chore(deps-dev): bump fast-uri from 3.1.5 to 3.1.8 in the all-security group across 1 directory

[dependabot]

Bumps the all-security group with 1 update in the / directory: fast-uri.

Updates fast-uri from 3.1.5 to 3.1.8

Release notes

Sourced from fast-uri's releases.

v3.1.8

⚠️ Security Warning

This security release fixes the following medium-severity security advisory:

• GHSA-hrr3-gc8f-f4qj — inconsistent host case normalization via percent-encoded octets

Users of the v3.x release line should upgrade to v3.1.8.

Full Changelog: fastify/fast-uri@v3.1.7...v3.1.8

v3.1.7

⚠️ Security Warning

This is a security release that fixes the following high-severity security advisories:

• GHSA-qw65-cvwx-89v3 — authority injection via an unvalidated port in serialize()
• GHSA-58mr-gqgx-xq4g — host confusion via unbalanced or misplaced IP-literal brackets

Users of the v3.x release line should upgrade to v3.1.7.

Full Changelog: fastify/fast-uri@v3.1.6...v3.1.7

v3.1.6

⚠️ Security Warning

This release addresses the following high-severity security advisories:

• GHSA-5jgf-p345-68v8 — host confusion via skipped IDN canonicalization on scheme-relative references
• GHSA-fph4-wmhf-6fwf — server-side request forgery via repeated hostname percent-decoding
• GHSA-f65p-4m7j-42xc — server-side request forgery via malformed IPv6 normalization
• GHSA-jqff-g426-hqxp — host confusion via percent-encoded scheme normalization

Users of the v3.x release line should upgrade to v3.1.6.

Full Changelog: fastify/fast-uri@v3.1.5...v3.1.6

Commits

• ead3ab7 Bumped v3.1.8
• c88b59e fix: normalize decoded reg-name case
• 412e40a Bumped v3.1.7
• 9f4c943 fix: backport port and IP-literal validation to v3.x (#216)
• 1eb3ce4 fix: treat unterminated bracket hosts as reg-names again (#214)
• 6f970b2 Bumped v3.1.6
• d941579 fix: never run IDN canonicalization on bracketed IP literals
• c0f0279 test: adapt decoded-scheme handler assertion to 3.x (no mailto scheme)
• 37f3417 Merge commit from fork
• 607bfbe Merge commit from fork
• Additional commits viewable in compare view

[github-actions]

Visual parity — dark theme 🌙

Every captured route is pixel-identical to the merge base across 1440x1000 (40 routes) and 420x900 (40 routes).

Enforced: this PR is labelled dependencies, so a dependency bump that moves rendering fails here rather than merging silently.

[github-actions]

Visual parity — light theme ☀️

1440x1000 — 1 of 40 routes moved.

Route	Differing pixels	Peak channel delta
talks-and-events.png	49,400	248/255

420x900 — 0 of 40 routes moved.

Differing pixels locate a change; the peak channel delta sizes it. A large count with a
delta of 1–2/255 is a sub-perceptual shift, a small count at 200/255 is something a reader
would see.

Enforced: this PR is labelled dependencies, so a dependency bump that moves rendering fails here rather than merging silently.