Skip to content

(fix): update URI and query parser security patches - #30

Merged
kyeunga25 merged 1 commit into
mainfrom
codex/fix-fast-uri
Sep 6, 2026
Merged

kyeunga25 merged 1 commit into
mainfrom
codex/fix-fast-uri

Conversation

@kyeunga25

Copy link
Copy Markdown
Owner

fast-uri 由 3.1.5 升至 3.1.7,並同步既有 override,修補 URI host/scheme 正規化及 authority injection 問題。同時將 qs 由 6.15.3 升至 6.16.0,修補 bracket-key comma parsing 的 array-limit bypass,使既有 production dependency audit 通過。

Update the existing URI and query parser dependencies to their compatible security patch releases.

驗證 / Validation:

  • npm run check
  • npm test: 685 tests passed
  • npm run cf:dry-run
  • npm run release:check
  • Full and production dependency audits: zero vulnerabilities
  • URI, Ajv schema and query parser regression checks: 62 assertions passed

Sources: fast-uri 3.1.7, qs advisory.

@kyeunga25
kyeunga25 merged commit f24f14c into main Sep 6, 2026
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant