What's Changed

• docs(readme): update version by @udhayakumarcp in #367
• docs(readme): update plugin version syntax by @Fdawgs in #369
• ci: set permissions at workflow level by @Fdawgs in #371
• ci: restore job level permissions by @Fdawgs in #372
• chore(deps-dev): bump tsd from 0.31.2 to 0.32.0 by @dependabot[bot] in #373
• chore(license): update date ranges; standardise style by @Fdawgs in #376
• chore(deps-dev): bump @types/node from 22.15.34 to 24.0.8 by @dependabot[bot] in #377
• docs(readme): correct default value for preflight option by @inyourtime in #378
• Feat/preflight add logLevel option to silence CORS preflight logs by @gulbaki in #375

New Contributors

• @udhayakumarcp made their first contribution in #367
• @inyourtime made their first contribution in #378
• @gulbaki made their first contribution in #375

Full Changelog: v11.0.1...v11.1.0

What's Changed

• chore(deps-dev): bump typescript from 5.7.3 to 5.8.2 by @dependabot in #362
• chore(deps): bump mnemonist from 0.40.0 to 0.40.3 by @dependabot in #363
• docs(readme): update methods defaults by @victorbalssa in #364
• ci(ci): set job permissions by @Fdawgs in #365
• build(deps): replace mnemonist with toad-cache by @Fdawgs in #366

New Contributors

• @victorbalssa made their first contribution in #364

Full Changelog: v11.0.0...v11.0.1

Breaking Change

In order to provides safer default, we change the methods to the CORS-safelisted methods.
If you want to resume the previous behaviour, you need to explicitly specify the methods,

import Fastify from 'fastify'
import cors from '@fastify/cors'

const fastify = Fastify()
await fastify.register(cors, {
  methods: "GET,HEAD,PUT,PATCH,POST,DELETE"
})

What's Changed

• style: destructure imports by @Fdawgs in #360
• refactor(index): change default methods to cors-safelisted methods by @Fdawgs in #359

Full Changelog: v10.1.0...v11.0.0

What's Changed

• refactor(vary): remove redundant assignment by @Fdawgs in #352
• build(dependabot): reduce npm updates to monthly by @Fdawgs in #353
• docs(readme): conciseness improvements by @Fdawgs in #354
• chore(deps): bump mnemonist from 0.39.8 to 0.40.0 by @dependabot in #356
• chore: rename master to main by @Fdawgs in #355
• test(cors): add missing anchor by @Fdawgs in #357
• feat(index): allow cors to be disabled at route level by @peterfaria-jitb in #332

New Contributors

• @peterfaria-jitb made their first contribution in #332

Full Changelog: v10.0.2...v10.1.0

What's Changed

• chore(deps): bump fastify/workflows from 5.0.0 to 5.0.1 by @dependabot in #323
• Update README.md to include Fastify 5 by @a777med in #326
• build(deps-dev): lock typescript minor version by @Fdawgs in #328
• chore(deps-dev): bump typescript from 5.4.5 to 5.6.3 by @dependabot in #329
• docs(readme): fix compatibility table whitespace by @Fdawgs in #333
• docs(readme): standardize compatibility table style by @Fdawgs in #334
• style: remove trailing whitespace by @Fdawgs in #335
• chore(deps-dev): bump typescript from 5.6.3 to 5.7.2 by @dependabot in #339
• build(deps-dev): replace standard with neostandard by @Fdawgs in #340
• build(dependabot): remove tap ignore by @Fdawgs in #341
• ci(ci): sort job params alphabetically ascending by @Fdawgs in #342
• docs(readme): remove excess whitespace by @Fdawgs in #343
• chore(package): add funding and contribs by @Fdawgs in #344
• docs(readme): point ci badge at master/main branch by @Fdawgs in #345
• docs(readme): update ci badge syntax by @Fdawgs in #346
• chore(deps-dev): bump neostandard from 0.11.9 to 0.12.0 by @dependabot in #347
• build(deps-dev): add eslint, peer dep of neostandard by @Fdawgs in #348
• perf(index): use optional chaining by @Fdawgs in #349
• refactor: prefix unused params with underscores by @Fdawgs in #350
• docs(readme): spelling and grammar fixes by @Fdawgs in #351

New Contributors

• @a777med made their first contribution in #326

Full Changelog: v10.0.1...v10.0.2

What's Changed

• chore: update fastify to ^5.0.0 by @Fdawgs in #319

Full Changelog: v10.0.0...v10.0.1

What's Changed

• chore(deps): bump mnemonist from 0.39.6 to 0.39.8 by @dependabot in #293
• chore(.gitignore): add .tap/ dir by @Fdawgs in #294
• chore(deps-dev): bump @typescript-eslint/parser from 6.21.0 to 7.1.1 by @dependabot in #298
• chore(deps-dev): bump tsd from 0.30.7 to 0.31.0 by @dependabot in #300
• Warn about DoS attacks by @mcollina in #301
• add AsyncOriginFunction type by @sknetl in #302
• Merge next into master by @jsumners in #304
• chore(deps): bump fastify/workflows from 4.1.0 to 4.2.1 by @dependabot in #305
• chore(deps-dev): bump tsd from 0.30.7 to 0.31.1 by @dependabot in #306
• docs(readme): add options.methods default by @Fdawgs in #307
• chore(deps-dev): bump @types/node from 20.14.13 to 22.0.0 by @dependabot in #308
• chore: update min fastify version by @Fdawgs in #309
• chore(deps): bump fastify/workflows from 4.2.1 to 5.0.0 by @dependabot in #310
• chore: migrate from tap to node:test and c8 by @dancastillo in #316

New Contributors

• @sknetl made their first contribution in #302
• @dancastillo made their first contribution in #316

Full Changelog: v9.0.1...v10.0.0

What's Changed

• vary origin on delegated options by @laat in #292

New Contributors

• @laat made their first contribution in #292

Full Changelog: v9.0.0...v9.0.1

What's Changed

• chore(deps-dev): bump tsd from 0.29.0 to 0.30.0 by @dependabot in #286
• Add Vary header only for non-static origin option by @saschanaz in #288

New Contributors

• @saschanaz made their first contribution in #288

Full Changelog: v8.5.0...v9.0.0

What's Changed

• chore(deps): bump mnemonist from 0.39.5 to 0.39.6 by @dependabot in #283
• Revert "fix: support for embedded cors for route params (#278)" by @climba03003 in #285

Full Changelog: v8.4.2...v8.5.0