Skip to content

Bump the all-npm-dependencies group across 1 directory with 14 updates#17

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/all-npm-dependencies-ef5df70e60
Closed

Bump the all-npm-dependencies group across 1 directory with 14 updates#17
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/all-npm-dependencies-ef5df70e60

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 20, 2026 •
edited
Loading

Bumps the all-npm-dependencies group with 14 updates in the / directory:

Package From To
@dnlup/fastify-traps 2.0.0 3.1.0
@fastify/static 6.10.2 9.1.3
@fastify/view 8.0.0 11.1.1
bootstrap 5.3.0 5.3.8
dotenv 16.3.1 17.4.2
fastify 4.19.2 5.8.5
fastify-cli 5.7.1 8.0.0
lodash 4.17.21 4.18.1
pug 3.0.2 3.0.4
rollbar 2.26.2 3.1.0
jest 29.6.1 30.4.2
npm-check-updates 16.10.15 22.2.0
pino 8.14.1 10.3.1
pino-pretty 10.0.1 13.1.3

Updates @dnlup/fastify-traps from 2.0.0 to 3.1.0

Release notes

Sourced from @​dnlup/fastify-traps's releases.

3.1.0

3.1.0 (2024-11-29)

Features

3.0.2

3.0.2 (2024-01-16)

3.0.1

3.0.1 (2023-12-21)

Bug Fixes

3.0.0

3.0.0 (2023-08-31)

⚠ BREAKING CHANGES

  • types: the hooks type is changed
Changelog

Sourced from @​dnlup/fastify-traps's changelog.

3.1.0 (2024-11-29)

Features

3.0.2 (2024-01-16)

3.0.1 (2023-12-21)

Bug Fixes

3.0.0 (2023-08-31)

⚠ BREAKING CHANGES

  • types: the hooks type is changed

Features

  • upgrade fastify-plugin from 3.0.1 to 4.0.0 (a95fef8)

Bug Fixes

Commits

Updates @fastify/static from 6.10.2 to 9.1.3

Release notes

Sourced from @​fastify/static's releases.

v9.1.3

What's Changed

Full Changelog: fastify/fastify-static@v9.1.2...v9.1.3

v9.1.2

What's Changed

Full Changelog: fastify/fastify-static@v9.1.1...v9.1.2

v9.1.1

⚠️ Security Release

This fixes CVE CVE-2026-6410 GHSA-pr96-94w5-mx2h. This fixes CVE CVE-2026-6414 GHSA-x428-ghpx-8j92.

What's Changed

Full Changelog: fastify/fastify-static@v9.1.0...v9.1.1

v9.1.0

What's Changed

New Contributors

Full Changelog: fastify/fastify-static@v9.0.0...v9.1.0

v9.0.0

What's Changed

... (truncated)

Commits

Updates @fastify/view from 8.0.0 to 11.1.1

Release notes

Sourced from @​fastify/view's releases.

v11.1.1

What's Changed

New Contributors

Full Changelog: fastify/point-of-view@v11.1.0...v11.1.1

v11.1.0

What's Changed

New Contributors

Full Changelog: fastify/point-of-view@v11.0.0...v11.1.0

v11.0.0

What's Changed

New Contributors

Full Changelog: fastify/point-of-view@v10.0.2...v11.0.0

v10.0.2

What's Changed

... (truncated)

Commits
  • d0da734 Bumped v11.1.1
  • 399543d Fix using multiple view instances in production mode (#476)
  • c7f1cb0 chore: remove tap (#482)
  • add11a0 build(deps-dev): bump cross-env from 7.0.3 to 10.0.0 (#480)
  • c68d474 build(deps-dev): bump @​types/node from 22.15.34 to 24.0.8 (#479)
  • 969e833 chore(license): update date ranges; standardise style (#478)
  • 966840f Bumped v11.1.0
  • 8944500 feat: add Edge.js templating engine support (#472)
  • 0af5663 Add security notice for raw option (#475)
  • 64f6502 build(deps-dev): bump borp from 0.19.0 to 0.20.0 (#474)
  • Additional commits viewable in compare view

Updates bootstrap from 5.3.0 to 5.3.8

Release notes

Sourced from bootstrap's releases.

v5.3.8

What's Changed

Dependencies

New Contributors

Full Changelog: twbs/bootstrap@v5.3.7...v5.3.8

v5.3.7

📚 Documentation

... (truncated)

Commits

Updates dotenv from 16.3.1 to 17.4.2

Changelog

Sourced from dotenv's changelog.

17.4.2 (2026-04-12)

Changed

  • Improved skill files - tightened up details (#1009)

17.4.1 (2026-04-05)

Changed

  • Change text injecting to injected (#1005)

17.4.0 (2026-04-01)

Added

  • Add skills/ folder with focused agent skills: skills/dotenv/SKILL.md (core usage) and skills/dotenvx/SKILL.md (encryption, multiple environments, variable expansion) for AI coding agent discovery via the skills.sh ecosystem (npx skills add motdotla/dotenv)

Changed

  • Tighten up logs: ◇ injecting env (14) from .env (#1003)

17.3.1 (2026-02-12)

Changed

  • Fix as2 example command in README and update spanish README

17.3.0 (2026-02-12)

Added

  • Add a new README section on dotenv’s approach to the agentic future.

Changed

  • Rewrite README to get humans started more quickly with less noise while simultaneously making more accessible for llms and agents to go deeper into details.

17.2.4 (2026-02-05)

Changed

  • Make DotenvPopulateInput accept NodeJS.ProcessEnv type (#915)
  • Give back to dotenv by checking out my newest project vestauth. It is auth for agents. Thank you for using my software.

17.2.3 (2025-09-29)

Changed

  • Fixed typescript error definition (#912)

... (truncated)

Commits

Updates fastify from 4.19.2 to 5.8.5

Release notes

Sourced from fastify's releases.

v5.8.5

⚠️ Security Release

This fixes CVE CVE-2026-33806 GHSA-247c-9743-5963.

What's Changed

New Contributors

Full Changelog: fastify/fastify@v5.8.4...v5.8.5

v5.8.4

Full Changelog: fastify/fastify@v5.8.3...v5.8.4

v5.8.3

⚠️ Security Release

This fixes CVE CVE-2026-3635 GHSA-444r-cwp2-x5xf.

What's Changed

New Contributors

... (truncated)

Commits
  • 3983cce Bumped v5.8.5
  • 3ce3ae6 Merge commit from fork
  • b06a196 docs(ecosystem): add @​pompelmi/fastify-plugin (#6610)
  • 909c5d5 chore: Bump actions/dependency-review-action from 4.8.3 to 4.9.0 (#6630)
  • 4db21a3 chore: Bump borp from 0.21.0 to 1.0.0 (#6633)
  • 0f4e544 chore: Bump markdownlint-cli2 from 0.21.0 to 0.22.0 (#6632)
  • 33a2fcd chore: Bump pnpm/action-setup from 4.2.0 to 5.0.0 (#6629)
  • fd35d82 ci: reduce cron schedules from daily/weekly to monthly (#6623)
  • 8dee9be fix: restore trustProxy function for number and string types, add null check ...
  • d457aed chore: upgrade to typescript v6.0.2 (#6605)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by climba03003, a new releaser for fastify since your current version.


Updates fastify-cli from 5.7.1 to 8.0.0

Release notes

Sourced from fastify-cli's releases.

v8.0.0

What's Changed

New Contributors

Full Changelog: fastify/fastify-cli@v7.4.1...v8.0.0

v7.4.1

What's Changed

... (truncated)

Commits

Updates lodash from 4.17.21 to 4.18.1

Release notes

Sourced from lodash's releases.

4.18.1

Bugs

Fixes a ReferenceError issue in lodash lodash-es lodash-amd and lodash.template when using the template and fromPairs functions from the modular builds. See lodash/lodash#6167

These defects were related to how lodash distributions are built from the main branch using https://github.com/lodash-archive/lodash-cli. When internal dependencies change inside lodash functions, equivalent updates need to be made to a mapping in the lodash-cli. (hey, it was ahead of its time once upon a time!). We know this, but we missed it in the last release. It's the kind of thing that passes in CI, but fails bc the build is not the same thing you tested.

There is no diff on main for this, but you can see the diffs for each of the npm packages on their respective branches:

4.18.0

v4.18.0

Full Changelog: lodash/lodash@4.17.23...4.18.0

Security

_.unset / _.omit: Fixed prototype pollution via constructor/prototype path traversal (

@dependabot
Bump the all-npm-dependencies group across 1 directory with 14 updates
e0be94a 
Bumps the all-npm-dependencies group with 14 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@dnlup/fastify-traps](https://github.com/dnlup/fastify-traps) | `2.0.0` | `3.1.0` |
| [@fastify/static](https://github.com/fastify/fastify-static) | `6.10.2` | `9.1.3` |
| [@fastify/view](https://github.com/fastify/point-of-view) | `8.0.0` | `11.1.1` |
| [bootstrap](https://github.com/twbs/bootstrap) | `5.3.0` | `5.3.8` |
| [dotenv](https://github.com/motdotla/dotenv) | `16.3.1` | `17.4.2` |
| [fastify](https://github.com/fastify/fastify) | `4.19.2` | `5.8.5` |
| [fastify-cli](https://github.com/fastify/fastify-cli) | `5.7.1` | `8.0.0` |
| [lodash](https://github.com/lodash/lodash) | `4.17.21` | `4.18.1` |
| [pug](https://github.com/pugjs/pug) | `3.0.2` | `3.0.4` |
| [rollbar](https://github.com/rollbar/rollbar.js) | `2.26.2` | `3.1.0` |
| [jest](https://github.com/jestjs/jest/tree/HEAD/packages/jest) | `29.6.1` | `30.4.2` |
| [npm-check-updates](https://github.com/raineorshine/npm-check-updates) | `16.10.15` | `22.2.0` |
| [pino](https://github.com/pinojs/pino) | `8.14.1` | `10.3.1` |
| [pino-pretty](https://github.com/pinojs/pino-pretty) | `10.0.1` | `13.1.3` |



Updates `@dnlup/fastify-traps` from 2.0.0 to 3.1.0
- [Release notes](https://github.com/dnlup/fastify-traps/releases)
- [Changelog](https://github.com/dnlup/fastify-traps/blob/next/CHANGELOG.md)
- [Commits](dnlup/fastify-traps@v2.0.0...v3.1.0)

Updates `@fastify/static` from 6.10.2 to 9.1.3
- [Release notes](https://github.com/fastify/fastify-static/releases)
- [Commits](fastify/fastify-static@v6.10.2...v9.1.3)

Updates `@fastify/view` from 8.0.0 to 11.1.1
- [Release notes](https://github.com/fastify/point-of-view/releases)
- [Commits](fastify/point-of-view@v8.0.0...v11.1.1)

Updates `bootstrap` from 5.3.0 to 5.3.8
- [Release notes](https://github.com/twbs/bootstrap/releases)
- [Commits](twbs/bootstrap@v5.3.0...v5.3.8)

Updates `dotenv` from 16.3.1 to 17.4.2
- [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md)
- [Commits](motdotla/dotenv@v16.3.1...v17.4.2)

Updates `fastify` from 4.19.2 to 5.8.5
- [Release notes](https://github.com/fastify/fastify/releases)
- [Commits](fastify/fastify@v4.19.2...v5.8.5)

Updates `fastify-cli` from 5.7.1 to 8.0.0
- [Release notes](https://github.com/fastify/fastify-cli/releases)
- [Commits](fastify/fastify-cli@v5.7.1...v8.0.0)

Updates `lodash` from 4.17.21 to 4.18.1
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](lodash/lodash@4.17.21...4.18.1)

Updates `pug` from 3.0.2 to 3.0.4
- [Release notes](https://github.com/pugjs/pug/releases)
- [Commits](https://github.com/pugjs/pug/compare/pug@3.0.2...pug@3.0.4)

Updates `rollbar` from 2.26.2 to 3.1.0
- [Release notes](https://github.com/rollbar/rollbar.js/releases)
- [Changelog](https://github.com/rollbar/rollbar.js/blob/master/CHANGELOG.md)
- [Commits](rollbar/rollbar.js@v2.26.2...v3.1.0)

Updates `jest` from 29.6.1 to 30.4.2
- [Release notes](https://github.com/jestjs/jest/releases)
- [Changelog](https://github.com/jestjs/jest/blob/main/CHANGELOG.md)
- [Commits](https://github.com/jestjs/jest/commits/v30.4.2/packages/jest)

Updates `npm-check-updates` from 16.10.15 to 22.2.0
- [Release notes](https://github.com/raineorshine/npm-check-updates/releases)
- [Changelog](https://github.com/raineorshine/npm-check-updates/blob/main/CHANGELOG.md)
- [Commits](raineorshine/npm-check-updates@v16.10.15...v22.2.0)

Updates `pino` from 8.14.1 to 10.3.1
- [Release notes](https://github.com/pinojs/pino/releases)
- [Commits](pinojs/pino@v8.14.1...v10.3.1)

Updates `pino-pretty` from 10.0.1 to 13.1.3
- [Release notes](https://github.com/pinojs/pino-pretty/releases)
- [Commits](pinojs/pino-pretty@v10.0.1...v13.1.3)

---
updated-dependencies:
- dependency-name: "@dnlup/fastify-traps"
  dependency-version: 3.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-npm-dependencies
- dependency-name: "@fastify/static"
  dependency-version: 9.1.3
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-npm-dependencies
- dependency-name: "@fastify/view"
  dependency-version: 11.1.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-npm-dependencies
- dependency-name: bootstrap
  dependency-version: 5.3.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-npm-dependencies
- dependency-name: dotenv
  dependency-version: 17.4.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-npm-dependencies
- dependency-name: fastify
  dependency-version: 5.8.5
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-npm-dependencies
- dependency-name: fastify-cli
  dependency-version: 8.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-npm-dependencies
- dependency-name: lodash
  dependency-version: 4.18.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-npm-dependencies
- dependency-name: pug
  dependency-version: 3.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-npm-dependencies
- dependency-name: rollbar
  dependency-version: 3.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-npm-dependencies
- dependency-name: jest
  dependency-version: 30.4.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all-npm-dependencies
- dependency-name: npm-check-updates
  dependency-version: 22.2.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all-npm-dependencies
- dependency-name: pino
  dependency-version: 10.3.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all-npm-dependencies
- dependency-name: pino-pretty
  dependency-version: 13.1.3
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all-npm-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels May 20, 2026
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github May 20, 2026

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this May 20, 2026
@dependabot dependabot Bot deleted the dependabot/npm_and_yarn/all-npm-dependencies-ef5df70e60 branch May 20, 2026 11:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants