Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 8, 2025

Bumps the dependencies group with 7 updates in the / directory:

Package From To
@fastify/http-proxy 11.3.0 11.4.1
fastify 5.4.0 5.6.2
pino 9.7.0 10.1.0
pino-pretty 13.0.0 13.1.3
ua-parser-js 2.0.4 2.0.6
undici 7.11.0 7.16.0
zod 3.25.75 4.1.13

Updates @fastify/http-proxy from 11.3.0 to 11.4.1

Release notes

Sourced from @​fastify/http-proxy's releases.

v11.4.1

What's Changed

New Contributors

Full Changelog: fastify/fastify-http-proxy@v11.4.0...v11.4.1

v11.4.0

What's Changed

New Contributors

Full Changelog: fastify/fastify-http-proxy@v11.3.0...v11.4.0

Commits
  • d15c916 Bumped v11.4.1
  • a3796e5 fix: add types and updated docs for 'preRewrite'. (#442)
  • efcb312 Bumped v11.4.0
  • 5ade2e5 chore(deps): update and add tests (#441)
  • 8ae78d2 feat(types): add fromParameters method (#440)
  • bbe97fb chore: address security scanner false positives related to CVE-2023-2968 (#...
  • 031f4d4 chore: update deps (#436)
  • f2e4de6 build(deps-dev): bump tsd from 0.32.0 to 0.33.0 (#432)
  • 6794aa0 build(deps-dev): bump pino from 9.14.0 to 10.1.0 (#435)
  • 6268ce3 build(deps-dev): bump borp from 0.20.2 to 0.21.0 (#434)
  • Additional commits viewable in compare view

Updates fastify from 5.4.0 to 5.6.2

Release notes

Sourced from fastify's releases.

v5.6.2

What's Changed

New Contributors

... (truncated)

Commits
  • f15d4ea Bumped v5.6.2
  • d338dca fix: consistent error handling for custom validators in async validation cont...
  • e1aee4b fix: parse ipv6 hostname (#6373)
  • b5958b3 chore: Bump borp from 0.20.2 to 0.21.0 (#6379)
  • 3120cde chore: Bump actions/setup-node from 5 to 6 (#6376)
  • dd02e42 fix: handle web stream payload in HEAD route (#6372)
  • 810e3d5 chore: Bump lycheeverse/lychee-action from 2.6.1 to 2.7.0 (#6377)
  • 5ebe327 chore: Bump tsd in the dev-dependencies-typescript group (#6346)
  • 106bb6b chore: Bump pnpm/action-setup from 4.1.0 to 4.2.0 (#6375)
  • 55653d6 chore: Bump pino from 9.14.0 to 10.1.0 in the dependencies-major group (#6378)
  • Additional commits viewable in compare view

Updates pino from 9.7.0 to 10.1.0

Release notes

Sourced from pino's releases.

v10.1.0

What's Changed

New Contributors

Full Changelog: pinojs/pino@v10.0.0...v10.1.0

v10.0.0

The only breaking change is dropping support for Node 18.

What's Changed

Full Changelog: pinojs/pino@v9.13.1...v10.0.0

v9.14.0

What's Changed

Full Changelog: pinojs/pino@v9.13.1...v9.14.0

v9.13.1

What's Changed

Full Changelog: pinojs/pino@v9.13.0...v9.13.1

v9.13.0

What's Changed

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for pino since your current version.


Updates pino-pretty from 13.0.0 to 13.1.3

Release notes

Sourced from pino-pretty's releases.

v13.1.3

What's Changed

New Contributors

Full Changelog: pinojs/pino-pretty@v13.1.2...v13.1.3

v13.1.2

What's Changed

New Contributors

Full Changelog: pinojs/pino-pretty@v13.1.1...v13.1.2

v13.1.1

What's Changed

Full Changelog: pinojs/pino-pretty@v13.1.0...v13.1.1

v13.1.0

What's Changed

... (truncated)

Commits
  • 08425cd v13.1.3
  • 6afb524 fix: messageFormat print 0 value (#635)
  • 70c73ea build(deps): bump fast-copy from 3.0.2 to 4.0.0 (#637)
  • 2cd9794 build(deps): bump actions/checkout from 5 to 6 (#636)
  • c06e276 Update format-time.js documentation to match functionality (#632)
  • 47ffb45 build(deps): bump pino-abstract-transport from 2.0.0 to 3.0.0 (#629)
  • 932af85 build(deps-dev): bump pino from 9.14.0 to 10.1.0 (#628)
  • 6d48318 build(deps-dev): bump borp from 0.20.2 to 0.21.0 (#627)
  • 3b89a0c build(deps): bump actions/setup-node from 4 to 6 (#626)
  • ab0ccab Add in the README file a snippet to use pino-pretty only for dev (#623)
  • Additional commits viewable in compare view

Updates ua-parser-js from 2.0.4 to 2.0.6

Release notes

Sourced from ua-parser-js's releases.

v2.0.6

Version 2.0.6

  • Add new CLI feature: processing batch user-agent data from file and output as JSON
  • Fix setUA(): trim leading space from user-agent string input
  • Replace undici dependency with node's internal Headers
  • Add new browser: Bing, Qwant
  • Add new device vendor: Hisense, Wiko
  • Improve browser detection: Mozilla, Pale Moon
  • Improve CPU detection: 68k
  • Improve device detection: Apple, BlackBerry, Huawei, Nokia, Xiaomi
  • Improve OS detection: iOS 26
  • extensions submodule:
    • Add new fetcher: Discordbot, KeybaseBot, Slackbot, Slackbot-LinkExpanding, Slack-ImgProxy, Twitterbot
    • Add new crawler: Qwantbot-news, SurdotlyBot, SwiftBot

v2.0.5

Version 2.0.5

  • Add new browser: Zalo
  • Add new CPU arch: alpha
  • Add new device vendor: Philips
  • Improve device detection: Pico
  • Fix parsing error on pages with modified Array prototypes
  • Improve type declarations:
    • Replace node-fetch dependency with undici
    • Replace hardcoded string values with enum from enum submodule
  • enums submodule:
    • Add Extension enum for extensions submodule
    • Type declaration file now automatically generated using build script
    • Naming adjustments:
      • Browser => BrowserName
      • CPU => CPUArch
      • Device => DeviceType
      • Vendor => DeviceVendor
      • Engine => EngineName
      • OS => OSName
  • extensions submodule:
    • Add new crawlers: APIs-Google, Algolia Crawler, Algolia Crawler Renderscript, Baidu-ADS, BLEXBot, botify, Bravebot, Claude-Web, cohere-training-data-crawler, contxbot, Cotoyogi, Coveobot, CriteoBot, DeepSeekBot, DuckDuckGo-Favicons-Bot, Elastic, FirecrawlAgent, Freespoke, Google-CloudVertexBot, HuggingFace-Bot, Kagibot, Kangaroo Bot, marginalia, msnbot, OnCrawl, Replicate-Bot, RunPod-Bot, SBIntuitionsBot, SeekportBot, Siteimprove, Sogou Pic Spider, TikTokSpider, TwinAgent, v0bot, webzio, Webzio-Extended, xAI-Bot, YandexAccessibilityBot, YandexAdditionalBot, YandexAdNet, YandexBot MirrorDetector, YandexBlogs, YandexComBot, YandexFavicons, YandexImageResizer, YandexImages, YandexMarket, YandexMetrika, YandexMedia, YandexMobileBot, YandexMobileScreenShotBot, YandexNews, YandexOntoDB, YandexOntoDBAPI, YandexPartner, YandexRCA, YandexRenderResourcesBot, YandexScreenshotBot, YandexSpravBot, YandexTracker, YandexVertis, YandexVerticals, YandexVideo, YandexVideoParser, YandexWebmaster, YepBot, ZumBot
    • Add new fetchers: Asana, bitlybot, Blueno, BufferLinkPreviewBot, Chrome-Lighthouse, Gemini-Deep-Research, HubSpot Page Fetcher, kakaotalk-scrap, vercel-favicon-bot, vercel-screenshot-bot, vercelflags, verceltracing, YaDirectFetcher, YandexCalendar, YandexDirect, YandexDirectDyn, YandexForDomain, YandexPagechecker, YandexSearchShop, YandexSitelinks, YandexUserproxy
  • helpers submodule:
    • Add some crawler to isAIBot(): Bravebot, cohere-training-data-crawler, FirecrawlAgent, HuggingFace-Bot, Kangaroo Bot, PanguBot, Replicate-Bot, RunPod-Bot, TikTokSpider, Together-Bot, v0bot, xAI-Bot
Changelog

Sourced from ua-parser-js's changelog.

Version 2.0.6

  • Add new CLI feature: processing batch user-agent data from file and output as JSON
  • Fix setUA(): trim leading space from user-agent string input
  • Replace undici dependency with node's internal Headers
  • Add new browser: Bing, Qwant
  • Add new device vendor: Hisense, Wiko
  • Improve browser detection: Mozilla, Pale Moon
  • Improve CPU detection: 68k
  • Improve device detection: Apple, BlackBerry, Huawei, Nokia, Xiaomi
  • Improve OS detection: iOS 26
  • extensions submodule:
    • Add new fetcher: Discordbot, KeybaseBot, Slackbot, Slackbot-LinkExpanding, Slack-ImgProxy, Twitterbot
    • Add new crawler: Qwantbot-news, SurdotlyBot, SwiftBot

Version 2.0.5

  • Add new browser: Zalo
  • Add new CPU arch: alpha
  • Add new device vendor: Philips
  • Improve device detection: Pico
  • Fix parsing error on pages with modified Array prototypes
  • Improve type declarations:
    • Replace node-fetch dependency with undici
    • Replace hardcoded string values with enum from enum submodule
  • enums submodule:
    • Add Extension enum for extensions submodule
    • Type declaration file now automatically generated using build script
    • Naming adjustments:
      • Browser => BrowserName
      • CPU => CPUArch
      • Device => DeviceType
      • Vendor => DeviceVendor
      • Engine => EngineName
      • OS => OSName
  • extensions submodule:
    • Add new crawlers: APIs-Google, Algolia Crawler, Algolia Crawler Renderscript, Baidu-ADS, BLEXBot, botify, Bravebot, Claude-Web, cohere-training-data-crawler, contxbot, Cotoyogi, Coveobot, CriteoBot, DeepSeekBot, DuckDuckGo-Favicons-Bot, Elastic, FirecrawlAgent, Freespoke, Google-CloudVertexBot, HuggingFace-Bot, Kagibot, Kangaroo Bot, marginalia, msnbot, OnCrawl, Replicate-Bot, RunPod-Bot, SBIntuitionsBot, SeekportBot, Siteimprove, Sogou Pic Spider, TikTokSpider, TwinAgent, v0bot, webzio, Webzio-Extended, xAI-Bot, YandexAccessibilityBot, YandexAdditionalBot, YandexAdNet, YandexBot MirrorDetector, YandexBlogs, YandexComBot, YandexFavicons, YandexImageResizer, YandexImages, YandexMarket, YandexMetrika, YandexMedia, YandexMobileBot, YandexMobileScreenShotBot, YandexNews, YandexOntoDB, YandexOntoDBAPI, YandexPartner, YandexRCA, YandexRenderResourcesBot, YandexScreenshotBot, YandexSpravBot, YandexTracker, YandexVertis, YandexVerticals, YandexVideo, YandexVideoParser, YandexWebmaster, YepBot, ZumBot
    • Add new fetchers: Asana, bitlybot, Blueno, BufferLinkPreviewBot, Chrome-Lighthouse, Gemini-Deep-Research, HubSpot Page Fetcher, kakaotalk-scrap, vercel-favicon-bot, vercel-screenshot-bot, vercelflags, verceltracing, YaDirectFetcher, YandexCalendar, YandexDirect, YandexDirectDyn, YandexForDomain, YandexPagechecker, YandexSearchShop, YandexSitelinks, YandexUserproxy
  • helpers submodule:
    • Add some crawler to isAIBot(): Bravebot, cohere-training-data-crawler, FirecrawlAgent, HuggingFace-Bot, Kangaroo Bot, PanguBot, Replicate-Bot, RunPod-Bot, TikTokSpider, Together-Bot, v0bot, xAI-Bot
Commits

Updates undici from 7.11.0 to 7.16.0

Release notes

Sourced from undici's releases.

v7.16.0

What's Changed

... (truncated)

Commits
  • 7392d6f Bumped v7.16.0 (#4532)
  • 415c66d fix: make error symbols non enumerable (#4531)
  • f182ff1 Disable SIMD for PPC64 architecture, add UNDICI_NO_WASM_SIMD env to facilitat...
  • 95d835c example: use metcoders https-pem for the example (#4436)
  • 7c42918 fix: shell command built from environment values (#4392)
  • 51651a1 fix: wpt should use master branch (#4524)
  • 82ea8fc refactor: parseHttpDate (#4421)
  • 909a584 websocket: always emit error event (#4521)
  • d7bb09e fetch: process content-encoding header only if relevant (#4496)
  • e652f03 wpt: properly handle write permissions errors in wpt-runner setup (#4518)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for undici since your current version.


Updates zod from 3.25.75 to 4.1.13

Release notes

Sourced from zod's releases.

v4.1.13

Commits:

  • 5c2602ceb8be8941c64bbe5ac7d92cc174ae6f7e Update AI widget (#5318)
  • d3da530deb713c853e79405adddf770e156d50ac reflect the specified regex correctly in error (#5338)
  • 39f8c45b8a29de2330b485862b83cb35849f4238 faster initialization (#5352)
  • e9e27905cc0f37cb079ea473af8359d5e17a57a1 Clean up comment
  • 8e4739fadbd7de710eb67d34ba7e06a1029a68ab Update inferred z.promise() type
  • 2849df8907b011ab056d67ae8e3d27577ac4ed3e fix(locales): improve Dutch (nl) localization (#5367)
  • b0d3c9f628b60d358b66acf8f0ef7937fc9e8950 Run tests on windows
  • 6fd61b71b85e4fef4c168a46c3ebcc574f26255f feat unitest (#5358)
  • a4e4bc80e204577c698cf1369dd63c2b986d35f3 Lock to node 24
  • 8de8bad0fa84194b81efd32474462d7a236a1ee4 Fix windows build
  • b2c186bbae3a74a12acd385c1ced3ed978235cf8 Use Node LTS
  • b73b1f61c798efdf497852872b4c19cd4111c1f3 Consolidate isTransforming logic
  • d85f3ea4da53a1b232017dd4e4a2874eca4d8d76 Fix #5353
  • 1bac0f37b529eb9a0d833a01200f5a898e8e6220 Fix test.yml
  • 86d4dad5bc27b4b35df533c9170a552ad8c6c3bc Fix partial record
  • 5e6c0fd7471636feffe5763c9b7637879da459fe Fix attw on windows
  • 27fc616b8edb93cc27a4d25b37479d6e418bbccf Extend test timeout
  • 8d336c4d15e1917d78b67b890f7182f26633b56f Remove windows runner
  • 5be72e0ef4dceb1387febb7981079ecdeb5e2817 chore(doc): update metadata.tsx (#5331)
  • cb0272a0ad9962df958...

    Description has been truncated

…dates

Bumps the dependencies group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@fastify/http-proxy](https://github.com/fastify/fastify-http-proxy) | `11.3.0` | `11.4.1` |
| [fastify](https://github.com/fastify/fastify) | `5.4.0` | `5.6.2` |
| [pino](https://github.com/pinojs/pino) | `9.7.0` | `10.1.0` |
| [pino-pretty](https://github.com/pinojs/pino-pretty) | `13.0.0` | `13.1.3` |
| [ua-parser-js](https://github.com/faisalman/ua-parser-js) | `2.0.4` | `2.0.6` |
| [undici](https://github.com/nodejs/undici) | `7.11.0` | `7.16.0` |
| [zod](https://github.com/colinhacks/zod) | `3.25.75` | `4.1.13` |



Updates `@fastify/http-proxy` from 11.3.0 to 11.4.1
- [Release notes](https://github.com/fastify/fastify-http-proxy/releases)
- [Commits](fastify/fastify-http-proxy@v11.3.0...v11.4.1)

Updates `fastify` from 5.4.0 to 5.6.2
- [Release notes](https://github.com/fastify/fastify/releases)
- [Commits](fastify/fastify@v5.4.0...v5.6.2)

Updates `pino` from 9.7.0 to 10.1.0
- [Release notes](https://github.com/pinojs/pino/releases)
- [Commits](pinojs/pino@v9.7.0...v10.1.0)

Updates `pino-pretty` from 13.0.0 to 13.1.3
- [Release notes](https://github.com/pinojs/pino-pretty/releases)
- [Commits](pinojs/pino-pretty@v13.0.0...v13.1.3)

Updates `ua-parser-js` from 2.0.4 to 2.0.6
- [Release notes](https://github.com/faisalman/ua-parser-js/releases)
- [Changelog](https://github.com/faisalman/ua-parser-js/blob/master/CHANGELOG.md)
- [Commits](faisalman/ua-parser-js@2.0.4...2.0.6)

Updates `undici` from 7.11.0 to 7.16.0
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](nodejs/undici@v7.11.0...v7.16.0)

Updates `zod` from 3.25.75 to 4.1.13
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](colinhacks/zod@v3.25.75...v4.1.13)

---
updated-dependencies:
- dependency-name: "@fastify/http-proxy"
  dependency-version: 11.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: fastify
  dependency-version: 5.6.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: pino
  dependency-version: 10.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: pino-pretty
  dependency-version: 13.1.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: ua-parser-js
  dependency-version: 2.0.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: undici
  dependency-version: 7.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: zod
  dependency-version: 4.1.13
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Dec 8, 2025
@socket-security
Copy link

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedua-parser-js@​2.0.4 ⏵ 2.0.6100 +110010087 -370
Updatedundici@​7.11.0 ⏵ 7.16.099100100 +190100
Updatedpino-pretty@​13.0.0 ⏵ 13.1.399 +110010090100
Updatedpino@​9.7.0 ⏵ 10.1.099 +110010093100
Updatedfastify@​5.4.0 ⏵ 5.6.299 +110010093 +2100
Updated@​fastify/​http-proxy@​11.3.0 ⏵ 11.4.110010010096 +7100
Updatedzod@​3.25.75 ⏵ 4.1.1310010010096100

View full report

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Dec 15, 2025

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Dec 15, 2025
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/dependencies-4d6bd3468c branch December 15, 2025 21:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant