From e72c888dde0fed55679652aa3d8800f2ea665c4b Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Fri, 4 Sep 2026 07:39:21 +0000 Subject: [PATCH 1/2] Initial plan From 26f1e41497af42359581c2befe78f4d45ee9bdb6 Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Fri, 4 Sep 2026 07:43:46 +0000 Subject: [PATCH 2/2] Bump fast-uri override to non-vulnerable 3.1.6 Co-authored-by: korbinib <58505673+korbinib@users.noreply.github.com> --- package.json | 2 +- pnpm-lock.yaml | 10 +++++----- 2 files changed, 6 insertions(+), 6 deletions(-) diff --git a/package.json b/package.json index 8a0e7ab..79a6920 100644 --- a/package.json +++ b/package.json @@ -61,7 +61,7 @@ "defu@<6.1.5": "6.1.5", "devalue@<5.8.1": "5.8.1", "esbuild@>=0.27.3 <0.28.1": "0.28.1", - "fast-uri@<3.1.5": "3.1.5", + "fast-uri@<3.1.6": "3.1.6", "fast-xml-builder@<1.1.7": "1.1.7", "fast-xml-parser@<5.7.0": "5.7.0", "glob@>=10.2.0 <10.5.0": "10.5.0", diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index 27b47f3..933c0c0 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -16,7 +16,7 @@ overrides: sharp@<0.35.0: 0.35.0 js-yaml@>=4.0.0 <4.3.1: 4.3.1 postcss@<8.5.23: 8.5.23 - fast-uri@<3.1.5: 3.1.5 + fast-uri@<3.1.6: 3.1.6 nanoid@<3.3.18: 3.3.18 minimatch@>=3.0.0 <3.1.4: 3.1.4 minimatch@>=4.0.0 <9.0.9: 9.0.9 @@ -1778,8 +1778,8 @@ packages: resolution: {integrity: sha512-oX2ruAFQwf/Orj8m737Y5adxDQO0LAB7/S5MnxCdTNDd4p6BsyIVsv9JQsATbTSq8KHRpLwIHbVlUNatxd+1Ow==} engines: {node: '>=8.6.0'} - fast-uri@3.1.5: - resolution: {integrity: sha512-gHwA1O9LDIcKunMKhObS/HimwtehO1nPUECKAu5TpKgaO19fcWEl4bliWe1jWxVFvIXztJjjQ4L8XQ1EU9f7Jw==} + fast-uri@3.1.6: + resolution: {integrity: sha512-7Ical1vFEMr0onbVzEDIreM22I4khW+fzyQPwvAFWBp1iwdshSZRsL4jjRvPG9JP1uiqMHRto+YU6R2/CzDz5Q==} fast-xml-builder@1.1.7: resolution: {integrity: sha512-Yh7/7rQuMXICNr0oMYDR2yHP6oUvmQsTToFeOWj/kIDhAwQ+c4Ol/lbcwOmEM5OHYQmh6S6EQSQ1sljCKP36bQ==} @@ -4564,7 +4564,7 @@ snapshots: ajv@8.18.0: dependencies: fast-deep-equal: 3.1.3 - fast-uri: 3.1.5 + fast-uri: 3.1.6 json-schema-traverse: 1.0.0 require-from-string: 2.0.2 @@ -5083,7 +5083,7 @@ snapshots: merge2: 1.4.1 micromatch: 4.0.8 - fast-uri@3.1.5: {} + fast-uri@3.1.6: {} fast-xml-builder@1.1.7: dependencies: