From 4f3884a0eb1353d253a6180588cc4966342accc2 Mon Sep 17 00:00:00 2001 From: Linear Date: Wed, 22 Jul 2026 13:38:29 +0000 Subject: [PATCH 1/2] chore: upgrade fast-uri to ^3.1.4 to address CVE-2026-13676 Co-authored-by: linear-code[bot] <222613912+linear-code[bot]@users.noreply.github.com> --- CHANGELOG.md | 3 +++ yarn.lock | 6 +++--- 2 files changed, 6 insertions(+), 3 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index e9a6091ac..98a8d74c7 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -10,6 +10,9 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0 ### Changed - Reduced Sentry span sampling to 10% outside development. [#1475](https://github.com/sourcebot-dev/sourcebot/pull/1475) +### Fixed +- Upgraded `fast-uri` to `^3.1.4`. [#PLACEHOLDER] + ## [5.1.3] - 2026-07-20 ### Added diff --git a/yarn.lock b/yarn.lock index 54653dc8d..8bb00cdaa 100644 --- a/yarn.lock +++ b/yarn.lock @@ -14975,9 +14975,9 @@ __metadata: linkType: hard "fast-uri@npm:^3.1.2": - version: 3.1.2 - resolution: "fast-uri@npm:3.1.2" - checksum: 10c0/5b35641895959f3f7ab7a7b1b5542bded159346f25ec9f256817b206d50b64eda5828e90d605a2e2fc645c90519a7259c2bab2c942ee728c88b88e5be21b090d + version: 3.1.4 + resolution: "fast-uri@npm:3.1.4" + checksum: 10c0/f90948821ceb49980f64f89b8216ba498f5957f26035be813526a55b6145d26cbd63ef5618d5205a3292b31edc9c08589749350cd72bd86c7095eb434dceb757 languageName: node linkType: hard From f6063647a48651ed4127e730bef0217854813fec Mon Sep 17 00:00:00 2001 From: Linear Date: Wed, 22 Jul 2026 13:38:54 +0000 Subject: [PATCH 2/2] chore: reference PR #1478 in changelog Co-authored-by: linear-code[bot] <222613912+linear-code[bot]@users.noreply.github.com> --- CHANGELOG.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 98a8d74c7..9b878d9a4 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -11,7 +11,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0 - Reduced Sentry span sampling to 10% outside development. [#1475](https://github.com/sourcebot-dev/sourcebot/pull/1475) ### Fixed -- Upgraded `fast-uri` to `^3.1.4`. [#PLACEHOLDER] +- Upgraded `fast-uri` to `^3.1.4`. [#1478](https://github.com/sourcebot-dev/sourcebot/pull/1478) ## [5.1.3] - 2026-07-20