Files
sencho/backend
Anso f8cfcb547a fix(deps): bump transitive deps to clear fast-uri, qs, and humanfs advisories (#1891)
The backend audit gate started failing on newly published advisories
against three transitive dependencies, none of which are direct
dependencies:

- fast-uri 3.1.5 to 3.1.7 (high): four host-confusion and SSRF
  advisories, reached via composerize, composeverter, and ajv.
- qs 6.15.2 to 6.16.0 (moderate): array-limit bypass and a
  denial of service via attacker-controlled isBuffer.
- @humanfs/node 0.16.7 to 0.16.8 (moderate): recursive copy follows
  symlinked files outside the source tree.

All three resolve with semver-compatible bumps, so only the lockfile
changes. Backend typecheck, lint, and the test suite are unaffected.
2026-09-02 18:52:47 +00:00
..