From 91a9565f97074b1cc05f811abf5f472f16a70fa8 Mon Sep 17 00:00:00 2001 From: Florian Date: Tue, 4 Aug 2026 16:53:08 +0200 Subject: [PATCH 1/3] fix(deps): patch docs fast-uri vulnerabilities --- docs/pnpm-lock.yaml | 9 +++++---- docs/pnpm-workspace.yaml | 3 +++ 2 files changed, 8 insertions(+), 4 deletions(-) diff --git a/docs/pnpm-lock.yaml b/docs/pnpm-lock.yaml index 31fa04560..c70af511c 100644 --- a/docs/pnpm-lock.yaml +++ b/docs/pnpm-lock.yaml @@ -10,6 +10,7 @@ overrides: serialize-javascript: ^7.0.5 uuid@8.3.2: ^11.1.1 joi: ^18.2.1 + fast-uri: ^3.1.5 dompurify: ^3.4.9 importers: @@ -3395,8 +3396,8 @@ packages: fast-json-stable-stringify@2.1.0: resolution: {integrity: sha512-lhd/wF+Lk98HZoTCtlVraHtfh5XYijIjalXck7saUtuanSDyLMxnHhSXEDJqHxD7msR8D0uCmqlkwjCV8xvwHw==} - fast-uri@3.1.2: - resolution: {integrity: sha512-rVjf7ArG3LTk+FS6Yw81V1DLuZl1bRbNrev6Tmd/9RaroeeRRJhAt7jg/6YFxbvAQXUCavSoZhPPj6oOx+5KjQ==} + fast-uri@3.1.5: + resolution: {integrity: sha512-gHwA1O9LDIcKunMKhObS/HimwtehO1nPUECKAu5TpKgaO19fcWEl4bliWe1jWxVFvIXztJjjQ4L8XQ1EU9f7Jw==} fastq@1.20.1: resolution: {integrity: sha512-GGToxJ/w1x32s/D2EKND7kTil4n8OVk/9mycTc4VDza13lOvpUZTGX3mFSCtV9ksdGBVzvsyAVLM6mHFThxXxw==} @@ -9484,7 +9485,7 @@ snapshots: ajv@8.20.0: dependencies: fast-deep-equal: 3.1.3 - fast-uri: 3.1.2 + fast-uri: 3.1.5 json-schema-traverse: 1.0.0 require-from-string: 2.0.2 @@ -10629,7 +10630,7 @@ snapshots: fast-json-stable-stringify@2.1.0: {} - fast-uri@3.1.2: {} + fast-uri@3.1.5: {} fastq@1.20.1: dependencies: diff --git a/docs/pnpm-workspace.yaml b/docs/pnpm-workspace.yaml index fdfcb5861..13b2c0a24 100644 --- a/docs/pnpm-workspace.yaml +++ b/docs/pnpm-workspace.yaml @@ -43,6 +43,9 @@ overrides: "serialize-javascript": "^7.0.5" "uuid@8.3.2": "^11.1.1" "joi": "^18.2.1" + # fast-uri 3.1.5 fixes the current host-confusion advisories in the + # Docusaurus/AJV dependency tree. + "fast-uri": "^3.1.5" # >=3.4.9 closes GHSA-vxr8-fq34-vvx9 (low: a Trusted Types policy survives # clearConfig()). Transitive via mermaid -> @docusaurus/theme-mermaid. "dompurify": "^3.4.9" From 5411139b3fc9ac62c13522157a31f459093cf2c1 Mon Sep 17 00:00:00 2001 From: Florian Date: Tue, 4 Aug 2026 17:01:42 +0200 Subject: [PATCH 2/3] chore(deps): mark docs security update as non-release --- .changeset/hungry-drinks-decide.md | 2 ++ 1 file changed, 2 insertions(+) create mode 100644 .changeset/hungry-drinks-decide.md diff --git a/.changeset/hungry-drinks-decide.md b/.changeset/hungry-drinks-decide.md new file mode 100644 index 000000000..a845151cc --- /dev/null +++ b/.changeset/hungry-drinks-decide.md @@ -0,0 +1,2 @@ +--- +--- From c8c4233353a8c7cd03a177384b0aa07cf2b2a078 Mon Sep 17 00:00:00 2001 From: Florian Date: Tue, 4 Aug 2026 17:05:00 +0200 Subject: [PATCH 3/3] fix(ci): use valid empty changeset frontmatter --- .changeset/hungry-drinks-decide.md | 1 + 1 file changed, 1 insertion(+) diff --git a/.changeset/hungry-drinks-decide.md b/.changeset/hungry-drinks-decide.md index a845151cc..ebd0aa3d6 100644 --- a/.changeset/hungry-drinks-decide.md +++ b/.changeset/hungry-drinks-decide.md @@ -1,2 +1,3 @@ --- +{} ---