build(deps): bump fast-uri from 3.1.0 to 3.1.5 in /studio-brain-mcp
Type: Pull Request
State: Open
Association: Unknown
Comments: 1
(2 days ago)
(2 days ago)
dependencies javascript
Bumps fast-uri from 3.1.0 to 3.1.5.
Release notes
Sourced from fast-uri's releases.
v3.1.5
⚠️ Security Warning
Fix for https://github.com/fastify/fast-uri/security/advisories/GHSA-7p8r-x3mc-p8w7
Full Changelog: https://github.com/fastify/fast-uri/compare/v3.1.4...v3.1.5
v3.1.4
⚠️ Security Release
Fix for https://github.com/fastify/fast-uri/security/advisories/GHSA-v2hh-gcrm-f6hx
Full Changelog: https://github.com/fastify/fast-uri/compare/v3.1.3...v3.1.4
v3.1.3
⚠️ Security Release
Full Changelog: https://github.com/fastify/fast-uri/compare/v3.1.2...v3.1.3
v3.1.2
⚠️ Security Release
What's Changed
- Handle malformed fragment decoding as a parse error by
@mcollinain fastify/fast-uri#171Full Changelog: https://github.com/fastify/fast-uri/compare/v3.1.1...v3.1.2
v3.1.1
⚠️ Security Release
What's Changed
- build(deps-dev): bump tsd from 0.32.0 to 0.33.0 by
@dependabot[bot] in fastify/fast-uri#148- build(deps): bump actions/checkout from 4 to 5 by
@dependabot[bot] in fastify/fast-uri#149- chore(.npmrc): ignore scripts by
@Fdawgsin fastify/fast-uri#150- build(deps-dev): remove
@fastify/pre-commitby@Fdawgsin fastify/fast-uri#151- build(deps): bump actions/setup-node from 4 to 5 by
@dependabot[bot] in fastify/fast-uri#152- ci(ci): add concurrency config by
@Fdawgsin fastify/fast-uri#153- build(deps): bump actions/setup-node from 5 to 6 by
@dependabot[bot] in fastify/fast-uri#154- build(deps): bump actions/checkout from 5 to 6 by
@dependabot[bot] in fastify/fast-uri#156- chore(license): standardise license notice by
@Fdawgsin fastify/fast-uri#159- style: remove trailing whitespace by
@Fdawgsin fastify/fast-uri#161- ci: remove unused github files by
@Tony133in fastify/fast-uri#162- chore: update readme by
@Tony133in fastify/fast-uri#164
... (truncated)
Commits
5e179cbBumped v3.1.52cad02dMerge commit from fork6aeece6Bumped v3.1.42d50fbafix: reject literal backslash in URI authority0549fe3Bumped v3.1.32a6d357Merge commit from fork919dd8eBumped v3.1.2c65ba57fixup: linting6c86c17Merge commit from forka95158aHandle malformed fragment decoding without throwing (#171)- Additional commits viewable in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.
Package Dependencies
fast-uri
npm
3.1.0 → 3.1.5
Patch
/studio-brain-mcp
Security Advisories
fast-uri vulnerable to path traversal via percent-encoded dot segments
fast-uri vulnerable to host confusion via percent-encoded authority delimiters
fast-uri vulnerable to host confusion via failed IDN canonicalization
fast-uri vulnerable to host confusion via literal backslash authority delimiter
fast-uri vulnerable to host confusion via backslash authority introducer
Technical Details
| ID: | 16145770 |
| UUID: | 5069395405 |
| Node ID: | PR_kwDOQxbn1M76_W3G |
| Host: | GitHub |
| Repository: | monsoonfirepottery-byte/monsoonfire-portal |