build(deps-dev): bump fast-uri from 3.1.0 to 3.1.2 in /src/wasm_package
What the developer wrote
Authored by dependabot[bot]
build(deps-dev): bump fast-uri from 3.1.0 to 3.1.2 in /src/wasm_package
Bumps [fast-uri](https://github.com/fastify/fast-uri) from 3.1.0 to 3.1.2.
- [Release notes](https://github.com/fastify/fast-uri/releases)
- [Commits](https://github.com/fastify/fast-uri/compare/v3.1.0...v3.1.2)
---
updated-dependencies:
- dependency-name: fast-uri
dependency-version: 3.1.2
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
What changed, and why it matters
This is an automated Dependabot update that bumps the JavaScript development dependency fast-uri from version 3.1.0 to 3.1.2 inside the WebAssembly (WASM) packaging directory. The change only updates a package-lock.json file. There is no direct evidence in the commit that this fixes a security issue, but version bumps of URI-parsing libraries can sometimes address security bugs. Because it is a devDependency used during build/packaging, any risk is likely limited to the build environment rather than end users of the compiled library.
Treat as routine maintenance. Review the fast-uri 3.1.2 release notes for any security fixes, but no immediate action is required. If a known CVE is later disclosed for fast-uri <=3.1.0, ensure this bump is included in release builds.
Security signals we found
Dependency version bump of a URI parsing library (fast-uri)
Indirect devDependency only, used in WASM package build tooling
No CVE, advisory, or security mention in commit message or diff
No code changes; only package-lock.json metadata updated
Evidence from the diff
The commit modifies src/wasm_package/package-lock.json to update the resolved version and integrity hash of fast-uri from 3.1.0 to 3.1.2. fast-uri is an indirect devDependency used by the WASM package build toolchain (likely via json-schema / ajv). The diff contains no code changes, no CVE reference, and no vendor statement about security relevance. Without external references, we cannot confirm whether 3.1.2 fixes a known vulnerability or is merely a routine bug-fix release.
Changed components
src/wasm_package/package-lock.jsonfast-uri npm package (devDependency)Inspect captured patch +6 / −6
diff --git a/src/wasm_package/package-lock.json b/src/wasm_package/package-lock.json
index 5a6f83e..e276d8f 100644
--- a/src/wasm_package/package-lock.json
+++ b/src/wasm_package/package-lock.json
@@ -732,9 +732,9 @@
"dev": true
},
"node_modules/fast-uri": {
- "version": "3.1.0",
- "resolved": "https://registry.npmjs.org/fast-uri/-/fast-uri-3.1.0.tgz",
- "integrity": "sha512-iPeeDKJSWf4IEOasVVrknXpaBV0IApz/gp7S2bb7Z4Lljbl2MGJRqInZiUrQwV16cpzw/D3S5j5Julj/gT52AA==",
+ "version": "3.1.2",
+ "resolved": "https://registry.npmjs.org/fast-uri/-/fast-uri-3.1.2.tgz",
+ "integrity": "sha512-rVjf7ArG3LTk+FS6Yw81V1DLuZl1bRbNrev6Tmd/9RaroeeRRJhAt7jg/6YFxbvAQXUCavSoZhPPj6oOx+5KjQ==",
"dev": true,
"funding": [
{
@@ -2495,9 +2495,9 @@
"dev": true
},
"fast-uri": {
- "version": "3.1.0",
- "resolved": "https://registry.npmjs.org/fast-uri/-/fast-uri-3.1.0.tgz",
- "integrity": "sha512-iPeeDKJSWf4IEOasVVrknXpaBV0IApz/gp7S2bb7Z4Lljbl2MGJRqInZiUrQwV16cpzw/D3S5j5Julj/gT52AA==",
+ "version": "3.1.2",
+ "resolved": "https://registry.npmjs.org/fast-uri/-/fast-uri-3.1.2.tgz",
+ "integrity": "sha512-rVjf7ArG3LTk+FS6Yw81V1DLuZl1bRbNrev6Tmd/9RaroeeRRJhAt7jg/6YFxbvAQXUCavSoZhPPj6oOx+5KjQ==",
"dev": true
},
"fastest-levenshtein": {
Why this scored 13/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.