v9.0.3

What's Changed

• build(deps-dev): bump helmet from 7.2.0 to 8.0.0 by @dependabot in #217
• refactor(lib/engine): replace var with let by @Fdawgs in #218
• build(deps): bump fastify/workflows from 5.0.0 to 5.0.1 by @dependabot in #219
• style: remove trailing whitespace by @Fdawgs in #220
• docs(readme): update ci badge syntax by @Fdawgs in #221
• build(deps-dev): replace standard with neostandard by @Fdawgs in #222
• types: use node: prefix for builtins by @Fdawgs in #223
• build(deps-dev): bump neostandard from 0.11.9 to 0.12.0 by @dependabot in #224
• build(deps-dev): add eslint, peer dep of neostandard by @Fdawgs in #225
• refactor: prefix unused params with underscores by @Fdawgs in #226
• docs(readme): spelling and grammar fixes by @Fdawgs in #227

Full Changelog: v9.0.2...v9.0.3

v9.0.2

What's Changed

• chore: update fastify to ^5.0.0 by @Fdawgs in #216

Full Changelog: v9.0.1...v9.0.2

v8.3.3

Security

• path-to-regexp is updated to 6.3.0 to prevent ReDOS attack, it is recommended to use the latest version of this package.

What's Changed

• fix(8.x): use path-to-regexp@6.3.0 by @climba03003 in #215

Full Changelog: v8.3.2...v8.3.3

v9.0.1

Security

• path-to-regexp is updated to 8.1.0 to prevent ReDOS attack, it is recommended to use the latest version of this package.

What's Changed

• chore: bump path-to-regexp to 8.1.0 by @climba03003 in #212

Full Changelog: v9.0.0...v9.0.1

v8.3.2

Deprecated

This version includes too much breaking change due to security patch. Please upgrade to version 8.3.3 which includes the security patch with minimal breakages.

Security

• path-to-regexp is updated to 8.1.0 to prevent ReDOS attack, it is recommended to use the latest version of this package.

You may see some unexpected breaking due the security patch. Here is the workaround,

1. when you are using wildcard *, you must to provides a param name.

// before
fastify.use('*.css')
// after
fastify.use('*filename{.css}')

What's Changed

• chore(8.x): bump path-to-regexp to 8.1.0 by @climba03003 in #213

Full Changelog: v8.3.1...v8.3.2

v9.0.0

What's Changed

• Merge next into master by @jsumners in #203
• build(deps): bump @fastify/error from 3.4.1 to 4.0.0 by @dependabot in #205
• build(deps): bump fastify/workflows from 4.1.0 to 4.2.1 by @dependabot in #206
• build(deps-dev): bump @types/node from 20.14.13 to 22.0.0 by @dependabot in #208
• build(deps): bump fastify/workflows from 4.2.1 to 5.0.0 by @dependabot in #210
• chore: update min fastify version by @Fdawgs in #209

New Contributors

• @jsumners made their first contribution in #203

Full Changelog: v8.3.1...v9.0.0

v8.3.1

What's Changed

• build(deps-dev): bump tsd from 0.28.1 to 0.29.0 by @dependabot in #189
• perf: use node: prefix to bypass require.cache call for builtins by @Fdawgs in #190
• chore: add .gitattributes file by @Fdawgs in #192
• chore(package): explicitly declare js module type by @Fdawgs in #193
• build(deps-dev): bump tsd from 0.29.0 to 0.30.0 by @dependabot in #194
• docs(readme): replace fastify.io links with fastify.dev by @Fdawgs in #195
• docs(readme): remove www. from fastify.dev urls by @Fdawgs in #196
• chore(.gitignore): add .tap/ dir by @Fdawgs in #197
• build(deps-dev): bump tsd from 0.30.7 to 0.31.0 by @dependabot in #198
• Warn for possible ReDoS by @mcollina in #200
• Only sets req.raw.body if body defined, aligning behaviour with node:http by @didley in #201

New Contributors

• @didley made their first contribution in #201

Full Changelog: v8.3.0...v8.3.1

v8.3.0

What's Changed

• build(deps-dev): bump @types/node from 18.16.5 to 20.1.0 by @dependabot in #184
• build(deps-dev): bump helmet from 6.2.0 to 7.0.0 by @dependabot in #183
• support hooks with payloads by @Uzlopak in #185

Full Changelog: v8.2.0...v8.3.0

v8.2.0

What's Changed

• chore(.gitignore): add clinic by @Fdawgs in #174
• chore(.gitignore): add bun lockfile by @Fdawgs in #176
• build(deps-dev): bump tsd from 0.25.0 to 0.27.0 by @dependabot in #177
• build(deps-dev): bump tsd from 0.27.0 to 0.28.0 by @dependabot in #178
• added protocol to request by @domsen123 in #180
• ci: only trigger on pushes to main branches by @Fdawgs in #181

New Contributors

• @domsen123 made their first contribution in #180

Full Changelog: v8.1.0...v8.2.0

v8.1.0

What's Changed

• docs(readme): update references to old module by @Fdawgs in #149
• chore(.gitignore): use updated skeleton template by @Fdawgs in #150
• build(deps-dev): bump typescript from 4.7.3 to 4.7.4 by @dependabot in #151
• build(deps-dev): bump tsd from 0.20.0 to 0.21.0 by @dependabot in #152
• build(deps-dev): bump @types/node from 17.0.45 to 18.0.1 by @dependabot in #154
• build(deps-dev): bump tsd from 0.21.0 to 0.22.0 by @dependabot in #155
• Replace startsWith with direct property comparison by @Uzlopak in #156
• build(deps): bump fastify-plugin from 3.0.1 to 4.0.0 by @dependabot in #157
• ci: enable license checking by @Fdawgs in #159
• build(deps-dev): replace pre-commit with @fastify/pre-commit by @Fdawgs in #160
• docs(readme): replace use of deprecated variadic listen() by @Fdawgs in #161
• build(deps-dev): bump tsd from 0.22.0 to 0.23.0 by @dependabot in #162
• build(deps-dev): bump helmet from 5.1.1 to 6.0.0 by @dependabot in #164
• build(deps-dev): bump typescript from 4.7.4 to 4.8.2 by @dependabot in #163
• build(deps-dev): bump typescript from 4.8.2 to 4.8.3 by @dependabot in #165
• build(deps-dev): bump tsd from 0.23.0 to 0.24.1 by @dependabot in #166
• build(deps-dev): bump typescript from 4.8.3 to 4.8.4 by @dependabot in #167
• Remove typescript as devDependency by @Uzlopak in #168
• use .taprc and improve npm scripts by @Uzlopak in #171
• disable package-lock generation by @Uzlopak in #170
• build(deps-dev): bump tsd from 0.24.1 to 0.25.0 by @dependabot in #173
• nodenext compatibility by @Uzlopak in #172

New Contributors

• @Uzlopak made their first contribution in #156

Full Changelog: v8.0.0...v8.1.0