Fastify

Summary

Fix for two Fastify security advisories (GHSA‑w2qp‑rph6‑63g4 and GHSA‑3m5p‑2c4r‑xxw2).

Summary

Added per‑route logging for Google Cloud Functions and introduced `Reply.prototype.mediaType` for easier content‑type handling.

Summary

Fixed trailer state clearing when removing all trailers and corrected requestCompleted handling to use null instead of undefined.

Summary

Minor updates and bug fixes

Summary

Added a warning for HTTP method overrides and clarified attachValidation behavior in docs.

Summary

Added RFC 10008 HTTP query method support to Fastify.

Summary

Introduce a log controller layer for unified logging management

Summary

- Added request.mediaType support, onMaxParamLength option, and allowed request.getValidationFunction() to return undefined; new sponsor entries in ecosystem docs

Summary

Security release patching CVE‑2026‑33806.

Summary

No detailed changelog entries are provided for v5.8.4

Summary

Patched critical CVE‑2026‑3635 security vulnerability.

Summary

Updated ecosystem documentation by adding the @yeliex/fastify problem-details plugin, fastify file router, Svelte view, and community plugin listings.

Summary

Patch security vulnerability where malformed content types could bypass validation due to a missing end anchor in subtypeNameReg

Summary

Added first‑class handler‑level timeout support, async route‑hook handling, and Pino v9/v10 compatibility; fixed shared routerOptions mutation.

Summary

No specific changes are listed in the provided text.

Summary

Fixed CVE‑2026‑25224 security vulnerability.

Summary

Enforced strict RFC 9110 parsing for the Content‑Type header, potentially breaking non‑compliant usage

Summary

Upgrade actions/checkout from version 5 to 6

Summary

Added conditional request logging, a custom compiler for faster loading, and switched to the native WebStream API for improved performance.

Summary

Refactored source file names to kebab‑case and moved options processing to a dedicated function.

Summary

Fixed typo in deprecation warning and corrected TypeScript documentation inconsistency.

Summary

Added TypeScript types for router options and updated pino type to use `Pick`.

Summary

Added extensive TypeScript enhancements: more schema‑related types, missing error types, reply status code typing via type providers, and moved router options to a dedicated key.

Summary

Add configurable error‑handler override feature

Summary

Updated various documentation sections, including Vercel guide, ecosystem plugins, and error‑handler warnings

Summary

Fix for invalid content type parsing that could allow validation bypass.

Summary

Fixed edge case in content type parsing by treating spaces as delimiters, fully addressing CVE‑2025‑32442

Summary

🔒 Security fix for invalid content‑type parsing that could bypass validation (CVE‑2025‑32442).

Summary

Fixed wrong reply return type and cleared internal readyPromise for improved garbage collection.

Summary

Added async callback warning for `fastify.listen` and refined build path handling.

Summary

Updated docs to clarify request host handling and fixed a typo

Summary

Migrated most test files from tap to the built‑in node:test runner and standardized file naming conventions.

Summary

Added body parsing for COPY/MOVE/MKCOL methods and support for different body schemas per content type.

Summary

Migrated the entire test suite from tap to the built‑in node:test runner, adding new test runner features and updating related documentation

Summary

Breaking changes: added req.hostname and req.port, removed variadic listen methods and JSON shorthand, and tightened decorator type rules.

Summary

Fixed server.listen listener cleanup issue.

Summary

Fixed pipeline closing issue.

Summary

Added new HTTP methods (WebDAV body‑parsing methods, mkcalendar/report) and features like disabling request logging and handling synchronous errors in errorHandler.

Summary

Fixed multiple bugs: typo in module exports, callback error in fallbackErrorHandler, test failure, and missing DB connection code in migration docs.

Summary

Added Fastify Hana to community plugins list and updated documentation (including tracing warnings and a deprecation warning fix).

Summary

Added new APIs: expose findRoute and param validator, setGenReqId method, semicolon-delimited config option, and Web Stream API support.

Summary

Fixed npm test:watch command behavior

Summary

Fix route constraints handling

Summary

Improved typings for RouteShorthandOptions (constraints) and added async/callback style warnings for plugins, plus Uint8Array payload support in reply.send.

Summary

Fix timeout issue in CITGM tests

Summary

Fix build errors that occur when Symbol.asyncDispose type is not available.

Summary

Fix citgm issue

Summary

Added Symbol.asyncDispose to improve developer experience for short‑lived servers.

Summary

Added `routeOptions.schema` to Fastify TypeScript type definitions.

Summary

Fix warning messages for request.routerPath and request.routerMethod.

Summary

Added onListen hook and support for accessing handler name with route option properties

Summary

Removed an accidental test run result file from the package.

Summary

Fixed regression in handling async POST requests with empty bodies.

Summary

Fixed plugin tracking (hasPlugin) and prevented double responses when requests are destroyed.

Summary

Removed unused license checker and pump devDependencies.

Summary

Added new configuration options: childLoggerFactory, IPv6 ::1 listening origin, and allowUnsafeRegex type definition.

Summary

Fixed TypeScript route config typing to exclude url and method parameters.

Summary

Fix typo in TypeScript documentation

Summary

Added new request property `originalUrl`, exposed `pluginName` on FastifyInstance, introduced type narrowing for status().send() chains and stricter `decorate()` validation.

Summary

Added new immutable `listeningOrigin` property, async validation support, typed‑array body handling, and allowed lowercase HTTP methods when registering routes.

Summary

Added missing error codes to framework errors.

Summary

No specific change details provided in the prompt; refer to the full changelog link for complete information.

Summary

Incremental patch release to v4.16.2.

Summary

Patch release v4.16.1

Summary

Added new plugins (fastify-koa, fastify-redis-session) plus async hooks signature on routes and a preClose hook; also support for custom startup log text.

Summary

Added internal tree usage and exposed `prettyPrint` method parameter for improved pretty‑printing (feature)

Summary

Added Bun lockfile entry to .gitignore

Summary

Added onRequestAbort hook and new features: origin error messages in serialization errors and logging of refused requests.

Summary

Updated and expanded documentation, including client abort detection and numerous ecosystem plugin guides

Summary

Added fast content type parsing and nodenext compatibility support

Summary

Replace the PEM dependency with @climba03003 and switch to fast-content-type parsing

Summary

Fixed logger registration with custom logger and made res.statusCode optional, preventing re‑thrown error crashes.

Summary

Fixed incorrect Content-Type parsing that could enable CSRF attacks

Summary

Fixed incorrect content type parsing that could enable CSRF attacks

Summary

Fixed node 19.1.0 port validation test

Summary

Added async trailer support, request.routeOptions object, and typed reply content types via TypeProvider

Summary

Added missing context type definitions to improve TypeScript support.

Summary

Updated documentation: added reply stream content type info, fixed reference grammar, and added example for decorator dependencies

Summary

Added support for multiple response content types and ensured default schema compilers are called

Summary

Backport security fixes from advisory GHSA‑455w‑c45v‑86rg to the v3.x line (v3.29.3).

Summary

Fixes high severity security vulnerability (CVE‑2022‑39288) that could cause crashes and total loss of availability.

Summary

Fix GitHub URL for fastify‑qs package

Summary

Added support for HTTP SEARCH request bodies and introduced routeSchema/routeConfig handling.

Summary

Introduced `hasRoute` API and made the `listen` signature variadic, allowing string ports.

Summary

Backported fix for the reused connection issue.

Summary

Updated ecosystem.md to move fastify secure session and fastify soap client to core plugins.

Summary

Fix issue #4204 reported in the repository

Summary

Set preSerialization hooks to null by default to avoid unintended behavior.

Summary

Added the fastify‑osm plugin and an option to disable or ignore the request‑id header.

Summary

Added WebDAV HTTP methods and updated Fastify logger to use pino.BaseLogger as the main interface.

Summary

Expose validate and serialize functions on Request and Reply objects (new feature).

Summary

Introduced the official TypeORM Fastify plugin, added to the ecosystem list.

Summary

Updated documentation to reference new @fastify/ modules.

Summary

Added statusCode to all validation errors and fixed schema reference resolution using AJV.

Summary

Added feature: reply.redirect() and reply.callNotFound() now return the reply object.

Summary

Fixed Fastify.listen when using a path to prevent unintended port listening

Summary

Fixed error serializer test and disallowed reply status code 600.

Summary

Updated CI concurrency configuration and added markdown linting

Summary

- Fastify v4 introduces breaking changes: drops Node 12 support, removes flatstrt, deprecates the variadic listen method, changes default reply.sent handling and content‑type coercion for streams, among other API adjustments.

Summary

Update fastify error dependency.

Summary

Added support for custom Context Config types on hook request properties.

Summary

Fixed compatibility with Node.js v18 and master branch.

Summary

Removed the @typescript-eslint/no-misused-promises rule from the linting configuration.

Summary

Fixed several runtime issues: added jsonShorthand option, prevented uncaught exceptions from reply.callNotFound, and corrected plugin labeling and onRegister hook typings.

Summary

Fixed documentation links, grammar, and added missing TypeScript types for FastifyInstance methods and the `forceCloseConnections` option.

Summary

Added keep‑alive connection tracking to monitor active connections.

Summary

Updated documentation including prototype‑poisoning guide and TypeScript formatting fixes

Summary

Switches Fastify warnings to use process warnings instead of Fastify's internal warning system.

Summary

Improved documentation with small updates.

Summary

Added Fastify split validator to the Ecosystem and introduced file routes support

Summary

Fixed TypeScript types for setErrorHandler and corrected request dependency checks.

Summary

Fixed multiple runtime bugs including HTTPS request timeout handling, maxRequestsPerSocket, logger request serializers, and schema controller usage.

Summary

Made the version field deterministic and reliable.

Summary

Fixed setSchemaController not inheriting schemas from the root parent

Summary

Added `requestTimeout` option for request handling.

Summary

Updated NGINX, Validation & Serialization documentation with comments and usage notes

Summary

Added a feature to limit the maximum number of requests per socket.

Summary

Fixed handling of undefined values during decoration; they are no longer coerced to null

Summary

Restricts same shape optimization to only accept null and undefined values

Summary

Added and clarified query string handling documentation.

Summary

Link the Fastify docs logo to its website

Summary

Enforced consistent schema shapes across Fastify instances

Summary

Added nginx to Recommendations and async support for FastifyInstance.setErrorHandler

Summary

Added new plugins and features: Fastify Appwrite plugin, diagnostics channel publishing at initialization, a Webpack test stack, and TypeScript types for routing.

Summary

Enhanced documentation: added Reply generic interface info, session status update, clarified getting started guide, fixed import statement, corrected dead link, and added Fastify allow plugin reference.

Summary

Upgrade minimum find-my-way version.

Summary

Added new type decorations and extended the content‑type parser support

Summary

- Updated documentation: added Fastify form‑diable support, clarified constrained route definitions, http2SessionTimeout, request.context/reply.context, and removed outdated pump reference.

Summary

Revert previous change that used path.join to load version, restoring original version loading logic.

Summary

Added shorthand schema bypass flag and fastify route group support

Summary

Updated documentation for hooks, early hints, server, ecosystem, and content-type parser; added benchmark workflow triggered by label.

Summary

Added hook display to `printRoutes` for better insight.

Summary

Added an instance property to request/response prototypes.

Summary

Resolved PR issues 3099 and 3100

Summary

Removed spurious file from the npm package.

Summary

Added several TypeScript enhancements: clientErrorHandler definition, serializer request/response types, compilers factory with transient AJV, AJV options support, and decorator dependency type validation.

Summary

- Added community OAS Fastify plugin and auto‑generated HTTPS test certificates

Summary

Added support for Tap 15.0.1, Node.js 16, and allowed route onSend to accept a function or an array of functions.

Summary

Fix documentation link and update docs to reflect changes

Summary

Added Fastify Vite integration and updated TypeScript definitions for setNotFoundHandler and default parser

Summary

Added serverless environment support, RegExp content‑type parser, and exposed Avvio pretty‑printer for plugin tree visualization

Summary

Added initialConfig to FastifyInstance, converted request IDs to base‑36 strings, and introduced constrained route support plus a diagnostics channel plugin entry.

Summary

Added route‑level lifecycle hooks and a new schema controller layer, expanding Fastify’s extensibility.

Summary

Expose fastify httpHandler and defaultRoute functions, adding hijack support to FastifyReply (new feature).

Summary

Fixed warning triggered by the `exposeHeadRoute` route option.

Summary

Added automatic HEAD routes for GET, plugin hinting, and preSerialization hook support for custom reply serializers.

Summary

Updated the querystringParser type definition and corrected multiple typos in docs and type declarations.

Summary

Added support for null values in decorateRequest and decorateReply functions.

Summary

Added new features: decorator warning and custom error schema handling.

Summary

Added fastify TOTP support, upgraded ESLint TypeScript integration, and switched Fastify GraphQL to Mercurius.

Summary

Added ability for custom error handlers to fall back to the default handler and introduced validationContext for custom errors.

Summary

Deprecated certain API usages.

Summary

Fixed a broken documentation link and refreshed examples and lifecycle documentation with correct status codes.

Summary

Added plugin version checks, fastify response caching, prettyPrint logger option, and Node v14.13 named‑export support

Summary

Fixed Fastify plugin type exports

Summary

Updated core dependencies (undici, light) and added ecosystem plugins (fastify dynareg, fastify guard, Grant) with new core team members.

Summary

Bumped TypeScript to 4.0.2 and added router config getters on Request.

Summary

Updated autocannon to 6.0.0 (potential breaking change) and added several new features: dynamic plugin imports, CommonJS type support, unWritable logger props, and increased timeout.

Summary

Added validationError property, route-level custom error handlers, routePath hook, onTimeout hook, Promise-like Fastify instance, new typings (getSchema/getSchemas), and improved server types.

Summary

Fix inject function to return the correct normal value even when the app is not ready.

Summary

Removed warnings introduced in version 2418

Summary

Update README with author name and fix section order

Summary

Updated Server.md documentation and moved a contributor to past contributors list.

Summary

Fixed test failures related to security release (PR #2365).

Summary

Fix incorrect TypeScript typing for the register() function

Summary

Added Netlify Lambda guide, introduced Fastify Firebase plugin (replacing Firestore) and Fastify Prettier to the ecosystem.

Summary

- Breaking changes: middleware no longer bundled (requires fastify‑express or middie), schema substitution now uses $ref, setSchemaCompiler/Resolver replaced by setValidatorCompiler, preParsing and content‑type parser signatures updated,...

Summary

Default `allErrors` in AJV configuration changed from true to false, preventing a DoS attack vector (breaking change).

Summary

Added support to bind error handler to instance (v2).

Summary

Adjust HAProxy configuration to resolve issue 2036.

Summary

Support builder‑style injection API

Summary

Added new ecosystem plugins: Fastify method override, QR code, and Google Cloud Trace API support.

Summary

Added configurable onBadUrl callback option and switched to lightweight request typings.

Summary

Added new Fastify plugins: esso and axios.

Summary

Added several new community plugins (fastify‑casl, secure‑session, typeorm, explorer) and introduced response validation to the ecosystem.

Summary

Added multiple new plugins and features: HTTPS redirect, fastify‑qs, auth0 verification, error‑properties plugin, onConstructorPoisoning hook, onSend route hook, and Ajv custom options.

Summary

Added Reply.statusCode property to the reply object

Summary

Added new plugin support (pluginName), onResponse hook, schema resolver, and made FastifyReply thenable.

Summary

Added a plugin for auto‑generating CRUD routes to the ecosystem and updated the Ecosystem documentation

Summary

Prevent handler execution when reply.sent is true, fixing redundant processing.

Summary

Introduced `return503OnClosing` option for handling closed connections.

Summary

Add custom serializer support

Summary

Added response time tracking on replies, introduced an RBAC plugin, and aliased schema.query to schema.querystring.

Summary

Add .git folder to .npmignore to exclude repository metadata from published packages

Summary

Switched to a secure JSON parser (replacing Bourne) and added an option to disable request start/end logging

Summary

Added onRequest route hook and fastify‑normalize‑request‑reply plugin for enhanced request handling.

Summary

Fix RequestHandler type handling (issue #1539)

Summary

Added option to match only prefix root with paths and introduced a schemaCompiler property.

Summary

Added multiple new features: expanded listen signatures, onRegister hook, initial config handling, request object now includes ip/ips/hostname, and pluginTimeout option in typings

Summary

Added `pluginTimeout` option to the TypeScript declaration file

Summary

Fixed unused shared schema serializer issue

Summary

Fixed unused shared schema issue affecting serializers

Summary

- Adds several new lifecycle hooks (preParsing, preValidation, preSerialization, onError) and moves prefixed properties to Symbols, breaking existing plugins and patterns.

Summary

Prevent duplicate JSON schema entries in encapsulated objects during tree processing

Summary

Fixes an issue that prevented plugins from overriding the default content type parser.

Summary

Added support for custom route versioning strategies.

Summary

Demoted ECONNRESET logs to debug level.

Summary

Fix response validation error (issue #1328).

Summary

Upgrade AJV to the latest version

Summary

Pin ajv library to version 6.5.5

Summary

Enable nested plugins to override decorators and attach validation results to requests; preserve stack traces on request end

Summary

Correct content length calculation for UTF-8 characters

Summary

Added full Joi validation support, TypeScript overloads for parseAs, and new generic request types (Query, Params, Headers, Body).

Summary

Updated error handling to process promises like normal handlers.

Summary

Reverted the fastify file upload integration added in earlier PRs

Summary

Introduced `pluginTimeout` option for plugins.

Summary

Added Fastify plugins (gateway, CORS, vhost) and listed them in ecosystem docs.

Summary

Added a method to retrieve all shared schemas and TypeScript definition for FastifyInstance.all

Summary

Added configurable request ID header with case‑insensitivity support and a beforeHandler for setNotFoundHandler (new feature).

Summary

Added getter/setter object decoration, .status() alias for .code(), and versioned routes support.

Summary

Blocks new incoming requests after close and introduces custom HTTP/HTTPS server support with tests.

Summary

Added fastify.hasRequestDecorator and fastify.hasReplyDecorator, plus new TypeScript definitions for onRoute hook and missing headers on FastifyRequest.

Summary

Improved promise performance by 10% and set UTF‑8 as the default charset.

Summary

Fixed a close bug uncovered by avvio@5.4.3.

Summary

Added reply.removeHeader() and made the logger option accept a boolean in TypeScript definitions

Summary

Fixed Run onSend hooks when an encapsulated handler invokes the notFound handler.

Summary

Improved JSON schema error messages and added handler support in shorthand route options

Summary

Corrected encapsulation logic for 404 handlers

Summary

Added reply.hasHeader and reply.getHeader methods for header inspection

Summary

Mark version 1.0.0 as a Long‑Term Support (LTS) release.

Summary

Added request object to custom error handler parameters (breaking change).

Summary

Breaking: route 404 errors are now routed to the dedicated 404 handler.

Summary

Root Fastify instance is now a plain object (breaking change)

Summary

- Breaking changes: payload serialization now occurs before onSend hooks, AJV configuration removed, default listen address switched to 127.0.0.1, avvio upgraded to v5, and Fastify iterator removed.

Summary

Upgrade fast-json-stringify to version 0.17.0