Skip to content

chore(deps-dev): Bump the minor-and-patch group across 1 directory with 3 updates - #1620

Merged
pathosDev merged 1 commit into
developfrom
dependabot/bun/minor-and-patch-890da56656
Sep 21, 2026
Merged

pathosDev merged 1 commit into
developfrom
dependabot/bun/minor-and-patch-890da56656

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 21, 2026

Copy link
Copy Markdown
Contributor

Bumps the minor-and-patch group with 3 updates in the / directory: @fastify/static, @fastify/websocket and knip.

Updates @fastify/static from 10.1.3 to 10.1.4

Release notes

Sourced from @​fastify/static's releases.

v10.1.4

This is a security release for GHSA-r799-r9gc-m956 (CVE-2026-90982).

It fixes a route guard and allowedPath bypass on case-insensitive filesystems. Users should upgrade to @fastify/static 10.1.4.

Full Changelog: fastify/fastify-static@v10.1.3...v10.1.4

Commits
  • a39a464 Bumped v10.1.4
  • ac46015 Ignore .pi
  • 6288466 test: consume compressed response bodies
  • 04134a4 test: cover rootless path validation on Windows
  • d9a8c0a test: make case-folding fallback portable
  • dbe65e8 Merge commit from fork
  • 48b821f chore: bump content-disposition in the dependencies group (#607)
  • ee3f89d chore: bump fastify/workflows/.github/workflows/plugins-ci.yml (#604)
  • See full diff in compare view

Updates @fastify/websocket from 11.3.0 to 11.3.1

Release notes

Sourced from @​fastify/websocket's releases.

v11.3.1

What's Changed

New Contributors

Full Changelog: fastify/fastify-websocket@v11.3.0...v11.3.1

Commits
  • 6d1dc98 Bumped v11.3.1
  • 9704c20 fix: remove custom server upgrade listener on close
  • 2ea163a chore: Bump fastify/workflows/.github/workflows/lock-threads.yml (#378)
  • b61f137 chore: Bump fastify/workflows/.github/workflows/plugins-ci.yml
  • b956e76 chore(.npmrc): add min-release-age
  • 24f9600 chore: Bump c8 from 11.0.0 to 12.0.0 (#375)
  • e3fb43f fix: route raw socket 'error' events through the errorHandler option (#373)
  • 0832a63 ci: pin actions to commit-hash
  • See full diff in compare view
Maintainer changes

This version was pushed to npm by tony133, a new releaser for @​fastify/websocket since your current version.


Updates knip from 6.36.0 to 6.37.0

Release notes

Sourced from knip's releases.

Release 6.37.0

  • fix(graphql-codegen): mark near-operation-file outputs as entries, not the documents directory (#2048) (06a68fcf99a90e559daeb0b8fb2d24e173124774) - thanks @​RobHannay!
  • fix: enable JSX in the config loader (#1959) (5b21dc9192f773613d1c5db8edf35f0a68820268) - thanks @​addielaruee!
  • Match binaries only to their actual dependency providers (c5bdb69ccbcb7e1056233f346d0ada3495d1013d)
  • Preserve executable references across package manager commands (54af171638db22f5d903faae05c37c2ea6adc869)
  • Correct binary provider metadata in Relay fixtures (e67dfcb96d055c27be9c8601e077656855bb632b)
  • Separate shell binary expectations from reporting exemptions (resolve #2022) (c1d7d75a3529d9faff7f4c0df11dd0ca1bdfb149)
  • Respect npx no-install flags before the executable (4237010c9a834eb8b04f4a528c76d10a5c38ee98)
  • Update dependencies (038ea179f7d6bf7ca43bc5daf553a68b13a9067c)
  • Remove npm auth check now that's in release-it (4aaf77c58004ac64063a1982b98e53107c2ebe93)
  • Fix --format name resolution in the ESLint plugin (#2046) (1269e98bb700384811fadc124d69ea720832037e) - thanks @​bytedoe!
Commits
  • 675c1b1 Release knip@6.37.0
  • 1269e98 Fix --format name resolution in the ESLint plugin (#2046)
  • 038ea17 Update dependencies
  • 4237010 Respect npx no-install flags before the executable
  • c1d7d75 Separate shell binary expectations from reporting exemptions (resolve #2022)
  • e67dfcb Correct binary provider metadata in Relay fixtures
  • 54af171 Preserve executable references across package manager commands
  • c5bdb69 Match binaries only to their actual dependency providers
  • 5b21dc9 fix: enable JSX in the config loader (#1959)
  • 06a68fc fix(graphql-codegen): mark near-operation-file outputs as entries, not the do...
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…th 3 updates

Bumps the minor-and-patch group with 3 updates in the / directory: [@fastify/static](https://github.com/fastify/fastify-static), [@fastify/websocket](https://github.com/fastify/fastify-websocket) and [knip](https://github.com/webpro-nl/knip/tree/HEAD/packages/knip).


Updates `@fastify/static` from 10.1.3 to 10.1.4
- [Release notes](https://github.com/fastify/fastify-static/releases)
- [Commits](fastify/fastify-static@v10.1.3...v10.1.4)

Updates `@fastify/websocket` from 11.3.0 to 11.3.1
- [Release notes](https://github.com/fastify/fastify-websocket/releases)
- [Commits](fastify/fastify-websocket@v11.3.0...v11.3.1)

Updates `knip` from 6.36.0 to 6.37.0
- [Release notes](https://github.com/webpro-nl/knip/releases)
- [Commits](https://github.com/webpro-nl/knip/commits/knip@6.37.0/packages/knip)

---
updated-dependencies:
- dependency-name: "@fastify/static"
  dependency-version: 10.1.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@fastify/websocket"
  dependency-version: 11.3.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: knip
  dependency-version: 6.37.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Sep 21, 2026
@pathosDev
pathosDev merged commit 2ffd0c0 into develop Sep 21, 2026
61 checks passed
@dependabot
dependabot Bot deleted the dependabot/bun/minor-and-patch-890da56656 branch September 21, 2026 22:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant