Skip to content

deps: bump fast-uri from 3.1.0 to 3.1.2 - #719

Merged
keito4 merged 1 commit into
mainfrom
dependabot/npm_and_yarn/fast-uri-3.1.2
May 9, 2026
Merged

deps: bump fast-uri from 3.1.0 to 3.1.2#719
keito4 merged 1 commit into
mainfrom
dependabot/npm_and_yarn/fast-uri-3.1.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 8, 2026

Copy link
Copy Markdown
Contributor

Bumps fast-uri from 3.1.0 to 3.1.2.

Release notes

Sourced from fast-uri's releases.

v3.1.2

⚠️ Security Release

What's Changed

Full Changelog: fastify/fast-uri@v3.1.1...v3.1.2

v3.1.1

⚠️ Security Release

What's Changed

New Contributors

Full Changelog: fastify/fast-uri@v3.1.0...v3.1.1

Commits
  • 919dd8e Bumped v3.1.2
  • c65ba57 fixup: linting
  • 6c86c17 Merge commit from fork
  • a95158a Handle malformed fragment decoding without throwing (#171)
  • cea547c Bumped v3.1.1
  • 876ce79 Merge commit from fork
  • dcdf690 ci: add lock-threads workflow (#169)
  • c860e65 build(deps-dev): bump neostandard from 0.12.2 to 0.13.0 (#167)
  • 9b4c6dc build(deps): bump fastify/workflows/.github/workflows/plugins-ci.yml (#166)
  • 85d09a9 build(deps): bump fastify/workflows/.github/workflows/plugins-ci-package-mana...
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

@dependabot
deps: bump fast-uri from 3.1.0 to 3.1.2
e382e4d 
Bumps [fast-uri](https://github.com/fastify/fast-uri) from 3.1.0 to 3.1.2.
- [Release notes](https://github.com/fastify/fast-uri/releases)
- [Commits](fastify/fast-uri@v3.1.0...v3.1.2)

---
updated-dependencies:
- dependency-name: fast-uri
  dependency-version: 3.1.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies 依存関係の更新 label May 8, 2026
@dependabot @github

dependabot Bot commented on behalf of github May 8, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: npm. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot
dependabot Bot requested a review from keito4 as a code owner May 8, 2026 23:36
@keito4 keito4 self-assigned this May 8, 2026
@keito4

keito4 commented May 9, 2026

Copy link
Copy Markdown
Owner

(aside)
@claude PRがbaseにマージする際にCIが落ちています。
修正してください。

@claude

claude Bot commented May 9, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Claude finished @keito4's task in 5m 26s —— View job

調査・対応完了

タスク一覧

  • コンテキストの把握
  • CI失敗の原因調査
  • 修正の実施（ラベル同期PRを作成）
  • 確認

CI 失敗の根本原因（2つ）

① リポジトリの "Allow auto-merge" が無効（主因・手動対応必要）

GraphQL: Auto merge is not allowed for this repository (enablePullRequestAutoMerge)

dependabot-auto-merge.yml が gh pr merge --auto --merge を実行するが、
リポジトリ設定で auto-merge が無効のため API からも変更不可（403 Forbidden）。

② npm / docker ラベルが未作成（副因・自動修正済み）
.github/labels.yml には定義済みだが、label-sync が未実行のためリポジトリに反映されていなかった。

対応状況

問題 状態 対応内容
① auto-merge 無効 ⚠️ 手動対応が必要 下記の手順で有効化してください
② npm/docker ラベル不足 ✅ 修正PR作成済み PR #720 をマージすれば解決

① 手動対応手順（auto-merge 有効化）

  1. Settings → General を開く
  2. Pull Requests セクションまでスクロール
  3. "Allow auto-merge" チェックボックスを有効化

→ これにより Dependabot patch PR が CI 通過後に自動マージされます。

② 作成した修正 PR

PR #720: chore: labels.yml に不足ラベルを追加して label-sync をトリガー

  • npm / docker ラベルをリポジトリに同期（label-sync 経由）
  • released / size/S / size/M / size/L / size/XL ラベルも追加

PR #720 をマージすると:
→ Label Sync ワークフローが起動し、npm / docker ラベルが自動作成されます。

両方の対応後、次回以降の Dependabot patch PR は CI が緑になり自動マージされます。
現在の PR #719 は、手動マージすることが可能です（セキュリティ修正のため対応を推奨します）。

View failed CI run | PR #720 (labels fix)

@claude claude Bot mentioned this pull request May 9, 2026
Merged
2 tasks
@keito4
keito4 merged commit 26aefb7 into main May 9, 2026
16 of 17 checks passed
@keito4
keito4 deleted the dependabot/npm_and_yarn/fast-uri-3.1.2 branch May 9, 2026 00:39
@github-actions

github-actions Bot commented May 9, 2026

Copy link
Copy Markdown
Contributor

🎉 This PR is included in version 1.111.4 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀

@github-actions github-actions Bot added the released リリース済み label May 9, 2026
@claude claude Bot mentioned this pull request May 10, 2026
Closed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@keito4 keito4 Awaiting requested review from keito4 keito4 is a code owner

Assignees

@keito4 keito4

Labels

dependencies 依存関係の更新 released リリース済み

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@keito4