Skip to content

fix(lambda): bump fast-uri from 3.1.2 to 3.1.5 in /lambdas - #5242

Merged
edersonbrilhante merged 1 commit into
mainfrom
dependabot/npm_and_yarn/lambdas/fast-uri-3.1.4
Aug 17, 2026
Merged

fix(lambda): bump fast-uri from 3.1.2 to 3.1.5 in /lambdas#5242
edersonbrilhante merged 1 commit into
mainfrom
dependabot/npm_and_yarn/lambdas/fast-uri-3.1.4

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 4, 2026

Copy link
Copy Markdown
Contributor

Bumps fast-uri from 3.1.2 to 3.1.5.

Release notes

Sourced from fast-uri's releases.

v3.1.5

⚠️ Security Warning

Fix for GHSA-7p8r-x3mc-p8w7

Full Changelog: fastify/fast-uri@v3.1.4...v3.1.5

v3.1.4

⚠️ Security Release

Fix for GHSA-v2hh-gcrm-f6hx

Full Changelog: fastify/fast-uri@v3.1.3...v3.1.4

v3.1.3

⚠️ Security Release

Full Changelog: fastify/fast-uri@v3.1.2...v3.1.3

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Aug 4, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner August 4, 2026 15:01
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Aug 4, 2026
@github-actions

github-actions Bot commented Aug 4, 2026

Copy link
Copy Markdown
Contributor

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

PackageVersionScoreDetails
npm/fast-uri 3.1.5 🟢 8.3
Details
CheckScoreReason
Dependency-Update-Tool🟢 10update tool detected
Maintained🟢 1030 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10
Security-Policy🟢 10security policy file detected
Packaging⚠️ -1packaging workflow not detected
Code-Review🟢 6Found 17/26 approved changesets -- score normalized to 6
Binary-Artifacts🟢 10no binaries found in the repo
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
Pinned-Dependencies🟢 5dependency not pinned by hash detected -- score normalized to 5
Vulnerabilities🟢 100 existing vulnerabilities detected
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Signed-Releases⚠️ -1no releases found
SAST🟢 8SAST tool is not run on all commits -- score normalized to 8
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
License🟢 9license file detected
Fuzzing⚠️ 0project is not fuzzed
CI-Tests🟢 1022 out of 22 merged PRs checked by a CI test -- score normalized to 10
Contributors🟢 10project has 17 contributing companies or organizations

Scanned Files

  • lambdas/yarn.lock

@edersonbrilhante

Copy link
Copy Markdown
Contributor

@dependabot recreate

Bumps [fast-uri](https://github.com/fastify/fast-uri) from 3.1.2 to 3.1.5.
- [Release notes](https://github.com/fastify/fast-uri/releases)
- [Commits](fastify/fast-uri@v3.1.2...v3.1.5)

---
updated-dependencies:
- dependency-name: fast-uri
  dependency-version: 3.1.4
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title fix(lambda): bump fast-uri from 3.1.2 to 3.1.4 in /lambdas fix(lambda): bump fast-uri from 3.1.2 to 3.1.5 in /lambdas Aug 17, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/lambdas/fast-uri-3.1.4 branch from 36bbb99 to 0e65b9e Compare August 17, 2026 11:10
@edersonbrilhante
edersonbrilhante merged commit 9c3e28c into main Aug 17, 2026
10 checks passed
@edersonbrilhante
edersonbrilhante deleted the dependabot/npm_and_yarn/lambdas/fast-uri-3.1.4 branch August 17, 2026 12:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant