What's Changed

• chore: bump fastify/workflows/.github/workflows/reusable-release.yml from b1a11bce713bc857e52b2231fec3c89071ad3135 to 731d0cca9a6a5b9586dad6b0326d49001ab9216f by @dependabot[bot] in #235
• fix(urlencoded): keep incomplete percent-encoded bytes at field boundaries by @RaphaelFakhri in #237

New Contributors

• @RaphaelFakhri made their first contribution in #237

Full Changelog: v3.2.4...v3.2.5

What's Changed

• chore: remove files field from package.json and updated by @Tony133 in #234
• fix: drop split CRLFCRLF terminator bytes from the header buffer by @spokodev in #218

New Contributors

• @spokodev made their first contribution in #218

Full Changelog: v3.2.3...v3.2.4

What's Changed

• ci: enable trusted publishing releases by @Puppo in #232
• fix: don't hang when an epilogue arrives after the closing boundary by @official-burak in #230

New Contributors

• @Puppo made their first contribution in #232
• @official-burak made their first contribution in #230

Full Changelog: v3.2.2...v3.2.3

⚠️ Security Release

Fix for GHSA-gxm5-99cw-xjw9

This is a security release for @fastify/busboy.

It addresses the following security advisories:

• GHSA-xjh9-v7x6-24jw
• GHSA-x8mw-p69m-v3mx

Users should upgrade to v3.2.1.

Full Changelog: v3.2.0...v3.2.1

What's Changed

• build(dependabot): reduce npm updates to monthly by @Fdawgs in #182
• chore: rename master to main by @Fdawgs in #183
• build(deps-dev): bump typescript from 5.7.3 to 5.8.2 by @dependabot[bot] in #184
• ci(ci): set job permissions by @Fdawgs in #185
• perf: use node: prefix to bypass require.cache call for builtins by @Fdawgs in #186
• ci: set permissions at workflow level by @Fdawgs in #187
• ci: restore job level permissions by @Fdawgs in #188
• build(deps-dev): bump tinybench from 3.1.1 to 4.0.1 by @dependabot[bot] in #189
• build(deps-dev): bump tsd from 0.31.2 to 0.32.0 by @dependabot[bot] in #190
• chore(license): update date ranges; standardise style by @Fdawgs in #192
• Fix Node.js 24 by @mcollina in #193
• build(deps-dev): bump @types/node from 22.15.34 to 24.0.8 by @dependabot[bot] in #195
• build(deps-dev): bump typescript from 5.8.3 to 5.9.2 by @dependabot[bot] in #196
• fix: enforce RFC 2183/7578 compliance for quoted Content-Disposition parameters by @mcollina in #194

New Contributors

• @mcollina made their first contribution in #193

Full Changelog: v3.1.1...v3.2.0

What's Changed

• docs(readme): update ci badge syntax by @Fdawgs in #181
• perf: always check data when looking for last char of needle by @gurgunday in #180

Full Changelog: v3.1.0...v3.1.1

What's Changed

• build(deps-dev): bump tap from 18.8.0 to 21.0.0 by @dependabot in #161
• build(deps-dev): bump @types/node from 20.14.13 to 22.0.0 by @dependabot in #163
• build(deps): bump fastify/workflows from 5.0.0 to 5.0.1 by @dependabot in #165
• build(deps-dev): lock typescript minor version by @Fdawgs in #166
• build(deps-dev): bump typescript from 5.4.5 to 5.6.3 by @dependabot in #167
• build(deps-dev): bump tinybench from 2.9.0 to 3.0.0 by @dependabot in #169
• chore: migrate from tap to node:test and c8 by @dancastillo in #168
• ci(ci): call lint script by @Fdawgs in #170
• style: remove trailing whitespace by @Fdawgs in #171
• chore(package): add homepage and bugs urls by @Fdawgs in #172
• build(deps-dev): bump typescript from 5.6.3 to 5.7.2 by @dependabot in #174
• perf: make _occ Uint8Array by @gurgunday in #176
• remove outdated workflows by @gurgunday in #177
• docs: fixed the package name in README. by @KostyaTretyak in #179
• perf: simplify the search algorithm by @gurgunday in #178
• fix: lower lookbehind size to needleLength - 1 by @gurgunday in #175

New Contributors

• @dancastillo made their first contribution in #168
• @KostyaTretyak made their first contribution in #179

Full Changelog: v3.0.0...v3.1.0

What's Changed

• perf: refactor parts of StreamSearch by @gurgunday in #148
• build(deps-dev): bump tsd from 0.30.7 to 0.31.0 by @dependabot in #151
• More automated tests by @puskin94 in #152
• Improve test coverage by @Gesma94 in #153
• Merge next into master by @jsumners in #160

New Contributors

• @puskin94 made their first contribution in #152
• @Gesma94 made their first contribution in #153
• @jsumners made their first contribution in #160

Full Changelog: v2.1.1...v3.0.0

What's Changed

• chore: fix status badge by @Eomm in #136
• chore: remove unused error by @gurgunday in #138
• build(deps-dev): bump tsd from 0.29.0 to 0.30.0 by @dependabot in #140
• docs(readme): fix broken link by @Fdawgs in #141
• docs(readme): repoint disclosure badge to fastify security policy by @Fdawgs in #142
• chore(package): fix repository url by @Fdawgs in #143
• add testcase for decodeText module by @rommelandrea in #144
• chore(.gitignore): add .tap/ dir by @Fdawgs in #145
• fix: dont use undocumented(?) internal _events attribute by @Uzlopak in #146

New Contributors

• @Eomm made their first contribution in #136
• @rommelandrea made their first contribution in #144

Full Changelog: v2.1.0...v2.1.1