⚠️ Security Release
This fixes CVE CVE-2026-33806 GHSA-247c-9743-5963.
What's Changed
- chore: Fix port parsing by @jsumners in #6603
- chore: upgrade to typescript v6.0.2 by @Tony133 in #6605
- fix: restore trustProxy function for number and string types, add null check for socketAddr by @mcollina in #6613
- ci: reduce cron scheduled workflows from daily/weekly to monthly by @Fdawgs in #6623
- chore: Bump pnpm/action-setup from 4.2.0 to 5.0.0 by @dependabot[bot] in #6629
- chore: Bump markdownlint-cli2 from 0.21.0 to 0.22.0 by @dependabot[bot] in #6632
- chore: Bump borp from 0.21.0 to 1.0.0 by @dependabot[bot] in #6633
- chore: Bump actions/dependency-review-action from 4.8.3 to 4.9.0 by @dependabot[bot] in #6630
- docs(ecosystem): add @pompelmi/fastify-plugin by @SonoTommy in #6610
New Contributors
- @SonoTommy made their first contribution in #6610
Full Changelog: v5.8.4...v5.8.5