fastify

Full Changelog: https://github.com/fastify/fastify/compare/v5.7.3...v5.7.4

⚠️ Security Release

• Fix https://github.com/fastify/fastify/security/advisories/GHSA-mrq3-vjjr-p77c CVE-2026-25224.

What's Changed

• docs: update Reply.send() documentation for string serialization by @mcollina in https://github.com/fastify/fastify/pull/6466
• chore: ignore agents config files by @mcollina in https://github.com/fastify/fastify/pull/6474
• docs: update vulnerabili...

⚠️ Notice ⚠️

Parsing of the content-type header has been improved to a strict parser in PR #6414. This means only header values in the form described in RFC 9110 are accepted.

What's Changed

• chore: npm ignore AI related files by @climba03003 in https://github.com/fastify/fastify/pull/6447
• chore: update sponsor url by...

What's Changed

• chore: Bump actions/checkout from 5 to 6 by @dependabot[bot] in https://github.com/fastify/fastify/pull/6434
• chore: updated version in the fastify.js by @Tony133 in https://github.com/fastify/fastify/pull/6446

Full Changelog: https://github.com/fastify/fastify/compare/v5.7.0...v5.7.1

What's Changed

• docs: Improved firebase serverless guide about process remaining stuck by @alexandercerutti in https://github.com/fastify/fastify/pull/6380
• docs: update migration guide with date-time breaking change by @craftsman01 in https://github.com/fastify/fastify/pull/6110
• chore: remove test file by @Eomm in https://github.com/fastify/fastify/pull/6384
• feat: speed up loading wi...

What's Changed

• refactor: rename source file names with kebab-case by @jean-michelet in https://github.com/fastify/fastify/pull/6331
• ci(ci): check dependabot prs originate from repo by @Fdawgs in https://github.com/fastify/fastify/pull/6330
• fix: accept htab ows by @jean-michelet in https://github.com/fastify/fastify/pull/6303
• fix: handle non FastifyErrors in custom handler properly, set...

What's Changed

• fix: fix typo of deprecation warning FSTDEP022 by @Uzlopak in https://github.com/fastify/fastify/pull/6313
• docs(decorators): fix TypeScript inconsistency by @emicovi in https://github.com/fastify/fastify/pull/6224
• chore: fix typos by @deining in https://github.com/fastify/fastify/pull/6316
• docs(security): add secondary contact/security escalation policy by @UlisesGasc...

What's Changed

• fix: update typescript pino type to pick by @dancastillo in https://github.com/fastify/fastify/pull/6287
• feat(types): router option types by @dancastillo in https://github.com/fastify/fastify/pull/6282
• fix(types): Fix use of "esModuleInterop: false" by @joshkel in https://github.com/fastify/fastify/pull/6292
• docs: fix typo in Reference: TypeScript.md by @hmanzoni in h...

What's Changed

• docs: fix markdown linting issue by @Uzlopak in https://github.com/fastify/fastify/pull/6175
• chore: removed simple-get from mkcalendar tests by @ilteoood in https://github.com/fastify/fastify/pull/6199
• chore: removed simple-get from versioned-routes tests by @ilteoood in https://github.com/fastify/fastify/pull/6202
• chore: removed simple-get from hooks tests by @ilteoood i...

What's Changed

• test: mv routes-* from tap by @jean-michelet in https://github.com/fastify/fastify/pull/6092
• test: mv skip-reply-send from tap by @jean-michelet in https://github.com/fastify/fastify/pull/6094
• test: mv plugins from tap by @jean-michelet in https://github.com/fastify/fastify/pull/6088
• fix(ci): ignore alternative runtime result by @Eomm in https://github.com/fastify/fas...