From 44690d4bb8d7e5cc70bfbbabd6768926005e4909 Mon Sep 17 00:00:00 2001 From: huyplb Date: Sat, 31 Oct 2026 13:11:30 -0600 Subject: [PATCH] chore(deps): follow-redirects 1.16.2 (GHSA-mrwp-f3q8-3g9p, high) GHSA-mrwp-f3q8-3g9p (published 2026-10-30): follow-redirects 1.16.0 - 1.16.1 drops cross-realm sensitiveHeaders arrays, so custom credentials can follow a redirect. `npm audit --audit-level=high` fails on it, which turns the ESLint job red on every PR. The dependents' range (^1.16.0) already allows 1.16.2; only the lockfile entry changes, as `npm audit fix` would. Co-Authored-By: Claude Opus 5.5 --- package-lock.json | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/package-lock.json b/package-lock.json index dd395b44e..1910a4dba 100644 --- a/package-lock.json +++ b/package-lock.json @@ -6851,9 +6851,9 @@ "license": "ISC" }, "node_modules/follow-redirects": { - "version": "1.16.1", - "resolved": "https://registry.npmjs.org/follow-redirects/-/follow-redirects-1.16.1.tgz", - "integrity": "sha512-FNvFGzoMLWmE6Yj9spb/zjd7yiNCHiAW9/Tg9CXrQ8wuu32HtlJOwWO11OJafl5FfY3DxTdQ0vj42zU1kvv5jg==", + "version": "1.16.2", + "resolved": "https://registry.npmjs.org/follow-redirects/-/follow-redirects-1.16.2.tgz", + "integrity": "sha512-/kVP2U8z596Ia0gwFrwyIeo74ta5aVmSeU1FfAUMAmcEP5EP7zydmag3SLiN64NaRKef3lxsq7i/g7ltJQDGow==", "funding": [ { "type": "individual",