[Snyk] Security upgrade @fastify/static from 7.0.4 to 9.0.0

[qbey]

Snyk has created this PR to fix 1 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

• website/package.json
• website/package-lock.json

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Allocation of Resources Without Limits or Throttling SNYK-JS-BRACEEXPANSION-18512280	710

Breaking Change Risk

Notice: This assessment is enhanced by AI.

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Allocation of Resources Without Limits or Throttling

[qbey]

This major version upgrade from v7 to v9 of @fastify/static introduces significant breaking changes, primarily related to the setHeaders function API.

Breaking Changes:

• setHeaders API Change (v9.0.0): The function signature for setHeaders has been modified. It no longer provides the raw Node.js Response object. Instead, it now passes the FastifyReply object. Code that uses setHeaders must be refactored to use the helpers available on the reply object (e.g., reply.header()).

  Before (v7):
  setHeaders: (res, path, stat) => { res.setHeader('x-foo', 'bar'); }

  After (v9):
  setHeaders: (reply, path, stat) => { reply.header('x-foo', 'bar'); }

• Dependency Updates: The upgrade also includes major version bumps for dependencies like glob (to v13), which could affect file matching behavior if advanced wildcard features are used.

Recommendation:
Review all usages of the setHeaders option in your codebase and update them to conform to the new FastifyReply signature. Thoroughly test file serving functionality, especially if you rely on complex glob patterns for the wildcard option.

Source: GitHub Release Notes

Notice 🤖: This content was augmented using artificial intelligence. AI-generated content may contain errors and should be reviewed for accuracy before use.