[HIGH] Bump fast-uri to 3.1.7

[OskarEichler]

Summary

• raise the existing fast-uri resolution floor from 3.1.2 to 3.1.6
• lock the compatible 3.x dependency to the current 3.1.7 release
• keep the change scoped to fast-uri

Security impact

fast-uri 3.1.2 is affected by six high-severity URL parsing and host-confusion advisories: GHSA-5jgf-p345-68v8, GHSA-7p8r-x3mc-p8w7, GHSA-f65p-4m7j-42xc, GHSA-fph4-wmhf-6fwf, GHSA-jqff-g426-hqxp, and GHSA-v2hh-gcrm-f6hx. Version 3.1.7 contains all fixes while remaining within the existing 3.x dependency line.

Test Plan

• yarn install --frozen-lockfile --ignore-scripts
• yarn why fast-uri confirmed 3.1.7
• yarn audit no longer reports fast-uri advisories
• yarn build
• yarn build-types --validate
• JS API tooling: 22 suites, 153 tests, 131 snapshots passed
• git diff --check

Changelog:

[INTERNAL] [SECURITY] - Bump fast-uri to 3.1.7.

[meta-codesync]

@cortinico has imported this pull request. If you are a Meta employee, you can view this in D122800934.

[meta-codesync]

@cortinico merged this pull request in 406a831.