Skip to content

chore(deps): bump fast-uri from 3.1.8 to 3.1.9 - #765

Merged
alexander-akait merged 1 commit into
mainfrom
chore/bump-fast-uri
Oct 30, 2026
Merged

alexander-akait merged 1 commit into
mainfrom
chore/bump-fast-uri

Conversation

@alexander-akait

Copy link
Copy Markdown
Member

Summary

The lint job's npm run security step now fails on every branch: npm audit --production reports four moderate advisories against fast-uri 3.0.0–3.1.8 (GHSA-w74x-v6f9-j3xg, GHSA-xhq7-xmqj-769h, GHSA-wjr9-j795-jxcr, GHSA-333x-w4r6-6crp), reached through schema-utils → ajv. npm audit fix moves the lockfile to 3.1.9, and also brings the lockfile's own version up to the 5.13.1 package.json already has.

before: 1 moderate severity vulnerability (fast-uri 3.1.8)
after:  found 0 vulnerabilities

What kind of change does this PR introduce?

chore

Did you add tests for your changes?

n/a — lockfile only; npm run security passes.

Does this PR introduce a breaking change?

No.

If relevant, what needs to be documented once your changes are merged or what have you already documented?

n/a

Use of AI

Claude Code read the failing lint job on #764, ran npm audit fix and checked that only fast-uri moved.


Generated by Claude Code

npm audit reports four advisories against fast-uri up to 3.1.8, which
fails the lint job's security step.
@changeset-bot

changeset-bot Bot commented Oct 29, 2026

Copy link
Copy Markdown

⚠️ No Changeset found

Latest commit: 6b8e616

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@codecov

codecov Bot commented Oct 29, 2026 •

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 97.67%. Comparing base (f039f93) to head (6b8e616).

Additional details and impacted files
@@           Coverage Diff           @@
##             main     #765   +/-   ##
=======================================
  Coverage   97.67%   97.67%           
=======================================
  Files           5        5           
  Lines        1718     1718           
  Branches      664      664           
=======================================
  Hits         1678     1678           
  Misses         39       39           
  Partials        1        1           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@alexander-akait
alexander-akait merged commit 8021c98 into main Oct 30, 2026
31 checks passed
@alexander-akait
alexander-akait deleted the chore/bump-fast-uri branch October 30, 2026 08:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant