Skip to content

chore: pin fast-uri to 3.1.2 - #287

Merged
0xJem merged 1 commit into
developfrom
chore-fast-uri
May 11, 2026
Merged

0xJem merged 1 commit into
developfrom
chore-fast-uri

Conversation

@0xJem

@0xJem 0xJem commented May 11, 2026 •

Copy link
Copy Markdown
Member

What changed

  • Added a pnpm override to force fast-uri to 3.1.2.
  • Regenerated pnpm-lock.yaml so the lockfile resolves the patched version.

Why

  • pnpm audit flagged the transitive fast-uri@3.1.0 dependency.
  • The override sets the minimum acceptable version to 3.1.2, which removes the vulnerable resolution.

Validation

  • pnpm audit now reports No known vulnerabilities found.

Summary by CodeRabbit

  • Chores
    • Updated dependency resolution to enforce a specific version of a package dependency across the project.

Review Change Stack

@coderabbitai

coderabbitai Bot commented May 11, 2026 •

Copy link
Copy Markdown
Contributor

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro

Run ID: 0532df08-1585-4c5b-b0b0-adc0de1cb66a

📥 Commits

Reviewing files that changed from the base of the PR and between e2ab2e6 and 8601d8a.

⛔ Files ignored due to path filters (1)
  • pnpm-lock.yaml is excluded by !**/pnpm-lock.yaml
📒 Files selected for processing (1)
  • package.json

📝 Walkthrough

Walkthrough

A single pnpm dependency override is introduced in package.json to pin the fast-uri package to version 3.1.2, forcing all transitive and direct references to that package to resolve to the specified version.

Changes

Dependency Override Configuration

Layer / File(s) Summary
Dependency Override
package.json
The pnpm.overrides object is extended with an entry for fast-uri pinned to version 3.1.2.

🎯 1 (Trivial) | ⏱️ ~2 minutes

Suggested reviewers

  • pbendus
  • zeroxnoodle

Poem

🐰 A tiny tweak, precise and keen,
Fast-uri now points to version clean—
3.1.2 locked in tight,
Dependencies resolved just right! ✨

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title accurately describes the main change: pinning the fast-uri dependency to version 3.1.2 in package.json via pnpm overrides.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch chore-fast-uri

Comment @coderabbitai help to get the list of available commands and usage tips.

@0xJem 0xJem self-assigned this May 11, 2026
@0xJem 0xJem changed the title [codex] pin fast-uri to 3.1.2 chore: pin fast-uri to 3.1.2 May 11, 2026
@0xJem
0xJem marked this pull request as ready for review May 11, 2026 10:41
@0xJem
0xJem requested a review from zeroxnoodle May 11, 2026 10:41
@0xJem
0xJem merged commit 31168ca into develop May 11, 2026
15 checks passed
@0xJem
0xJem deleted the chore-fast-uri branch May 20, 2026 12:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants