build(deps): bump the fastify group across 1 directory with 2 updates

[dependabot]

Bumps the fastify group with 2 updates in the / directory: @fastify/static and fastify.

Updates @fastify/static from 8.1.1 to 10.1.4

Release notes

Sourced from @​fastify/static's releases.

v10.1.4

This is a security release for GHSA-r799-r9gc-m956 (CVE-2026-90982).

It fixes a route guard and allowedPath bypass on case-insensitive filesystems. Users should upgrade to @fastify/static 10.1.4.

Full Changelog: fastify/fastify-static@v10.1.3...v10.1.4

v10.1.3

What's Changed

• chore: bump c8 from 11.0.0 to 12.0.0 by @​dependabot[bot] in fastify/fastify-static#602
• chore(.npmrc): add min-release-age by @​Fdawgs in fastify/fastify-static#603
• chore: bump fastify/workflows/.github/workflows/lock-threads.yml from 6.0.0 to 7.0.0 by @​dependabot[bot] in fastify/fastify-static#605

Full Changelog: fastify/fastify-static@v10.1.2...v10.1.3

v10.1.2

⚠️ Security Release

• Fix for GHSA-8pvw-jcv7-9cmj

What's Changed

• ci: pin actions to commit-hash by @​Fdawgs in fastify/fastify-static#601

Full Changelog: fastify/fastify-static@v10.1.1...v10.1.2

v10.1.1

⚠️ Security Release

• Fix for GHSA-83w8-p2f5-377r

What's Changed

• docs(readme): fix typos by @​Fdawgs in fastify/fastify-static#600

Full Changelog: fastify/fastify-static@v10.1.0...v10.1.1

v10.1.0

What's Changed

• fix: set Vary: Accept-Encoding for preCompressed responses by @​LeSingh1 in fastify/fastify-static#586
• feat: use @fastify/error for errors and add option suppressWarning by @​climba03003 in fastify/fastify-static#599

New Contributors

• @​LeSingh1 made their first contribution in fastify/fastify-static#586

Full Changelog: fastify/fastify-static@v10.0.0...v10.1.0

v10.0.0

Breaking Changes

... (truncated)

Commits

• a39a464 Bumped v10.1.4
• ac46015 Ignore .pi
• 6288466 test: consume compressed response bodies
• 04134a4 test: cover rootless path validation on Windows
• d9a8c0a test: make case-folding fallback portable
• dbe65e8 Merge commit from fork
• 48b821f chore: bump content-disposition in the dependencies group (#607)
• ee3f89d chore: bump fastify/workflows/.github/workflows/plugins-ci.yml (#604)
• fd3fe0d Bumped v10.1.3
• fabaf1b fix: preserve absolute Windows sendFile paths (#606)
• Additional commits viewable in compare view

Updates fastify from 5.3.2 to 5.12.5

Release notes

Sourced from fastify's releases.

v5.12.5

⚠️ Security release

• Fix for GHSA-4mh8-r7rc-xpvc

What's Changed

• [Backport 5.x] perf: reduce content-type parser overhead by @​github-actions[bot] in fastify/fastify#7019
• [Backport 5.x] perf: avoid redundant request-part reads during validation by @​github-actions[bot] in fastify/fastify#7020

Full Changelog: fastify/fastify@v5.12.4...v5.12.5

v5.12.4

Fixed the fastify.js version mismatch.

Full Changelog: fastify/fastify@v5.12.2...v5.12.4

v5.12.2

⚠️ Security release

• Fix for GHSA-9q9j-q6p8-xq58
• Fix for GHSA-hwr6-493r-vm6h
• Fix for GHSA-p68q-wchp-6fh7
• Fix for GHSA-667r-xxjv-c9mm

What's Changed

• [Backport 5.x] fix: callNotFound should run not-found preHandler regardless of registration order by @​github-actions[bot] in fastify/fastify#6973
• [Backport 5.x] chore: npm ignore remaining agent files by @​github-actions[bot] in fastify/fastify#7003

Full Changelog: fastify/fastify@v5.12.1...v5.12.2

v5.12.1

⚠️ Security release

• Fix for GHSA-w2qp-rph6-63g4
• Fix for GHSA-3m5p-2c4r-xxw2

What's Changed

• [Backport 5.x] test: fix reply.mediaType by @​github-actions[bot] in fastify/fastify#6950
• [Backport 5.x] ci: allow backport in pr title by @​github-actions[bot] in fastify/fastify#6952
• [Backport 5.x] fix: run preClose hook exactly once per declaring instance by @​github-actions[bot] in fastify/fastify#6954
• [Backport 5.x] fix: report canonical route url for hidden prefix slash route by @​github-actions[bot] in fastify/fastify#6961

Full Changelog: fastify/fastify@v5.12.0...v5.12.1

v5.12.0

What's Changed

• chore(sponsor): add testmu ai by @​Eomm in fastify/fastify#6922

... (truncated)

Commits

• ba235fd Bumped v5.12.5
• ad06a4c Merge commit from fork
• 7af0d77 [Backport 5.x] perf: avoid redundant request-part reads during validation (#7...
• 990ebef [Backport 5.x] perf: reduce content-type parser overhead (#7019)
• 1690e35 Bumped v5.12.4
• 1c991c4 Bumped v5.12.3
• 942a2be Bumped v5.12.2
• 853f6e2 test(validation): cover normalization and async branches
• f02d8d4 fix(validation): do not unwrap async validator results
• 93c239a fix: reject malformed URLs before custom 404 handlers
• Additional commits viewable in compare view