From d62f24109838c0ccfd75a8548ab0f6afb8593126 Mon Sep 17 00:00:00 2001 From: Bartosz Sekula Date: Fri, 7 Aug 2026 11:59:21 +0200 Subject: [PATCH] AAE-49663 AAE-49665 fast-uri and undici security version bump (#12136) * AAE-49663 fast-uri host confusion via backslash authority introducer * added undici --- pnpm-lock.yaml | 28 ++++++++++++++-------------- pnpm-workspace.yaml | 4 ++-- 2 files changed, 16 insertions(+), 16 deletions(-) diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index 0df5ea4227..0d641b129f 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -5,7 +5,7 @@ settings: excludeLinksFromLockfile: false overrides: - fast-uri: 3.1.4 + fast-uri: 3.1.5 js-yaml@4.2.0: 4.3.0 brace-expansion@5.0.6: 5.0.8 brace-expansion@<1.1.17: 1.1.17 @@ -21,7 +21,7 @@ overrides: postcss: '>=8.5.25' webpack-dev-server: '>=6.0.0' uuid: '>=11.1.1' - undici: 8.7.0 + undici: 8.9.0 importers: @@ -335,8 +335,8 @@ importers: specifier: 5.9.3 version: 5.9.3 undici: - specifier: 8.7.0 - version: 8.7.0 + specifier: 8.9.0 + version: 8.9.0 webpack: specifier: 5.109.0 version: 5.109.0(clean-css@5.3.3)(cssnano@7.1.9(postcss@8.5.25))(csso@5.0.5)(esbuild@0.25.9)(html-minifier-terser@6.1.0)(postcss@8.5.25) @@ -6062,8 +6062,8 @@ packages: fast-levenshtein@2.0.6: resolution: {integrity: sha512-DCXu6Ifhqcks7TZKY3Hxp3y6qphY5SJZmrWMDrKcERSOXWQdMhU9Ig/PYrzyw/ul9jOIyh0N4M0tbC5hodg8dw==} - fast-uri@3.1.4: - resolution: {integrity: sha512-8JnbkQ4juDyvYs4mgFGQqg4yCYtFDtUtmp2QIQq11ZZe5CFQ5wcqm1rqDgAh/QdMySuBnPzMUiJUNZG5N/AiQw==} + fast-uri@3.1.5: + resolution: {integrity: sha512-gHwA1O9LDIcKunMKhObS/HimwtehO1nPUECKAu5TpKgaO19fcWEl4bliWe1jWxVFvIXztJjjQ4L8XQ1EU9f7Jw==} fastest-levenshtein@1.0.16: resolution: {integrity: sha512-eRnCtTTtGZFpQCwhJiUOuxPQWRXVKYDn0b2PeHfXL6/Zi53SLAzAHfVhVWK2AryC/WH05kGfxhFIPvTF0SXQzg==} @@ -9279,8 +9279,8 @@ packages: undici-types@8.3.0: resolution: {integrity: sha512-j375ScV60dom+YkPFIfTLcOiPxkN/buHz5GobjLhixFuANaNs3C9l4GmrWqejgXWJ7BbJcFYpTEUkS1Ge8bpZQ==} - undici@8.7.0: - resolution: {integrity: sha512-N7iQtfyLhIMOFgQubvmLV26svHpO0bqKnAiWotTQCVKCmWrcGbBotPuW1x+xwYZ2VHdSTVUfPQQnlEt1/LouTQ==} + undici@8.9.0: + resolution: {integrity: sha512-aWZpUj7XoGonMClx4gdDRfgBjqeA+F473aDmROQQbM9n6PRfK/u1q/a0X4wMTgcHfT8H6fpbt98PFuDUwFg2YA==} engines: {node: '>=22.19.0'} unicode-canonical-property-names-ecmascript@2.0.1: @@ -12493,7 +12493,7 @@ snapshots: isomorphic-ws: 5.0.0(ws@8.21.0) node-schedule: 2.1.1 typescript: 5.9.3 - undici: 8.7.0 + undici: 8.9.0 ws: 8.21.0 transitivePeerDependencies: - bufferutil @@ -14828,21 +14828,21 @@ snapshots: ajv@8.17.1: dependencies: fast-deep-equal: 3.1.3 - fast-uri: 3.1.4 + fast-uri: 3.1.5 json-schema-traverse: 1.0.0 require-from-string: 2.0.2 ajv@8.18.0: dependencies: fast-deep-equal: 3.1.3 - fast-uri: 3.1.4 + fast-uri: 3.1.5 json-schema-traverse: 1.0.0 require-from-string: 2.0.2 ajv@8.20.0: dependencies: fast-deep-equal: 3.1.3 - fast-uri: 3.1.4 + fast-uri: 3.1.5 json-schema-traverse: 1.0.0 require-from-string: 2.0.2 @@ -16624,7 +16624,7 @@ snapshots: fast-levenshtein@2.0.6: {} - fast-uri@3.1.4: {} + fast-uri@3.1.5: {} fastest-levenshtein@1.0.16: {} @@ -20353,7 +20353,7 @@ snapshots: undici-types@8.3.0: {} - undici@8.7.0: {} + undici@8.9.0: {} unicode-canonical-property-names-ecmascript@2.0.1: {} diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml index 7a091905ac..2a92a2020e 100644 --- a/pnpm-workspace.yaml +++ b/pnpm-workspace.yaml @@ -7,7 +7,7 @@ minimumReleaseAgeStrict: true overrides: # Security fixes - fast-uri: 3.1.4 + fast-uri: 3.1.5 "js-yaml@4.2.0": "4.3.0" "brace-expansion@5.0.6": "5.0.8" "brace-expansion@<1.1.17": "1.1.17" @@ -23,7 +23,7 @@ overrides: postcss: '>=8.5.25' webpack-dev-server: '>=6.0.0' uuid: '>=11.1.1' - undici: 8.7.0 + undici: 8.9.0 allowBuilds: '@parcel/watcher': true