From d6adcee27747ad92b8ce4de1350c692f5032dfdd Mon Sep 17 00:00:00 2001 From: Adam Soltys Date: Sat, 22 Aug 2026 08:43:38 -0700 Subject: deps: upgrade fastify v4 to v5 line to fix dependabot alerts Fastify 4.x is EOL with no backported fixes; all six open alerts (critical http-proxy header stripping, static path traversal + auth bypass, fastify body-validation bypass / host spoofing / DoS) are only patched on the v5 line. Bump fastify to 5.12.0 and all @fastify/* plugins to their v5-compatible majors, and migrate the two options v5 deprecated (disableRequestLogging -> logController, maxParamLength -> routerOptions). Co-Authored-By: Claude Fable 5 --- bun.lockb | Bin 235864 -> 242536 bytes 1 file changed, 0 insertions(+), 0 deletions(-) (limited to 'bun.lockb') diff --git a/bun.lockb b/bun.lockb index cc0f1089..1a005144 100755 Binary files a/bun.lockb and b/bun.lockb differ -- cgit v1.2.3