chore(deps): patch fast-uri to 3.1.7

[martinothamar-agent]

Description

Updates fast-uri from 3.0.6 to 3.1.7 to remove the dependency affected by CVE-2026-84292 (authority injection through an unvalidated URI port). Current AJV usage does not expose the vulnerable object-port input path; this is preventive dependency maintenance.

Updated the Yarn lockfile resolution used by AJV within its existing ^3.0.1 range. Only the fast-uri version and checksum change; no manifest overrides or application changes were needed.

Risk assessment

Low risk, with potential runtime impact on schema validation. The update stays within AJV’s existing dependency range, but URI parsing and validation fixes could change how unusual or malformed schema $id/$ref values are handled after deployment. Builds, type checks, lint, and 295 targeted tests passed, and direct checks confirmed injected ports are rejected while valid ports still serialize correctly. These checks do not cover every deployed app schema.

Related Issue(s)

• Dependabot alert #371

Verification/QA

• Passed immutable install, deduplication check, yarn tsc, yarn lint, and yarn build.
• Passed 295 tests across five schema/validation suites; a direct check confirms injected ports are rejected and valid ports still serialize correctly.
• No new tests needed: dependency maintenance covered by existing tests.
• No DOM, documentation, or Altinn Studio changes needed.
• Maintainer: add kind/dependencies and backport-ignore (the PR author lacks label permissions).

[coderabbitai]

Important

Review skipped

Review was skipped due to path filters

⛔ Files ignored due to path filters (1)

• yarn.lock is excluded by !**/yarn.lock, !**/*.lock

CodeRabbit blocks several paths by default. You can override this behavior by explicitly including those paths in the path filters. For example, including **/dist/** will override the default block on the dist directory, by removing the pattern from both the lists.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Advanced

Run ID: 7d41be04-c3d2-426a-8f98-6dc3b2e06987

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Autopilot is currently an internal CodeRabbit preview.

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}