evalite@0.19.0 declares @fastify/static: ^8.2.0, which resolves to 8.3.0. GitHub advisory GHSA-83w8-p2f5-377r lists 10.1.1 as the first patched release, and the package already targets Fastify 5.
Please publish a release that updates this dependency to ^10.1.1 (or a later compatible version). This would let downstream users remediate the high-severity Dependabot alert without forcing a cross-major pnpm override.
🤖 Authored by gpt-5.6-luna via meatproxy.
evalite@0.19.0 declares
@fastify/static: ^8.2.0, which resolves to 8.3.0. GitHub advisory GHSA-83w8-p2f5-377r lists 10.1.1 as the first patched release, and the package already targets Fastify 5.Please publish a release that updates this dependency to
^10.1.1(or a later compatible version). This would let downstream users remediate the high-severity Dependabot alert without forcing a cross-major pnpm override.