diff --git a/apps/dashboard/package-lock.json b/apps/dashboard/package-lock.json
index 9941622..c27ffae 100644
--- a/apps/dashboard/package-lock.json
+++ b/apps/dashboard/package-lock.json
@@ -6033,9 +6033,9 @@
       "license": "MIT"
     },
     "node_modules/fast-uri": {
-      "version": "3.1.5",
-      "resolved": "https://registry.npmjs.org/fast-uri/-/fast-uri-3.1.5.tgz",
-      "integrity": "sha512-gHwA1O9LDIcKunMKhObS/HimwtehO1nPUECKAu5TpKgaO19fcWEl4bliWe1jWxVFvIXztJjjQ4L8XQ1EU9f7Jw==",
+      "version": "3.1.7",
+      "resolved": "https://registry.npmjs.org/fast-uri/-/fast-uri-3.1.7.tgz",
+      "integrity": "sha512-dOvZVzjdZdz7phd9v6jCbwxrBW3fK6n8Rc0CtdmM4bumzMnxywBYhuph6J819RRw/ku+rLbelwfMunktuzVVHg==",
       "funding": [
         {
           "type": "github",
diff --git a/apps/dashboard/package.json b/apps/dashboard/package.json
index 0d9721f..3cf6b2e 100644
--- a/apps/dashboard/package.json
+++ b/apps/dashboard/package.json
@@ -42,7 +42,7 @@
   "overrides": {
     "sharp": "^0.35.3",
     "@hono/node-server": "^1.19.17",
-    "fast-uri": "^3.1.5"
+    "fast-uri": "^3.1.7"
   },
   "overridesNote": {
     "reason": "sharp is an optional transitive of next. Its only caller is the image optimizer, which next.config.js disables (images.unoptimized) and which cannot run in a static export anyway, so the libvips advisory is unreachable here. The override closes the alert without taking Next 16, which is what Dependabot's sharp PR actually proposed.",