Skip to content

chore(deps): bump the prod-dependencies group across 1 directory with 11 updates#1863

Open
dependabot[bot] wants to merge 1 commit into
betafrom
dependabot/npm_and_yarn/beta/prod-dependencies-6a9a485ea3
Open

chore(deps): bump the prod-dependencies group across 1 directory with 11 updates#1863
dependabot[bot] wants to merge 1 commit into
betafrom
dependabot/npm_and_yarn/beta/prod-dependencies-6a9a485ea3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 20, 2026

Copy link
Copy Markdown
Contributor

Bumps the prod-dependencies group with 11 updates in the / directory:

Package From To
@fastify/compress 9.0.0 9.1.0
@fastify/cookie 11.0.2 11.1.2
@fastify/helmet 13.0.2 13.1.0
@fastify/multipart 10.0.0 10.1.0
@fastify/static 9.1.3 10.1.0
fastify 5.9.0 5.10.0
node-cron 4.5.0 4.6.0
tar 7.5.19 7.5.20
@floating-ui/react 0.27.19 0.27.20
i18next 26.3.4 26.3.6
react-i18next 17.0.8 17.0.10

Updates @fastify/compress from 9.0.0 to 9.1.0

Release notes

Sourced from @​fastify/compress's releases.

v9.1.0

What's Changed

New Contributors

Full Changelog: fastify/fastify-compress@v9.0.0...v9.1.0

Commits
  • 06cb09f Bumped v9.1.0
  • 67d9e65 refactor: remove peek-stream and use readable-stream Transform (#412)
  • 9879d5c fix: suppress native pipeline premature close errors in onEnd (#411)
  • cf976a8 chore: bump @​types/node in the dev-dependencies-typescript group (#409)
  • fe80cfa docs: fix broken links
  • d4cb6ff chore(package.json): fix delvedor's personal url
  • 4b30d47 chore: bump fastify-plugin from 5.1.0 to 6.0.0 in the dependencies group (#405)
  • 496e22a fix: skip compression for 206 and Content-Range responses (#402)
  • 054d796 chore: update depedabot setting (#400)
  • See full diff in compare view

Updates @fastify/cookie from 11.0.2 to 11.1.2

Release notes

Sourced from @​fastify/cookie's releases.

v11.1.2

What's Changed

Full Changelog: fastify/fastify-cookie@v11.1.1...v11.1.2

v11.1.1

What's Changed

New Contributors

Full Changelog: fastify/fastify-cookie@v11.1.0...v11.1.1

v11.1.0

What's Changed

... (truncated)

Commits

Updates @fastify/helmet from 13.0.2 to 13.1.0

Release notes

Sourced from @​fastify/helmet's releases.

v13.1.0

What's Changed

New Contributors

Full Changelog: fastify/fastify-helmet@v13.0.2...v13.1.0

Commits
  • 33d89a3 Bumped v13.1.0
  • 6a7ecf2 docs: fix broken links (#314)
  • 1e0ccb7 chore: bump @​types/node in the dev-dependencies-typescript group (#315)
  • 51d6e89 chore(package.json): fix delvedor's personal url
  • 6ac42ed chore: bump fastify-plugin from 5.1.0 to 6.0.0 in the dependencies group (#312)
  • 9eb465c chore: update depedabot setting
  • 6f506da refactor(types): migrate from tsd to tstyche (#307)
  • 0c3d73d ci: add lock-threads workflow (#306)
  • 8ae7182 build(deps): bump fastify/workflows/.github/workflows/plugins-ci.yml (#303)
  • 307b579 build(deps-dev): bump neostandard from 0.12.2 to 0.13.0 (#304)
  • Additional commits viewable in compare view

Updates @fastify/multipart from 10.0.0 to 10.1.0

Release notes

Sourced from @​fastify/multipart's releases.

v10.1.0

What's Changed

Full Changelog: fastify/fastify-multipart@v10.0.0...v10.1.0

Commits
  • 0a8ab66 Bumped v10.1.0
  • a9d53e5 fix: update module version
  • 9b3bf89 fix: do not end parts() iteration while busboy still holds undelivered parts ...
  • 45023e0 chore: bump @​types/node in the dev-dependencies-typescript group (#629)
  • 77b563e docs: fix broken links
  • d7475da chore: bump @​fastify/swagger-ui from 5.2.6 to 6.0.0 (#626)
  • ed56b6f chore: bump fastify-plugin from 5.1.0 to 6.0.0 in the dependencies group (#625)
  • f79f996 chore: update depedabot setting
  • 60e1b5c chore: use lf eol (#619)
  • cddccd4 refactor(types): migrate from tsd to tstyche (#617)
  • Additional commits viewable in compare view

Updates @fastify/static from 9.1.3 to 10.1.0

Release notes

Sourced from @​fastify/static's releases.

v10.1.0

What's Changed

New Contributors

Full Changelog: fastify/fastify-static@v10.0.0...v10.1.0

v10.0.0

Breaking Changes

  • setHeaders now using FastifyReply instead of Response.

You should refactor your code to use the reply helpers. For example,

// Before
const fastify = require('fastify')({logger: true})
const path = require('node:path')
fastify.register(require('@​fastify/static'), {
root: path.join(__dirname, 'public'),
prefix: '/public/', // optional: default '/',
setHeaders(res) {
res.setHeader('X-Test', 'Foo')
}
})
// After
const fastify = require('fastify')({logger: true})
const path = require('node:path')
fastify.register(require('@​fastify/static'), {
root: path.join(__dirname, 'public'),
prefix: '/public/', // optional: default '/',
setHeaders(reply) {
reply.header('X-Test', 'Foo')
}
})

What's Changed

New Contributors

Full Changelog: fastify/fastify-static@v9.3.0...v10.0.0

... (truncated)

Commits
  • 36c939d Bumped v10.1.0
  • 7c1121a feat: use @fastify/error for errors and add option suppressWarning (#599)
  • c57d8bc fix: set Vary: Accept-Encoding for preCompressed responses (#586)
  • babf6df Bumped v10.0.0
  • 08ed461 fix!: allow setHeaders to override send headers (#598)
  • 99f0193 fix: ignore unsupported deflate for precompressed assets (#596)
  • a6e5f4d chore!: bump content-disposition fom 1.0.1 to 2.0.1 (#597)
  • ad05a27 Bumped v9.3.0
  • 58811db chore: update fastify-plugin dependency to version 6.0.0 (#594)
  • a343813 Bumped v9.2.0
  • Additional commits viewable in compare view

Updates fastify from 5.9.0 to 5.10.0

Release notes

Sourced from fastify's releases.

v5.10.0

What's Changed

New Contributors

Full Changelog: fastify/fastify@v5.9.0...v5.10.0

Commits
  • 94bcbcc Bumped v5.10.0
  • c47975e docs: Update import for page consistency (#6771)
  • 82952b8 docs: Logging.md with per-route log level info (#6627)
  • 6ac2e95 fix: derive request.port from request.host (#6680)
  • 5f4871f perf: reduce per-request overhead in the request lifecycle (#6831)
  • ec4bc66 chore: Bump fast-json-stringify to v7 (#6800)
  • d0b649d docs: fix incorrect hook count in Hooks.md (eight -> ten) (#6825)
  • 826c807 docs: fix incorrect defaults and code examples in Server.md (#6805)
  • 6f63ce9 fix: use ContentType to detect json and charset in reply.send (#6830)
  • 75d74e1 feat: introduce log controller layer (#6580)
  • Additional commits viewable in compare view

Updates node-cron from 4.5.0 to 4.6.0

Release notes

Sourced from node-cron's releases.

v4.6.0

4.6.0 (2026-07-04)

Added

  • add cron.shutdown(timeout?) for graceful process teardown (#589) (35f1a61)
  • add unref option for heartbeat timers (#588) (35cb140)
  • day-of-month: Quartz-style W, L-n and ? modifiers (#570) (cbe379b)
  • emit task:failed when a background daemon exits unexpectedly (7bd91d6)
  • support cron expression nicknames (@​yearly, @​daily, etc.) (#579) (6a6e14e)

Fixed

  • background task state transition on stop/destroy without fork (#584) (9dbc6de)
  • clear jitter timeout on runner stop (#583) (28b8146)
  • CommonJS type resolution (#608) (ee9d294)
  • correct falied->failed typo in daemon task error log (#594) (66c6961)
  • correct shutdown listener typing that broke the build (#595) (7aac3ad)
  • correlate execute() by id, isolate event hooks, and stop counting manual runs toward maxExecutions (#607) (0f039a9)
  • daemon serialized task state with wrong field name (#587) (688d465)
  • expand inverted ranges with wrap-around instead of silently swapping (#602) (a10ae53)
  • harden cron.shutdown() teardown (#598) (a0b0d1f)
  • kill orphan child process on background task stop/destroy timeout (#582) (8179e10)
  • make concurrent background start() await the daemon and time out coordinator lookups (#605) (446f03a)
  • make lifecycle calls on a destroyed task safe no-ops (#600) (7fa9795)
  • prevent double destroy on registry remove (#585) (8ae9f06)
  • release-please: match existing v-prefixed tags (#575) (e43c152)
  • runner promise bugs that could hang scheduling or crash process (#581) (0ae62be)
  • unref the IPC channel so background tasks let the process exit (#599) (534e593)
  • validate the cron expression when scheduling a task (#603) (196e6cd)
  • validate() consistency and multi-asterisk expansion (#606) (8cf41c4)
  • weekday 7-to-0 conversion corrupting ranges (#580) (c8a3943)

Changed

  • replace chai and sinon with native vitest assertions (#590) (d29d07a)
Changelog

Sourced from node-cron's changelog.

4.6.0 (2026-07-04)

Added

  • add cron.shutdown(timeout?) for graceful process teardown (#589) (35f1a61)
  • add unref option for heartbeat timers (#588) (35cb140)
  • day-of-month: Quartz-style W, L-n and ? modifiers (#570) (cbe379b)
  • emit task:failed when a background daemon exits unexpectedly (7bd91d6)
  • support cron expression nicknames (@​yearly, @​daily, etc.) (#579) (6a6e14e)

Fixed

  • background task state transition on stop/destroy without fork (#584) (9dbc6de)
  • clear jitter timeout on runner stop (#583) (28b8146)
  • CommonJS type resolution (#608) (ee9d294)
  • correct falied->failed typo in daemon task error log (#594) (66c6961)
  • correct shutdown listener typing that broke the build (#595) (7aac3ad)
  • correlate execute() by id, isolate event hooks, and stop counting manual runs toward maxExecutions (#607) (0f039a9)
  • daemon serialized task state with wrong field name (#587) (688d465)
  • expand inverted ranges with wrap-around instead of silently swapping (#602) (a10ae53)
  • harden cron.shutdown() teardown (#598) (a0b0d1f)
  • kill orphan child process on background task stop/destroy timeout (#582) (8179e10)
  • make concurrent background start() await the daemon and time out coordinator lookups (#605) (446f03a)
  • make lifecycle calls on a destroyed task safe no-ops (#600) (7fa9795)
  • prevent double destroy on registry remove (#585) (8ae9f06)
  • release-please: match existing v-prefixed tags (#575) (e43c152)
  • runner promise bugs that could hang scheduling or crash process (#581) (0ae62be)
  • unref the IPC channel so background tasks let the process exit (#599) (534e593)
  • validate the cron expression when scheduling a task (#603) (196e6cd)
  • validate() consistency and multi-asterisk expansion (#606) (8cf41c4)
  • weekday 7-to-0 conversion corrupting ranges (#580) (c8a3943)

Changed

  • replace chai and sinon with native vitest assertions (#590) (d29d07a)
Commits
  • 0be2ca0 chore(main): release 4.6.0 (#576)
  • 813ab08 docs: note bundlers must keep node-cron external for background tasks (#610)
  • ee9d294 fix: CommonJS type resolution (#608)
  • 0f039a9 fix: correlate execute() by id, isolate event hooks, and stop counting manual...
  • 8cf41c4 fix: validate() consistency and multi-asterisk expansion (#606)
  • 446f03a fix: make concurrent background start() await the daemon and time out coordin...
  • 88647a6 docs: note DST fall-back behavior for sub-hourly schedules and the UTC workar...
  • 196e6cd fix: validate the cron expression when scheduling a task (#603)
  • 7bd91d6 feat: emit task:failed when a background daemon exits unexpectedly (#601)
  • a10ae53 fix: expand inverted ranges with wrap-around instead of silently swapping (#602)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for node-cron since your current version.


Updates tar from 7.5.19 to 7.5.20

Commits

Updates @floating-ui/react from 0.27.19 to 0.27.20

Release notes

Sourced from @​floating-ui/react's releases.

@​floating-ui/react@​0.27.20

Patch Changes

  • fix: remove redundant passive options from scroll listeners
  • fix: support explicit undefined for optional properties with exactOptionalPropertyTypes
  • Update dependencies: @floating-ui/react-dom@2.1.9, @floating-ui/utils@0.2.12
Changelog

Sourced from @​floating-ui/react's changelog.

0.27.20

Patch Changes

  • fix: remove redundant passive options from scroll listeners
  • fix: support explicit undefined for optional properties with exactOptionalPropertyTypes
  • Update dependencies: @floating-ui/react-dom@2.1.9, @floating-ui/utils@0.2.12
Commits
  • 12d9473 chore: version packages (#3480)
  • 9887c96 fix(types): restore bivariant parameters for optional callbacks
  • 73c1f76 fix(types): support exactOptionalPropertyTypes (#3456)
  • 8999976 chore: upgrade vulnerable direct dependencies (#3484)
  • fa63ca6 chore: remove unnecessary passive flag from scroll events (#3470)
  • fabb80b breaking(vue): drop vue-demi and require Vue >=3.3.0 (#3452)
  • See full diff in compare view

Updates i18next from 26.3.4 to 26.3.6

Release notes

Sourced from i18next's releases.

v26.3.6

  • fix: allow TypeScript 7 in the optional typescript peer dependency range (^5 || ^6 || ^7). With typescript@7.0.2 in a project, npm install failed with an ERESOLVE peer conflict. The published types are TS7-compatible as-is: every test/typescript suite produces identical results under 6.0 and 7.0.2. Reported in react-i18next#1927, thanks @​andikapradanaarif.

v26.3.5

  • fix: $t() nesting options blocks that span multiple lines are now parsed. nest() decided where the nested key ends by testing match[1] with /{.*}/, whose dot does not cross line breaks — so a $t(key, { ... }) options object containing a newline was treated as having no options, mis-split as formatters, and the nested lookup ran without its options (placeholders stayed unresolved). The nesting regexp itself already matches newlines inside $t(...); adding the s (dotAll) flag makes multiline options behave like the single-line form. Thanks

@dependabot
chore(deps): bump the prod-dependencies group across 1 directory with…
08cf40b 
… 11 updates

Bumps the prod-dependencies group with 11 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@fastify/compress](https://github.com/fastify/fastify-compress) | `9.0.0` | `9.1.0` |
| [@fastify/cookie](https://github.com/fastify/fastify-cookie) | `11.0.2` | `11.1.2` |
| [@fastify/helmet](https://github.com/fastify/fastify-helmet) | `13.0.2` | `13.1.0` |
| [@fastify/multipart](https://github.com/fastify/fastify-multipart) | `10.0.0` | `10.1.0` |
| [@fastify/static](https://github.com/fastify/fastify-static) | `9.1.3` | `10.1.0` |
| [fastify](https://github.com/fastify/fastify) | `5.9.0` | `5.10.0` |
| [node-cron](https://github.com/node-cron/node-cron) | `4.5.0` | `4.6.0` |
| [tar](https://github.com/isaacs/node-tar) | `7.5.19` | `7.5.20` |
| [@floating-ui/react](https://github.com/floating-ui/floating-ui/tree/HEAD/packages/react) | `0.27.19` | `0.27.20` |
| [i18next](https://github.com/i18next/i18next) | `26.3.4` | `26.3.6` |
| [react-i18next](https://github.com/i18next/react-i18next) | `17.0.8` | `17.0.10` |



Updates `@fastify/compress` from 9.0.0 to 9.1.0
- [Release notes](https://github.com/fastify/fastify-compress/releases)
- [Commits](fastify/fastify-compress@v9.0.0...v9.1.0)

Updates `@fastify/cookie` from 11.0.2 to 11.1.2
- [Release notes](https://github.com/fastify/fastify-cookie/releases)
- [Commits](fastify/fastify-cookie@v11.0.2...v11.1.2)

Updates `@fastify/helmet` from 13.0.2 to 13.1.0
- [Release notes](https://github.com/fastify/fastify-helmet/releases)
- [Commits](fastify/fastify-helmet@v13.0.2...v13.1.0)

Updates `@fastify/multipart` from 10.0.0 to 10.1.0
- [Release notes](https://github.com/fastify/fastify-multipart/releases)
- [Commits](fastify/fastify-multipart@v10.0.0...v10.1.0)

Updates `@fastify/static` from 9.1.3 to 10.1.0
- [Release notes](https://github.com/fastify/fastify-static/releases)
- [Commits](fastify/fastify-static@v9.1.3...v10.1.0)

Updates `fastify` from 5.9.0 to 5.10.0
- [Release notes](https://github.com/fastify/fastify/releases)
- [Commits](fastify/fastify@v5.9.0...v5.10.0)

Updates `node-cron` from 4.5.0 to 4.6.0
- [Release notes](https://github.com/node-cron/node-cron/releases)
- [Changelog](https://github.com/node-cron/node-cron/blob/main/CHANGELOG.md)
- [Commits](node-cron/node-cron@v4.5.0...v4.6.0)

Updates `tar` from 7.5.19 to 7.5.20
- [Release notes](https://github.com/isaacs/node-tar/releases)
- [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md)
- [Commits](isaacs/node-tar@v7.5.19...v7.5.20)

Updates `@floating-ui/react` from 0.27.19 to 0.27.20
- [Release notes](https://github.com/floating-ui/floating-ui/releases)
- [Changelog](https://github.com/floating-ui/floating-ui/blob/master/packages/react/CHANGELOG.md)
- [Commits](https://github.com/floating-ui/floating-ui/commits/@floating-ui/react@0.27.20/packages/react)

Updates `i18next` from 26.3.4 to 26.3.6
- [Release notes](https://github.com/i18next/i18next/releases)
- [Changelog](https://github.com/i18next/i18next/blob/master/CHANGELOG.md)
- [Commits](i18next/i18next@v26.3.4...v26.3.6)

Updates `react-i18next` from 17.0.8 to 17.0.10
- [Changelog](https://github.com/i18next/react-i18next/blob/master/CHANGELOG.md)
- [Commits](i18next/react-i18next@v17.0.8...v17.0.10)

---
updated-dependencies:
- dependency-name: "@fastify/compress"
  dependency-version: 9.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: "@fastify/cookie"
  dependency-version: 11.1.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: "@fastify/helmet"
  dependency-version: 13.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: "@fastify/multipart"
  dependency-version: 10.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: "@fastify/static"
  dependency-version: 10.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-dependencies
- dependency-name: fastify
  dependency-version: 5.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: node-cron
  dependency-version: 4.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: tar
  dependency-version: 7.5.20
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-dependencies
- dependency-name: "@floating-ui/react"
  dependency-version: 0.27.20
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-dependencies
- dependency-name: i18next
  dependency-version: 26.3.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-dependencies
- dependency-name: react-i18next
  dependency-version: 17.0.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 20, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants