Skip to content

Bump follow-redirects from 1.15.11 to 1.16.0 in /functions/remediators/remediateGoogleAPIKey in the npm_and_yarn group across 1 directory#62

Open
dependabot[bot] wants to merge 2 commits intomainfrom
dependabot/npm_and_yarn/functions/remediators/remediateGoogleAPIKey/npm_and_yarn-85af2c71bb
Open

Bump follow-redirects from 1.15.11 to 1.16.0 in /functions/remediators/remediateGoogleAPIKey in the npm_and_yarn group across 1 directory#62
dependabot[bot] wants to merge 2 commits intomainfrom
dependabot/npm_and_yarn/functions/remediators/remediateGoogleAPIKey/npm_and_yarn-85af2c71bb

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Apr 14, 2026

Bumps the npm_and_yarn group with 1 update in the /functions/remediators/remediateGoogleAPIKey directory: follow-redirects.

Updates follow-redirects from 1.15.11 to 1.16.0

Commits
  • 0c23a22 Release version 1.16.0 of the npm package.
  • 844c4d3 Add sensitiveHeaders option.
  • 5e8b8d0 ci: add Node.js 24.x to the CI matrix
  • 7953e22 ci: upgrade GitHub Actions to use setup-node@v6 and checkout@v6
  • 86dc1f8 Sanitizing input.
  • See full diff in compare view

@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Apr 14, 2026
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/functions/remediators/remediateGoogleAPIKey/npm_and_yarn-85af2c71bb branch from 353a68f to 95e5ae2 Compare April 14, 2026 20:56
@felickz
Copy link
Copy Markdown
Contributor

felickz commented Apr 14, 2026

@dependabot recreate

Bumps the npm_and_yarn group with 1 update in the /functions/remediators/remediateGoogleAPIKey directory: [follow-redirects](https://github.com/follow-redirects/follow-redirects).


Updates `follow-redirects` from 1.15.11 to 1.16.0
- [Release notes](https://github.com/follow-redirects/follow-redirects/releases)
- [Commits](follow-redirects/follow-redirects@v1.15.11...v1.16.0)

---
updated-dependencies:
- dependency-name: follow-redirects
  dependency-version: 1.16.0
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/functions/remediators/remediateGoogleAPIKey/npm_and_yarn-85af2c71bb branch from 95e5ae2 to 9c1f776 Compare April 14, 2026 21:04
Copy link
Copy Markdown
Contributor

Copilot AI commented Apr 15, 2026

@copilot fix the failing CI (https://github.com/advanced-security/GSSAR/actions/runs/24422851753/job/71349408610?pr=62 https://github.com/advanced-security/GSSAR/actions/runs/24422851753/job/713494086...

Fixed in f548c28.

Two issues were causing the CI failures:

  1. remediateAWSAccessKey/yarn.lock: Had a syntax error (Invalid value type 1302:0) — regenerated the lockfile.
  2. remediateGoogleAPIKey TypeScript errors: After the googleapis version bump, auth.getClient() returns a broader union type that's incompatible with google.options({ auth }). Fixed by passing the GoogleAuth instance directly to google.options() instead of the resolved client.

Copilot AI requested a review from felickz April 15, 2026 20:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants