Bump the npm-dependencies group with 8 updates by dependabot[bot] · Pull Request #21 · cdwv/ReviewPhin

dependabot · 2026-07-15T23:01:31Z

Bumps the npm-dependencies group with 8 updates:

Package	From	To
@fastify/static	`9.1.3`	`9.3.0`
fastify	`5.9.0`	`5.10.0`
@types/node	`22.20.0`	`22.20.1`
@vitest/coverage-v8	`4.1.9`	`4.1.10`
astro	`7.0.6`	`7.0.7`
typescript	`6.0.3`	`7.0.2`
typescript-eslint	`8.62.1`	`8.63.0`
vitest	`4.1.9`	`4.1.10`

Updates @fastify/static from 9.1.3 to 9.3.0

Release notes

Sourced from @fastify/static's releases.

v9.3.0

What's Changed

chore: update fastify-plugin dependency to version 6.0.0 by @Puppo in fastify/fastify-static#594

New Contributors

@Puppo made their first contribution in fastify/fastify-static#594

Full Changelog: fastify/fastify-static@v9.2.0...v9.3.0

v9.2.0

What's Changed

chore(.gitattributes): retain binary file eol style by @Fdawgs in fastify/fastify-static#577

refactor(types): migrate from tsd to tstyche by @Tony133 in fastify/fastify-static#579

fix: propagate return value from fastify.errorHandler by @abdulmunimjemal in fastify/fastify-static#582

chore: update depedabot setting by @climba03003 in fastify/fastify-static#583

chore: bump @fastify/compress from 8.3.1 to 9.0.0 by @dependabot[bot] in fastify/fastify-static#590

chore: bump @types/node from 25.9.4 to 26.0.0 in the dev-dependencies-typescript group by @dependabot[bot] in fastify/fastify-static#592

docs: fix broken links by @Fdawgs in fastify/fastify-static#591

docs: clarify precompressed allowedPath behavior by @mcollina in fastify/fastify-static#593

New Contributors

@abdulmunimjemal made their first contribution in fastify/fastify-static#582

Full Changelog: fastify/fastify-static@v9.1.3...v9.2.0

Commits

ad05a27 Bumped v9.3.0
58811db chore: update fastify-plugin dependency to version 6.0.0 (#594)
a343813 Bumped v9.2.0
b94c725 docs: clarify precompressed allowedPath behavior (#593)
684a4ea docs: fix broken links (#591)
26e7042 chore: bump @types/node in the dev-dependencies-typescript group (#592)
070912a chore: bump @fastify/compress from 8.3.1 to 9.0.0 (#590)
2f792ea chore: update depedabot setting
5b6043c fix: propagate return value from fastify.errorHandler (#582)
040307a refactor(types): migrate from tsd to tstyche (#579)
Additional commits viewable in compare view

Updates fastify from 5.9.0 to 5.10.0

Release notes

Sourced from fastify's releases.

v5.10.0

What's Changed

docs(type-providers): clarify as const usage by @smith558 in fastify/fastify#6772

docs: fix broken and redirected links by @Eomm in fastify/fastify#6817

docs: remove marko from @fastify/view engines (support dropped) by @EduardF1 in fastify/fastify#6821

fix: clear socket._meta on reply.hijack() when onTimeout is registered by @nerkoux in fastify/fastify#6810

docs: fix duplicate routeOptions entries in Request.md example by @thePranav-kpk in fastify/fastify#6824

chore: Bump @types/node from 25.9.4 to 26.0.1 in the dev-dependencies-typescript group by @dependabot[bot] in fastify/fastify#6829

docs(ecosystem): add @stitchapi/fastify to Community plugins by @rejifald in fastify/fastify#6820

feat: introduce log controller layer by @Eomm in fastify/fastify#6580

fix: use ContentType to detect json and charset in reply.send by @climba03003 in fastify/fastify#6830

docs: fix incorrect defaults and code examples in Server.md by @Adit-Jain-srm in fastify/fastify#6805

docs: fix incorrect hook count in Hooks.md by @thePranav-kpk in fastify/fastify#6825

chore: Bump fast-json-stringify from 6.4.0 to 7.0.0 in the dependencies group across 1 directory by @dependabot[bot] in fastify/fastify#6800

perf: reduce per-request overhead in the request lifecycle by @mcollina in fastify/fastify#6831

fix: derive request.port from request.host by @mcollina in fastify/fastify#6680

docs: update Logging.md with per-route log level info by @asppsa in fastify/fastify#6627

docs(type-providers): update import for article consistency by @smith558 in fastify/fastify#6771

New Contributors

@EduardF1 made their first contribution in fastify/fastify#6821

@thePranav-kpk made their first contribution in fastify/fastify#6824

@rejifald made their first contribution in fastify/fastify#6820

@Adit-Jain-srm made their first contribution in fastify/fastify#6805

@asppsa made their first contribution in fastify/fastify#6627

Full Changelog: fastify/fastify@v5.9.0...v5.10.0

Commits

94bcbcc Bumped v5.10.0
c47975e docs: Update import for page consistency (#6771)
82952b8 docs: Logging.md with per-route log level info (#6627)
6ac2e95 fix: derive request.port from request.host (#6680)
5f4871f perf: reduce per-request overhead in the request lifecycle (#6831)
ec4bc66 chore: Bump fast-json-stringify to v7 (#6800)
d0b649d docs: fix incorrect hook count in Hooks.md (eight -> ten) (#6825)
826c807 docs: fix incorrect defaults and code examples in Server.md (#6805)
6f63ce9 fix: use ContentType to detect json and charset in reply.send (#6830)
75d74e1 feat: introduce log controller layer (#6580)
Additional commits viewable in compare view

Updates @types/node from 22.20.0 to 22.20.1

Commits

See full diff in compare view

Updates @vitest/coverage-v8 from 4.1.9 to 4.1.10

Release notes

Sourced from @vitest/coverage-v8's releases.

v4.1.10

🐞 Bug Fixes

browser: Check fs access in builtin commands [backport to v4] - by @hi-ogawa, Hiroshi Ogawa and OpenCode (claude-opus-4-8) in vitest-dev/vitest#10680 (5c18d)

vm: Fix external module resolve error with deps optimizer query for encoded URI [backport to v4] - by @SveLil and @hi-ogawa in vitest-dev/vitest#10661 (bae52)

View changes on GitHub

Commits

db616d2 chore: release v4.1.10 (#10718)
See full diff in compare view

Updates astro from 7.0.6 to 7.0.7

Release notes

Sourced from astro's releases.

astro@7.0.7

Patch Changes

#17318 23a4120 Thanks @astrobot-houston! - Fixes CSS module scoped-name hash mismatch in astro dev when using vite.css.transformer: 'lightningcss' with content collections. Previously, a component importing a CSS module and rendered via content collection render() would get different class name hashes in the element and the injected <style> tag, causing styles not to apply.

#17323 4298883 Thanks @ematipico! - Fixes a dev server memory leak which caused Node.js to emit warnings in the console.

#17323 4298883 Thanks @ematipico! - Fixes a dev server crash when a .html or /index.html suffixed request (such as those netlify dev probes as pretty-URL fallbacks) matched a dynamic endpoint route, causing a TypeError: Missing parameter error

#17325 cebc404 Thanks @astrobot-houston! - Fixes a bug where CSS @import rules could end up mid-stylesheet after inline CSS chunks were merged during build, causing browsers to silently ignore them

#17323 4298883 Thanks @ematipico! - Fixes a build regression that could leave unresolved preload markers in inlined scripts with external dynamic imports

Updated dependencies [4298883, 4298883]:

@astrojs/telemetry@3.3.3

Changelog

Sourced from astro's changelog.

7.0.7

Patch Changes

#17318 23a4120 Thanks @astrobot-houston! - Fixes CSS module scoped-name hash mismatch in astro dev when using vite.css.transformer: 'lightningcss' with content collections. Previously, a component importing a CSS module and rendered via content collection render() would get different class name hashes in the element and the injected <style> tag, causing styles not to apply.

#17323 4298883 Thanks @ematipico! - Fixes a dev server memory leak which caused Node.js to emit warnings in the console.

#17323 4298883 Thanks @ematipico! - Fixes a dev server crash when a .html or /index.html suffixed request (such as those netlify dev probes as pretty-URL fallbacks) matched a dynamic endpoint route, causing a TypeError: Missing parameter error

#17325 cebc404 Thanks @astrobot-houston! - Fixes a bug where CSS @import rules could end up mid-stylesheet after inline CSS chunks were merged during build, causing browsers to silently ignore them

#17323 4298883 Thanks @ematipico! - Fixes a build regression that could leave unresolved preload markers in inlined scripts with external dynamic imports

Updated dependencies [4298883, 4298883]:

@astrojs/telemetry@3.3.3

Commits

3a4aa72 [ci] release (#17326)
23a4120 Fix CSS module scoped-name hash mismatch with Lightning CSS in content collec...
cebc404 Don't merge inline CSS chunks containing @import rules during build (#17325)
4298883 Revert "[ci] release (#17287)" (#17323)
74be96f [ci] release (#17287)
437401e fix: memory leak dev server (#17317)
ed92e31 Prevent inlining scripts with dynamic imports (#17316)
1170b6d Fix dev server crash when .html-suffixed requests hit dynamic endpoint routes...
See full diff in compare view

Updates typescript from 6.0.3 to 7.0.2

Commits

See full diff in compare view

Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for typescript since your current version.

Updates typescript-eslint from 8.62.1 to 8.63.0

Release notes

Sourced from typescript-eslint's releases.

v8.63.0

8.63.0 (2026-07-06)

🚀 Features

eslint-plugin: [no-misused-promises] detect async usage of a sync dispose usage (#12426)

🩹 Fixes

eslint-plugin: [method-signature-style] suggest converting readonly function properties instead of emitting invalid syntax (#12447, #12446)

eslint-plugin: [no-unnecessary-type-assertion] handle optional-chained calls to overloaded functions (#12491, #12485)

eslint-plugin: [no-base-to-string] don't flag a shadowed String() call (#12492)

scope-manager: export ClassStaticBlockScope (#12460)

❤️ Thank You

Evyatar Daud @StyleShit

Kristjan @KristjanTammekivi

Michael Naumov @mnaoumov

Serhii Leniv @Serhii-Leniv

송재욱

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from typescript-eslint's changelog.

8.63.0 (2026-07-06)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

290cf6c chore(release): publish 8.63.0
See full diff in compare view

Updates vitest from 4.1.9 to 4.1.10

Release notes

Sourced from vitest's releases.

v4.1.10

🐞 Bug Fixes

browser: Check fs access in builtin commands [backport to v4] - by @hi-ogawa, Hiroshi Ogawa and OpenCode (claude-opus-4-8) in vitest-dev/vitest#10680 (5c18d)

vm: Fix external module resolve error with deps optimizer query for encoded URI [backport to v4] - by @SveLil and @hi-ogawa in vitest-dev/vitest#10661 (bae52)

View changes on GitHub

Commits

db616d2 chore: release v4.1.10 (#10718)
bae52b5 fix(vm): fix external module resolve error with deps optimizer query for enco...
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the npm-dependencies group with 8 updates: | Package | From | To | | --- | --- | --- | | [@fastify/static](https://github.com/fastify/fastify-static) | `9.1.3` | `9.3.0` | | [fastify](https://github.com/fastify/fastify) | `5.9.0` | `5.10.0` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `22.20.0` | `22.20.1` | | [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `4.1.9` | `4.1.10` | | [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro) | `7.0.6` | `7.0.7` | | [typescript](https://github.com/microsoft/TypeScript) | `6.0.3` | `7.0.2` | | [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.62.1` | `8.63.0` | | [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.9` | `4.1.10` | Updates `@fastify/static` from 9.1.3 to 9.3.0 - [Release notes](https://github.com/fastify/fastify-static/releases) - [Commits](fastify/fastify-static@v9.1.3...v9.3.0) Updates `fastify` from 5.9.0 to 5.10.0 - [Release notes](https://github.com/fastify/fastify/releases) - [Commits](fastify/fastify@v5.9.0...v5.10.0) Updates `@types/node` from 22.20.0 to 22.20.1 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `@vitest/coverage-v8` from 4.1.9 to 4.1.10 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.10/packages/coverage-v8) Updates `astro` from 7.0.6 to 7.0.7 - [Release notes](https://github.com/withastro/astro/releases) - [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG.md) - [Commits](https://github.com/withastro/astro/commits/astro@7.0.7/packages/astro) Updates `typescript` from 6.0.3 to 7.0.2 - [Release notes](https://github.com/microsoft/TypeScript/releases) - [Commits](https://github.com/microsoft/TypeScript/commits) Updates `typescript-eslint` from 8.62.1 to 8.63.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.63.0/packages/typescript-eslint) Updates `vitest` from 4.1.9 to 4.1.10 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.10/packages/vitest) --- updated-dependencies: - dependency-name: "@fastify/static" dependency-version: 9.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: fastify dependency-version: 5.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: "@types/node" dependency-version: 22.20.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: "@vitest/coverage-v8" dependency-version: 4.1.10 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: astro dependency-version: 7.0.7 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: typescript dependency-version: 7.0.2 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm-dependencies - dependency-name: typescript-eslint dependency-version: 8.63.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: vitest dependency-version: 4.1.10 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

rgembalik · 2026-07-15T23:30:13Z

@ReviewPhin review

reviewphin-cdwv · 2026-07-15T23:31:13Z

Review summary

Overall assessment

No actionable code issues were found in the dependency and lockfile updates. Merge remains gated by the repository-required changelog section in the pull request description.

Merge readiness

Status: Ready
Confidence: Medium
Rationale: No actionable findings were identified in this review run.

Snapshot

Overall severity: Low
Scope reviewed: 2 changed files on dependabot/npm_and_yarn/npm-dependencies-b04753875a -> main

Highlights

Package ranges and lockfile resolutions are aligned, including the TypeScript 7 and associated tooling updates.

Next Steps

Once you and your team are satisfied with the changes you can merge this branch since there are no actionable findings left.
Apply suggested changes directly from eligible inline review comments, or reply when a finding needs clarification.
Use the Run Review action on the ReviewPhin Check Run after pushing changes, or comment /reviewphin review, to request another review.

rgembalik · 2026-07-15T23:47:53Z

@ReviewPhin review

rgembalik · 2026-07-15T23:54:36Z

@ReviewPhin What's on this image?

reviewphin-cdwv · 2026-07-15T23:55:06Z

The image shows what appears to be a chat application interface — it looks like a T3 Chat window with the tagline "The Fastes..." (likely "The Fastest" something, truncated). It shows the app's logo/icon on the left side.

rgembalik · 2026-07-17T00:11:02Z

@ReviewPhin review

dependabot · 2026-07-18T08:14:42Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 15, 2026

dependabot Bot requested a review from rgembalik as a code owner July 15, 2026 23:01

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 15, 2026

dependabot Bot closed this Jul 18, 2026

dependabot Bot deleted the dependabot/npm_and_yarn/npm-dependencies-b04753875a branch July 18, 2026 08:14

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump the npm-dependencies group with 8 updates#21

Bump the npm-dependencies group with 8 updates#21
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-dependencies-b04753875a

dependabot Bot commented on behalf of github Jul 15, 2026 •

edited

Loading

Uh oh!

rgembalik commented Jul 15, 2026

Uh oh!

reviewphin-cdwv Bot commented Jul 15, 2026 •

edited

Loading

Uh oh!

rgembalik commented Jul 15, 2026

Uh oh!

rgembalik commented Jul 15, 2026

Uh oh!

reviewphin-cdwv Bot commented Jul 15, 2026

Uh oh!

rgembalik commented Jul 17, 2026

Uh oh!

dependabot Bot commented on behalf of github Jul 18, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 15, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v9.3.0

What's Changed

New Contributors

v9.2.0

What's Changed

New Contributors

v5.10.0

What's Changed

New Contributors

v4.1.10

🐞 Bug Fixes

View changes on GitHub

astro@7.0.7

Patch Changes

7.0.7

Patch Changes

v8.63.0

8.63.0 (2026-07-06)

🚀 Features

🩹 Fixes

❤️ Thank You

8.63.0 (2026-07-06)

v4.1.10

🐞 Bug Fixes

View changes on GitHub

Uh oh!

rgembalik commented Jul 15, 2026

Uh oh!

reviewphin-cdwv Bot commented Jul 15, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Review summary

Overall assessment

Merge readiness

Snapshot

Highlights

Next Steps

Uh oh!

rgembalik commented Jul 15, 2026

Uh oh!

rgembalik commented Jul 15, 2026

Uh oh!

reviewphin-cdwv Bot commented Jul 15, 2026

Uh oh!

rgembalik commented Jul 17, 2026

Uh oh!

dependabot Bot commented on behalf of github Jul 18, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot Bot commented on behalf of github Jul 15, 2026 •

edited

Loading

reviewphin-cdwv Bot commented Jul 15, 2026 •

edited

Loading