Skip to content

chore: Bump fast-uri for security updates - #3970

Open
camdecoster wants to merge 1 commit into
devfrom
cam/update-fast-uri
Open

chore: Bump fast-uri for security updates#3970
camdecoster wants to merge 1 commit into
devfrom
cam/update-fast-uri

Conversation

@camdecoster

Copy link
Copy Markdown
Contributor

Description

Update fast-uri to v3.1.7 to address open security vulnerabilities.

Changes

  • Update package lock files

Testing

Check the CI run.

@sonarqubecloud

sonarqubecloud Bot commented Sep 3, 2026

Copy link
Copy Markdown

@github-actions

github-actions Bot commented Sep 3, 2026

Copy link
Copy Markdown
Contributor

Dash performance benchmarks

⚠️ regressions to review

scenario metric p90 (ms) median growth baseline p90 note
⚠️ initial_render_small render_ms 198.1 95.6 0.99x 104.0 1.9x baseline (norm)
callback_chain chain_ms 482.2 445.6 0.92x 499.1
callback_chain graph_ms 3.5 3.5 1.0x 2.4
callback_fanout fanout_ms 83.9 79.5 0.9x 92.5
deep_nesting render_ms 54.4 51.4 0.96x 56.8
full_children_replace replace_ms 4522.8 1817.5 16.26x 4697.1
initial_render_large render_ms 621.8 576.8 0.95x 694.4
patch_append_nested append_ms 154.1 102.4 2.4x 192.3
patch_append_toplevel append_ms 133.5 88.4 2.28x 140.2
patch_scalar_update_large update_ms 175.4 153.6 0.86x 202.9
wildcard_all_resolve wildcard_ms 291.8 279.0 0.95x 313.6
wildcard_all_resolve graph_ms 1.1 1.1 1.0x 1.3

growth = late-third / early-third per-op time; ~1 is flat, a large value means the per-op cost scales with accumulated state.

machine scale vs baseline: 0.99x - divided out of the baseline ratios so they compare like for like (the absolute warn/fail ceilings are left un-scaled); calibrated on initial_render_small.

@KoolADE85 KoolADE85 left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💃

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants