Skip to content

chore(deps): [release-1.9] bump fast-uri to 3.1.3#5049

Open
alizard0 wants to merge 1 commit into
redhat-developer:release-1.9from
alizard0:CVE-2026-13676
Open

chore(deps): [release-1.9] bump fast-uri to 3.1.3#5049
alizard0 wants to merge 1 commit into
redhat-developer:release-1.9from
alizard0:CVE-2026-13676

Conversation

@alizard0

@alizard0 alizard0 commented Jul 3, 2026

Copy link
Copy Markdown
Member

It bumps fast-uri to 3.1.3 to fix CVE-2026-13676
https://redhat.atlassian.net/browse/RHIDP-15163

Running yarn install in /Users/alizardo/Documents/engineering/github/rhdh ...
CVE-2026-13676 fast-uri
  patch: 4.0.1, 3.1.3
  affected: >= 4.0.0, < 4.0.1, >= 2.3.1, < 3.1.3
root@1.9.7 /Users/alizardo/Documents/engineering/github/rhdh
└─┬ @backstage/cli@0.34.5
  └─┬ @backstage/catalog-model@1.7.6
    └─┬ ajv@8.18.0
      └── fast-uri@3.1.2
Upgrading dependency with yarn-lockfile-surgeon → fast-uri@3.1.3 ...
root@1.9.7 /Users/alizardo/Documents/engineering/github/rhdh
└─┬ @backstage/cli@0.34.5
  └─┬ @backstage/catalog-model@1.7.6
    └─┬ ajv@8.18.0
      └── fast-uri@3.1.3
Running yarn install in /Users/alizardo/Documents/engineering/github/rhdh/dynamic-plugins ...
CVE-2026-13676 fast-uri
  patch: 4.0.1, 3.1.3
  affected: >= 4.0.0, < 4.0.1, >= 2.3.1, < 3.1.3
dynamic-plugins-root@1.9.7 /Users/alizardo/Documents/engineering/github/rhdh/dynamic-plugins
└─┬ @backstage/cli@0.34.5
  └─┬ @backstage/catalog-model@1.7.6
    └─┬ ajv@8.18.0
      └── fast-uri@3.1.2
Upgrading dependency with yarn-lockfile-surgeon → fast-uri@3.1.3 ...
dynamic-plugins-root@1.9.7 /Users/alizardo/Documents/engineering/github/rhdh/dynamic-plugins
└─┬ @backstage/cli@0.34.5
  └─┬ @backstage/catalog-model@1.7.6
    └─┬ ajv@8.18.0
      └── fast-uri@3.1.3

@openshift-ci openshift-ci Bot requested review from JessicaJHee and debsmita1 July 3, 2026 16:35
@sonarqubecloud

sonarqubecloud Bot commented Jul 3, 2026

Copy link
Copy Markdown

@github-actions

github-actions Bot commented Jul 3, 2026

Copy link
Copy Markdown
Contributor

Image was built and published successfully. It is available at:

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant