From 23e703f862efa10218ea49d9e6fcdcd4b406da5f Mon Sep 17 00:00:00 2001 From: Agents Date: Thu, 6 Aug 2026 09:59:39 +0100 Subject: [PATCH] fix(deps): update fast-uri audit floor --- CHANGELOG.md | 4 ++++ package-lock.json | 6 +++--- 2 files changed, 7 insertions(+), 3 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 31579bd..30d40de 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -9,6 +9,10 @@ this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.htm ### Fixed +- **Dependency audit is green again.** Updated the transitive `fast-uri` development + dependency from 3.1.4 to 3.1.5, closing GHSA-7p8r-x3mc-p8w7 without changing + the shipped runtime package. + - **`styleproof-map` no longer selects consumer tests that merely mention "styleproof capture".** Playwright compiles a plain `--grep` string as `new RegExp(pattern, 'gi')` — case-insensitive — and matches it against the whole title path, so the bare diff --git a/package-lock.json b/package-lock.json index 6f35241..47f7447 100644 --- a/package-lock.json +++ b/package-lock.json @@ -1350,9 +1350,9 @@ "license": "MIT" }, "node_modules/fast-uri": { - "version": "3.1.4", - "resolved": "https://registry.npmjs.org/fast-uri/-/fast-uri-3.1.4.tgz", - "integrity": "sha512-8JnbkQ4juDyvYs4mgFGQqg4yCYtFDtUtmp2QIQq11ZZe5CFQ5wcqm1rqDgAh/QdMySuBnPzMUiJUNZG5N/AiQw==", + "version": "3.1.5", + "resolved": "https://registry.npmjs.org/fast-uri/-/fast-uri-3.1.5.tgz", + "integrity": "sha512-gHwA1O9LDIcKunMKhObS/HimwtehO1nPUECKAu5TpKgaO19fcWEl4bliWe1jWxVFvIXztJjjQ4L8XQ1EU9f7Jw==", "dev": true, "funding": [ {