Skip to content

chore: upgrade follow-redirects to 1.16.0#28894

Merged
volnei merged 3 commits intomainfrom
chore/bump-follow-redirects
Apr 15, 2026
Merged

chore: upgrade follow-redirects to 1.16.0#28894
volnei merged 3 commits intomainfrom
chore/bump-follow-redirects

Conversation

@pedroccastro
Copy link
Copy Markdown
Contributor

What does this PR do?

Adds a yarn resolution bumping follow-redirects to 1.16.0 across the dependency tree. Deduplicates the two installed copies pulled by axios and http-proxy

Changes

  • package.json: added "follow-redirects": "1.16.0" to resolutions.

Context

follow-redirects is consumed by two transitive dependencies:

  • axios@1.15.0follow-redirects@1.15.11 (caret range ^1.15.11)
  • http-proxy@1.18.1follow-redirects@1.15.6 (caret range ^1.0.0)

Both ranges already allow 1.16.0. The resolution deduplicates them to a single patched version. Bump is minor (1.15.11 → 1.16.0 and 1.15.6 → 1.16.0).

Changes in 1.16.0:

  1. Input sanitization
  2. New optional sensitiveHeaders configuration option (backward-compatible)
  3. CI updates (Node.js 24)

How should this be tested?

  1. yarn install completes without errors
  2. yarn type-check:ci passes
  3. CI/CD pipeline validates build

Mandatory Tasks

  • I have self-reviewed the code (A decent size PR without self-review might be rejected).
  • N/A I have updated the developer docs in /docs if this PR makes changes that would require a documentation change.
  • I confirm automated tests are in place that prove my fix is effective or that my feature works.

@coderabbitai
Copy link
Copy Markdown
Contributor

coderabbitai bot commented Apr 14, 2026

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: 0db1c280-4740-474a-9a34-a5a108b1fbc1

📥 Commits

Reviewing files that changed from the base of the PR and between a17f28e and b75a216.

⛔ Files ignored due to path filters (1)
  • yarn.lock is excluded by !**/yarn.lock, !**/*.lock
📒 Files selected for processing (1)
  • package.json

📝 Walkthrough

Walkthrough

This pull request introduces a new dependency to the project's package configuration. The follow-redirects package at version 1.16.0 is added to the root package.json file. No modifications are made to existing dependencies, scripts, workspace configuration, or public APIs.

🚥 Pre-merge checks | ✅ 3
✅ Passed checks (3 passed)
Check name Status Explanation
Title check ✅ Passed The title 'chore: upgrade follow-redirects to 1.16.0' directly and clearly summarizes the main change in the PR, which is updating the follow-redirects dependency to version 1.16.0.
Description check ✅ Passed The description is directly related to the changeset, explaining what the PR does, the changes made to package.json, the context around follow-redirects versions, and testing instructions.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch chore/bump-follow-redirects

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

@volnei volnei merged commit 363c9d6 into main Apr 15, 2026
35 checks passed
@volnei volnei deleted the chore/bump-follow-redirects branch April 15, 2026 14:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants