Skip to content
This repository was archived by the owner on Feb 1, 2026. It is now read-only.

fix(deps): update dependency @fastify/cors to v11#352

Merged
gander merged 1 commit into
mainfrom
renovate/fastify-cors-11.x
Feb 1, 2026
Merged

fix(deps): update dependency @fastify/cors to v11#352
gander merged 1 commit into
mainfrom
renovate/fastify-cors-11.x

Conversation

@renovate

@renovate renovate Bot commented Jan 31, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
@fastify/cors ^9.0.1 → ^11.0.0 age confidence

Release Notes

fastify/fastify-cors (@​fastify/cors)

v11.2.0

Compare Source

What's Changed
New Contributors

Full Changelog: fastify/fastify-cors@v11.1.0...v11.2.0

v11.1.0

Compare Source

What's Changed

New Contributors

Full Changelog: fastify/fastify-cors@v11.0.1...v11.1.0

v11.0.1

Compare Source

What's Changed
New Contributors

Full Changelog: fastify/fastify-cors@v11.0.0...v11.0.1

v11.0.0

Compare Source

Breaking Change

In order to provides safer default, we change the methods to the CORS-safelisted methods.
If you want to resume the previous behaviour, you need to explicitly specify the methods,

import Fastify from 'fastify'
import cors from '@​fastify/cors'

const fastify = Fastify()
await fastify.register(cors, {
  methods: "GET,HEAD,PUT,PATCH,POST,DELETE"
})
What's Changed

Full Changelog: fastify/fastify-cors@v10.1.0...v11.0.0

v10.1.0

Compare Source

What's Changed
New Contributors

Full Changelog: fastify/fastify-cors@v10.0.2...v10.1.0

v10.0.2

Compare Source

What's Changed

New Contributors

Full Changelog: fastify/fastify-cors@v10.0.1...v10.0.2

v10.0.1

Compare Source

What's Changed

Full Changelog: fastify/fastify-cors@v10.0.0...v10.0.1

v10.0.0

Compare Source

What's Changed

New Contributors

Full Changelog: fastify/fastify-cors@v9.0.1...v10.0.0

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added the dependencies Changes to project dependencies (npm packages) label Jan 31, 2026
@github-project-automation github-project-automation Bot moved this to Backlog in Diff Voyager Jan 31, 2026
@github-actions github-actions Bot added size/small Small effort: 1-2 hours of work renovate Automated dependency updates from Renovate bot backend Backend-related code (Node.js, API, database, repositories) labels Jan 31, 2026
@github-actions

github-actions Bot commented Jan 31, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Dependency Review

The following issues were found:
  • ✅ 0 vulnerable package(s)
  • ✅ 0 package(s) with incompatible licenses
  • ✅ 0 package(s) with invalid SPDX license definitions
  • ⚠️ 1 package(s) with unknown licenses.
See the Details below.

License Issues

packages/backend/package.json

PackageVersionLicenseIssue Type
@fastify/cors^11.0.0NullUnknown License

OpenSSF Scorecard

PackageVersionScoreDetails
npm/@fastify/cors 11.2.0 🟢 6.8
Details
CheckScoreReason
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
Code-Review🟢 4Found 10/23 approved changesets -- score normalized to 4
Binary-Artifacts🟢 10no binaries found in the repo
Maintained🟢 43 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 4
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Vulnerabilities🟢 100 existing vulnerabilities detected
License🟢 9license file detected
Fuzzing⚠️ 0project is not fuzzed
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Signed-Releases⚠️ -1no releases found
Security-Policy🟢 10security policy file detected
SAST🟢 7SAST tool is not run on all commits -- score normalized to 7
npm/fastify-plugin 5.1.0 🟢 6.3
Details
CheckScoreReason
Code-Review🟢 3Found 8/24 approved changesets -- score normalized to 3
Binary-Artifacts🟢 10no binaries found in the repo
Packaging⚠️ -1packaging workflow not detected
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
Maintained⚠️ 01 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Vulnerabilities🟢 100 existing vulnerabilities detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 9license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Security-Policy🟢 10security policy file detected
SAST🟢 8SAST tool is not run on all commits -- score normalized to 8
npm/@fastify/cors ^11.0.0 🟢 6.8
Details
CheckScoreReason
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
Code-Review🟢 4Found 10/23 approved changesets -- score normalized to 4
Binary-Artifacts🟢 10no binaries found in the repo
Maintained🟢 43 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 4
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Vulnerabilities🟢 100 existing vulnerabilities detected
License🟢 9license file detected
Fuzzing⚠️ 0project is not fuzzed
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Signed-Releases⚠️ -1no releases found
Security-Policy🟢 10security policy file detected
SAST🟢 7SAST tool is not run on all commits -- score normalized to 7

Scanned Files

  • package-lock.json
  • packages/backend/package.json

@socket-security

socket-security Bot commented Jan 31, 2026 •
edited
Loading

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Updated@​fastify/​cors@​9.0.1 ⏵ 11.2.010010010090100

View full report

@renovate
renovate Bot force-pushed the renovate/fastify-cors-11.x branch 2 times, most recently from 81db4ad to b5bb669 Compare January 31, 2026 19:02
@gander
gander force-pushed the renovate/fastify-cors-11.x branch from b5bb669 to b8a31ba Compare January 31, 2026 23:50
@gander

gander commented Feb 1, 2026

Copy link
Copy Markdown
Member

✅ Testy przechodzą lokalnie

Wszystkie testy backendowe przechodzą pomyślnie lokalnie (Node.js 22):

  • 44 pliki testowe: ✅ PASSED
  • 683 testy: ✅ PASSED
  • 23 testy pominięte (oczekiwane)

Błędy CI wyglądają na przejściowe problemy środowiskowe. Mergeuję.

@gander
gander added this pull request to the merge queue Feb 1, 2026
Merged via the queue into main with commit bd763db Feb 1, 2026
17 of 19 checks passed
@gander
gander deleted the renovate/fastify-cors-11.x branch February 1, 2026 00:05
@github-project-automation github-project-automation Bot moved this from Backlog to Done in Diff Voyager Feb 1, 2026
@gander gander mentioned this pull request Feb 1, 2026
Closed
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Reviewers

No reviews

Assignees

No one assigned

Labels

backend Backend-related code (Node.js, API, database, repositories) dependencies Changes to project dependencies (npm packages) renovate Automated dependency updates from Renovate bot size/small Small effort: 1-2 hours of work

Projects

Diff Voyager
Status: Done

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@gander