Update @fastify/helmet 10.1.0 → 13.0.2 (major)

[depfu]

Here is everything you need to know about this upgrade. Please take a good look at what changed and the test results before merging this pull request.

What changed?

✳️ @​fastify/helmet (10.1.0 → 13.0.2) · Repo

Release Notes

13.0.2

What's Changed

• build(dependabot): reduce npm updates to monthly by @Fdawgs in #278
• docs(readme): conciseness improvements by @Fdawgs in #279
• chore: rename master to main by @Fdawgs in #280
• ci(ci): set job permissions by @Fdawgs in #281
• docs(readme): update plugin version syntax by @Fdawgs in #282
• ci: set permissions at workflow level by @Fdawgs in #283
• ci: restore job level permissions by @Fdawgs in #284
• docs: use cross-platform compatible info emoji by @Fdawgs in #286
• chore(license): update date ranges; standardise style by @Fdawgs in #288
• refactor: remove usage of deprecated request.routeConfig by @inyourtime in #289
• build(deps-dev): bump @types/node from 22.17.0 to 24.1.0 by @dependabot[bot] in #291
• build(deps-dev): bump tsd from 0.31.2 to 0.32.0 by @dependabot[bot] in #285
• Update comments on Helmet error handling by @is2ei in #292
• chore(.npmrc): ignore scripts by @Fdawgs in #293
• build(deps-dev): remove @fastify/pre-commit by @Fdawgs in #294

New Contributors

• @inyourtime made their first contribution in #289
• @is2ei made their first contribution in #292

Full Changelog: v13.0.1...v13.0.2

13.0.1

What's Changed

• docs(readme): add compatibility table by @Fdawgs in #267
• docs(readme): link to license by @Fdawgs in #268
• chore(package): add funding and contribs by @Fdawgs in #269
• build(deps-dev): replace standard with neostandard by @Fdawgs in #266
• docs(readme): point ci badge at master/main branch by @Fdawgs in #270
• docs(readme): update ci badge syntax by @Fdawgs in #271
• docs: update the compatibility table by @jmcdo29 in #273
• build(deps-dev): bump neostandard from 0.11.9 to 0.12.0 by @dependabot in #274
• build(deps-dev): add eslint, peer dep of neostandard by @Fdawgs in #275
• docs(readme): grammar fix by @Fdawgs in #276
• test: prefix unused params with underscores by @Fdawgs in #277

New Contributors

• @jmcdo29 made their first contribution in #273

Full Changelog: v13.0.0...v13.0.1

13.0.0

What's Changed

• Respect route-level contentSecurityPolicy: false setting by @AlexandrHoroshih in #262
• build(deps): bump helmet from 7.2.0 to 8.0.0 by @dependabot in #263
• build(deps): bump fastify/workflows from 5.0.0 to 5.0.1 by @dependabot in #264
• style: remove trailing whitespace by @Fdawgs in #265

New Contributors

• @AlexandrHoroshih made their first contribution in #262

Full Changelog: v12.0.1...v13.0.0

12.0.1

What's Changed

• chore: add c8 flag for 100 % code coverage by @dancastillo in #259
• chore: update fastify to ^5.0.0 by @Fdawgs in #260
• chore: Add named hooks for improved visibility and debugging by @kei-ichi in #261

New Contributors

• @kei-ichi made their first contribution in #261

Full Changelog: v12.0.0...v12.0.1

12.0.0

What's Changed

• chore: add .gitattributes file by @Fdawgs in #235
• chore(package): explicitly declare js module type by @Fdawgs in #237
• refactor(index): replace typeof undefined check by @Fdawgs in #238
• build(deps-dev): bump tsd from 0.29.0 to 0.30.0 by @dependabot in #240
• docs: fix return value with custom nonces example by @big-kahuna-burger in #241
• chore(.gitignore): add .tap/ dir by @Fdawgs in #242
• build(deps-dev): bump tsd from 0.30.7 to 0.31.0 by @dependabot in #244
• Merge next into master by @jsumners in #253
• build(deps-dev): bump tap from 16.3.10 to 21.0.0 by @dependabot in #252
• refactor(index): remove useless else blocks after returns by @Fdawgs in #254
• build(deps-dev): bump @types/node from 20.14.13 to 22.0.0 by @dependabot in #255
• build(deps): bump fastify/workflows from 4.1.0 to 5.0.0 by @dependabot in #256
• chore: update min fastify version by @Fdawgs in #257
• fix: migrate from tap to node:test and c8 by @dancastillo in #258

New Contributors

• @big-kahuna-burger made their first contribution in #241
• @dancastillo made their first contribution in #258

Full Changelog: v11.1.1...v12.0.0

11.1.1

What's Changed

• fix nestjs fastify platform warn by @KrainovSD in #231

New Contributors

• @KrainovSD made their first contribution in #231

Full Changelog: v11.1.0...v11.1.1

11.1.0

What's Changed

• Update broken helmet doc link by @Jackzmc in #226
• build(deps-dev): bump tsd from 0.28.1 to 0.29.0 by @dependabot in #227
• perf: use node: prefix to bypass require.cache call for builtins by @Fdawgs in #228
• fix: request route config deprecation - fixes #229 by @pgbross in #230

New Contributors

• @Jackzmc made their first contribution in #226
• @pgbross made their first contribution in #230

Full Changelog: v11.0.0...v11.1.0

11.0.0

What's Changed

• chore(deps-dev): bump @types/node from 18.16.7 to 20.1.2 by @dependabot in #222
• disable package-lock generation by @Uzlopak in #224
• major(deps): bump helmet from 6.2.0 to 7.0.0 by @dependabot in #220

Full Changelog: v10.1.1...v11.0.0

10.1.1

What's Changed

• chore(deps-dev): bump tsd from 0.24.1 to 0.25.0 by @dependabot in #211
• chore(.gitignore): add clinic by @Fdawgs in #212
• chore(.gitignore): add bun lockfile by @Fdawgs in #214
• chore(deps-dev): bump tsd from 0.25.0 to 0.26.0 by @dependabot in #215
• chore(deps-dev): bump tsd from 0.26.1 to 0.27.0 by @dependabot in #217
• chore(deps-dev): bump tsd from 0.27.0 to 0.28.0 by @dependabot in #218
• fix FastifyHelmetOptions type by @vidarc in #219

New Contributors

• @vidarc made their first contribution in #219

Full Changelog: v10.1.0...v10.1.1

Does any of this look wrong? Please let us know.

Commits

See the full diff on Github. The new version differs by more commits than we can show here.

---

Depfu will automatically keep this PR conflict-free, as long as you don't add any commits to this branch yourself. You can also trigger a rebase manually by commenting with @depfu rebase.

All Depfu comment commands

@​depfu rebase

Rebases against your default branch and redoes this update

@​depfu recreate

Recreates this PR, overwriting any edits that you've made to it

@​depfu merge

Merges this PR once your tests are passing and conflicts are resolved

@​depfu cancel merge

Cancels automatic merging of this PR

@​depfu close

Closes this PR and deletes the branch

@​depfu reopen

Restores the branch and reopens this PR (if it's closed)

@​depfu pause

Ignores all future updates for this dependency and closes this PR

@​depfu pause [minor|major]

Ignores all future minor/major updates for this dependency and closes this PR

@​depfu resume

Future versions of this dependency will create PRs again (leaves this PR as is)