Fastify Release Notes

Name: Fastify
Brand: Fastify

Follow Fastify to add their release notes to your feed!

23 release notes curated from 1 source by the Releasebot Team. Last updated: Jul 5, 2026

Get this feed:

Jul 5, 2026
Date parsed from source:
Jul 5, 2026

First seen by Releasebot:
Jul 5, 2026
Fastify

v5.10.0

Fastify ships v5.10.0 with a new log controller layer, faster request lifecycle performance, and fixes for reply handling, JSON content detection, and request host and port behavior. The release also updates docs and drops Marko support in @fastify/view engines.
What's Changed

docs(type-providers): clarify as const usage by @smith558 in #6772

docs: fix broken and redirected links by @Eomm in #6817

docs: remove marko from @fastify/view engines (support dropped) by @EduardF1 in #6821

fix: clear socket._meta on reply.hijack() when onTimeout is registered by @nerkoux in #6810

docs: fix duplicate routeOptions entries in Request.md example by @thePranav-kpk in #6824

chore: Bump @types/node from 25.9.4 to 26.0.1 in the dev-dependencies-typescript group by @dependabot[bot] in #6829

docs(ecosystem): add @stitchapi/fastify to Community plugins by @rejifald in #6820

feat: introduce log controller layer by @Eomm in #6580

fix: use ContentType to detect json and charset in reply.send by @climba03003 in #6830

docs: fix incorrect defaults and code examples in Server.md by @Adit-Jain-srm in #6805

docs: fix incorrect hook count in Hooks.md by @thePranav-kpk in #6825

chore: Bump fast-json-stringify from 6.4.0 to 7.0.0 in the dependencies group across 1 directory by @dependabot[bot] in #6800

perf: reduce per-request overhead in the request lifecycle by @mcollina in #6831

fix: derive request.port from request.host by @mcollina in #6680

docs: update Logging.md with per-route log level info by @asppsa in #6627

docs(type-providers): update import for article consistency by @smith558 in #6771

New Contributors

@EduardF1 made their first contribution in #6821

@thePranav-kpk made their first contribution in #6824

@rejifald made their first contribution in #6820

@Adit-Jain-srm made their first contribution in #6805

@asppsa made their first contribution in #6627

Full Changelog: v5.9.0...v5.10.0
Original source
Jun 28, 2026
Date parsed from source:
Jun 28, 2026

First seen by Releasebot:
Jun 28, 2026
Fastify

v5.9.0

Fastify ships v5.9.0 with request.mediaType support, onMaxParamLength, and a range of fixes for routing, trailers, keep-alive leaks, HTTP/2 buffering, and decorator checks. It also improves content type handling, performance, and docs across the ecosystem.
What's Changed

feat: add request.mediaType by @climba03003 in #6653

docs: remove deprecated leveldb plugin and update ecosystem by @Tony133 in #6661

chore(sponsor): add bestforandroid by @Eomm in #6659

ci: drop Node.js 20 from yarn matrix in package-manager-ci.yml by @Tony133 in #6662

fix: prevent duplicate res.end in sendTrailer with sync callbacks by @climba03003 in #6676

fix: avoid duplicate closeIdleConnections call on native servers by @trivikr in #6669

fix: error.code not present on some routing errors by @mcollina in #6678

fix: correct isCustomSerializerCompiler flag check by @eddieran in #6657

fix: validate invalid route logLevel at registration by @maxpetrusenko in #6523

docs: update contribution rules by @Tony133 in #6670

fix: use ContentType parser for response schema lookup by @UlisesGascon in #6685

ci(ci): use shared quality workflow by @Fdawgs in #6688

fix(types): allow request.getValidationFunction() to return undefined by @trivikr in #6665

fix: do not trust forwarded host/proto when socket is missing by @mcollina in #6684

perf: defer ContentType parsing in getSchemaSerializer until needed by @aquie00t in #6692

perf: cache parsed ContentType objects in ContentTypeParser by @aquie00t in #6694

perf: add typeof guard before toString.call in send and onSendEnd by @aquie00t in #6693

chore: Bump pnpm/action-setup from 5.0.0 to 6.0.4 by @dependabot[bot] in #6704

chore: Bump actions/github-script from 8 to 9 by @dependabot[bot] in #6705

chore: Bump JustinBeckwith/linkinator-action from 2.4.0 to 2.4.2 by @dependabot[bot] in #6706

docs: correct return503OnClosing comment in route.js by @mcollina in #6712

fix: enable diagnostics tracking for async error handlers by @irzix in #6458

fix: ignore duplicate trailer completions by @mcollina in #6714

feat: add support of onMaxParamLength by @climba03003 in #6716

chore: introduce TSTyche for type testing by @mrazauskas in #6532

docs(reference): grammar and readability fixes by @Fdawgs in #6710

chore: update depedabot setting by @climba03003 in #6715

fix: include hint and docs URL in FSTWRN004 warning message by @aquie00t in #6723

ci(ci): do not pass secrets to reusable workflow by @Fdawgs in #6744

docs: add fastify-intlayer to ecosystem documentation by @aymericzip in #6594

chore: Bump concurrently from 9.2.1 to 10.0.0 by @dependabot[bot] in #6752

docs(Errors): fix incorrect usage of root fastify inside plugin scope by @Rpaudel379 in #6731

ci: add node 26 to test matrices by @Fdawgs in #6728

docs(Warnings): remove retired FSTWRN002 warning code by @leestana01 in #6754

fix: chunk large HTTP/2 buffer replies by @mcollina in #6746

chore: migrate type tests to TSTyche assertions (part one) by @mrazauskas in #6726

chore: migrate type tests to TSTyche assertions (part two) by @mrazauskas in #6727

docs: fix doubled braces in serializerCompiler signature by @DucMinhNe in #6747

docs: remove HackerOne reporting link by @jhcpeixoto in #6735

refactor(decorate): replace find with some in hasKey for correct boolean semantics by @aquie00t in #6759

fix: replace AssertionError with FST_ERR_PLUGIN_DEPENDENCY_NOT_REGISTERED in checkDependencies by @aquie00t in #6774

docs(ecosystem): add @inferdi/fastify by @maxrendel in #6742

docs(typo): Write-Plugin.md by @zakirimadullahprogrammer-tech in #6776

docs: fix duplicate anchor IDs causing broken TOC links by @AliMahmoudDev in #6770

docs: add fastify-ata as a JSON Schema validator option by @mertcanaltin in #6733

chore: rename type test files by @mrazauskas in #6762

docs: update ajv-errors guidance by @Herrtian in #6741

chore(warnings): correct duplicate 'not' typos in inline comments by @mixelburg in #6713

docs: add fastify-param-schema-validation to ecosystem by @Player1205 in #6760

docs(ecosystem): add @thecodepace/fastify-http-query by @Puppo in #6785

chore: Bump esbuild from 0.25.12 to 0.28.1 in /test/bundler/esbuild in the npm_and_yarn group across 1 directory by @dependabot[bot] in #6788

fix: clear socket._meta after response to prevent keep-alive leaks by @nerkoux in #6799

fix: avoid double slash when joining nested prefixes by @rohithvegesna in #6803

docs(sponsors): Update sponsors list by removing two entries by @Eomm in #6792

chore: Bump fastify-plugin from 5.1.0 to 6.0.0 by @dependabot[bot] in #6801

chore(package.json): fix delvedor's personal url by @Fdawgs in #6808

chore: replace http with https in urls by @Fdawgs in #6809

chore: add new sponsor by @Eomm in #6813

chore: Bump actions/checkout from 6 to 7 by @dependabot[bot] in #6812

fix: hasRequestDecorator/hasReplyDecorator misses constructor-assigned built-in properties by @LeSingh1 in #6753

docs: migrate Zod type provider to official @fastify package by @Tony133 in #6686

docs: add warning about empty string coercion with nullable types by @ritambh888 in #6452

docs: fix incorrect code examples in Hooks and Server reference by @rrodj in #6622

docs: update Serverless guide Dockerfile to a supported Node.js version by @harish885 in #6789

docs(types): mark request metadata accessors as untrusted input by @mcollina in #6572

Bumped v5.9.0 by @Eomm in #6816

New Contributors

@eddieran made their first contribution in #6657

@irzix made their first contribution in #6458

@aymericzip made their first contribution in #6594

@Rpaudel379 made their first contribution in #6731

@leestana01 made their first contribution in #6754

@DucMinhNe made their first contribution in #6747

@jhcpeixoto made their first contribution in #6735

@maxrendel made their first contribution in #6742

@zakirimadullahprogrammer-tech made their first contribution in #6776

@AliMahmoudDev made their first contribution in #6770

@mertcanaltin made their first contribution in #6733

@Herrtian made their first contribution in #6741

@mixelburg made their first contribution in #6713

@Player1205 made their first contribution in #6760

@Puppo made their first contribution in #6785

@nerkoux made their first contribution in #6799

@rohithvegesna made their first contribution in #6803

@LeSingh1 made their first contribution in #6753

@ritambh888 made their first contribution in #6452

@rrodj made their first contribution in #6622

@harish885 made their first contribution in #6789

Full Changelog: v5.8.5...v5.9.0
Original source
All of your release notes in one feed

Join Releasebot and get updates from Fastify and hundreds of other software products.

Create account
Get updates with:
Apr 14, 2026
Date parsed from source:
Apr 14, 2026

First seen by Releasebot:
Apr 15, 2026
Fastify

v5.8.5

Fastify ships a security release that fixes CVE-2026-33806 and GHSA-247c-9743-5963, restores trustProxy handling for number and string types, and improves port parsing and socket address checks.
⚠️ Security Release

This fixes CVE CVE-2026-33806 GHSA-247c-9743-5963.

What's Changed

chore: Fix port parsing by @jsumners in #6603

chore: upgrade to typescript v6.0.2 by @Tony133 in #6605

fix: restore trustProxy function for number and string types, add null check for socketAddr by @mcollina in #6613

ci: reduce cron scheduled workflows from daily/weekly to monthly by @Fdawgs in #6623

chore: Bump pnpm/action-setup from 4.2.0 to 5.0.0 by @dependabot[bot] in #6629

chore: Bump markdownlint-cli2 from 0.21.0 to 0.22.0 by @dependabot[bot] in #6632

chore: Bump borp from 0.21.0 to 1.0.0 by @dependabot[bot] in #6633

chore: Bump actions/dependency-review-action from 4.8.3 to 4.9.0 by @dependabot[bot] in #6630

docs(ecosystem): add @pompelmi/fastify-plugin by @SonoTommy in #6610

New Contributors

@SonoTommy made their first contribution in #6610

Full Changelog: v5.8.4...v5.8.5
Original source
Mar 23, 2026
Date parsed from source:
Mar 23, 2026

First seen by Releasebot:
Mar 23, 2026
Fastify

v5.8.4

Fastify ships v5.8.4 release notes.

Full Changelog

v5.8.3...v5.8.4
Original source
Mar 23, 2026
Date parsed from source:
Mar 23, 2026

First seen by Releasebot:
Mar 23, 2026
Fastify

v5.8.3

Fastify ships a security release that fixes CVE-2026-3635 and GHSA-444r-cwp2-x5xf, while also tightening docs, tests, types, and CI guidance for a cleaner, safer developer experience.
⚠️ Security Release

This fixes CVE CVE-2026-3635 GHSA-444r-cwp2-x5xf.

What's Changed

docs(readme): add @Tony133 to plugin team by @Tony133 in #6565

Updated Plugins-Guide.md; Changed "fastify" to "instance" during plugin registration to showcase that it's added as a child by @kyrylchenko in #6566

test: use fastify.test in test case by @climba03003 in #6568

docs: use fastify.example in documentation by @climba03003 in #6567

docs: add common performance degradation guidance by @maxpetrusenko in #6520

docs(server): fix camelCase anchor links in TOC by @Deepvamja in #6530

ci(link-checker): fix root-relative links resolution by @barba-rossa in #6535

docs: update syntax markdown, absolute paths and links by @Tony133 in #6569

docs: clarify content-type parser/schema mismatch is outside threat model by @mcollina in #6537

docs: fix incorrect code examples in Reply and Request reference by @mahmoodhamdi in #6582

docs: replace redirected npm.im http-errors link by @mcollina in #6588

types: Allow port to be null in request type definition by @TristanBarlow in #6589

docs: update links by @Tony133 in #6593

ci(lock-threads): use shared lock-threads workflow by @Fdawgs in #6592

New Contributors

@kyrylchenko made their first contribution in #6566

@maxpetrusenko made their first contribution in #6520

@Deepvamja made their first contribution in #6530

@barba-rossa made their first contribution in #6535

@mahmoodhamdi made their first contribution in #6582

@TristanBarlow made their first contribution in #6589

Full Changelog: v5.8.2...v5.8.3
Original source
Similar to Fastify with recent updates:
Mar 7, 2026
Date parsed from source:
Mar 7, 2026

First seen by Releasebot:
Mar 7, 2026
Fastify

v5.8.2

Fastify releases v5.8.2 with ecosystem updates, new plugins and documentation improvements. Highlights include adding @yeliex/fastify-problem-details, fastify-file-router and fastify-svelte-view, a bug fix note, and several new contributors marking shipped product progress.
What's Changed

docs(ecosystem): add @yeliex/fastify-problem-details by @yeliex in #6546

Revert "chore: upgrade borp to v1.0.0" by @climba03003 in #6564

docs: document body validation with custom content type parsers by @mcollina in #6556

docs(ecosystem): add fastify-file-router by @bhouston in #6441

docs: add fastify-svelte-view to Ecosystem list by @matths in #6453

fix: anchor keyValuePairsReg to prevent quadratic backtracking by @mcollina in #6558

docs: added note on handling of invalid URLs in setNotFoundHandler by @leftieFriele in #5661

docs(guides): update codemod links by @OluchiEzeifedikwa in #6479

docs: add @glidemq/fastify to community plugins by @avifenesh in #6560

New Contributors

@yeliex made their first contribution in #6546

@matths made their first contribution in #6453

@leftieFriele made their first contribution in #5661

@OluchiEzeifedikwa made their first contribution in #6479

@avifenesh made their first contribution in #6560

Full Changelog: v5.8.1...v5.8.2
Original source
Mar 5, 2026
Date parsed from source:
Mar 5, 2026

First seen by Releasebot:
Mar 6, 2026
Fastify

v5.8.1

Security release fixes Missing End Anchor in subtypeNameReg CVE-2026-3419, updating from v5.8.0 to v5.8.1.

⚠️ Security Release

Fixes "Missing End Anchor in "subtypeNameReg" Allows Malformed Content-Types to Pass Validation": GHSA-573f-x89g-hqp9.

CVE-2026-3419

Full Changelog: v5.8.0...v5.8.1
Original source
Mar 5, 2026
Date parsed from source:
Mar 5, 2026

First seen by Releasebot:
Mar 6, 2026
Fastify

v5.8.0

Release notes announce the jump from v5.7.4 to v5.8.0 featuring handler-level timeouts, security and documentation improvements, dependency upgrades, and workflow cleanups. A broad maintenance release with new contributors highlighted and a Full Changelog pointer.
What's Changed

docs(request): add host security warning references by @mcollina in #6476

docs: fix note style by @Fdawgs in #6487

chore: rename deploy website ci by @Eomm in #6492

chore: support pino v9 and v10 by @mcollina in #6496

chore: update logger types and fix TODO comment by @Tony133 in #6470

refactor(test-types): migrate dummy-plugin to FastifyPluginAsync by @Tony133 in #6472

docs: fix markdown typo in README.md by @droppingbeans in #6491

test: cover non-numeric content-length client error path by @mcollina in #6500

ci: remove tests-checker workflow by @Tony133 in #6481

ci: remove stale.yml file by @Tony133 in #6504

docs(security): remove hackerone references; change note style by @Fdawgs in #6501

chore: rename @sinclair/typebox to typebox by @Tony133 in #6494

ci(links-check): add external link checker using linkinator-action by @umxr in #6386

chore: upgrade borp to v1.0.0 by @Tony133 in #6510

docs: Add OpenJS CNA reference to SECURITY.md by @mcollina in #6516

fix: avoid mutating shared routerOptions across instances by @mcollina in #6515

fix(types): accept async route hooks in shorthand options by @mcollina in #6514

docs: Improve shutdown lifecycle documentation by @kibertoad in #6517

chore: remove unused tsconfig.eslint.json by @mrazauskas in #6524

feat: First-class support for handler-level timeouts by @kibertoad in #6521

docs(security): clarify insecureHTTPParser threat model scope by @mcollina in #6533

chore(license): standardise license notice by @Fdawgs in #6511

docs: clarify anyOf nullable coercion behavior with primitive types by @slegarraga in #6531

fix: remove format placeholder from FST_ERR_CTP_INVALID_MEDIA_TYPE message by @super-mcgin in #6528

docs(reference/hooks): fix note style by @Fdawgs in #6538

chore: Bump lycheeverse/lychee-action from 2.7.0 to 2.8.0 by @dependabot[bot] in #6539

chore: Bump actions/dependency-review-action from 4.8.2 to 4.8.3 by @dependabot[bot] in #6540

chore: Bump markdownlint-cli2 from 0.20.0 to 0.21.0 by @dependabot[bot] in #6542

ci: remove broken links and add ecosystem link validator by @mcollina in #6421

ci(validate-ecoystem-links): add job level permission by @Fdawgs in #6545

style: remove trailing whitespace by @Fdawgs in #6543

New Contributors

@droppingbeans made their first contribution in #6491

@umxr made their first contribution in #6386

@slegarraga made their first contribution in #6531

@super-mcgin made their first contribution in #6528

Full Changelog: v5.7.4...v5.8.0

Original source
Feb 2, 2026
Date parsed from source:
Feb 2, 2026

First seen by Releasebot:
Feb 3, 2026
Fastify

v5.7.4

Full Changelog: v5.7.3...v5.7.4
Original source
Feb 2, 2026
Date parsed from source:
Feb 2, 2026

First seen by Releasebot:
Feb 3, 2026
Fastify

v5.7.3
⚠️ Security Release

Fix GHSA-mrq3-vjjr-p77c CVE-2026-25224.

What's Changed

docs: update Reply.send() documentation for string serialization by @mcollina in #6466

chore: ignore agents config files by @mcollina in #6474

docs: update vulnerability reporting to use GitHub Security by @mcollina in #6475

Full Changelog: v5.7.2...v5.7.3
Original source
Jan 26, 2026
Date parsed from source:
Jan 26, 2026

First seen by Releasebot:
Jan 26, 2026
Fastify

v5.7.2

New patch improves content-type header parsing and adds several small fixes and docs tweaks from multiple contributors. The full changelog signals a release that updates behavior and ecosystem docs, with user-facing improvements shipping now.
Notice

⚠️ Notice ⚠️

Parsing of the content-type header has been improved to a strict parser in PR #6414. This means only header values in the form described in RFC 9110 are accepted.

What's Changed

chore: npm ignore AI related files by @climba03003 in #6447

chore: update sponsor url by @Eomm in #6450

docs: add fastify-http-exceptions to Ecosystem.md by @bhouston in #6442

docs: fix invalid shorten form schema example by @climba03003 in #6448

docs: Simplify and tighten decorators example by @smith558 in #6451

docs: Fix incorrect variable use by @smith558 in #6455

chore: update sponsor link by @Eomm in #6460

fix: Fix MIT Licence file to conform to standard by @smith558 in #6464

docs: move querystringParser option under routerOptions by @inyourtime in #6463

chore: Updated content-type header parsing by @jsumners in #6414

New Contributors

@bhouston made their first contribution in #6442

Full Changelog

v5.7.1...v5.7.2
Original source
Jan 16, 2026
Date parsed from source:
Jan 16, 2026

First seen by Releasebot:
Jan 16, 2026
Fastify

v5.7.1
What's Changed

chore: Bump actions/checkout from 5 to 6 by @dependabot[bot] in #6434

chore: updated version in the fastify.js by @Tony133 in #6446

Full Changelog: v5.7.0...v5.7.1
Original source
Jan 15, 2026
Date parsed from source:
Jan 15, 2026

First seen by Releasebot:
Jan 15, 2026
Fastify

v5.7.0

The latest changelog announces a broad release with performance perks, new features, and security notes across the ecosystem. Highlights include conditional request logging, faster loading, and updated tooling, covering the move from v5.6.2 to v5.7.0 with many contributor updates.
What's Changed

docs: Improved firebase serverless guide about process remaining stuck by @alexandercerutti in #6380

docs: update migration guide with date-time breaking change by @craftsman01 in #6110

chore: remove test file by @Eomm in #6384

feat: speed up loading with custom compiler by @Eomm in #6383

docs: replace all instances of twitter.com with x.com by @cseas in #6355

docs: correct logger option in example by @inyourtime in #6391

docs: fix links by @Shriti507 in #6394

chore: skip unnecessary object creation by @Eomm in #6400

docs: Update JSON Schema link in documentation by @jon23d in #6402

docs(ecosystem): add fastify-ses-mailer by @KaranHotwani in #6395

docs: add security note about validation errors in response by @mcollina in #6407

docs: add security threat model by @mcollina in #6406

chore: update onboarding and offboarding instructions by @Eomm in #6403

fix: set status code before publishing diagnostics error channel by @tt-a1i in #6412

fix: use JSON.stringify in onBadUrl for proper escaping by @mcollina in #6420

chore: fix type test by @mrazauskas in #6418

docs: improve Validation-and-Serialization.md by @twentytwo777 in #6423

test: skip IPv6 test if its support is not present by @LiviaMedeiros in #6428

test: fix test when localhost has multiple addresses by @LiviaMedeiros in #6427

docs: add security warning for requestIdHeader by @mcollina in #6425

docs(ecosystem): add elements-fastify by @rohitsoni007 in #6416

chore: Bump actions/dependency-review-action from 4.8.1 to 4.8.2 by @dependabot[bot] in #6433

chore: Bump markdownlint-cli2 from 0.18.1 to 0.20.0 by @dependabot[bot] in #6436

chore: Bump @types/node from 24.10.4 to 25.0.3 in the dev-dependencies-typescript group by @dependabot[bot] in #6435

fix(ts): Align routerOptions defaultRoute types with runtime by @AnkanMisra in #6392

fix(types): require send() payload when Reply type is specified by @tt-a1i in #6432

fix: ajv options type validation by @gianmarco27 in #6437

docs: add non-vulnerability examples to threat model by @RafaelGSS in #6431

feat: implement conditional request logging by @kibertoad in #5732

docs(sponsor): add serpapi by @Eomm in #6443

perf: use native WebStream API instead of Readable.fromWeb wrapper by @mcollina in #6444

New Contributors

@craftsman01 made their first contribution in #6110

@cseas made their first contribution in #6355

@Shriti507 made their first contribution in #6394

@jon23d made their first contribution in #6402

@KaranHotwani made their first contribution in #6395

@tt-a1i made their first contribution in #6412

@mrazauskas made their first contribution in #6418

@twentytwo777 made their first contribution in #6423

@rohitsoni007 made their first contribution in #6416

@AnkanMisra made their first contribution in #6392

@gianmarco27 made their first contribution in #6437

Full Changelog: v5.6.2...v5.7.0
Original source
Nov 9, 2025
Date parsed from source:
Nov 9, 2025

First seen by Releasebot:
Dec 11, 2025
Fastify

v5.6.2

Fastify rolls out a new release with code refactors, error handling fixes, and CI workflow updates. It also tightens dependency bumps and expands docs while welcoming new contributors, marking Mr. v5.6.2 progress from v5.6.1.
What's Changed

refactor: rename source file names with kebab-case by @jean-michelet in #6331

ci(ci): check dependabot prs originate from repo by @Fdawgs in #6330

fix: accept htab ows by @jean-michelet in #6303

fix: handle non FastifyErrors in custom handler properly, set type of error-parameter for setErrorHandler and errorHandler to unknown, but configurable via generic TError by @Uzlopak in #6308

build(deps-dev): remove @fastify/pre-commit by @Fdawgs in #6319

ci: improve citgm workflows by @Uzlopak in #6334

docs: explain stream error handling by @lundibundi in #5746

fix: error throwing in reply by @juanlet in #6299

refactor: delegate options processing to a dedicated function by @jean-michelet in #6333

ci: remove label of citgm only on pull_request.labeled, add options for workflow_dispatch by @Uzlopak in #6335

chore: Bump actions/checkout from 4 to 5 by @dependabot[bot] in #6343

chore: Bump joi from 17.13.3 to 18.0.1 by @dependabot[bot] in #6347

chore: Bump lycheeverse/lychee-action from 2.4.1 to 2.6.1 by @dependabot[bot] in #6345

chore: Bump actions/dependency-review-action from 4.7.1 to 4.8.0 by @dependabot[bot] in #6344

chore: Bump actions/labeler from 5 to 6 by @dependabot[bot] in #6341

chore: Bump actions/setup-node from 4 to 5 by @dependabot[bot] in #6342

chore: Bump actions/github-script from 7 to 8 by @dependabot[bot] in #6340

docs: mention that addHttpMethod override existing methods by @jean-michelet in #6350

chore: remove reference to simple-get by @ilteoood in #6353

chore: remove commented tests by @ilteoood in #6352

fix: respect child logger factory in fastify options by @cysp in #6349

docs(ecosystem): adding attaryz/fastify-devtools to community plugins by @attaryz in #6339

docs: remove ambiguity from statement by @udohjeremiah in #6360

chore: add @fastify/sse as fastify core plugin to documentation and citgm by @manshusainishab in #6364

docs(guides/fluent-schema): replace last nb usage by @Fdawgs in #6365

style(ci): remove whitespace from concurrency group by @Fdawgs in #6366

docs: Fix broken link to TypeBox doc website wrt AJV setup by @melroy89 in #6367

docs(reference/plugins): mention async plugins by @Fdawgs in #6357

chore: add max-len ESLint rule with 120 character limit by @emicovi in #6221

chore: Bump actions/dependency-review-action from 4.8.0 to 4.8.1 by @dependabot[bot] in #6374

chore: Bump pino from 9.14.0 to 10.1.0 in the dependencies-major group by @dependabot[bot] in #6378

chore: Bump pnpm/action-setup from 4.1.0 to 4.2.0 by @dependabot[bot] in #6375

chore: Bump tsd from 0.32.0 to 0.33.0 in the dev-dependencies-typescript group by @dependabot[bot] in #6346

chore: Bump lycheeverse/lychee-action from 2.6.1 to 2.7.0 by @dependabot[bot] in #6377

fix: handle web stream payload in HEAD route by @orionmiz in #6372

chore: Bump actions/setup-node from 5 to 6 by @dependabot[bot] in #6376

chore: Bump borp from 0.20.2 to 0.21.0 by @dependabot[bot] in #6379

fix: parse ipv6 hostname by @jean-michelet in #6373

fix: consistent error handling for custom validators in async validation contexts by @emicovi in #6247

New Contributors

@juanlet made their first contribution in #6299

@cysp made their first contribution in #6349

@attaryz made their first contribution in #6339

@udohjeremiah made their first contribution in #6360

@manshusainishab made their first contribution in #6364

@orionmiz made their first contribution in #6372

Full Changelog: v5.6.1...v5.6.2
Original source
Sep 22, 2025
Date parsed from source:
Sep 22, 2025

First seen by Releasebot:
Dec 11, 2025
Fastify

v5.6.1

A new patch release bundles fixes across docs, security policy updates, and HTTP/2 session handling improvements. It highlights TypeScript consistency tweaks, deprecation warning fixes, and welcomes new contributors, with a full changelog from v5.6.0 to v5.6.1.
What's Changed

fix: fix typo of deprecation warning FSTDEP022 by @Uzlopak in #6313

docs(decorators): fix TypeScript inconsistency by @emicovi in #6224

chore: fix typos by @deining in #6316

docs(security): add secondary contact/security escalation policy by @UlisesGascon in #6315

chore(gha): remove benchmark github workflows by @Eomm in #6322

chore(sponsor): add lambdatest by @Eomm in #6324

fix: (types) allow FastifySchemaValidationError[] as an error by @gurgunday in #6326

fix: correct session.close() context in http2 timeout handler by @David-van-der-Sluijs in #6327

fix: close http2 sessions on close server by @kostyak127 in #6137

New Contributors

@deining made their first contribution in #6316

@UlisesGascon made their first contribution in #6315

@David-van-der-Sluijs made their first contribution in #6327

@kostyak127 made their first contribution in #6137

Full Changelog: v5.6.0...v5.6.1
Original source

Curated by the Releasebot team

Releasebot is an aggregator of official release notes from hundreds of software vendors and thousands of sources.

Our editorial process involves the manual review and audit of release notes procured with the help of automated systems.

About us Our methodology

Fastify Release Notes

v5.10.0

What's Changed

New Contributors

v5.9.0

What's Changed

New Contributors

v5.8.5

⚠️ Security Release

What's Changed

New Contributors

v5.8.4

Full Changelog

v5.8.3

⚠️ Security Release

What's Changed

New Contributors

Similar to Fastify with recent updates:

v5.8.2

What's Changed

New Contributors

Full Changelog: v5.8.1...v5.8.2

v5.8.1

⚠️ Security Release

CVE-2026-3419

v5.8.0

What's Changed

New Contributors

v5.7.4

Full Changelog: v5.7.3...v5.7.4

v5.7.3

⚠️ Security Release

What's Changed

v5.7.2

Notice

What's Changed

New Contributors

Full Changelog

v5.7.1

What's Changed

v5.7.0

What's Changed

New Contributors

v5.6.2

What's Changed

New Contributors

Full Changelog: v5.6.1...v5.6.2

v5.6.1

What's Changed

New Contributors

Full Changelog: v5.6.0...v5.6.1

Curated by the Releasebot team