From 2822fdbe47c56216db71ae94335a5e2c076e40c3 Mon Sep 17 00:00:00 2001 From: Tomas Rutkauskas Date: Mon, 9 Nov 2026 15:48:34 +0200 Subject: [PATCH] deps: bump follow-redirects from 1.16.1 to 1.16.3 follow-redirects 1.16.0 - 1.16.1 has the high-severity advisory https://github.com/advisories/GHSA-mrwp-f3q8-3g9p, fixed in 1.16.2. axios requires follow-redirects ^1.16.0 and the lockfile resolved it to 1.16.1, so `npm audit --omit=dev --audit-level=high` in the build job has failed on main since 2026-11-07. `npm update follow-redirects` moves only this entry, to 1.16.3, the latest. Co-Authored-By: Claude Opus 5.5 --- package-lock.json | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/package-lock.json b/package-lock.json index 5f870bf..a09dcb1 100644 --- a/package-lock.json +++ b/package-lock.json @@ -3727,9 +3727,9 @@ } }, "node_modules/follow-redirects": { - "version": "1.16.1", - "resolved": "https://registry.npmjs.org/follow-redirects/-/follow-redirects-1.16.1.tgz", - "integrity": "sha512-FNvFGzoMLWmE6Yj9spb/zjd7yiNCHiAW9/Tg9CXrQ8wuu32HtlJOwWO11OJafl5FfY3DxTdQ0vj42zU1kvv5jg==", + "version": "1.16.3", + "resolved": "https://registry.npmjs.org/follow-redirects/-/follow-redirects-1.16.3.tgz", + "integrity": "sha512-toOSoqN6d51Wjf1aOFJYcoVv1aND9rj/CwjLU0Vz40oDuSpWDayCeKe4JpL5NL0WdFvoOOCI3BRo69HahjbR1A==", "funding": [ { "type": "individual",