Skip to content

chore(deps): bump fast-uri from 3.1.5 to 3.1.7 in the npm_and_yarn group across 1 directory - #1152

Open
dependabot[bot] wants to merge 1 commit into
sagafrom
dependabot/npm_and_yarn/npm_and_yarn-8839a8980a
Open

chore(deps): bump fast-uri from 3.1.5 to 3.1.7 in the npm_and_yarn group across 1 directory#1152
dependabot[bot] wants to merge 1 commit into
sagafrom
dependabot/npm_and_yarn/npm_and_yarn-8839a8980a

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 3, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm_and_yarn group with 1 update in the / directory: fast-uri.

Updates fast-uri from 3.1.5 to 3.1.7

Release notes

Sourced from fast-uri's releases.

v3.1.7

⚠️ Security Warning

This is a security release that fixes the following high-severity security advisories:

Users of the v3.x release line should upgrade to v3.1.7.

Full Changelog: fastify/fast-uri@v3.1.6...v3.1.7

v3.1.6

⚠️ Security Warning

This release addresses the following high-severity security advisories:

Users of the v3.x release line should upgrade to v3.1.6.

Full Changelog: fastify/fast-uri@v3.1.5...v3.1.6

Commits
  • 412e40a Bumped v3.1.7
  • 9f4c943 fix: backport port and IP-literal validation to v3.x (#216)
  • 1eb3ce4 fix: treat unterminated bracket hosts as reg-names again (#214)
  • 6f970b2 Bumped v3.1.6
  • d941579 fix: never run IDN canonicalization on bracketed IP literals
  • c0f0279 test: adapt decoded-scheme handler assertion to 3.x (no mailto scheme)
  • 37f3417 Merge commit from fork
  • 607bfbe Merge commit from fork
  • ae92a4c Merge commit from fork
  • 444ecda Merge commit from fork
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies javascript Pull requests that update javascript code labels Sep 3, 2026
@socket-security

socket-security Bot commented Sep 3, 2026

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Addedaws-cdk-lib@​2.266.068100899670
Updated@​bifravst/​eslint-config-typescript@​8.0.0 ⏵ 8.0.375 -11007897 +1100
Updated@​bifravst/​http-api-mock@​3.0.13 ⏵ 3.0.2877 -31008798 +1100
Updated@​types/​aws-lambda@​8.10.162 ⏵ 8.10.1631001007785 -4100
Updated@​bifravst/​aws-cdk-lambda-helpers@​5.0.4 ⏵ 5.0.685 -11008998 +3100

View full report

@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/npm_and_yarn-8839a8980a branch 4 times, most recently from c21d453 to 86e3ec2 Compare September 6, 2026 19:23
Bumps the npm_and_yarn group with 1 update in the / directory: [fast-uri](https://github.com/fastify/fast-uri).


Updates `fast-uri` from 3.1.5 to 3.1.7
- [Release notes](https://github.com/fastify/fast-uri/releases)
- [Commits](fastify/fast-uri@v3.1.5...v3.1.7)

---
updated-dependencies:
- dependency-name: fast-uri
  dependency-version: 3.1.7
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/npm_and_yarn-8839a8980a branch from 86e3ec2 to b266129 Compare September 6, 2026 21:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants