diff --git a/.gitignore b/.gitignore
index eeb4a8e..56d24dd 100644
--- a/.gitignore
+++ b/.gitignore
@@ -43,3 +43,6 @@ NAAP/
 
 # Flash decompilation tooling (npm run decompile) — downloaded FFDec
 tools/ffdec/
+
+# CI / local npm audit artifact (must not be linted)
+audit.json
diff --git a/package-lock.json b/package-lock.json
index c1fe76f..5c94451 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -5425,9 +5425,9 @@
       "license": "MIT"
     },
     "node_modules/fast-uri": {
-      "version": "3.1.2",
-      "resolved": "https://registry.npmjs.org/fast-uri/-/fast-uri-3.1.2.tgz",
-      "integrity": "sha512-rVjf7ArG3LTk+FS6Yw81V1DLuZl1bRbNrev6Tmd/9RaroeeRRJhAt7jg/6YFxbvAQXUCavSoZhPPj6oOx+5KjQ==",
+      "version": "3.1.4",
+      "resolved": "https://registry.npmjs.org/fast-uri/-/fast-uri-3.1.4.tgz",
+      "integrity": "sha512-8JnbkQ4juDyvYs4mgFGQqg4yCYtFDtUtmp2QIQq11ZZe5CFQ5wcqm1rqDgAh/QdMySuBnPzMUiJUNZG5N/AiQw==",
       "dev": true,
       "funding": [
         {