Skip to content

chore(deps): bump follow-redirects from 1.16.0 to 1.16.2 - #3559

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/follow-redirects-1.16.2
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/follow-redirects-1.16.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 4, 2026 •

Copy link
Copy Markdown
Contributor

Bumps follow-redirects from 1.16.0 to 1.16.2.

Commits
  • e3b45a7 Release version 1.16.2 of the npm package.
  • b0a7751 Use Array.isArray.
  • d96d1fe Add funding emergency notice.
  • 4630125 Release version 1.16.1 of the npm package.
  • 9865ca4 Support key/value header arrays.
  • 080a76d Escape all RegExp modifiers.
  • See full diff in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Nov 4, 2026
Bumps [follow-redirects](https://github.com/follow-redirects/follow-redirects) from 1.16.0 to 1.16.2.
- [Release notes](https://github.com/follow-redirects/follow-redirects/releases)
- [Commits](follow-redirects/follow-redirects@v1.16.0...v1.16.2)

---
updated-dependencies:
- dependency-name: follow-redirects
  dependency-version: 1.16.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/follow-redirects-1.16.2 branch from 6298a4c to f04eb75 Compare November 4, 2026 09:38

@numbers-official numbers-official left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Automated Code Review (Heartbeat Deep Check)

Reviewed the diff: pure package-lock.json bump of transitive follow-redirects 1.16.0 → 1.16.2 (patch) under devDependencies. Only version + integrity hash change. No source code changes; no production bundle impact.

Findings

  • No regression risks, bugs, or security concerns identified. GitHub Actions checks on current head f04eb75 are all green: changes, Normalize npm lockfile, lint, test, android all SUCCESS; ios SKIPPED (same handling as prior Dependabot PRs); CodeQL SKIPPED (informational). mergeStateStatus=CLEAN, mergeable=MERGEABLE.

Summary

LGTM from automated review. Safe to merge once a human approves. PR is still within the 72h grace window — this is an advance review to assist human triage, not a replacement.

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant