyx-core/fastify-5.12.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 2, 2026

Copy link
Copy Markdown
Contributor

Bumps fastify from 5.9.0 to 5.12.1.

Release notes

Sourced from fastify's releases.

v5.12.1

⚠️ Security release

What's Changed

Full Changelog: fastify/fastify@v5.12.0...v5.12.1

v5.12.0

What's Changed

Full Changelog: fastify/fastify@v5.11.3...v5.12.0

v5.11.3

What's Changed

New Contributors

Full Changelog: fastify/fastify@v5.11.2...v5.11.3

v5.11.2

What's Changed

... (truncated)

Commits

@dependabot @github

dependabot Bot commented on behalf of github Sep 2, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: nodyx-core. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Sep 2, 2026
Bumps [fastify](https://github.com/fastify/fastify) from 5.9.0 to 5.12.1.
- [Release notes](https://github.com/fastify/fastify/releases)
- [Commits](fastify/fastify@v5.9.0...v5.12.1)

---
updated-dependencies:
- dependency-name: fastify
  dependency-version: 5.12.1
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@Pokled

Pokled commented Sep 2, 2026

Copy link
Copy Markdown
Owner

Superseded by #664 : #661 ne peut pas passer la CI seul (fastify 5.12.1 retire le mode compteur de hops de trustProxy, il faut la retouche getTrustProxy() qui l'accompagne dans #664). #664 est rebasé sur main après #659.

Pokled added a commit that referenced this pull request Sep 2, 2026
…ps (#664)

fastify 5.12.1 corrige l'usurpation des en-tetes X-Forwarded-* quand
trustProxy est un nombre de hops (alerte Dependabot, medium) et retire
ce mode : le type n'accepte plus `number`.

getTrustProxy() pouvait renvoyer un nombre via l'override TRUST_PROXY=<n>.
Ce chemin est supprime (retour boolean | string[]) ; une valeur purement
numerique est desormais ignoree avec un avertissement plutot que de
faire lever proxy-addr au demarrage. Le defaut de production (liste
loopback + Cloudflare) etait deja une string[], inchange.

Remplace #661 (rebase sur main apres #659) et le volet fastify de #655.
@dependabot @github

dependabot Bot commented on behalf of github Sep 2, 2026

Copy link
Copy Markdown
Contributor Author

Looks like fastify is up-to-date now, so this is no longer needed.

@dependabot dependabot Bot closed this Sep 2, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/nodyx-core/fastify-5.12.1 branch September 2, 2026 20:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant