chore(deps): bump fastify-plugin from 5.1.0 to 6.0.0 - #1325
chore(deps): bump fastify-plugin from 5.1.0 to 6.0.0#1325dependabot[bot] wants to merge 1 commit into
Conversation
dependabot
Bot
added
dependencies
dependabot
Bot
added
dependencies
![claude[bot]](https://avatars.githubusercontent.com/in/1236702?s=60&v=4){kind=small}
There was a problem hiding this comment.
LGTM — routine dependency bump.
Reviewed the lockfile/package.json diff for fastify-plugin 5.1.0 → 6.0.0 and checked how fp() is used across the ~21 plugin files in src/http/plugins and src/http/routes — all standard fp(fn, options) wrapping with no reliance on removed/deprecated APIs. Engines require Node >=24, well within v6's support range.
Extended reasoning...
Overview
This PR only touches package.json and package-lock.json, bumping the fastify-plugin dependency from 5.1.0 to 6.0.0. No application source files are modified.
Security risks
None. fastify-plugin is a small utility that wraps plugin functions with metadata/versioning; it has no auth, crypto, or data-handling surface. No new transitive dependencies of concern were introduced — the lockfile diff is mostly deduplication of fastify-plugin versions across nested node_modules trees.
Level of scrutiny
Low. This is a mechanical dependency bump with an auto-generated lockfile diff. I spot-checked usage of fp() across the ~21 files in the repo that import fastify-plugin (all in src/http/plugins and src/http/routes) — usage is limited to the standard fp(plugin, opts) pattern, which is unaffected by the v6 changes (the release notes show internal refactors, TS type migration, and removal of an already-deprecated type interface, not runtime API changes). The project's engines field requires Node >=24, well above any minimum bumped in this release.
Other factors
No prior reviews or comments exist on this PR. CI (build/test) will validate compatibility empirically; if anything broke at runtime it would surface there rather than requiring deep static review.
Coverage Report for CI Build 32263643650Coverage decreased (-0.005%) to 81.175%Details
Uncovered ChangesNo uncovered changes found. Coverage RegressionsNo coverage regressions found. Coverage Stats
💛 - Coveralls |
Bumps [fastify-plugin](https://github.com/fastify/fastify-plugin) from 5.1.0 to 6.0.0. - [Release notes](https://github.com/fastify/fastify-plugin/releases) - [Commits](fastify/fastify-plugin@v5.1.0...v6.0.0) --- updated-dependencies: - dependency-name: fastify-plugin dependency-version: 6.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
8de3df8 to
18a1a50
Compare
1 participant
Bumps fastify-plugin from 5.1.0 to 6.0.0.
Release notes
Sourced from fastify-plugin's releases.
Commits
05c1c326.0.0a309399chore: update depedabot setting (#292)3d43488chore: removed interface deprecated629292brefactor: standardize entry points and project structure68ddddbrefactor(types): migrate from tsd to tstyche (#288)12c07a4ci: add lock-threads workflow (#286)8a4d1a2build(deps-dev): bump neostandard from 0.12.2 to 0.13.0 (#285)8e9e035build(deps): bump fastify/workflows/.github/workflows/plugins-ci.yml (#283)41b480echore: remove stale workflow and node reference type declaration (#281)1f378b1chore(license): standardise license notice (#278)Maintainer changes
This version was pushed to npm by fdawgs, a new releaser for fastify-plugin since your current version.