Bump fast-uri from 2.4.4 to 2.4.7 in /packages/cli

[dependabot]

Bumps fast-uri from 2.4.4 to 2.4.7.

Release notes

Sourced from fast-uri's releases.

v2.4.7

⚠️ Security Warning

This security release fixes the following medium-severity security advisory:

• GHSA-hrr3-gc8f-f4qj — inconsistent host case normalization via percent-encoded octets

Users of the v2.x release line should upgrade to v2.4.7.

Full Changelog: fastify/fast-uri@v2.4.6...v2.4.7

v2.4.6

⚠️ Security Warning

This is a security release that fixes the following high-severity security advisories:

• GHSA-qw65-cvwx-89v3 — authority injection via an unvalidated port in serialize()
• GHSA-58mr-gqgx-xq4g — host confusion via unbalanced or misplaced IP-literal brackets

Users of the v2.x release line should upgrade to v2.4.6.

Full Changelog: fastify/fast-uri@v2.4.5...v2.4.6

v2.4.5

⚠️ Security Warning

This release addresses the following high-severity security advisories:

• GHSA-5jgf-p345-68v8 — host confusion via skipped IDN canonicalization on scheme-relative references
• GHSA-fph4-wmhf-6fwf — server-side request forgery via repeated hostname percent-decoding
• GHSA-f65p-4m7j-42xc — server-side request forgery via malformed IPv6 normalization
• GHSA-jqff-g426-hqxp — host confusion via percent-encoded scheme normalization

Users of the v2.x release line should upgrade to v2.4.5.

Full Changelog: fastify/fast-uri@v2.4.4...v2.4.5

Commits

• 871c650 Bumped v2.4.7
• 4d99048 fix: normalize decoded reg-name case
• ccd1f8d Bumped v2.4.6
• 812bd8e fix: backport port and IP-literal validation to v2.x (#215)
• 134064e fix: treat unterminated bracket hosts as reg-names again (#214)
• 21e274e Bumped v2.4.5
• c04a58d fix: never run IDN canonicalization on bracketed IP literals
• 10ab491 fix(ci): declare tape in devDependencies
• a941e62 Merge commit from fork
• 9161ede Merge commit from fork
• Additional commits viewable in compare view

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.