From 91d83119073b08f75cfaf7fa6c1fbdff543da138 Mon Sep 17 00:00:00 2001 From: "claude[bot]" <41898282+claude[bot]@users.noreply.github.com> Date: Wed, 30 Sep 2026 14:27:34 +0000 Subject: [PATCH 1/2] chore: upgrade fast-uri to ^3.1.8 to address CVE-2026-86472 Co-Authored-By: Claude Opus 5.5 --- yarn.lock | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/yarn.lock b/yarn.lock index 16aa3ddd3..2572f03db 100644 --- a/yarn.lock +++ b/yarn.lock @@ -14661,9 +14661,9 @@ __metadata: linkType: hard "fast-uri@npm:^3.1.2": - version: 3.1.7 - resolution: "fast-uri@npm:3.1.7" - checksum: 10c0/ca2baa4bde48fc7322bdc692c6636975943ebe4f6dd97e07d70b14e0ab85af2ff30de90f550f5ec2956684fe208e150d85d6cb5f3c74438c8ac1bf86bd435c13 + version: 3.1.8 + resolution: "fast-uri@npm:3.1.8" + checksum: 10c0/c9c47860a7f9110176d94bb30a02942182f0bfc8d6780e9702f320336dc2dadb83b1d9879cceaf8d4b439642d1ec6d78c317cb808ab155455551bd5d9d7c22d8 languageName: node linkType: hard From d9cba3d942832e3b7f3cde8a3ee93de3c60f5ebc Mon Sep 17 00:00:00 2001 From: "claude[bot]" <41898282+claude[bot]@users.noreply.github.com> Date: Wed, 30 Sep 2026 14:27:48 +0000 Subject: [PATCH 2/2] chore: add CHANGELOG entry for #1701 Co-Authored-By: Claude Opus 5.5 --- CHANGELOG.md | 1 + 1 file changed, 1 insertion(+) diff --git a/CHANGELOG.md b/CHANGELOG.md index 21fd05b6a..1a65633b9 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -9,6 +9,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0 ### Fixed - Silenced a false-positive `MaxListenersExceededWarning` logged on every request proxied through an external rewrite. [#1697](https://github.com/sourcebot-dev/sourcebot/pull/1697) +- Upgraded `fast-uri` to `^3.1.8`. [#1701](https://github.com/sourcebot-dev/sourcebot/pull/1701) ## [5.1.15] - 2026-09-29