Skip to content

chore(deps): bump the npm-minor-patch group across 1 directory with 3 updates - #71

Merged
rvagg merged 1 commit into
masterfrom
dependabot/npm_and_yarn/npm-minor-patch-1a91478f4e
Sep 16, 2026
Merged

rvagg merged 1 commit into
masterfrom
dependabot/npm_and_yarn/npm-minor-patch-1a91478f4e

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 1, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the npm-minor-patch group with 3 updates in the / directory: @fastify/static, bole and fastify.

Updates @fastify/static from 10.1.2 to 10.1.3

Release notes

Sourced from @​fastify/static's releases.

v10.1.3

What's Changed

Full Changelog: fastify/fastify-static@v10.1.2...v10.1.3

Commits

Updates bole from 6.0.7 to 6.0.12

Release notes

Sourced from bole's releases.

v6.0.12

6.0.12 (2026-08-10)

Trivial Changes

  • deps: bump the github-actions-minor-patch group with 2 updates (#94) (070a7c6)

v6.0.11

6.0.11 (2026-08-03)

Trivial Changes

  • deps-dev: bump @​semantic-release/git from 10.0.1 to 11.0.1 (#91) (3403913)

v6.0.10

6.0.10 (2026-08-03)

Trivial Changes

  • deps-dev: bump @​semantic-release/changelog from 6.0.3 to 7.0.0 (#93) (a31d885)

v6.0.9

6.0.9 (2026-07-31)

Trivial Changes

  • deps: bump the github-actions-minor-patch group with 2 updates (#90) (b17a93c)

v6.0.8

6.0.8 (2026-07-30)

Trivial Changes

  • downgrade broken changelog maker, backfill entries (#89) (f76f311)
Changelog

Sourced from bole's changelog.

6.0.12 (2026-08-10)

Trivial Changes

  • deps: bump the github-actions-minor-patch group with 2 updates (#94) (070a7c6)

6.0.11 (2026-08-03)

Trivial Changes

  • deps-dev: bump @​semantic-release/git from 10.0.1 to 11.0.1 (#91) (3403913)

6.0.10 (2026-08-03)

Trivial Changes

  • deps-dev: bump @​semantic-release/changelog from 6.0.3 to 7.0.0 (#93) (a31d885)

6.0.9 (2026-07-31)

Trivial Changes

  • deps: bump the github-actions-minor-patch group with 2 updates (#90) (b17a93c)

6.0.8 (2026-07-30)

Trivial Changes

  • downgrade broken changelog maker, backfill entries (#89) (f76f311)
Commits
  • cf3bf6b chore(release): 6.0.12 [skip ci]
  • 070a7c6 chore(deps): bump the github-actions-minor-patch group with 2 updates (#94)
  • 08edd2a chore(release): 6.0.11 [skip ci]
  • 3403913 chore(deps-dev): bump @​semantic-release/git from 10.0.1 to 11.0.1 (#91)
  • ed9496d chore(release): 6.0.10 [skip ci]
  • a31d885 chore(deps-dev): bump @​semantic-release/changelog from 6.0.3 to 7.0.0 (#93)
  • e39ad34 chore(release): 6.0.9 [skip ci]
  • b17a93c chore(deps): bump the github-actions-minor-patch group with 2 updates (#90)
  • 48890bb chore(release): 6.0.8 [skip ci]
  • f76f311 chore: downgrade broken changelog maker, backfill entries (#89)
  • See full diff in compare view

Updates fastify from 5.10.0 to 5.12.1

Release notes

Sourced from fastify's releases.

v5.12.1

⚠️ Security release

What's Changed

Full Changelog: fastify/fastify@v5.12.0...v5.12.1

v5.12.0

What's Changed

Full Changelog: fastify/fastify@v5.11.3...v5.12.0

v5.11.3

What's Changed

New Contributors

Full Changelog: fastify/fastify@v5.11.2...v5.11.3

v5.11.2

What's Changed

... (truncated)

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 1, 2026
@github-actions

github-actions Bot commented Sep 1, 2026 •

Copy link
Copy Markdown

depsound · 4 dependency changes · flags to look at now

  • npm:fastify 5.10.0 → 5.12.1: provenance anomaly (account-takeover shape): publisher changed; fixes 2 advisory(ies)
  • npm:process-warning 5.0.0 → 5.1.0: provenance anomaly (account-takeover shape): publisher changed
  • npm:@fastify/static 10.1.2 → 10.1.3: 4 files +276/-14 · no install/build execution surface
  • npm:bole 6.0.7 → 6.0.12: 3 files +78/-8 · no install/build execution surface

Checked: the published artifact diff, manifest compatibility, install/build execution surface. Not checked: runtime behaviour, intent (an obfuscated payload reads as ordinary code), whether your code reaches the change, your test coverage.

Continue locally, the full per-file analysis and a grep-able workspace (trees + stats.json) are available for agent investigation:

printf '%s\n' \
  'npm:@fastify/static 10.1.2 10.1.3' \
  'npm:bole 6.0.7 6.0.12' \
  'npm:fastify 5.10.0 5.12.1' \
  'npm:process-warning 5.0.0 5.1.0' \
  | go run github.com/rvagg/depsound/cmd/depsound@v0.35.1 bulk
Or hand this PR to an agent: point it at the PR and the review skill for a proceed/hold call.

depsound · full report + logs

@rvagg

rvagg commented Sep 8, 2026

Copy link
Copy Markdown
Owner

@dependabot recreate

… updates

Bumps the npm-minor-patch group with 3 updates in the / directory: [@fastify/static](https://github.com/fastify/fastify-static), [bole](https://github.com/rvagg/bole) and [fastify](https://github.com/fastify/fastify).


Updates `@fastify/static` from 10.1.2 to 10.1.3
- [Release notes](https://github.com/fastify/fastify-static/releases)
- [Commits](fastify/fastify-static@v10.1.2...v10.1.3)

Updates `bole` from 6.0.7 to 6.0.12
- [Release notes](https://github.com/rvagg/bole/releases)
- [Changelog](https://github.com/rvagg/bole/blob/master/CHANGELOG.md)
- [Commits](rvagg/bole@v6.0.7...v6.0.12)

Updates `fastify` from 5.10.0 to 5.12.1
- [Release notes](https://github.com/fastify/fastify/releases)
- [Commits](fastify/fastify@v5.10.0...v5.12.1)

---
updated-dependencies:
- dependency-name: "@fastify/static"
  dependency-version: 10.1.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: bole
  dependency-version: 6.0.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: fastify
  dependency-version: 5.12.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title chore(deps): bump the npm-minor-patch group with 3 updates chore(deps): bump the npm-minor-patch group across 1 directory with 3 updates Sep 8, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/npm-minor-patch-1a91478f4e branch from 43d7d0c to 8011d71 Compare September 8, 2026 02:26
@rvagg
rvagg merged commit b75a7a4 into master Sep 16, 2026
15 checks passed
@rvagg
rvagg deleted the dependabot/npm_and_yarn/npm-minor-patch-1a91478f4e branch September 16, 2026 04:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant