deps(deps-dev): bump fast-uri from 3.1.6 to 3.1.7 - #34

Merged

jesseoue merged 1 commit into

mainfrom

dependabot/npm_and_yarn/fast-uri-3.1.7

Sep 10, 2026

dependabot Bot commented on behalf of github Sep 7, 2026 •

edited

Loading

Contributor

Bumps fast-uri from 3.1.6 to 3.1.7.

Release notes

Sourced from fast-uri's releases.

v3.1.7

⚠️ Security Warning

This is a security release that fixes the following high-severity security advisories:

GHSA-qw65-cvwx-89v3 — authority injection via an unvalidated port in serialize()

GHSA-58mr-gqgx-xq4g — host confusion via unbalanced or misplaced IP-literal brackets

Users of the v3.x release line should upgrade to v3.1.7.

Full Changelog: fastify/fast-uri@v3.1.6...v3.1.7

Commits

412e40a Bumped v3.1.7
9f4c943 fix: backport port and IP-literal validation to v3.x (#216)
1eb3ce4 fix: treat unterminated bracket hosts as reg-names again (#214)
See full diff in compare view

dependabot Bot commented on behalf of github Sep 7, 2026

Contributor Author

Labels

The following labels could not be found: dependencies, npm. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

dependabot Bot requested a review from jesseoue as a code owner

September 7, 2026 10:56

jesseoue previously approved these changes

View reviewed changes

jesseoue left a comment

Contributor

Dev-dependency bump, CI green.

dependabot Bot dismissed jesseoue’s stale review via

18250c8

September 10, 2026 03:41

dependabot Bot force-pushed the dependabot/npm_and_yarn/fast-uri-3.1.7 branch from 21a14de to 18250c8 Compare

September 10, 2026 03:41

jesseoue approved these changes

View reviewed changes

jesseoue left a comment

Contributor

Dev-dependency bump, CI green (re-approved after dependabot rebase).

jesseoue approved these changes

View reviewed changes

jesseoue left a comment

Contributor

Dev-dependency bump, CI green (re-approved after dependabot rebase).

jesseoue approved these changes

View reviewed changes

jesseoue left a comment

Contributor

Dev-dependency bump, CI green (re-approved after dependabot rebase).

jesseoue approved these changes

View reviewed changes

jesseoue left a comment

Contributor

Dev-dependency bump, CI green (re-approved after dependabot rebase).


          deps(deps-dev): bump fast-uri from 3.1.6 to 3.1.7

87bc843

Bumps [fast-uri](https://github.com/fastify/fast-uri) from 3.1.6 to 3.1.7.
- [Release notes](https://github.com/fastify/fast-uri/releases)
- [Commits](fastify/fast-uri@v3.1.6...v3.1.7)

---
updated-dependencies:
- dependency-name: fast-uri
  dependency-version: 3.1.7
  dependency-type: indirect
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot force-pushed the dependabot/npm_and_yarn/fast-uri-3.1.7 branch from 18250c8 to 87bc843 Compare

September 10, 2026 03:44

jesseoue approved these changes

View reviewed changes

jesseoue left a comment

Contributor

Dev-dependency bump, CI green (re-approved after dependabot rebase).

jesseoue approved these changes

View reviewed changes

jesseoue left a comment

Contributor

Dev-dependency bump, CI green (re-approved after dependabot rebase).

jesseoue merged commit dbd2173 into main

5 checks passed

jesseoue deleted the dependabot/npm_and_yarn/fast-uri-3.1.7 branch

September 10, 2026 03:45

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet