build(deps-dev): bump fast-uri from 3.1.2 to 3.1.4 - #902
dependabot[bot] wants to merge 1 commit into
Conversation
Bumps [fast-uri](https://github.com/fastify/fast-uri) from 3.1.2 to 3.1.4. - [Release notes](https://github.com/fastify/fast-uri/releases) - [Commits](fastify/fast-uri@v3.1.2...v3.1.4) --- updated-dependencies: - dependency-name: fast-uri dependency-version: 3.1.4 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
davidicus
left a comment
davidicus
left a comment
There was a problem hiding this comment.
@dependabot squash and merge
|
Tip All tests passed and all changes approved!🟢 UI Tests: 476 tests unchanged |
|
🚀 Storybook preview is ready. • Preview: https://68b9f094608b90f3cfec5a06-rzlkgjceza.chromatic.com/ |
✅ Deploy Preview for phillips-seldon ready!
To edit notification comments on pull requests, go to your Netlify project configuration. |
scottdickerson
added
dependency-upgrade-risk:low
and removed
dependencies
Claude
Dependency Upgrade Risk AssessmentRisk rating: What this library does
Usage in seldonNo direct usage found in seldon source code. Why this is LOW riskThe upgrade (3.1.2 → 3.1.4) spans only 2 patch versions and contains solely security hardening (backslash rejection in URI authority parsing to prevent host confusion attacks). No behavioral API changes affecting seldon are expected. Since the library is not directly imported, the risk of regression is minimal. Regression tests to run before merging
Generated by Claude Code |
|
Looks like fast-uri is up-to-date now, so this is no longer needed. |
|
Superseded by #908 (merged) — the target version(s) are already at or above the proposed bump on |
Bumps fast-uri from 3.1.2 to 3.1.4.
Release notes
Sourced from fast-uri's releases.
Commits
6aeece6Bumped v3.1.42d50fbafix: reject literal backslash in URI authority0549fe3Bumped v3.1.32a6d357Merge commit from forkDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)You can disable automated security fix PRs for this repo from the Security Alerts page.