From 1f00735adddaa587005114d5feda4add6721dc20 Mon Sep 17 00:00:00 2001 From: Ashwin P Chandran Date: Fri, 9 Feb 2024 19:39:18 -0800 Subject: [PATCH] [CVE-2023-26159] Bump follow-redirects from 1.15.2 to 1.15.4 (#5669) (#5860) (cherry picked from commit f2a44ae0d3dd87ac9d693b71ad7fa9484c1df0ec) Signed-off-by: Zilong Xia Signed-off-by: Ashwin P Chandran Co-authored-by: ZilongX <99905560+ZilongX@users.noreply.github.com> --- package.json | 1 + yarn.lock | 8 ++++---- 2 files changed, 5 insertions(+), 4 deletions(-) diff --git a/package.json b/package.json index 85d299eb3148..377ecaaa881f 100644 --- a/package.json +++ b/package.json @@ -88,6 +88,7 @@ "**/d3-color": "^3.1.0", "**/flat": "^5.0.2", "**/elasticsearch/agentkeepalive": "^4.5.0", + "**/follow-redirects": "^1.15.4", "**/glob-parent": "^6.0.0", "**/hoist-non-react-statics": "^3.3.2", "**/json-schema": "^0.4.0", diff --git a/yarn.lock b/yarn.lock index d88b76be5734..c4c000ef403a 100644 --- a/yarn.lock +++ b/yarn.lock @@ -8826,10 +8826,10 @@ focus-lock@^0.10.2: dependencies: tslib "^2.0.3" -follow-redirects@^1.14.9, follow-redirects@^1.15.0: - version "1.15.2" - resolved "https://registry.yarnpkg.com/follow-redirects/-/follow-redirects-1.15.2.tgz#b460864144ba63f2681096f274c4e57026da2c13" - integrity sha512-VQLG33o04KaQ8uYi2tVNbdrWp1QWxNNea+nmIB4EVM28v0hmP17z7aG1+wAkNzVq4KeXTq3221ye5qTJP91JwA== +follow-redirects@^1.14.9, follow-redirects@^1.15.0, follow-redirects@^1.15.4: + version "1.15.4" + resolved "https://registry.yarnpkg.com/follow-redirects/-/follow-redirects-1.15.4.tgz#cdc7d308bf6493126b17ea2191ea0ccf3e535adf" + integrity sha512-Cr4D/5wlrb0z9dgERpUL3LrmPKVDsETIJhaCMeDfuFYcqa5bldGV6wBsAN6X/vxlXQtFBMrXdXxdL8CbDTGniw== font-awesome@4.7.0: version "4.7.0"