Skip to content

Bump fast-uri from 3.1.4 to 3.1.5 - #1439

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/fast-uri-3.1.5
Open

Bump fast-uri from 3.1.4 to 3.1.5#1439
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/fast-uri-3.1.5

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 5, 2026

Copy link
Copy Markdown
Contributor

Bumps fast-uri from 3.1.4 to 3.1.5.

Release notes

Sourced from fast-uri's releases.

v3.1.5

⚠️ Security Warning

Fix for GHSA-7p8r-x3mc-p8w7

Full Changelog: fastify/fast-uri@v3.1.4...v3.1.5

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [fast-uri](https://github.com/fastify/fast-uri) from 3.1.4 to 3.1.5.
- [Release notes](https://github.com/fastify/fast-uri/releases)
- [Commits](fastify/fast-uri@v3.1.4...v3.1.5)

---
updated-dependencies:
- dependency-name: fast-uri
  dependency-version: 3.1.5
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 5, 2026
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 5, 2026
@github-actions github-actions Bot added P2 security This issue has something to do with the security of the package labels Aug 5, 2026
@socket-security

Copy link
Copy Markdown

Caution

Review the following alerts detected in dependencies.

According to your organization's Security Policy, you must resolve all "Block" alerts before proceeding. Learn more about Socket for GitHub.

Action Severity Alert  (click "▶" to expand/collapse)
Block Medium
Recently published: npm terser published 5 hours ago

Location: Package overview

From: pnpm-lock.yamlnpm/vite@6.4.3npm/style-loader@3.3.4npm/terser@5.49.2

ℹ Read more on: This package | This alert | What are recently published artifacts?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should either be allowlisted to allow recently-published versions, or an older version should be used instead.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/terser@5.49.2. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

@github-actions

github-actions Bot commented Aug 5, 2026

Copy link
Copy Markdown
Contributor

👋 Thanks for Submitting! This PR is available for preview at the link below.

✅ PR tip preview: https://1439.pr-nala.s.brave.dev/
✅ Commit preview: https://1439.pr-nala.s.brave.dev/commit-885084e6d80c3c9060d23888057e45bfecaa9846/

- ./tokens/css/variables-android.old.css: 1771 bytes
+ ./tokens/css/variables-android.css: 1771 bytes
---
- ./tokens/css/variables-browser.old.css: 1359 bytes
+ ./tokens/css/variables-browser.css: 1359 bytes
---
- ./tokens/css/variables-ios.old.css: 16862 bytes
+ ./tokens/css/variables-ios.css: 16862 bytes
---
- ./tokens/css/variables-marketing.old.css: 20022 bytes
+ ./tokens/css/variables-marketing.css: 20022 bytes
---
- ./tokens/css/variables-news.old.css: 447 bytes
+ ./tokens/css/variables-news.css: 447 bytes
---
- ./tokens/css/variables-newtab.old.css: 2040 bytes
+ ./tokens/css/variables-newtab.css: 2040 bytes
---
- ./tokens/css/variables-search.old.css: 26814 bytes
+ ./tokens/css/variables-search.css: 26814 bytes
---
- ./tokens/css/variables-web3.old.css: 814 bytes
+ ./tokens/css/variables-web3.css: 814 bytes
---
- ./tokens/css/variables.old.css: 124662 bytes
+ ./tokens/css/variables.css: 124662 bytes
Variables Diff: variables-android.diff
Variables Diff: variables-browser.diff
Variables Diff: variables-ios.diff
Variables Diff: variables-marketing.diff
Variables Diff: variables-news.diff
Variables Diff: variables-newtab.diff
Variables Diff: variables-search.diff
Variables Diff: variables-web3.diff
Variables Diff: variables.diff

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code P2 security This issue has something to do with the security of the package

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants