Skip to content

build(deps): bump the node-security group across 1 directory with 2 updates - #559

Merged
b1ackviking merged 1 commit into
mainfrom
dependabot/npm_and_yarn/node-security-1e69b08bc9
Jul 22, 2026
Merged

build(deps): bump the node-security group across 1 directory with 2 updates#559
b1ackviking merged 1 commit into
mainfrom
dependabot/npm_and_yarn/node-security-1e69b08bc9

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 22, 2026

Copy link
Copy Markdown
Contributor

Bumps the node-security group with 2 updates in the / directory: fast-uri and tar.

Updates fast-uri from 3.1.3 to 3.1.4

Release notes

Sourced from fast-uri's releases.

v3.1.4

⚠️ Security Release

Fix for GHSA-v2hh-gcrm-f6hx

Full Changelog: fastify/fast-uri@v3.1.3...v3.1.4

Commits

Updates tar from 7.5.16 to 7.5.19

Commits

@dependabot
dependabot Bot requested a review from b1ackviking as a code owner July 22, 2026 10:28
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jul 22, 2026
@b1ackviking
b1ackviking enabled auto-merge (rebase) July 22, 2026 10:33
…pdates

Bumps the node-security group with 2 updates in the / directory: [fast-uri](https://github.com/fastify/fast-uri) and [tar](https://github.com/isaacs/node-tar).


Updates `fast-uri` from 3.1.3 to 3.1.4
- [Release notes](https://github.com/fastify/fast-uri/releases)
- [Commits](fastify/fast-uri@v3.1.3...v3.1.4)

Updates `tar` from 7.5.16 to 7.5.19
- [Release notes](https://github.com/isaacs/node-tar/releases)
- [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md)
- [Commits](isaacs/node-tar@v7.5.16...v7.5.19)

---
updated-dependencies:
- dependency-name: fast-uri
  dependency-version: 3.1.4
  dependency-type: indirect
  dependency-group: node-security
- dependency-name: tar
  dependency-version: 7.5.19
  dependency-type: indirect
  dependency-group: node-security
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/node-security-1e69b08bc9 branch from 0d2abc8 to d1b4b36 Compare July 22, 2026 10:33
@b1ackviking
b1ackviking merged commit cd8c6d5 into main Jul 22, 2026
16 checks passed
@b1ackviking
b1ackviking deleted the dependabot/npm_and_yarn/node-security-1e69b08bc9 branch July 22, 2026 10:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant