From 1b693663d74caa1e252ef9b613baae0d631f130c Mon Sep 17 00:00:00 2001 From: Sunny Lee <1424627+threeqube@users.noreply.github.com> Date: Thu, 29 Oct 2026 13:28:38 -0700 Subject: [PATCH] Take fast-uri 3.1.9, the one shipped fix in #37 fast-uri is bundled into dist through verifier-core's ajv. Of the two packages in #37 that reach the built plugin, it is the only one with a fix (@stablelib/ed25519 waits on verifier-core#84). The lockfile moves from 3.1.8 to 3.1.9 (published 19 October 2026 with npm provenance); nothing else changes, and package.json is untouched. The built plugin differs from main's only in fast-uri: dist/index.js is byte-identical outside fast-uri's three bundled modules, and THIRD_PARTY_LICENSES.md changes only its version line. Checked: lint, typecheck, 105,720 tests, 60 browser tests (1 skipped, as on any local run). Co-Authored-By: Claude Opus 5.5 --- package-lock.json | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/package-lock.json b/package-lock.json index d189b51..b670df3 100644 --- a/package-lock.json +++ b/package-lock.json @@ -4748,9 +4748,9 @@ "license": "Apache-2.0" }, "node_modules/fast-uri": { - "version": "3.1.8", - "resolved": "https://registry.npmjs.org/fast-uri/-/fast-uri-3.1.8.tgz", - "integrity": "sha512-GZMtZUTNRpOVIECoXwLNZS5xUGE+mVNbTB8h/7Rwh2TFWcBQiPzTgyZi05BF9UMZKkLJv8XBRJTlU7zg8+ZfMg==", + "version": "3.1.9", + "resolved": "https://registry.npmjs.org/fast-uri/-/fast-uri-3.1.9.tgz", + "integrity": "sha512-hS/0Wt3Ya043oKXs0sIxrMpKQITXhMLIrVAKKXi4gozGC9v7YRWVnXIZzjNPTO02M9BdxLCWqK1yRXgNziVyJQ==", "dev": true, "funding": [ {