Skip to content

docs(changelog): note the fast-uri fix and bumps - #5980

Merged
norman-abramovitz merged 1 commit into
cloudfoundry:developfrom
nabramovitz:norm/docs/changelog-deps-09-30
Sep 30, 2026
Merged

norman-abramovitz merged 1 commit into
cloudfoundry:developfrom
nabramovitz:norm/docs/changelog-deps-09-30

Conversation

@nabramovitz

Copy link
Copy Markdown
Contributor

./build/release-notes.sh check warned that 13 dependency bumps landed after the newest fragment that mentions dependencies (0010), so the release notes would have left them out. They are the 09-29 Dependabot batch (#5964–#5968, #5971) and everything merged on 09-30 (#5972–#5975, #5977–#5979).

This adds changelog.d/0011-dependency-updates-09-30.md:

  • [Security Updates]: fast-uri 3.1.8 (root and website from 3.1.5, devkit from 3.1.7), with a table of GHSA-5jgf-p345-68v8 and GHSA-qw65-cvwx-89v3 (both high) and GHSA-hrr3-gc8f-f4qj (medium). fast-uri reaches the UI through ajv, which schema-validate.util.ts imports for the schema widget.
  • [Chores]: a table of the frontend bumps, the nested marked pin sync, and a table of the website group bumps.

Verification: release-notes.sh check no longer warns (all 22 bumps since v5.5.4 are covered), and release-notes.sh assemble renders the entry under Security Updates with its advisory links.

release-notes.sh check warned that 13 dependency bumps landed after
the newest fragment mentioning dependencies (0010), so the release
notes would have left them out: the 09-29 Dependabot batch and
everything merged on 09-30.

fast-uri goes under Security Updates. 3.1.5 fell in two high and one
medium advisory, and it reaches the UI through ajv, which the schema
widget uses. The rest are listed under Chores.

@norman-abramovitz norman-abramovitz left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@norman-abramovitz
norman-abramovitz merged commit c69415b into cloudfoundry:develop Sep 30, 2026
24 checks passed
@nabramovitz
nabramovitz deleted the norm/docs/changelog-deps-09-30 branch September 30, 2026 18:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants