chore(deps): bump @fastify/static from 9.1.3 to 10.1.2 in /server

[dependabot]

Bumps @fastify/static from 9.1.3 to 10.1.2.

Release notes

Sourced from @​fastify/static's releases.

v10.1.2

⚠️ Security Release

• Fix for GHSA-8pvw-jcv7-9cmj

What's Changed

• ci: pin actions to commit-hash by @​Fdawgs in fastify/fastify-static#601

Full Changelog: fastify/fastify-static@v10.1.1...v10.1.2

v10.1.1

⚠️ Security Release

• Fix for GHSA-83w8-p2f5-377r

What's Changed

• docs(readme): fix typos by @​Fdawgs in fastify/fastify-static#600

Full Changelog: fastify/fastify-static@v10.1.0...v10.1.1

v10.1.0

What's Changed

• fix: set Vary: Accept-Encoding for preCompressed responses by @​LeSingh1 in fastify/fastify-static#586
• feat: use @fastify/error for errors and add option suppressWarning by @​climba03003 in fastify/fastify-static#599

New Contributors

• @​LeSingh1 made their first contribution in fastify/fastify-static#586

Full Changelog: fastify/fastify-static@v10.0.0...v10.1.0

v10.0.0

Breaking Changes

• setHeaders now using FastifyReply instead of Response.

You should refactor your code to use the reply helpers. For example,

// Before
const fastify = require('fastify')({logger: true})
const path = require('node:path')
fastify.register(require('@​fastify/static'), {
root: path.join(__dirname, 'public'),
prefix: '/public/', // optional: default '/',
setHeaders(res) {
res.setHeader('X-Test', 'Foo')
}
})
</tr></table>

... (truncated)

Commits

• 7a9d1c6 Bumped v10.1.2
• 878c72e Merge commit from fork
• aee1c2c ci: pin actions to commit-hash (#601)
• 3733059 Bumped 10.1.1
• db4276f Merge commit from fork
• c68224e docs(readme): fix typos (#600)
• 36c939d Bumped v10.1.0
• 7c1121a feat: use @fastify/error for errors and add option suppressWarning (#599)
• c57d8bc fix: set Vary: Accept-Encoding for preCompressed responses (#586)
• babf6df Bumped v10.0.0
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.

[steilerDev]

Closing — the bump has landed via #1926 (merged to beta).

Two reasons this PR could not merge as-is:

1. It is a Dependabot security PR, so it targets main, which requires the Require head branch == beta check — unsatisfiable for a Dependabot head branch.
2. Its CI failed on npm ci with EUSAGE: Dependabot updated server/package.json but the root lockfile was left out of sync (lock file's @fastify/static@9.1.3 does not satisfy @fastify/static@10.1.2).

#1926 carries the same 9.1.3 → 10.1.2 upgrade with a correctly regenerated lockfile, remediating GHSA-8pvw-jcv7-9cmj and GHSA-83w8-p2f5-377r plus the two medium alerts. Those will close once beta is promoted to main.

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.