Skip to content

chore(deps): bump follow-redirects from 1.16.0 to 1.16.2 in /docs-site - #190

Merged
Awuqing merged 3 commits into
mainfrom
dependabot/npm_and_yarn/docs-site/follow-redirects-1.16.1
Oct 31, 2026
Merged

Awuqing merged 3 commits into
mainfrom
dependabot/npm_and_yarn/docs-site/follow-redirects-1.16.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 23, 2026 •

Copy link
Copy Markdown
Contributor

将文档站的间接依赖 follow-redirects 从 1.16.0 更新到 1.16.2,保留现有直接依赖范围。

1.16.1 仍受 GHSA-mrwp-f3q8-3g9p 影响,因此补到已修复的 1.16.2,避免跨 JavaScript realm 的 sensitiveHeaders 数组校验失效。

验证:npm ci 和中英文文档生产构建通过;完整检查由本 PR 的 CI 执行。

Bumps [follow-redirects](https://github.com/follow-redirects/follow-redirects) from 1.16.0 to 1.16.1.
- [Release notes](https://github.com/follow-redirects/follow-redirects/releases)
- [Commits](follow-redirects/follow-redirects@v1.16.0...v1.16.1)

---
updated-dependencies:
- dependency-name: follow-redirects
  dependency-version: 1.16.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 23, 2026
@Awuqing Awuqing changed the title chore(deps): bump follow-redirects from 1.16.0 to 1.16.1 in /docs-site chore(deps): bump follow-redirects from 1.16.0 to 1.16.2 in /docs-site Oct 31, 2026
@Awuqing
Awuqing merged commit f9d7c16 into main Oct 31, 2026
11 checks passed
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/docs-site/follow-redirects-1.16.1 branch October 31, 2026 07:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant