Skip to content

Bump fast-uri and undici to clear security audit findings - #8

Merged
alex-macra merged 3 commits into
mainfrom
dependabot/npm_and_yarn/fast-uri-3.1.8
Oct 1, 2026
Merged

alex-macra merged 3 commits into
mainfrom
dependabot/npm_and_yarn/fast-uri-3.1.8

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 29, 2026 •

Copy link
Copy Markdown
Contributor

Summary

  • Update fast-uri to 3.1.8, fixing the open authority and host-normalization advisories.
  • Update undici to 7.30.0, clearing the open advisories fixed in 7.29.1 and later.

Validation

  • npm audit --json: 0 vulnerabilities.
  • npm run verify: passed, including typecheck, 790 tests, 77 parity tests, build, public-boundary check, and license check.

Bumps [fast-uri](https://github.com/fastify/fast-uri) from 3.1.6 to 3.1.8.
- [Release notes](https://github.com/fastify/fast-uri/releases)
- [Commits](fastify/fast-uri@v3.1.6...v3.1.8)

---
updated-dependencies:
- dependency-name: fast-uri
  dependency-version: 3.1.8
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 29, 2026
alex-macra and others added 2 commits October 1, 2026 03:08
Bumps [undici](https://github.com/nodejs/undici) from 7.29.0 to 7.30.0.
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](nodejs/undici@v7.29.0...v7.30.0)

---
updated-dependencies:
- dependency-name: undici
  dependency-version: 7.30.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@alex-macra alex-macra changed the title Bump fast-uri from 3.1.6 to 3.1.8 Bump fast-uri and undici to clear security audit findings Oct 1, 2026
@alex-macra
alex-macra merged commit 3118a69 into main Oct 1, 2026
5 checks passed
@alex-macra
alex-macra deleted the dependabot/npm_and_yarn/fast-uri-3.1.8 branch October 1, 2026 08:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant