Skip to content

chore: resolve open dependabot security alerts - #38

Merged
jonathannorris merged 1 commit into
mainfrom
chore/dependabot-alerts-4
Nov 4, 2026
Merged

jonathannorris merged 1 commit into
mainfrom
chore/dependabot-alerts-4

Conversation

@jonathannorris

Copy link
Copy Markdown
Member

Summary

@jonathannorris
jonathannorris requested review from a team and a balanced review from Copilot November 2, 2026 14:55

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟢 Approval recommended

No active review issues are recorded for the dependency override and lockfile updates targeting the reported Dependabot alerts.

No open issues 🎉

What changed in this PR

Updates dependency overrides and lockfile entries to address the reported Dependabot alerts for fast-uri and undici, without changing application code.

Changes:

  • Bumps fast-uri from 3.1.7 to 3.1.9 and undici from 6.29.0 to 6.29.1.
  • Updates corresponding lockfile versions, integrity hashes, and dependency references.
  • Leaves npm’s bundled undici at 6.29.0, as documented, and keeps the dependency updates in #17 separate.
File Description
package.json Updates the fast-uri and undici overrides.
package-lock.json Records updated package resolutions and dependency references.

Review effort: Balanced

@jonathannorris
jonathannorris enabled auto-merge (squash) November 2, 2026 14:57
@jonathannorris
jonathannorris merged commit 4a02b8f into main Nov 4, 2026
5 checks passed
@jonathannorris
jonathannorris deleted the chore/dependabot-alerts-4 branch November 4, 2026 16:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants