Skip to content

Bump fast-uri from 3.1.0 to 3.1.2#628

Merged
nico-ptrs merged 1 commit into
developfrom
dependabot/npm_and_yarn/fast-uri-3.1.2
May 11, 2026
Merged

Bump fast-uri from 3.1.0 to 3.1.2#628
nico-ptrs merged 1 commit into
developfrom
dependabot/npm_and_yarn/fast-uri-3.1.2

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 8, 2026

Bumps fast-uri from 3.1.0 to 3.1.2.

Release notes

Sourced from fast-uri's releases.

v3.1.2

⚠️ Security Release

What's Changed

Full Changelog: fastify/fast-uri@v3.1.1...v3.1.2

v3.1.1

⚠️ Security Release

What's Changed

New Contributors

Full Changelog: fastify/fast-uri@v3.1.0...v3.1.1

Commits
  • 919dd8e Bumped v3.1.2
  • c65ba57 fixup: linting
  • 6c86c17 Merge commit from fork
  • a95158a Handle malformed fragment decoding without throwing (#171)
  • cea547c Bumped v3.1.1
  • 876ce79 Merge commit from fork
  • dcdf690 ci: add lock-threads workflow (#169)
  • c860e65 build(deps-dev): bump neostandard from 0.12.2 to 0.13.0 (#167)
  • 9b4c6dc build(deps): bump fastify/workflows/.github/workflows/plugins-ci.yml (#166)
  • 85d09a9 build(deps): bump fastify/workflows/.github/workflows/plugins-ci-package-mana...
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [fast-uri](https://github.com/fastify/fast-uri) from 3.1.0 to 3.1.2.
- [Release notes](https://github.com/fastify/fast-uri/releases)
- [Commits](fastify/fast-uri@v3.1.0...v3.1.2)

---
updated-dependencies:
- dependency-name: fast-uri
  dependency-version: 3.1.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels May 8, 2026
@nico-ptrs nico-ptrs merged commit faa9c7e into develop May 11, 2026
2 checks passed
@nico-ptrs nico-ptrs deleted the dependabot/npm_and_yarn/fast-uri-3.1.2 branch May 11, 2026 07:24
nico-ptrs added a commit that referenced this pull request May 20, 2026
* bump develop version v2.11.0-SNAPSHOT.0

* Update develop to release version to avoid merge conflicts

* Update develop version back to pre-merge state

* task() - Bump qs from 6.14.0 to 6.14.1 (#621)

Bumps [qs](https://github.com/ljharb/qs) from 6.14.0 to 6.14.1.
- [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md)
- [Commits](ljharb/qs@v6.14.0...v6.14.1)

---
updated-dependencies:
- dependency-name: qs
  dependency-version: 6.14.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Nico Peeters <11631532+nico-ptrs@users.noreply.github.com>

* task() - Fix build

* task() - Fix build

* task() - Fix build

* 2.11.0-develop.0

* Bump minimatch from 3.1.2 to 3.1.5 (#624)

Bumps [minimatch](https://github.com/isaacs/minimatch) from 3.1.2 to 3.1.5.
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md)
- [Commits](isaacs/minimatch@v3.1.2...v3.1.5)

---
updated-dependencies:
- dependency-name: minimatch
  dependency-version: 3.1.5
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Nico Peeters <11631532+nico-ptrs@users.noreply.github.com>

* Bump handlebars from 4.7.8 to 4.7.9 (#626)

Bumps [handlebars](https://github.com/handlebars-lang/handlebars.js) from 4.7.8 to 4.7.9.
- [Release notes](https://github.com/handlebars-lang/handlebars.js/releases)
- [Changelog](https://github.com/handlebars-lang/handlebars.js/blob/v4.7.9/release-notes.md)
- [Commits](handlebars-lang/handlebars.js@v4.7.8...v4.7.9)

---
updated-dependencies:
- dependency-name: handlebars
  dependency-version: 4.7.9
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Nico Peeters <11631532+nico-ptrs@users.noreply.github.com>

* Bump lodash from 4.17.21 to 4.18.1 (#627)

Bumps [lodash](https://github.com/lodash/lodash) from 4.17.21 to 4.18.1.
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](lodash/lodash@4.17.21...4.18.1)

---
updated-dependencies:
- dependency-name: lodash
  dependency-version: 4.18.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Nico Peeters <11631532+nico-ptrs@users.noreply.github.com>

* Bump qs from 6.14.1 to 6.14.2 (#623)

Bumps [qs](https://github.com/ljharb/qs) from 6.14.1 to 6.14.2.
- [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md)
- [Commits](ljharb/qs@v6.14.1...v6.14.2)

---
updated-dependencies:
- dependency-name: qs
  dependency-version: 6.14.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Nico Peeters <11631532+nico-ptrs@users.noreply.github.com>

* task() - Fix build

* Bump serialize-javascript and webpack (#625)

* Bump serialize-javascript and webpack

Removes [serialize-javascript](https://github.com/yahoo/serialize-javascript). It's no longer used after updating ancestor dependency [webpack](https://github.com/webpack/webpack). These dependencies need to be updated together.


Removes `serialize-javascript`

Updates `webpack` from 4.47.0 to 5.105.4
- [Release notes](https://github.com/webpack/webpack/releases)
- [Changelog](https://github.com/webpack/webpack/blob/main/CHANGELOG.md)
- [Commits](webpack/webpack@v4.47.0...v5.105.4)

---
updated-dependencies:
- dependency-name: serialize-javascript
  dependency-version: 
  dependency-type: indirect
- dependency-name: webpack
  dependency-version: 5.105.4
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>

* Fix npm install and build failures for webpack 5 upgrade

- Update webpack-cli from ^3.3.12 to ^5.1.4 (webpack-cli 3.x only supports webpack 4.x)
- Update brace-expansion override from ^2.0.1 to ^2.0.3 (fixes moderate CVE)
- Add picomatch override ^2.3.2 (fixes high CVE in transitive deps)
- Add @types/eslint override ^8.56.12 (webpack 5 pulls in @types/eslint@9.x which requires TypeScript 4+, pinning to 8.x keeps compatibility with TypeScript 3.9)
- Update webpack.config.js: switch from unmaintained awesome-typescript-loader to ts-loader, replace deprecated webpack 4 `query` property with `options`

Agent-Logs-Url: https://github.com/Venly/connect-sdk/sessions/5fc89baa-ceef-4e1d-a49a-3c0b14530e84

Co-authored-by: nico-ptrs <11631532+nico-ptrs@users.noreply.github.com>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Nico Peeters <11631532+nico-ptrs@users.noreply.github.com>
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>

* 2.11.0-develop.1

* task() - Fix build

* 2.11.0-develop.2

* task() - Fix build

* 2.11.0-develop.3

* task() - Fix build

* Bump fast-uri from 3.1.0 to 3.1.2 (#628)

Bumps [fast-uri](https://github.com/fastify/fast-uri) from 3.1.0 to 3.1.2.
- [Release notes](https://github.com/fastify/fast-uri/releases)
- [Commits](fastify/fast-uri@v3.1.0...v3.1.2)

---
updated-dependencies:
- dependency-name: fast-uri
  dependency-version: 3.1.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* 2.11.0-develop.4

* 2.11.0

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: BMVenly <BMVenly@venly.io>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: nico-ptrs <nico-ptrs@venly.io>
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant