v5.8.5
Fixed 2
- Restore trustProxy function for number and string types and add null check for socketAddr
- Fix port parsing
Security 1
- Fix CVE-2026-33806
⚠️ Security Release
This fixes CVE CVE-2026-33806 https://github.com/fastify/fastify/security/advisories/GHSA-247c-9743-5963.
What's Changed
- chore: Fix port parsing by @jsumners in https://github.com/fastify/fastify/pull/6603
- chore: upgrade to typescript v6.0.2 by @Tony133 in https://github.com/fastify/fastify/pull/6605
- fix: restore trustProxy function for number and string types, add null check for socketAddr by @mcollina in https://github.com/fastify/fastify/pull/6613
- ci: reduce cron scheduled workflows from daily/weekly to monthly by @Fdawgs in https://github.com/fastify/fastify/pull/6623
- chore: Bump pnpm/action-setup from 4.2.0 to 5.0.0 by @dependabot[bot] in https://github.com/fastify/fastify/pull/6629
- chore: Bump markdownlint-cli2 from 0.21.0 to 0.22.0 by @dependabot[bot] in https://github.com/fastify/fastify/pull/6632
- chore: Bump borp from 0.21.0 to 1.0.0 by @dependabot[bot] in https://github.com/fastify/fastify/pull/6633
- chore: Bump actions/dependency-review-action from 4.8.3 to 4.9.0 by @dependabot[bot] in https://github.com/fastify/fastify/pull/6630
- docs(ecosystem): add @pompelmi/fastify-plugin by @SonoTommy in https://github.com/fastify/fastify/pull/6610
New Contributors
- @SonoTommy made their first contribution in https://github.com/fastify/fastify/pull/6610
Full Changelog: https://github.com/fastify/fastify/compare/v5.8.4...v5.8.5