From 3d305c8182f992af1fec29f56c3e2bc2deac22ba Mon Sep 17 00:00:00 2001 From: SylvainDruaux Date: Tue, 20 Oct 2026 23:03:33 +0200 Subject: [PATCH] build(deps): update follow-redirects and vite for security fixes Problem: npm audit reports a high severity issue in follow-redirects 1.16.0 (credential headers kept across cross-origin redirects), pulled in by wait-on through axios, and a moderate one in vite 6.4.3. Both are development tools only. Solution: update the lockfile to follow-redirects 1.16.1 and vite 6.4.4, within the ranges package.json already allows. npm update on the two packages, rather than npm audit fix, keeps every other entry unchanged. --- package-lock.json | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/package-lock.json b/package-lock.json index cd14bf53..0f13c272 100644 --- a/package-lock.json +++ b/package-lock.json @@ -5875,9 +5875,9 @@ "license": "ISC" }, "node_modules/follow-redirects": { - "version": "1.16.0", - "resolved": "https://registry.npmjs.org/follow-redirects/-/follow-redirects-1.16.0.tgz", - "integrity": "sha512-y5rN/uOsadFT/JfYwhxRS5R7Qce+g3zG97+JrtFZlC9klX/W5hD7iiLzScI4nZqUS7DNUdhPgw4xI8W2LuXlUw==", + "version": "1.16.1", + "resolved": "https://registry.npmjs.org/follow-redirects/-/follow-redirects-1.16.1.tgz", + "integrity": "sha512-FNvFGzoMLWmE6Yj9spb/zjd7yiNCHiAW9/Tg9CXrQ8wuu32HtlJOwWO11OJafl5FfY3DxTdQ0vj42zU1kvv5jg==", "dev": true, "funding": [ { @@ -8856,9 +8856,9 @@ } }, "node_modules/vite": { - "version": "6.4.3", - "resolved": "https://registry.npmjs.org/vite/-/vite-6.4.3.tgz", - "integrity": "sha512-NTKlcQjlAK7MlQoyb6LgaqHc8sso/pVyUJYWMws3jg21uTJw/LddqIFPcPqP6PzpgbIcZyKI85sFE4HBrQDA8A==", + "version": "6.4.4", + "resolved": "https://registry.npmjs.org/vite/-/vite-6.4.4.tgz", + "integrity": "sha512-xGjU/SyjeNyb0E4KxXBvYz/1C+3JXuujvf2hXNOtnlcE+58o5ajd9N2/n2VhkiJvpCP2qQasnUpx5PXNeI+p1Q==", "dev": true, "license": "MIT", "dependencies": {