chore(ui): update dependency fast-uri to v3.1.8 [security]

2026-10-31 15:54:24 +00:00 · 2026-10-03 23:07:27 +00:00
1 changed files with 4 additions and 4 deletions
@@ -1,6 +1,3 @@
-# pnpm 11+ workspace config. .npmrc is auth/registry only; everything else lives here.
-# Reference: https://pnpm.io/supply-chain-security
-
 packages: []

 # Refuse to install on Node/pnpm outside the `engines` block in package.json.
@@ -97,7 +94,7 @@ overrides:
  # fast-uri (via ajv): host confusion through backslash authority delimiters,
  # failed IDN canonicalization and percent-encoded scheme normalization, plus SSRF
  # via malformed IPv6 normalization and repeated hostname percent-decoding.
-  "fast-uri": "3.1.6"
+  "fast-uri": "3.1.8"
  # ip-address (via express-rate-limit): SSRF / trust-boundary bypasses from
  # leading-zero octets, CIDR suffixes and IPv4-mapped / NAT64 misclassification.
  "ip-address": "10.3.1"
@@ -157,3 +154,6 @@ trustPolicyExclude:

 # Block transitive dependencies from using exotic specifiers (git URLs, tarballs).
 blockExoticSubdeps: true
+minimumReleaseAgeExclude:
+  # Renovate security update: fast-uri@3.1.8
+  - fast-uri@3.1.8