v1.5.2
Releasefastify-fusion@1.5.2 — 2026-09-15
Maintenance release: Fastify plugin patches, pnpm 12, Vitest 5, and supply-chain/CI hardening.
Documentation
- record repo lockdown and GitHub controls (
c5be911, #106) - record npmjs, Drydock, and 2FA (
7d24b0c, #107)
Internal
Bundled runtime dependency updates — no API change for fastify-fusion consumers:
- upgrade
@fastify/static10.1.0 → 10.1.3 (d5228f7, #101) - upgrade
@fastify/rate-limit11.1.0 → 11.2.0,@fastify/swagger9.8.0 → 9.8.1,@fastify/swagger-ui6.1.0 → 6.1.1 (82e1d92, #102) - upgrade
@fastify/helmet13.1.0 → 13.1.1 (f79d495, #116)
Toolchain — majors here are repo/dev-only; published API is unchanged:
- upgrade
@biomejs/biome2.5.3 → 2.5.7 (799d229, #99) - upgrade
tsx4.23.1 → 4.23.11 (e367914, #100) - upgrade
@biomejs/biome2.5.7 → 2.5.12;vitest+@vitest/coverage-v84.1.10 → 5.0.0 (b3caf74, #111) - upgrade
tsx4.23.11 → 4.23.13,docula2.2.0 → 3.0.0,@swc/core1.15.43 → 1.16.2 (186fcb5, #112) - upgrade
packageManagerpnpm 11.6.0 → 12.3.4 (Corepack sha512 pin) (033f5b4, #113)
Supply chain & CI:
- scaffold defense docs, CODEOWNERS, and Safe Chain (
92c6eaa, #103) - add 7-day cooldown and install trust policy (
bcb2837, #104) - pin Actions, Socket Firewall, zizmor, and stage npm (
52639d5, #105) - remove
writroverride (21ea4eb, #108) - remove
pinooverride (9dda442, #109) - remove
slow-redactoverride (6e44852, #110) - upgrade GitHub Actions (
b57fb95, #114) - pin Dev Container image (
a42cd4c, #115) - cover
.vscodein CODEOWNERS (d257a09, #117) - kebab-case workflow and job names (
66cae07, #118) - refresh Safe Chain cloud bootstrap (
4ad0e8b, #119) - add Codespaces gh and docker features (
93ee7fc, #120)
Contributors
- @jaredwray (22 PRs)
Full List of Changes
- fastify-fusion - chore: upgrade code quality dependencies by @jaredwray in #99
- fastify-fusion - chore: upgrade tsx build tooling by @jaredwray in #100
- fastify-fusion - chore: upgrade @fastify/static by @jaredwray in #101
- mono - chore: upgrade Fastify dependencies by @jaredwray in #102
- fastify-fusion - chore: defense - scaffold docs, CODEOWNERS, and Safe Chain by @jaredwray in #103
- fastify-fusion - chore: defense - 7-day cooldown and install trust policy by @jaredwray in #104
- fastify-fusion - chore: defense - pin Actions, Socket Firewall, zizmor, and stage npm by @jaredwray in #105
- fastify-fusion - chore: defense - record repo lockdown and GitHub controls by @jaredwray in #106
- fastify-fusion - chore: defense - record npmjs, Drydock, and 2FA by @jaredwray in #107
- fastify-fusion - chore: remove writr override by @jaredwray in #108
- fastify-fusion - chore: remove pino override by @jaredwray in #109
- fastify-fusion - chore: remove slow-redact override by @jaredwray in #110
- fastify-fusion - chore: upgrade code quality dependencies (breaking) by @jaredwray in #111
- fastify-fusion - chore: upgrade TypeScript and build tooling (breaking) by @jaredwray in #112
- fastify-fusion - chore: upgrade package manager (breaking) by @jaredwray in #113
- fastify-fusion - chore: upgrade GitHub Actions by @jaredwray in #114
- fastify-fusion - chore: pin Dev Container image by @jaredwray in #115
- fastify-fusion - chore: upgrade Fastify dependencies by @jaredwray in #116
- fastify-fusion - chore: defense - cover .vscode in CODEOWNERS by @jaredwray in #117
- fastify-fusion - chore: defense - kebab-case workflow and job names by @jaredwray in #118
- fastify-fusion - chore: defense - refresh Safe Chain cloud bootstrap by @jaredwray in #119
- fastify-fusion - chore: defense - add Codespaces gh and docker features by @jaredwray in #120
Full diff: https://github.com/jaredwray/fastify-fusion/compare/v1.5.1...v1.5.2