What's Changed chore: Bump markdownlint-cli2 from 0.22.1 to 0.23.0 by @dependabot[bot] in #6839 fix: normalize method in findRoute by @Ram-blip in #6838 docs: fix incorrect description for validateInput in Request.md by @thePranav-kpk in #6823 feat: rfc10008 http query method by @climba03003 in #6832 perf: reuse cached content types for response serialization by @gurgunday in #6854 chore(sponsor):…
What's Changed docs(type-providers): clarify as const usage by @smith558 in #6772 docs: fix broken and redirected links by @Eomm in #6817 docs: remove marko from @fastify/view engines (support dropped) by @EduardF1 in #6821 fix: clear socket._meta on reply.hijack() when onTimeout is registered by @nerkoux in #6810 docs: fix duplicate routeOptions entries in Request.md example by @thePranav-kpk in…
What's Changed feat: add request.mediaType by @climba03003 in #6653 docs: remove deprecated leveldb plugin and update ecosystem by @Tony133 in #6661 chore(sponsor): add bestforandroid by @Eomm in #6659 ci: drop Node.js 20 from yarn matrix in package-manager-ci.yml by @Tony133 in #6662 fix: prevent duplicate res.end in sendTrailer with sync callbacks by @climba03003 in #6676 fix: avoid duplicate cl…
⚠️ Security Release This fixes CVE CVE-2026-33806 GHSA-247c-9743-5963. What's Changed chore: Fix port parsing by @jsumners in #6603 chore: upgrade to typescript v6.0.2 by @Tony133 in #6605 fix: restore trustProxy function for number and string types, add null check for socketAddr by @mcollina in #6613 ci: reduce cron scheduled workflows from daily/weekly to monthly by @Fdawgs in #6623 chore: Bump…
Full Changelog: v5.8.3...v5.8.4
⚠️ Security Release This fixes CVE CVE-2026-3635 GHSA-444r-cwp2-x5xf. What's Changed docs(readme): add @Tony133 to plugin team by @Tony133 in #6565 Updated Plugins-Guide.md; Changed "fastify" to "instance" during plugin registration to showcase that it's added as a child by @kyrylchenko in #6566 test: use fastify.test in test case by @climba03003 in #6568 docs: use fastify.example in documentation…
What's Changed docs(ecosystem): add @yeliex/fastify-problem-details by @yeliex in #6546 Revert "chore: upgrade borp to v1.0.0" by @climba03003 in #6564 docs: document body validation with custom content type parsers by @mcollina in #6556 docs(ecosystem): add fastify-file-router by @bhouston in #6441 docs: add fastify-svelte-view to Ecosystem list by @matths in #6453 fix: anchor keyValuePairsReg to…
⚠️ Security Release Fixes "Missing End Anchor in "subtypeNameReg" Allows Malformed Content-Types to Pass Validation": GHSA-573f-x89g-hqp9. CVE-2026-3419 Full Changelog: v5.8.0...v5.8.1
What's Changed docs(request): add host security warning references by @mcollina in #6476 docs: fix note style by @Fdawgs in #6487 chore: rename deploy website ci by @Eomm in #6492 chore: support pino v9 and v10 by @mcollina in #6496 chore: update logger types and fix TODO comment by @Tony133 in #6470 refactor(test-types): migrate dummy-plugin to FastifyPluginAsync by @Tony133 in #6472 docs: fix ma…
Full Changelog: v5.7.3...v5.7.4
⚠️ Security Release Fix GHSA-mrq3-vjjr-p77c CVE-2026-25224. What's Changed docs: update Reply.send() documentation for string serialization by @mcollina in #6466 chore: ignore agents config files by @mcollina in #6474 docs: update vulnerability reporting to use GitHub Security by @mcollina in #6475 Full Changelog: v5.7.2...v5.7.3
⚠️ Notice ⚠️ Parsing of the content-type header has been improved to a strict parser in PR #6414. This means only header values in the form described in RFC 9110 are accepted. What's Changed chore: npm ignore AI related files by @climba03003 in #6447 chore: update sponsor url by @Eomm in #6450 docs: add fastify-http-exceptions to Ecosystem.md by @bhouston in #6442 docs: fix invalid shorten form sc…