build(deps): bump the fastify-core group with 4 updates (#1845)

* build(deps): bump the fastify-core group with 4 updates

Bumps the fastify-core group with 4 updates: [@fastify/bearer-auth](https://github.com/fastify/fastify-bearer-auth), [@fastify/compress](https://github.com/fastify/fastify-compress), [@fastify/sensible](https://github.com/fastify/fastify-sensible) and [@fastify/static](https://github.com/fastify/fastify-static).


Updates `@fastify/bearer-auth` from 9.3.0 to 9.4.0
- [Release notes](https://github.com/fastify/fastify-bearer-auth/releases)
- [Commits](fastify/fastify-bearer-auth@v9.3.0...v9.4.0)

Updates `@fastify/compress` from 7.0.0 to 7.0.3
- [Release notes](https://github.com/fastify/fastify-compress/releases)
- [Commits](fastify/fastify-compress@v7.0.0...v7.0.3)

Updates `@fastify/sensible` from 5.5.0 to 5.6.0
- [Release notes](https://github.com/fastify/fastify-sensible/releases)
- [Commits](fastify/fastify-sensible@v5.5.0...v5.6.0)

Updates `@fastify/static` from 7.0.1 to 7.0.3
- [Release notes](https://github.com/fastify/fastify-static/releases)
- [Commits](fastify/fastify-static@v7.0.1...v7.0.3)

---
updated-dependencies:
- dependency-name: "@fastify/bearer-auth"
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: fastify-core
- dependency-name: "@fastify/compress"
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: fastify-core
- dependency-name: "@fastify/sensible"
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: fastify-core
- dependency-name: "@fastify/static"
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: fastify-core
...

Signed-off-by: dependabot[bot] <support@github.com>

* test(server): remove invalid vary header

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Frazer Smith <frazer.dev@outlook.com>

package.json

@@ -104,13 +104,13 @@
 	"dependencies": {
 		"@fastify/accepts": "^4.3.0",
 		"@fastify/autoload": "^5.8.0",
-		"@fastify/bearer-auth": "^9.3.0",
-		"@fastify/compress": "^7.0.0",
+		"@fastify/bearer-auth": "^9.4.0",
+		"@fastify/compress": "^7.0.3",
 		"@fastify/cors": "^9.0.1",
 		"@fastify/helmet": "^11.1.1",
 		"@fastify/rate-limit": "^9.1.0",
-		"@fastify/sensible": "^5.5.0",
-		"@fastify/static": "^7.0.1",
+		"@fastify/sensible": "^5.6.0",
+		"@fastify/static": "^7.0.3",
 		"@fastify/swagger": "^8.14.0",
 		"@fastify/under-pressure": "^8.3.0",
 		"cfb": "^1.2.2",

src/server.test.js

@@ -24,7 +24,6 @@ const expResHeaders = {
 	"referrer-policy": "no-referrer",
 	"strict-transport-security": "max-age=31536000; includeSubDomains",
 	"surrogate-control": "no-store",
-	vary: "accept-encoding",
 	"x-content-type-options": "nosniff",
 	"x-dns-prefetch-control": "off",
 	"x-download-options": "noopen",
@@ -748,13 +747,13 @@ describe("Server deployment", () => {
 								...expResHeadersJson,
 								"access-control-allow-origin":
 									"https://notreal.nhs.uk",
-								vary: "Origin, accept-encoding",
+								vary: "Origin",
 							},
 							text: {
 								...expResHeadersText,
 								"access-control-allow-origin":
 									"https://notreal.nhs.uk",
-								vary: "Origin, accept-encoding",
+								vary: "Origin",
 							},
 						},
 					},
@@ -805,13 +804,13 @@ describe("Server deployment", () => {
 								...expResHeadersJson,
 								"access-control-allow-origin":
 									"https://notreal.nhs.uk",
-								vary: "Origin, accept-encoding",
+								vary: "Origin",
 							},
 							text: {
 								...expResHeadersText,
 								"access-control-allow-origin":
 									"https://notreal.nhs.uk",
-								vary: "Origin, accept-encoding",
+								vary: "Origin",
 							},
 						},
 					},