Skip to content

GH#89: remediate follow-redirects dependency alert - #90

Merged
superdav42 merged 1 commit into
mainfrom
feature/auto-20261104-170009-gh89
Nov 5, 2026
Merged

superdav42 merged 1 commit into
mainfrom
feature/auto-20261104-170009-gh89

Conversation

@superdav42

Copy link
Copy Markdown
Collaborator

Summary

  • update the locked follow-redirects package from 1.16.1 to 1.16.2
  • retain the existing transitive dependency range and lockfile format

Testing

  • npm ci --ignore-scripts
  • npm run lint
  • npm run build
  • npm audit --audit-level=high
  • npm ls follow-redirects --all

Runtime Testing

Self-assessed dependency-only lockfile update; build and lint passed.

Resolves #89


aidevops.sh v3.39.119 plugin for OpenCode v1.19.5 with gpt-5.6-sol spent 7m and 51,408 tokens on this as a headless worker.

@superdav42 superdav42 added the origin:worker Created by headless/pulse worker session label Nov 5, 2026
@coderabbitai

coderabbitai Bot commented Nov 5, 2026 •

Copy link
Copy Markdown

Important

Review skipped

Review was skipped due to path filters

⛔ Files ignored due to path filters: 1

  • package-lock.json is excluded by !**/package-lock.json

CodeRabbit blocks several paths by default. You can override this behavior by explicitly including those paths in the path filters. For example, including **/dist/** will override the default block on the dist directory, by removing the pattern from both the lists.

Run configuration

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

@superdav42

Copy link
Copy Markdown
Collaborator Author

Completion Summary

  • What: Updated the locked follow-redirects transitive dependency from 1.16.1 to the patched 1.16.2 release.
  • Issue: Remediate dependency alert: follow-redirects (npm) #89
  • Files changed: package-lock.json
  • Testing: npm ci --ignore-scripts; npm run lint; npm run build; npm audit --audit-level=high; npm ls follow-redirects --all; git diff --check
  • Key decisions: Kept the remediation lockfile-only because the existing axios dependency range already admits 1.16.2; remaining audit findings are low/moderate and unrelated to this issue.

aidevops.sh v3.39.119 plugin for OpenCode v1.19.5 with gpt-5.6-sol spent 8m and 54,155 tokens on this as a headless worker.

@superdav42
superdav42 marked this pull request as ready for review November 5, 2026 00:09
@superdav42
superdav42 merged commit b077802 into main Nov 5, 2026
3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

origin:worker Created by headless/pulse worker session

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Remediate dependency alert: follow-redirects (npm)

1 participant