Fastify Release Notes

Name: Fastify
Brand: Fastify

Follow Fastify to add their release notes to your feed!

40 release notes curated from 1 source by the Releasebot Team. Last updated: Oct 17, 2026

Get this feed:

Oct 16, 2026
Date parsed from source:
Oct 16, 2026

First seen by Releasebot:
Oct 17, 2026
Fastify

v6.0.0-alpha.5

Fastify ships an alpha update with performance gains, HTTP behavior fixes, and improved TypeScript support, alongside clearer security and API documentation.
What's Changed

docs: clarify headers validation is additive, not a sanitized view by @mcollina in #7029

perf: read the merged headers once in the trust proxy getters by @hktitof in #7039

types: restrict route lookup methods by @Yanhaoxi in #6963

fix(types): custom logger instance not assignable to FastifyInstance by @Tony133 in #6901

fix(types): restore this context in route shorthand hooks by @lazerg in #6975

perf: decode string bodies once instead of per chunk by @gurgunday in #7049

docs(ecosystem): add @validex/fastify to community plugins by @chiptoma in #6660

perf: avoid resetting the level of request child loggers by @gurgunday in #7056

fix: omit absent compileSerializationSchema metadata instead of passing null by @Kjubikstronk in #7001

fix: remove error when HTTP QUERY request has empty body by @LiviaMedeiros in #6929

docs: list fastify-mariadb as a community plugin by @melroy89 in #7062

fix: resolve reply.mediaType from raw response headers by @agustin18 in #7054

perf: use a FIFO cache for parsed content-types by @gurgunday in #7071

docs: remove plugins that do not support Fastify v5 by @ilteoood in #7075

fix: copy a set-cookie array passed to reply.header instead of storing it by @fadiroot in #7068

test: fix "recieve" typo in comment by @ump45nose in #7066

docs: document fastify.query() shorthand for RFC 10008 by @Puppo in #7004

docs(security): clarify scope of unvalidated template selection by @mcollina in #7065

docs(ecosystem): Add fastify-mosquitto-dynsec to community plugins by @LuizTakeda in #7064

docs: clarify reply.redirect encoding does not prevent open redirects by @mcollina in #6964

docs: fix external link to node docs by @BenMotz in #7088

test(validation): cover remaining propertyNames header branches by @mcollina in #7105

New Contributors

@hktitof made their first contribution in #7039

@Yanhaoxi made their first contribution in #6963

@chiptoma made their first contribution in #6660

@Kjubikstronk made their first contribution in #7001

@agustin18 made their first contribution in #7054

@fadiroot made their first contribution in #7068

@ump45nose made their first contribution in #7066

@LuizTakeda made their first contribution in #7064

@BenMotz made their first contribution in #7088

Full Changelog: v6.0.0-alpha.4...v6.0.0-alpha.5
Original source
Oct 13, 2026
Date parsed from source:
Oct 13, 2026

First seen by Releasebot:
Oct 14, 2026
Fastify

v5.12.7

Fastify publishes the changelog for its update from v5.12.6 to v5.12.7.

Full Changelog: v5.12.6...v5.12.7
Original source
All of your release notes in one feed

Join Releasebot and get updates from Fastify and hundreds of other software products.

Create account
Get updates with:
Oct 13, 2026
Date parsed from source:
Oct 13, 2026

First seen by Releasebot:
Oct 14, 2026
Fastify

v5.12.6

Fastify releases a security update with fixes for GHSA-389g-gv7q-r4x8, plus improvements to request handling, logging, content-type caching, header validation, and reply headers.
⚠️ Security Release

Fix for GHSA-389g-gv7q-r4x8

What's Changed

[Backport 5.x] types: restrict route lookup methods by @github-actions[bot] in #7048

[Backport 5.x] perf: decode string bodies once instead of per chunk by @github-actions[bot] in #7053

[Backport 5.x] perf: avoid resetting the level of request child loggers by @github-actions[bot] in #7058

[Backport 5.x] fix: resolve reply.mediaType from raw response headers by @github-actions[bot] in #7067

[Backport 5.x] perf: use a FIFO cache for parsed content-types by @github-actions[bot] in #7072

[Backport 5.x] fix(validation): lowercase header names in propertyNames enum/const by @mcollina in #7104

[Backport 5.x] fix: copy a set-cookie array passed to reply.header instead of storing it by @github-actions[bot] in #7087

[Backport 5.x] fix: remove error when HTTP QUERY request has empty body by @github-actions[bot] in #7060

[Backport 5.x] docs: document fastify.query() shorthand for RFC 10008 by @github-actions[bot] in #7094

Full Changelog: v5.12.5...v5.12.6
Original source
Sep 17, 2026
Date parsed from source:
Sep 17, 2026

First seen by Releasebot:
Sep 17, 2026
Fastify

v6.0.0-alpha.4

Fastify ships a security release with parser performance fixes and docs updates in v6.0.0-alpha.4.
⚠️ Security release

Fix for GHSA-4mh8-r7rc-xpvc

What's Changed

docs: add fastify-arktype to ecosystem by @BlairCurrey in #7000

docs: link documentation style guide in contributing guidelines by @thePranav-kpk in #6819

perf: reduce content-type parser overhead by @gurgunday in #7012

perf: avoid redundant request-part reads during validation by @gurgunday in #7018

chore(sponsor): add cloudways by @mcollina in #7021

New Contributors

@BlairCurrey made their first contribution in #7000

Full Changelog: v6.0.0-alpha.3...v6.0.0-alpha.4
Original source
Sep 16, 2026
Date parsed from source:
Sep 16, 2026

First seen by Releasebot:
Sep 17, 2026
Fastify

v5.12.5

Fastify fixes a security issue and improves performance in a 5.x backport release.
⚠️ Security release

Fix for GHSA-4mh8-r7rc-xpvc

What's Changed

[Backport 5.x] perf: reduce content-type parser overhead by @github-actions[bot] in #7019

[Backport 5.x] perf: avoid redundant request-part reads during validation by @github-actions[bot] in #7020

Full Changelog: v5.12.4...v5.12.5
Original source
Similar to Fastify with recent updates:
Sep 11, 2026
Date parsed from source:
Sep 11, 2026

First seen by Releasebot:
Sep 11, 2026
Fastify

v5.12.4

Fastify fixes a fastify.js version mismatch in this release.

Fixed the fastify.js version mismatch.

Full Changelog: v5.12.2...v5.12.4
Original source
Sep 4, 2026
Date parsed from source:
Sep 4, 2026

First seen by Releasebot:
Sep 5, 2026
Fastify

v6.0.0-alpha.3

Fastify ships a security release with fixes for several GHSA vulnerabilities, plus updates to callNotFound behavior, content-type validation, docs links, and package cleanup in the latest alpha changelog.
Security release

Fix for GHSA-9q9j-q6p8-xq58

Fix for GHSA-hwr6-493r-vm6h

Fix for GHSA-p68q-wchp-6fh7

Fix for GHSA-667r-xxjv-c9mm

What's Changed

docs: fix broken links in Style-Guide.md by @Snehal-Pradhan in #6966

test(types): assert LogController.requestCompleted accepts an undefined error by @suzunn in #6875

fix: callNotFound should run not-found preHandler regardless of registration order by @mcollina in #6965

docs(ecosystem): remove deprecated http-wizard and rename fastify-better-sqlite3 by @ilteoood in #6972

chore: npm ignore remaining agent files by @lazerg in #6996

docs(contenttypeparser): new strict content-type validation by @bcomnes in #6925

New Contributors

@Snehal-Pradhan made their first contribution in #6966

@suzunn made their first contribution in #6875

@bcomnes made their first contribution in #6925

Full Changelog: v6.0.0-alpha.2...v6.0.0-alpha.3
Original source
Sep 4, 2026
Date parsed from source:
Sep 4, 2026

First seen by Releasebot:
Sep 5, 2026
Fastify

v5.12.2

Fastify ships a security release with fixes for multiple GHSA vulnerabilities and a not-found preHandler backport.

⚠️ Security release

Fix for GHSA-9q9j-q6p8-xq58

Fix for GHSA-hwr6-493r-vm6h

Fix for GHSA-p68q-wchp-6fh7

Fix for GHSA-667r-xxjv-c9mm

What's Changed

[Backport 5.x] fix: callNotFound should run not-found preHandler regardless of registration order by @github-actions[bot] in #6973

[Backport 5.x] chore: npm ignore remaining agent files by @github-actions[bot] in #7003

Full Changelog: v5.12.1...v5.12.2
Original source
Aug 19, 2026
Date parsed from source:
Aug 19, 2026

First seen by Releasebot:
Aug 19, 2026
Fastify

v6.0.0-alpha.2

Fastify ships a security-focused alpha update with fixes for reported vulnerabilities, cleaner route handling, a reply.mediaType test fix, and a preClose hook correction, while also trimming deprecated API notices ahead of the v6 cleanup.
Security release

Fix for GHSA-w2qp-rph6-63g4

Fix for GHSA-3m5p-2c4r-xxw2

What's Changed

test: fix reply.mediaType by @climba03003 in #6949

ci: allow backport in pr title by @climba03003 in #6948

fix: run preClose hook exactly once per declaring instance by @contactjawad in #6940

docs: remove deprecated-API notices ahead of v6 cleanup by @Tony133 in #6951

fix: report canonical route url for hidden prefix slash route by @paulkagiri in #6719

New Contributors

@contactjawad made their first contribution in #6940

@paulkagiri made their first contribution in #6719

Full Changelog: v6.0.0-alpha.1...v6.0.0-alpha.2
Original source
Aug 18, 2026
Date parsed from source:
Aug 18, 2026

First seen by Releasebot:
Aug 19, 2026
Fastify

v5.12.1

Fastify ships a security-focused 5.x patch with backported fixes for reply media type, preClose hooks, and canonical route URLs.
⚠️ Security release

Fix for GHSA-w2qp-rph6-63g4

Fix for GHSA-3m5p-2c4r-xxw2

What's Changed

[Backport 5.x] test: fix reply.mediaType by @github-actions[bot] in #6950

[Backport 5.x] ci: allow backport in pr title by @github-actions[bot] in #6952

[Backport 5.x] fix: run preClose hook exactly once per declaring instance by @github-actions[bot] in #6954

[Backport 5.x] fix: report canonical route url for hidden prefix slash route by @github-actions[bot] in #6961

Full Changelog: v5.12.0...v5.12.1
Original source
Aug 13, 2026
Date parsed from source:
Aug 13, 2026

First seen by Releasebot:
Aug 13, 2026
Fastify

v6.0.0-alpha.1

Fastify fixes raw response headers and adds Reply.prototype.mediaType in this release.
What's Changed

fix: remove raw response headers by @Ram-blip in #6860

test: use process-warning spyWarning for testing by @climba03003 in #6887

feat: add Reply.prototype.mediaType by @LiviaMedeiros in #6932

fix(content-type): return undefined for invalid media types by @jean-michelet in #6942

Full Changelog

v6.0.0-alpha.0...v6.0.0-alpha.1
Original source
Aug 13, 2026
Date parsed from source:
Aug 13, 2026

First seen by Releasebot:
Aug 13, 2026
Fastify

v5.12.0

Fastify ships v5.12.0 with a new Reply.prototype.mediaType feature, plus content type validation fixes, raw response header cleanup, and updated docs for per-route logging in Google Cloud Functions.

What's Changed

chore(sponsor): add testmu ai by @Eomm in #6922

docs: add per-route logging for Google Cloud Functions by @slegarraga in #6907

test: remove @sinonjs/fake-timers by @climba03003 in #6934

[Backport 5.x] fix: remove raw response headers by @github-actions[bot] in #6939

[Backport 5.x] test: use process-warning spyWarning for testing by @github-actions[bot] in #6945

[Backport 5.x] feat: add Reply.prototype.mediaType by @github-actions[bot] in #6946

[Backport 5.x] fix(content-type): return undefined for invalid media types by @github-actions[bot] in #6947

Full Changelog: v5.11.3...v5.12.0
Original source
Aug 11, 2026
Date parsed from source:
Aug 11, 2026

First seen by Releasebot:
Aug 13, 2026
Fastify

v6.0.0-alpha.0

Fastify ships a major alpha cleanup with breaking type removals, updated logger and request context APIs, a higher minimum runtime, and default changes to error handling. It also fixes a misleading listening error and refreshes dependencies.
What's Changed

refactor: revert misleading error "Fastify instance is already listening" by @jean-michelet in #6098

refactor(types)!: remove deprecated FastifyPlugin type by @Tony133 in #6897

ci!: increase minimum runtime version by @climba03003 in #6904

refactor(types)!: remove deprecated FastifyLoggerInstance in favor of FastifyBaseLogger by @Tony133 in #6906

refactor!: remove Promise.withResolvers ponyfill by @jean-michelet in #6910

refactor(types)!: remove deprecated FastifyRequestContext and FastifyReplyContext types by @Tony133 in #6920

refactor!: disable error handler overrides by default by @jean-michelet in #6915

refactor(types)!: remove deprecated ValidationResult type alias by @Tony133 in #6914

chore(deps)!: upgrade undici v8.x by @Tony133 in #6921

refactor!: remove FSTDEP022 by @climba03003 in #6908

chore(sponsor): add testmu ai by @Eomm in #6922

docs: add per-route logging for Google Cloud Functions by @slegarraga in #6907

refactor!: remove FSTDEP023 deprecation by @jean-michelet in #6913

refactor!: remove FSTDEP024 deprecation by @jean-michelet in #6912

refactor!: remove FSTDEP025 by @jean-michelet in #6909

test: remove @sinonjs/fake-timers by @climba03003 in #6934

refactor(types)!: remove deprecated req in request.d.ts by @Tony133 in #6935

refactor(types)!: remove ResSerializerReply type by @jean-michelet in #6911

Full Changelog: v5.11.3...v6.0.0-alpha.0
Original source
Aug 8, 2026
Date parsed from source:
Aug 8, 2026

First seen by Releasebot:
Aug 9, 2026
Fastify

v5.11.3

Fastify ships v5.11.3 with bug fixes and documentation updates, including trailer state cleanup, safer request handling, built-in property decorator fixes, and clearer guidance on untrusted route params and default errors.
What's Changed

fix: clear trailer state when removing all trailers by @Ram-blip in #6845

docs: document percent-decoded route params as untrusted input by @mcollina in #6903

docs(errors): document what the default error handler sends by @basteez in #6894

docs(readme): fix grammar and cjs capitalization by @minirang in #6899

fix: pass null instead of undefined to requestCompleted on success by @lazerg in #6837

docs(encapsulation): clarify nested plugin scopes by @jean-michelet in #6893

chore: Bump fastify/workflows/.github/workflows/lock-threads.yml from 6.0.0 to 7.0.0 by @dependabot[bot] in #6916

chore: Bump fastify/workflows/.github/workflows/nested-quality.yml from 6.0.0 to 7.0.0 by @dependabot[bot] in #6917

fix: recognize constructor-assigned built-in properties as decorator … by @aquie00t in #6892

fix: reset lastIndex before testing global/sticky content-type RegExp parsers by @zelinewang in #6846

New Contributors

@minirang made their first contribution in #6899

@lazerg made their first contribution in #6837

@zelinewang made their first contribution in #6846

Full Changelog: v5.11.2...v5.11.3
Original source
Aug 8, 2026
Date parsed from source:
Aug 8, 2026

First seen by Releasebot:
Aug 3, 2026

Modified by Releasebot:
Aug 9, 2026
Fastify

v5.11.2

Fastify fixes the Fastify version in fastify.js in this release.

What's Changed

fix fastify version in fastify.js

Full Changelog: v5.11.1...v5.11.2
Original source

Curated by the Releasebot team

Releasebot is an aggregator of official release notes from hundreds of software vendors and thousands of sources.

Our editorial process involves the manual review and audit of release notes procured with the help of automated systems.

About us Our methodology

Fastify Release Notes

v6.0.0-alpha.5

What's Changed

New Contributors

v5.12.7

v5.12.6

⚠️ Security Release

What's Changed

v6.0.0-alpha.4

⚠️ Security release

What's Changed

New Contributors

v5.12.5

⚠️ Security release

What's Changed

Similar to Fastify with recent updates:

v5.12.4

v6.0.0-alpha.3

Security release

What's Changed

New Contributors

v5.12.2

⚠️ Security release

What's Changed

v6.0.0-alpha.2

Security release

What's Changed

New Contributors

v5.12.1

⚠️ Security release

What's Changed

v6.0.0-alpha.1

What's Changed

Full Changelog

v5.12.0

What's Changed

v6.0.0-alpha.0

What's Changed

v5.11.3

What's Changed

New Contributors

v5.11.2

What's Changed

Curated by the Releasebot team