From 2d83632b907eb75d829eba6dd48817aabeb3d8d1 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 30 Oct 2026 05:15:13 +0000
Subject: [PATCH 1/3] Bump fast-uri from 3.1.8 to 3.1.9 in /packages/join-flow

Bumps [fast-uri](https://github.com/fastify/fast-uri) from 3.1.8 to 3.1.9.
- [Release notes](https://github.com/fastify/fast-uri/releases)
- [Commits](https://github.com/fastify/fast-uri/compare/v3.1.8...v3.1.9)

---
updated-dependencies:
- dependency-name: fast-uri
  dependency-version: 3.1.9
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 packages/join-flow/package-lock.json | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/packages/join-flow/package-lock.json b/packages/join-flow/package-lock.json
index f12a680..bba02ed 100644
--- a/packages/join-flow/package-lock.json
+++ b/packages/join-flow/package-lock.json
@@ -8428,9 +8428,9 @@
       "license": "MIT"
     },
     "node_modules/fast-uri": {
-      "version": "3.1.8",
-      "resolved": "https://registry.npmjs.org/fast-uri/-/fast-uri-3.1.8.tgz",
-      "integrity": "sha512-GZMtZUTNRpOVIECoXwLNZS5xUGE+mVNbTB8h/7Rwh2TFWcBQiPzTgyZi05BF9UMZKkLJv8XBRJTlU7zg8+ZfMg==",
+      "version": "3.1.9",
+      "resolved": "https://registry.npmjs.org/fast-uri/-/fast-uri-3.1.9.tgz",
+      "integrity": "sha512-hS/0Wt3Ya043oKXs0sIxrMpKQITXhMLIrVAKKXi4gozGC9v7YRWVnXIZzjNPTO02M9BdxLCWqK1yRXgNziVyJQ==",
       "funding": [
         {
           "type": "github",

From 9a6a6b28425923d79de2e034782e6945f00f05d8 Mon Sep 17 00:00:00 2001
From: Claude <noreply@anthropic.com>
Date: Fri, 30 Oct 2026 11:44:45 +0000
Subject: [PATCH 2/3] Record fast-uri as verified by the build and dev server

fast-uri only reaches us through ajv, which webpack, the loaders,
html-webpack-plugin and webpack-dev-server use to validate their
options. None of it is in the bundle, so the production build and the
dev server are what exercise it. Both pass on 3.1.8 and 3.1.9, and both
fail when fast-uri's resolve() is changed.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_019QZFw9N8p8vhvtvA3LDZG1
---
 .github/dependency-coverage.json | 20 ++++++++++++++++++++
 1 file changed, 20 insertions(+)
 create mode 100644 .github/dependency-coverage.json

diff --git a/.github/dependency-coverage.json b/.github/dependency-coverage.json
new file mode 100644
index 0000000..125524f
--- /dev/null
+++ b/.github/dependency-coverage.json
@@ -0,0 +1,20 @@
+{
+  "packages": {
+    "npm:packages/join-flow:fast-uri": {
+      "class": "build",
+      "via": [
+        "babel-loader, css-loader, html-webpack-plugin, sass-loader, style-loader, webpack, webpack-cli, webpack-dev-server",
+        "schema-utils",
+        "ajv-formats",
+        "ajv"
+      ],
+      "usage": [],
+      "tests": [
+        "ci: E2E Tests › Build join-flow bundle (E2E mode)",
+        "ci: Dev Server › Dev server smoke test"
+      ],
+      "reviewedVersion": "3.1.9",
+      "reviewedIn": "#141"
+    }
+  }
+}

From 76748b1fb54c6bd38003fc70fff707c899c23be5 Mon Sep 17 00:00:00 2001
From: Claude <noreply@anthropic.com>
Date: Fri, 30 Oct 2026 11:45:37 +0000
Subject: [PATCH 3/3] Keep the fast-uri ledger entry in its own file

One file per package means Dependabot PRs open at the same time never
conflict over the ledger.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_019QZFw9N8p8vhvtvA3LDZG1
---
 .github/dependency-coverage.json              | 20 -------------------
 .../npm/packages/join-flow/fast-uri.json      | 16 +++++++++++++++
 2 files changed, 16 insertions(+), 20 deletions(-)
 delete mode 100644 .github/dependency-coverage.json
 create mode 100644 .github/dependency-coverage/npm/packages/join-flow/fast-uri.json

diff --git a/.github/dependency-coverage.json b/.github/dependency-coverage.json
deleted file mode 100644
index 125524f..0000000
--- a/.github/dependency-coverage.json
+++ /dev/null
@@ -1,20 +0,0 @@
-{
-  "packages": {
-    "npm:packages/join-flow:fast-uri": {
-      "class": "build",
-      "via": [
-        "babel-loader, css-loader, html-webpack-plugin, sass-loader, style-loader, webpack, webpack-cli, webpack-dev-server",
-        "schema-utils",
-        "ajv-formats",
-        "ajv"
-      ],
-      "usage": [],
-      "tests": [
-        "ci: E2E Tests › Build join-flow bundle (E2E mode)",
-        "ci: Dev Server › Dev server smoke test"
-      ],
-      "reviewedVersion": "3.1.9",
-      "reviewedIn": "#141"
-    }
-  }
-}
diff --git a/.github/dependency-coverage/npm/packages/join-flow/fast-uri.json b/.github/dependency-coverage/npm/packages/join-flow/fast-uri.json
new file mode 100644
index 0000000..a57f295
--- /dev/null
+++ b/.github/dependency-coverage/npm/packages/join-flow/fast-uri.json
@@ -0,0 +1,16 @@
+{
+  "class": "build",
+  "via": [
+    "babel-loader, css-loader, html-webpack-plugin, sass-loader, style-loader, webpack, webpack-cli, webpack-dev-server",
+    "schema-utils",
+    "ajv-formats",
+    "ajv"
+  ],
+  "usage": [],
+  "tests": [
+    "ci: E2E Tests › Build join-flow bundle (E2E mode)",
+    "ci: Dev Server › Dev server smoke test"
+  ],
+  "reviewedVersion": "3.1.9",
+  "reviewedIn": "#141"
+}