Skip to content

[release-1.10] chore(lightspeed): upgrade fast-uri in lightspeed to >= 3.1.7 - #4577

Open
JessicaJHee wants to merge 1 commit into
redhat-developer:release-1.10/lightspeedfrom
JessicaJHee:fast-uri-CVE-2026-84394-CVE-2026-84292-CVE-2026-76172-CVE-2026-75975-CVE-2026-75931-CVE-2026-75899-CVE-2026-6322-release-1-10-lightspeed
Open

[release-1.10] chore(lightspeed): upgrade fast-uri in lightspeed to >= 3.1.7#4577
JessicaJHee wants to merge 1 commit into
redhat-developer:release-1.10/lightspeedfrom
JessicaJHee:fast-uri-CVE-2026-84394-CVE-2026-84292-CVE-2026-76172-CVE-2026-75975-CVE-2026-75931-CVE-2026-75899-CVE-2026-6322-release-1-10-lightspeed

Conversation

@JessicaJHee

Copy link
Copy Markdown
Member

Hey, I just made a Pull Request!

fast-uri in lightspeed is vulnerable due to CVE-2026-84394, CVE-2026-84292, CVE-2026-76172, CVE-2026-75975, CVE-2026-75931, CVE-2026-75899, CVE-2026-6322. Fix by upgrading to versions >= 3.1.7.

Fixed with simple yarn up -R fast-uri

Which issue(s) does this PR fix

✔️ Checklist

  • A changeset describing the change and affected packages. (more info)
  • Added or Updated documentation
  • Tests for new functionality and regression tests for bug fixes
  • Screenshots attached (for UI changes)

…= 3.1.7

Signed-off-by: Jessica He <jhe@redhat.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
@sonarqubecloud

sonarqubecloud Bot commented Sep 4, 2026

Copy link
Copy Markdown

@codecov

codecov Bot commented Sep 4, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
⚠️ Please upload report for BASE (release-1.10/lightspeed@c478d27). Learn more about missing BASE report.
✅ All tests successful. No failed tests found.

Additional details and impacted files
@@                    Coverage Diff                     @@
##             release-1.10/lightspeed    #4577   +/-   ##
==========================================================
  Coverage                           ?   60.96%           
==========================================================
  Files                              ?     2098           
  Lines                              ?    65167           
  Branches                           ?    16942           
==========================================================
  Hits                               ?    39726           
  Misses                             ?    25219           
  Partials                           ?      222           
Flag Coverage Δ *Carryforward flag
adoption-insights 83.58% <ø> (?) Carriedforward from 230b90c
ai-integrations 70.03% <ø> (?) Carriedforward from 230b90c
app-defaults 69.60% <ø> (?) Carriedforward from 230b90c
augment 69.36% <ø> (?) Carriedforward from 230b90c
bulk-import 72.86% <ø> (?) Carriedforward from 230b90c
cost-management 16.49% <ø> (?) Carriedforward from 230b90c
dcm 32.85% <ø> (?) Carriedforward from 230b90c
extensions 61.79% <ø> (?) Carriedforward from 230b90c
global-floating-action-button 74.30% <ø> (?) Carriedforward from 230b90c
global-header 61.68% <ø> (?) Carriedforward from 230b90c
homepage 50.95% <ø> (?) Carriedforward from 230b90c
konflux 91.01% <ø> (?) Carriedforward from 230b90c
lightspeed 68.13% <ø> (?)
mcp-integrations 81.59% <ø> (?) Carriedforward from 230b90c
orchestrator 36.36% <ø> (?) Carriedforward from 230b90c
quickstart 62.88% <ø> (?) Carriedforward from 230b90c
sandbox 79.56% <ø> (?) Carriedforward from 230b90c
scorecard 83.58% <ø> (?) Carriedforward from 230b90c
theme 64.54% <ø> (?) Carriedforward from 230b90c
translations 8.49% <ø> (?) Carriedforward from 230b90c
x2a 78.28% <ø> (?) Carriedforward from 230b90c

*This pull request uses carry forward flags. Click here to find out more.


Continue to review full report in Codecov by Harness.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update c478d27...9290f6d. Read the comment docs.

🚀 New features to boost your workflow:
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant