[Snyk] Security upgrade fastify from 4.9.2 to 4.10.2

[aichholzer]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • packages/benchmarks/package.json
  • packages/benchmarks/package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	496/1000 Why? Recently disclosed, Has a fix available, CVSS 4.2	Cross-site Request Forgery (CSRF) SNYK-JS-FASTIFY-3136527	No	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: fastify

The new version differs by 34 commits.

• 311590c Bumped 4.10.2
• 62dde76 Merge pull request from GHSA-3fjj-p79j-c9hh
• 6fc06c1 Bumped v4.10.1
• a8873ef add silent option to LogLevel (#4432)
• 9c1be2a build(deps-dev): bump @ sinonjs/fake-timers from 9.1.2 to 10.0.0 (#4421)
• 9c85bed Add fastify-constraints to community plugins (#4428)
• 36d84bc fix node 19.1.0 port validation test (#4427)
• 3767bc2 Bumped v4.10.0
• 5c8039c docs: fix removeAdditional refer (#4410)
• ea58581 docs: fix example using db decorator on fastify instance (#4406)
• 675b00d docs: Document multiple app approach (#4393)
• f1bd80e feat: add request.routeOptions object (#4397)
• de53fba chore(doc): duplicated menu item (#4398)
• c6abdf7 docs(recommendations): grammar fixes (#4396)
• 041cf41 docs: Add section about capacity planning (#4386)
• a02650e Removes old Note about named imports in ESM (#4392)
• 3ba44ce fix: tiny-lru usage (#4391)
• a71dd83 fix: Improve error message for hooks check (#4387)
• e9604ce build(deps-dev): bump @ sinclair/typebox from 0.24.51 to 0.25.2 (#4388)
• c0f72da docs(ecosystem): Add fastify-list-routes (#4385)
• 183576d fix: trailers async race condition (#4383)
• 2065c11 feat: support async trailer (#4380)
• 31972aa fix(type-providers): assignability of instance with enabled type provider (#4371)
• 65d1a32 add missing 'validationContext' field to FastifyError type (#4363)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Cross-site Request Forgery (CSRF)