chore(deps-dev): bump fastify from 5.7.4 to 5.8.1 (#1460)

Bumps [fastify](https://github.com/fastify/fastify) from 5.7.4 to 5.8.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/fastify/fastify/releases">fastify's
releases</a>.</em></p>
<blockquote>
<h2>v5.8.1</h2>
<h2>⚠️ Security Release</h2>
<p>Fixes &quot;Missing End Anchor in &quot;subtypeNameReg&quot; Allows
Malformed Content-Types to Pass Validation&quot;: <a
href="https://github.com/fastify/fastify/security/advisories/GHSA-573f-x89g-hqp9">https://github.com/fastify/fastify/security/advisories/GHSA-573f-x89g-hqp9</a>.</p>
<p>CVE-2026-3419</p>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/fastify/fastify/compare/v5.8.0...v5.8.1">https://github.com/fastify/fastify/compare/v5.8.0...v5.8.1</a></p>
<h2>v5.8.0</h2>
<h2>What's Changed</h2>
<ul>
<li>docs(request): add host security warning references by <a
href="https://github.com/mcollina"><code>@​mcollina</code></a> in <a
href="https://redirect.github.com/fastify/fastify/pull/6476">fastify/fastify#6476</a></li>
<li>docs: fix note style by <a
href="https://github.com/Fdawgs"><code>@​Fdawgs</code></a> in <a
href="https://redirect.github.com/fastify/fastify/pull/6487">fastify/fastify#6487</a></li>
<li>chore: rename deploy website ci by <a
href="https://github.com/Eomm"><code>@​Eomm</code></a> in <a
href="https://redirect.github.com/fastify/fastify/pull/6492">fastify/fastify#6492</a></li>
<li>chore: support pino v9 and v10 by <a
href="https://github.com/mcollina"><code>@​mcollina</code></a> in <a
href="https://redirect.github.com/fastify/fastify/pull/6496">fastify/fastify#6496</a></li>
<li>chore: update logger types and fix TODO comment by <a
href="https://github.com/Tony133"><code>@​Tony133</code></a> in <a
href="https://redirect.github.com/fastify/fastify/pull/6470">fastify/fastify#6470</a></li>
<li>refactor(test-types): migrate dummy-plugin to FastifyPluginAsync by
<a href="https://github.com/Tony133"><code>@​Tony133</code></a> in <a
href="https://redirect.github.com/fastify/fastify/pull/6472">fastify/fastify#6472</a></li>
<li>docs: fix markdown typo in README.md by <a
href="https://github.com/droppingbeans"><code>@​droppingbeans</code></a>
in <a
href="https://redirect.github.com/fastify/fastify/pull/6491">fastify/fastify#6491</a></li>
<li>test: cover non-numeric content-length client error path by <a
href="https://github.com/mcollina"><code>@​mcollina</code></a> in <a
href="https://redirect.github.com/fastify/fastify/pull/6500">fastify/fastify#6500</a></li>
<li>ci: remove tests-checker workflow by <a
href="https://github.com/Tony133"><code>@​Tony133</code></a> in <a
href="https://redirect.github.com/fastify/fastify/pull/6481">fastify/fastify#6481</a></li>
<li>ci: remove stale.yml file by <a
href="https://github.com/Tony133"><code>@​Tony133</code></a> in <a
href="https://redirect.github.com/fastify/fastify/pull/6504">fastify/fastify#6504</a></li>
<li>docs(security): remove hackerone references; change note style by <a
href="https://github.com/Fdawgs"><code>@​Fdawgs</code></a> in <a
href="https://redirect.github.com/fastify/fastify/pull/6501">fastify/fastify#6501</a></li>
<li>chore: rename <code>@​sinclair/typebox</code> to typebox by <a
href="https://github.com/Tony133"><code>@​Tony133</code></a> in <a
href="https://redirect.github.com/fastify/fastify/pull/6494">fastify/fastify#6494</a></li>
<li>ci(links-check): add external link checker using linkinator-action
by <a href="https://github.com/umxr"><code>@​umxr</code></a> in <a
href="https://redirect.github.com/fastify/fastify/pull/6386">fastify/fastify#6386</a></li>
<li>chore: upgrade borp to v1.0.0 by <a
href="https://github.com/Tony133"><code>@​Tony133</code></a> in <a
href="https://redirect.github.com/fastify/fastify/pull/6510">fastify/fastify#6510</a></li>
<li>docs: Add OpenJS CNA reference to SECURITY.md by <a
href="https://github.com/mcollina"><code>@​mcollina</code></a> in <a
href="https://redirect.github.com/fastify/fastify/pull/6516">fastify/fastify#6516</a></li>
<li>fix: avoid mutating shared routerOptions across instances by <a
href="https://github.com/mcollina"><code>@​mcollina</code></a> in <a
href="https://redirect.github.com/fastify/fastify/pull/6515">fastify/fastify#6515</a></li>
<li>fix(types): accept async route hooks in shorthand options by <a
href="https://github.com/mcollina"><code>@​mcollina</code></a> in <a
href="https://redirect.github.com/fastify/fastify/pull/6514">fastify/fastify#6514</a></li>
<li>docs: Improve shutdown lifecycle documentation by <a
href="https://github.com/kibertoad"><code>@​kibertoad</code></a> in <a
href="https://redirect.github.com/fastify/fastify/pull/6517">fastify/fastify#6517</a></li>
<li>chore: remove unused <code>tsconfig.eslint.json</code> by <a
href="https://github.com/mrazauskas"><code>@​mrazauskas</code></a> in <a
href="https://redirect.github.com/fastify/fastify/pull/6524">fastify/fastify#6524</a></li>
<li>feat: First-class support for handler-level timeouts by <a
href="https://github.com/kibertoad"><code>@​kibertoad</code></a> in <a
href="https://redirect.github.com/fastify/fastify/pull/6521">fastify/fastify#6521</a></li>
<li>docs(security): clarify insecureHTTPParser threat model scope by <a
href="https://github.com/mcollina"><code>@​mcollina</code></a> in <a
href="https://redirect.github.com/fastify/fastify/pull/6533">fastify/fastify#6533</a></li>
<li>chore(license): standardise license notice by <a
href="https://github.com/Fdawgs"><code>@​Fdawgs</code></a> in <a
href="https://redirect.github.com/fastify/fastify/pull/6511">fastify/fastify#6511</a></li>
<li>docs: clarify anyOf nullable coercion behavior with primitive types
by <a href="https://github.com/slegarraga"><code>@​slegarraga</code></a>
in <a
href="https://redirect.github.com/fastify/fastify/pull/6531">fastify/fastify#6531</a></li>
<li>fix: remove format placeholder from FST_ERR_CTP_INVALID_MEDIA_TYPE
message by <a
href="https://github.com/super-mcgin"><code>@​super-mcgin</code></a> in
<a
href="https://redirect.github.com/fastify/fastify/pull/6528">fastify/fastify#6528</a></li>
<li>docs(reference/hooks): fix note style by <a
href="https://github.com/Fdawgs"><code>@​Fdawgs</code></a> in <a
href="https://redirect.github.com/fastify/fastify/pull/6538">fastify/fastify#6538</a></li>
<li>chore: Bump lycheeverse/lychee-action from 2.7.0 to 2.8.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/fastify/fastify/pull/6539">fastify/fastify#6539</a></li>
<li>chore: Bump actions/dependency-review-action from 4.8.2 to 4.8.3 by
<a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/fastify/fastify/pull/6540">fastify/fastify#6540</a></li>
<li>chore: Bump markdownlint-cli2 from 0.20.0 to 0.21.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/fastify/fastify/pull/6542">fastify/fastify#6542</a></li>
<li>ci: remove broken links and add ecosystem link validator by <a
href="https://github.com/mcollina"><code>@​mcollina</code></a> in <a
href="https://redirect.github.com/fastify/fastify/pull/6421">fastify/fastify#6421</a></li>
<li>ci(validate-ecoystem-links): add job level permission by <a
href="https://github.com/Fdawgs"><code>@​Fdawgs</code></a> in <a
href="https://redirect.github.com/fastify/fastify/pull/6545">fastify/fastify#6545</a></li>
<li>style: remove trailing whitespace by <a
href="https://github.com/Fdawgs"><code>@​Fdawgs</code></a> in <a
href="https://redirect.github.com/fastify/fastify/pull/6543">fastify/fastify#6543</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/droppingbeans"><code>@​droppingbeans</code></a>
made their first contribution in <a
href="https://redirect.github.com/fastify/fastify/pull/6491">fastify/fastify#6491</a></li>
<li><a href="https://github.com/umxr"><code>@​umxr</code></a> made their
first contribution in <a
href="https://redirect.github.com/fastify/fastify/pull/6386">fastify/fastify#6386</a></li>
<li><a
href="https://github.com/slegarraga"><code>@​slegarraga</code></a> made
their first contribution in <a
href="https://redirect.github.com/fastify/fastify/pull/6531">fastify/fastify#6531</a></li>
<li><a
href="https://github.com/super-mcgin"><code>@​super-mcgin</code></a>
made their first contribution in <a
href="https://redirect.github.com/fastify/fastify/pull/6528">fastify/fastify#6528</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/fastify/fastify/compare/v5.7.4...v5.8.0">https://github.com/fastify/fastify/compare/v5.7.4...v5.8.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/fastify/fastify/commit/073ff8132f350aaa53935231019499e983cb9794"><code>073ff81</code></a>
Bumped v5.8.1</li>
<li><a
href="https://github.com/fastify/fastify/commit/67f6c9b32cb3623d3c9470cc17ed830dd2f083d7"><code>67f6c9b</code></a>
Merge commit from fork</li>
<li><a
href="https://github.com/fastify/fastify/commit/161578a366edd40ef6d7eb06bfd57bc2b55f37b6"><code>161578a</code></a>
chore: sync version</li>
<li><a
href="https://github.com/fastify/fastify/commit/9b06a781f90d5a8d5ac5fc43eb2fddc392864681"><code>9b06a78</code></a>
Bumped v5.8.0</li>
<li><a
href="https://github.com/fastify/fastify/commit/bbdfe82ae891199ba0d2b49326b7ddce5f103ab3"><code>bbdfe82</code></a>
style: remove trailing whitespace (<a
href="https://redirect.github.com/fastify/fastify/issues/6543">#6543</a>)</li>
<li><a
href="https://github.com/fastify/fastify/commit/cd58ed45d3c3b25cae3cfaa27e9c76a1c8865d0f"><code>cd58ed4</code></a>
ci(validate-ecoystem-links): add job level permission (<a
href="https://redirect.github.com/fastify/fastify/issues/6545">#6545</a>)</li>
<li><a
href="https://github.com/fastify/fastify/commit/2590592da900172e04526f36dfe4dac617022469"><code>2590592</code></a>
ci: remove broken links and add ecosystem link validator (<a
href="https://redirect.github.com/fastify/fastify/issues/6421">#6421</a>)</li>
<li><a
href="https://github.com/fastify/fastify/commit/09b55b6ca6a3244df9f02b02157db41777198d4f"><code>09b55b6</code></a>
chore: Bump markdownlint-cli2 from 0.20.0 to 0.21.0 (<a
href="https://redirect.github.com/fastify/fastify/issues/6542">#6542</a>)</li>
<li><a
href="https://github.com/fastify/fastify/commit/43c4e386c374c56a7de326e20f51eb7a71c0edda"><code>43c4e38</code></a>
chore: Bump actions/dependency-review-action from 4.8.2 to 4.8.3 (<a
href="https://redirect.github.com/fastify/fastify/issues/6540">#6540</a>)</li>
<li><a
href="https://github.com/fastify/fastify/commit/3b4057303e63172ed8a4dde8d35f6ce1f7a5eb58"><code>3b40573</code></a>
chore: Bump lycheeverse/lychee-action from 2.7.0 to 2.8.0 (<a
href="https://redirect.github.com/fastify/fastify/issues/6539">#6539</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/fastify/fastify/compare/v5.7.4...v5.8.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=fastify&package-manager=npm_and_yarn&previous-version=5.7.4&new-version=5.8.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/middleapi/orpc/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Author: dependabot[bot]

packages/nest/package.json

@@ -69,7 +69,7 @@
     "@ts-rest/core": "^3.52.1",
     "@types/express": "^5.0.6",
     "express": "^5.2.1",
-    "fastify": "^5.7.4",
+    "fastify": "^5.8.1",
     "rxjs": "^7.8.2",
     "supertest": "^7.1.4",
     "zod": "^4.3.6"

packages/openapi/package.json

@@ -80,7 +80,7 @@
     "rou3": "^0.7.12"
   },
   "devDependencies": {
-    "fastify": "^5.7.4",
+    "fastify": "^5.8.1",
     "zod": "^4.3.6"
   }
 }

packages/server/package.json

@@ -145,7 +145,7 @@
     "@tanstack/router-core": "^1.166.2",
     "@types/ws": "^8.18.1",
     "crossws": "^0.4.4",
-    "fastify": "^5.7.4",
+    "fastify": "^5.8.1",
     "next": "^16.1.6",
     "supertest": "^7.1.4",
     "ws": "^8.18.3",

packages/standard-server-fastify/package.json

@@ -50,7 +50,7 @@
     "@fastify/cookie": "^11.0.2",
     "@types/node": "^22.19.3",
     "@types/supertest": "^6.0.3",
-    "fastify": "^5.7.4",
+    "fastify": "^5.8.1",
     "supertest": "^7.2.2"
   }
 }