5.8.5

⚠️ Security Release

This fixes CVE CVE-2026-33806 https://github.com/fastify/fastify/security/advisories/GHSA-247c-9743-5963.

What's Changed

• chore: Fix port parsing by @jsumners in https://github.com/fastify/fastify/pull/6603
• chore: upgrade to typescript v6.0.2 by @Tony133 in https://github.com/fastify/fastify/pull/6605
• fix: restore trustProxy function for number and string types, add null check for socketAddr by @mcollina in https://github.com/fastify/fastify/pull/6613
• ci: reduce cron scheduled workflows from daily/weekly to monthly by @Fdawgs in https://github.com/fastify/fastify/pull/6623
• chore: Bump pnpm/action-setup from 4.2.0 to 5.0.0 by @dependabot[bot] in https://github.com/fastify/fastify/pull/6629
• chore: Bump markdownlint-cli2 from 0.21.0 to 0.22.0 by @dependabot[bot] in https://github.com/fastify/fastify/pull/6632
• chore: Bump borp from 0.21.0 to 1.0.0 by @dependabot[bot] in https://github.com/fastify/fastify/pull/6633
• chore: Bump actions/dependency-review-action from 4.8.3 to 4.9.0 by @dependabot[bot] in https://github.com/fastify/fastify/pull/6630
• docs(ecosystem): add @pompelmi/fastify-plugin by @SonoTommy in https://github.com/fastify/fastify/pull/6610

Full Changelog: https://github.com/fastify/fastify/compare/v5.8.4...v5.8.5