Skip to content

Fix Dependabot security update failures for Fastify in test-servers - #24

Closed
ExorTek with Copilot wants to merge 2 commits into
masterfrom
copilot/fix-dependabot-job-failure
Closed

ExorTek with Copilot wants to merge 2 commits into
masterfrom
copilot/fix-dependabot-job-failure

Conversation

Copilot AI commented Oct 30, 2026 •

Copy link
Copy Markdown

Dependabot’s dynamic npm_and_yarn security jobs were failing because the /test-servers workspace referenced Fastify via an alias (fastify5) instead of the canonical package name (fastify). As a result, the updater could not resolve targeted security advisories for fastify.

  • Dependency resolution alignment (Dependabot-compatible)

    • In test-servers/package.json, replaced the aliased dependency:
      • fastify5: npm:fastify@5.9.0
      • with fastify: ^5.12.7
    • Keeps fastify4 alias intact for parallel major-version coverage while making v5 resolvable by Dependabot security updates.
  • Runtime import consistency

    • Updated test-servers/fastify5-server.js to import fastify directly instead of fastify5, matching the manifest change.
  • Lockfile synchronization

    • Updated yarn.lock to remove the old alias entry and reflect canonical fastify dependency resolution.
// test-servers/fastify5-server.js
- const Fastify = require('fastify5');
+ const Fastify = require('fastify');

Co-authored-by: ExorTek <54851701+ExorTek@users.noreply.github.com>
Copilot AI changed the title [WIP] Fix failing GitHub Actions job Dependabot Fix Dependabot security update failures for Fastify in test-servers Oct 30, 2026
Copilot AI requested a review from ExorTek October 30, 2026 06:37
@ExorTek
ExorTek marked this pull request as ready for review October 30, 2026 06:47
Copilot AI balanced review requested due to automatic review settings October 30, 2026 06:47

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot was unable to review this pull request because the user who requested the review has insufficient remaining quota.

@ExorTek

ExorTek commented Oct 30, 2026

Copy link
Copy Markdown
Owner

feature for using different versions

@ExorTek ExorTek closed this Oct 30, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants