build(deps-dev): bump fast-uri from 3.1.2 to 3.1.4 in /src/wasm_package
What the developer wrote
Authored by dependabot[bot]
build(deps-dev): bump fast-uri from 3.1.2 to 3.1.4 in /src/wasm_package
Bumps [fast-uri](https://github.com/fastify/fast-uri) from 3.1.2 to 3.1.4.
- [Release notes](https://github.com/fastify/fast-uri/releases)
- [Commits](https://github.com/fastify/fast-uri/compare/v3.1.2...v3.1.4)
---
updated-dependencies:
- dependency-name: fast-uri
dependency-version: 3.1.4
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
What changed, and why it matters
This is an automated update by Dependabot that bumps the JavaScript helper library fast-uri from version 3.1.2 to 3.1.4 inside the WebAssembly packaging directory. It only changes a package-lock.json file and is marked as a development dependency, meaning it is not part of the core cryptographic library shipped to users. There is no direct evidence in the commit that this fixes a security problem in libwally-core itself, but dependency updates can sometimes address bugs or vulnerabilities in the helper library.
Treat as routine dependency hygiene. Review the fast-uri 3.1.4 release notes for any relevant fixes, but no urgent action is required for libwally-core users. If the project uses fast-uri or ajv in its build/test pipeline, run the existing test suite to confirm the bump does not break tooling.
Security signals we found
Dependency version bump of fast-uri (indirect devDependency)
No changes to libwally-core native/WASM cryptographic code
No vendor security advisory or CVE referenced in commit message
Dependabot-generated routine maintenance commit
Evidence from the diff
The commit updates a single indirect devDependency, fast-uri, in src/wasm_package/package-lock.json from 3.1.2 to 3.1.4. fast-uri is a URI parsing/validation utility used by tooling such as ajv (JSON schema validator) in Node.js build/test workflows. The change does not touch libwally-core’s C code, build system, or public API. No CVE, advisory, or release-note details are included in the commit or supplied references, so the security relevance of the fast-uri bump itself is unverified from the provided materials.
Changed components
src/wasm_package/package-lock.jsonfast-uri npm package (indirect devDependency)Inspect captured patch +6 / −6
diff --git a/src/wasm_package/package-lock.json b/src/wasm_package/package-lock.json
index 21384cb..cf03071 100644
--- a/src/wasm_package/package-lock.json
+++ b/src/wasm_package/package-lock.json
@@ -732,9 +732,9 @@
"dev": true
},
"node_modules/fast-uri": {
- "version": "3.1.2",
- "resolved": "https://registry.npmjs.org/fast-uri/-/fast-uri-3.1.2.tgz",
- "integrity": "sha512-rVjf7ArG3LTk+FS6Yw81V1DLuZl1bRbNrev6Tmd/9RaroeeRRJhAt7jg/6YFxbvAQXUCavSoZhPPj6oOx+5KjQ==",
+ "version": "3.1.4",
+ "resolved": "https://registry.npmjs.org/fast-uri/-/fast-uri-3.1.4.tgz",
+ "integrity": "sha512-8JnbkQ4juDyvYs4mgFGQqg4yCYtFDtUtmp2QIQq11ZZe5CFQ5wcqm1rqDgAh/QdMySuBnPzMUiJUNZG5N/AiQw==",
"dev": true,
"funding": [
{
@@ -2495,9 +2495,9 @@
"dev": true
},
"fast-uri": {
- "version": "3.1.2",
- "resolved": "https://registry.npmjs.org/fast-uri/-/fast-uri-3.1.2.tgz",
- "integrity": "sha512-rVjf7ArG3LTk+FS6Yw81V1DLuZl1bRbNrev6Tmd/9RaroeeRRJhAt7jg/6YFxbvAQXUCavSoZhPPj6oOx+5KjQ==",
+ "version": "3.1.4",
+ "resolved": "https://registry.npmjs.org/fast-uri/-/fast-uri-3.1.4.tgz",
+ "integrity": "sha512-8JnbkQ4juDyvYs4mgFGQqg4yCYtFDtUtmp2QIQq11ZZe5CFQ5wcqm1rqDgAh/QdMySuBnPzMUiJUNZG5N/AiQw==",
"dev": true
},
"fastest-levenshtein": {
Why this scored 13/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.