v11.3.0

What's Changed

• chore(deps-dev): bump @types/node from 24.10.4 to 25.0.3 by @dependabot[bot] in #390
• chore(license): standardise license notice by @Fdawgs in #391
• style: remove trailing whitespace by @Fdawgs in #392
• chore(deps-dev): bump c8 from 10.1.3 to 11.0.0 by @dependabot[bot] in #393
• ci: remove stale.yml by @Tony133 in #395
• chore: upgrade typescript v6.0.2 by @Tony133 in #397
• chore(deps): bump fastify/workflows/.github/workflows/plugins-ci.yml from 5 to 6 by @dependabot[bot] in #398
• chore(deps-dev): bump neostandard from 0.12.2 to 0.13.0 by @dependabot[bot] in #400
• ci: add lock-threads workflow by @Fdawgs in #401
• refactor(types): migrate from tsd to tstyche by @Tony133 in #403
• chore(.gitattributes): retain binary file eol style by @Fdawgs in #402
• chore: update depedabot setting by @climba03003 in #405
• chore: bump fastify-plugin from 5.1.0 to 6.0.0 in the dependencies group by @dependabot[bot] in #407
• docs(readme): update request origin link by @Fdawgs in #408
• chore(package.json): fix delvedor's personal url by @Fdawgs in #409
• test: remove remaining tap-style vary assertions by @barry166 in #410
• chore: bump @types/node from 25.9.4 to 26.0.0 in the dev-dependencies-typescript group by @dependabot[bot] in #411

New Contributors

• @Tony133 made their first contribution in #395
• @barry166 made their first contribution in #410

Full Changelog: v11.2.0...v11.3.0

v11.2.0

What's Changed

• chore(deps-dev): bump typescript from 5.8.3 to 5.9.2 by @dependabot[bot] in #379
• Update README.md by @msbahal in #382
• chore(deps-dev): bump tsd from 0.32.0 to 0.33.0 by @dependabot[bot] in #385
• chore(.npmrc): ignore scripts by @Fdawgs in #386
• build(deps-dev): remove @fastify/pre-commit by @Fdawgs in #387
• ci(ci): add concurrency config by @Fdawgs in #388
• feat: support route-level CORS configuration by @vimutti77 in #384

New Contributors

• @msbahal made their first contribution in #382
• @vimutti77 made their first contribution in #384

Full Changelog: v11.1.0...v11.2.0

v11.1.0

What's Changed

• docs(readme): update version by @udhayakumarcp in #367
• docs(readme): update plugin version syntax by @Fdawgs in #369
• ci: set permissions at workflow level by @Fdawgs in #371
• ci: restore job level permissions by @Fdawgs in #372
• chore(deps-dev): bump tsd from 0.31.2 to 0.32.0 by @dependabot[bot] in #373
• chore(license): update date ranges; standardise style by @Fdawgs in #376
• chore(deps-dev): bump @types/node from 22.15.34 to 24.0.8 by @dependabot[bot] in #377
• docs(readme): correct default value for preflight option by @inyourtime in #378
• Feat/preflight add logLevel option to silence CORS preflight logs by @gulbaki in #375

New Contributors

• @udhayakumarcp made their first contribution in #367
• @inyourtime made their first contribution in #378
• @gulbaki made their first contribution in #375

Full Changelog: v11.0.1...v11.1.0

v11.0.1

What's Changed

• chore(deps-dev): bump typescript from 5.7.3 to 5.8.2 by @dependabot in #362
• chore(deps): bump mnemonist from 0.40.0 to 0.40.3 by @dependabot in #363
• docs(readme): update methods defaults by @victorbalssa in #364
• ci(ci): set job permissions by @Fdawgs in #365
• build(deps): replace mnemonist with toad-cache by @Fdawgs in #366

New Contributors

• @victorbalssa made their first contribution in #364

Full Changelog: v11.0.0...v11.0.1

v11.0.0

Breaking Change

In order to provides safer default, we change the methods to the CORS-safelisted methods.
If you want to resume the previous behaviour, you need to explicitly specify the methods,

import Fastify from 'fastify'
import cors from '@fastify/cors'

const fastify = Fastify()
await fastify.register(cors, {
  methods: "GET,HEAD,PUT,PATCH,POST,DELETE"
})

What's Changed

• style: destructure imports by @Fdawgs in #360
• refactor(index): change default methods to cors-safelisted methods by @Fdawgs in #359

Full Changelog: v10.1.0...v11.0.0

v10.1.0

What's Changed

• refactor(vary): remove redundant assignment by @Fdawgs in #352
• build(dependabot): reduce npm updates to monthly by @Fdawgs in #353
• docs(readme): conciseness improvements by @Fdawgs in #354
• chore(deps): bump mnemonist from 0.39.8 to 0.40.0 by @dependabot in #356
• chore: rename master to main by @Fdawgs in #355
• test(cors): add missing anchor by @Fdawgs in #357
• feat(index): allow cors to be disabled at route level by @peterfaria-jitb in #332

New Contributors

• @peterfaria-jitb made their first contribution in #332

Full Changelog: v10.0.2...v10.1.0

v10.0.2

What's Changed

• chore(deps): bump fastify/workflows from 5.0.0 to 5.0.1 by @dependabot in #323
• Update README.md to include Fastify 5 by @a777med in #326
• build(deps-dev): lock typescript minor version by @Fdawgs in #328
• chore(deps-dev): bump typescript from 5.4.5 to 5.6.3 by @dependabot in #329
• docs(readme): fix compatibility table whitespace by @Fdawgs in #333
• docs(readme): standardize compatibility table style by @Fdawgs in #334
• style: remove trailing whitespace by @Fdawgs in #335
• chore(deps-dev): bump typescript from 5.6.3 to 5.7.2 by @dependabot in #339
• build(deps-dev): replace standard with neostandard by @Fdawgs in #340
• build(dependabot): remove tap ignore by @Fdawgs in #341
• ci(ci): sort job params alphabetically ascending by @Fdawgs in #342
• docs(readme): remove excess whitespace by @Fdawgs in #343
• chore(package): add funding and contribs by @Fdawgs in #344
• docs(readme): point ci badge at master/main branch by @Fdawgs in #345
• docs(readme): update ci badge syntax by @Fdawgs in #346
• chore(deps-dev): bump neostandard from 0.11.9 to 0.12.0 by @dependabot in #347
• build(deps-dev): add eslint, peer dep of neostandard by @Fdawgs in #348
• perf(index): use optional chaining by @Fdawgs in #349
• refactor: prefix unused params with underscores by @Fdawgs in #350
• docs(readme): spelling and grammar fixes by @Fdawgs in #351

New Contributors

• @a777med made their first contribution in #326

Full Changelog: v10.0.1...v10.0.2

v10.0.1

What's Changed

• chore: update fastify to ^5.0.0 by @Fdawgs in #319

Full Changelog: v10.0.0...v10.0.1

v10.0.0

What's Changed

• chore(deps): bump mnemonist from 0.39.6 to 0.39.8 by @dependabot in #293
• chore(.gitignore): add .tap/ dir by @Fdawgs in #294
• chore(deps-dev): bump @typescript-eslint/parser from 6.21.0 to 7.1.1 by @dependabot in #298
• chore(deps-dev): bump tsd from 0.30.7 to 0.31.0 by @dependabot in #300
• Warn about DoS attacks by @mcollina in #301
• add AsyncOriginFunction type by @sknetl in #302
• Merge next into master by @jsumners in #304
• chore(deps): bump fastify/workflows from 4.1.0 to 4.2.1 by @dependabot in #305
• chore(deps-dev): bump tsd from 0.30.7 to 0.31.1 by @dependabot in #306
• docs(readme): add options.methods default by @Fdawgs in #307
• chore(deps-dev): bump @types/node from 20.14.13 to 22.0.0 by @dependabot in #308
• chore: update min fastify version by @Fdawgs in #309
• chore(deps): bump fastify/workflows from 4.2.1 to 5.0.0 by @dependabot in #310
• chore: migrate from tap to node:test and c8 by @dancastillo in #316

New Contributors

• @sknetl made their first contribution in #302
• @dancastillo made their first contribution in #316

Full Changelog: v9.0.1...v10.0.0

v9.0.1

What's Changed

• vary origin on delegated options by @laat in #292

New Contributors

• @laat made their first contribution in #292

Full Changelog: v9.0.0...v9.0.1