Skip to content

Bump fast-uri from 3.1.4 to 3.1.6 - #2270

Open
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/npm_and_yarn/fast-uri-3.1.7
Open

dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/npm_and_yarn/fast-uri-3.1.7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 2, 2026

Copy link
Copy Markdown
Contributor

Bumps fast-uri from 3.1.4 to 3.1.6.

Release notes

Sourced from fast-uri's releases.

v3.1.8

⚠️ Security Warning

This security release fixes the following medium-severity security advisory:

Users of the v3.x release line should upgrade to v3.1.8.

Full Changelog: fastify/fast-uri@v3.1.7...v3.1.8

v3.1.7

⚠️ Security Warning

This is a security release that fixes the following high-severity security advisories:

Users of the v3.x release line should upgrade to v3.1.7.

Full Changelog: fastify/fast-uri@v3.1.6...v3.1.7

v3.1.6

⚠️ Security Warning

This release addresses the following high-severity security advisories:

Users of the v3.x release line should upgrade to v3.1.6.

Full Changelog: fastify/fast-uri@v3.1.5...v3.1.6

v3.1.5

⚠️ Security Warning

Fix for GHSA-7p8r-x3mc-p8w7

Full Changelog: fastify/fast-uri@v3.1.4...v3.1.5

Commits
  • ead3ab7 Bumped v3.1.8
  • c88b59e fix: normalize decoded reg-name case
  • 412e40a Bumped v3.1.7
  • 9f4c943 fix: backport port and IP-literal validation to v3.x (#216)
  • 1eb3ce4 fix: treat unterminated bracket hosts as reg-names again (#214)
  • 6f970b2 Bumped v3.1.6
  • d941579 fix: never run IDN canonicalization on bracketed IP literals
  • c0f0279 test: adapt decoded-scheme handler assertion to 3.x (no mailto scheme)
  • 37f3417 Merge commit from fork
  • 607bfbe Merge commit from fork
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Sep 2, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner September 2, 2026 20:56
@dependabot
dependabot Bot requested review from apilaskowski and removed request for a team September 2, 2026 20:56
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Sep 2, 2026
@kolina

kolina commented Sep 2, 2026

Copy link
Copy Markdown
Contributor

/gcbrun

@apilaskowski

Copy link
Copy Markdown
Collaborator

fast-uri-3.1.7 is not blessed internally yet

@apilaskowski

Copy link
Copy Markdown
Collaborator

Soaktime verification: Dependency expected to be available on 9/23/2026

@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/fast-uri-3.1.7 branch 2 times, most recently from 898f5af to c3487d1 Compare September 11, 2026 06:54
@apilaskowski

Copy link
Copy Markdown
Collaborator

/gcbrun

@mbiernacik

Copy link
Copy Markdown
Contributor

@apilaskowski fast-uri@3.1.7 is not yet blessed, but 3.1.6 is available and already fixes all 5 open alerts (#317, #332, #333, #337, #338) – should we merge 3.1.6 now or wait for 3.1.7?

@apilaskowski

Copy link
Copy Markdown
Collaborator

Lets prepare 3.1.6 (should be relatively simple) and let this wait for 3.1.7.

Bumps [fast-uri](https://github.com/fastify/fast-uri) from 3.1.4 to 3.1.8.
- [Release notes](https://github.com/fastify/fast-uri/releases)
- [Commits](fastify/fast-uri@v3.1.4...v3.1.8)

---
updated-dependencies:
- dependency-name: fast-uri
  dependency-version: 3.1.7
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title Bump fast-uri from 3.1.4 to 3.1.7 Bump fast-uri from 3.1.4 to 3.1.8 Sep 21, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/fast-uri-3.1.7 branch from c3487d1 to 5ba083e Compare September 21, 2026 15:51
@mbiernacik

Copy link
Copy Markdown
Contributor

/gcbrun

@mbiernacik mbiernacik changed the title Bump fast-uri from 3.1.4 to 3.1.8 Bump fast-uri from 3.1.4 to 3.1.6 Sep 22, 2026

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants