Explicitly state fast-uri as a node dependency.

[g1rly-c0d3r]

Fixes #8333

https://github.com/specify/specify7/security/dependabot/229

https://github.com/specify/specify7/security/dependabot/230

Checklist

• Self-review the PR after opening it to make sure the changes look good and
  self-explanatory (or properly documented)
• Add relevant issue to release milestone

Testing instructions

Summary by CodeRabbit

• Chores
  • Added an internal development dependency to support project tooling.

[github-actions]

Warning

One or more dependencies are approaching or past End-of-Life.
Please plan upgrades accordingly.

STATUS=WARNING
NODE_VERSION=20
NODE_CYCLE=20
EOL_DATE=2026-04-30
DAYS_REMAINING=-82

--- Node.js ---
Version: 20
EOL: 2026-04-30
Status: WARNING

STATUS=OK
PYTHON_VERSION=3.12
PYTHON_CYCLE=3.12
EOL_DATE=2028-10-31
DAYS_REMAINING=833

--- Python ---
Version: 3.12
EOL: 2028-10-31
Status: OK

STATUS=WARNING
DJANGO_VERSION=4.2
DJANGO_CYCLE=4.2
EOL_DATE=2026-04-07
DAYS_REMAINING=-105

--- Django ---
Version: 4.2
EOL: 2026-04-07
Status: WARNING

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 7382a6ce-0410-4149-b124-0e9aeae26b82

📥 Commits

Reviewing files that changed from the base of the PR and between a255ef8 and 1ac10ed.

⛔ Files ignored due to path filters (1)

• specifyweb/frontend/js_src/package-lock.json is excluded by !**/package-lock.json

📒 Files selected for processing (1)

• specifyweb/frontend/js_src/package.json

---

📝 Walkthrough

Walkthrough

The frontend package manifest adds fast-uri version ^3.1.4 to devDependencies. No scripts, public entities, or other dependency entries are changed.

Changes

Frontend dependency update

Layer / File(s)	Summary
Add fast-uri development dependency specifyweb/frontend/js_src/package.json	Adds fast-uri version ^3.1.4 to the frontend development dependencies.

🚥 Pre-merge checks | ✅ 4 | ❌ 2

❌ Failed checks (1 warning, 1 inconclusive)

Check name	Status	Explanation	Resolution
Testing Instructions	⚠️ Warning	The PR’s Testing instructions section is empty, so it doesn’t explain how to verify the frontend dependency change in js_src.	Add concrete verification steps for specifyweb/frontend/js_src, e.g. reinstall deps and run the relevant frontend tests/build or audit checks.
Linked Issues check	❓ Inconclusive	The PR adds fast-uri to package.json, but the lockfile is excluded, so I cannot verify the transitive vulnerability is actually resolved.	Include or review package-lock.json changes to confirm the dependency update eliminates the vulnerable transitive fast-uri version.

✅ Passed checks (4 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title accurately describes the primary change: adding fast-uri as an explicit dependency.
Out of Scope Changes check	✅ Passed	The change is narrowly scoped to adding the dependency requested by the issue.
Automatic Tests	✅ Passed	Only package metadata/lockfile changed; no runtime code changed, so extra automatic tests weren’t necessary.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch issue-8333

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}