Skip to content

build(deps): bump @fastify/busboy from 3.2.1 to 3.2.2 - #8577

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/fastify/busboy-3.2.2
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/fastify/busboy-3.2.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 6, 2026 •

Copy link
Copy Markdown
Contributor

Bumps @fastify/busboy from 3.2.1 to 3.2.2.

Release notes

Sourced from @​fastify/busboy's releases.

v3.2.2

⚠️ Security Release

Fix for GHSA-gxm5-99cw-xjw9

Commits

@dependabot
dependabot Bot requested a review from a team as a code owner October 6, 2026 16:38
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Oct 6, 2026
@coderabbitai

coderabbitai Bot commented Oct 6, 2026 •

Copy link
Copy Markdown
Contributor

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration
  • Configuration used: Organization UI
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: 2783a2c2-c1e4-424b-a73b-5ef26d77014e

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
  • Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Comment @coderabbitai help to get the list of available commands.

@github-actions

github-actions Bot commented Oct 6, 2026 •

Copy link
Copy Markdown

📊 Benchmark results

Comparing with e59b0b0

  • Dependency count: 1,014 (no change)
  • Package size: 373 MB (no change)
  • Number of ts-expect-error directives: 331 (no change)

@pkg-pr-new

pkg-pr-new Bot commented Oct 6, 2026 •

Copy link
Copy Markdown

Open in StackBlitz

npm i https://pkg.pr.new/netlify-cli@8577

commit: ea9424d

Bumps [@fastify/busboy](https://github.com/fastify/busboy) from 3.2.1 to 3.2.2.
- [Release notes](https://github.com/fastify/busboy/releases)
- [Commits](fastify/busboy@v3.2.1...v3.2.2)

---
updated-dependencies:
- dependency-name: "@fastify/busboy"
  dependency-version: 3.2.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/fastify/busboy-3.2.2 branch from d4aa94a to ea9424d Compare October 6, 2026 16:48
sarahetter added a commit that referenced this pull request Oct 7, 2026
Rolls several open bot PRs into one, so they only need one CI cycle and
one approval. Under the strict up-to-date rule, merging them one by one
means re-running CI each time.

### Lockfile changes
| Package | Change | Notes |
|---|---|---|
| `fast-uri` | 3.1.4 → 3.1.8 | security, 8 advisories (replaces #8583) |
| `@fastify/busboy` | 3.2.1 → 3.2.2 | security, GHSA-gxm5-99cw-xjw9
(replaces #8577) |
| `brace-expansion` | 1.1.18 → 1.1.21, 2.1.4 → 2.1.7, 5.0.9 → 5.0.12 |
every nested copy (replaces #8584) |

### `package.json` range bumps
The lockfile already resolves these versions, so nothing installed
changes:
- `@netlify/server-dev` `^0.1.3` (replaces #8582)
- `@netlify/images` `^2.0.3` (replaces #8581)
- `@netlify/edge-functions` `^4.0.2` (replaces #8578)
- `@netlify/types` `^3.2.0` (replaces #8554)

### Not included
- `@netlify/functions` (#8579) also edits the function templates users
scaffold from, so it stays a separate PR.

### Verification
- `npm ci`, `npm run build`, `npm run typecheck`, `npm run lint` and
`npm run format:check` all pass.
- Unit tests: 81 files, 721 tests pass on Node 24.18.
- On Node 26, `generate-autocompletion.test.ts` fails its snapshot on
`main` as well. `sortOptions` returns `-1` whenever either side is a
base flag, which is not a consistent ordering, so the result depends on
V8's sort implementation. That bug predates this PR.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
@sarahetter

Copy link
Copy Markdown
Contributor

Included in #8585 (batched low-risk dependency updates), which has merged.

@sarahetter sarahetter closed this Oct 7, 2026
@dependabot @github

dependabot Bot commented on behalf of github Oct 7, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/fastify/busboy-3.2.2 branch October 7, 2026 16:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant