Skip to content

Bump follow-redirects from 1.15.11 to 1.16.0 in /functions/remediators/remediateGoogleAPIKey in the npm_and_yarn group across 1 directory#62

Open
dependabot[bot] wants to merge 3 commits into
mainfrom
dependabot/npm_and_yarn/functions/remediators/remediateGoogleAPIKey/npm_and_yarn-85af2c71bb
Open

Bump follow-redirects from 1.15.11 to 1.16.0 in /functions/remediators/remediateGoogleAPIKey in the npm_and_yarn group across 1 directory#62
dependabot[bot] wants to merge 3 commits into
mainfrom
dependabot/npm_and_yarn/functions/remediators/remediateGoogleAPIKey/npm_and_yarn-85af2c71bb

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Apr 14, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm_and_yarn group with 1 update in the /functions/remediators/remediateGoogleAPIKey directory: follow-redirects.

Updates follow-redirects from 1.15.11 to 1.16.0

Commits
  • 0c23a22 Release version 1.16.0 of the npm package.
  • 844c4d3 Add sensitiveHeaders option.
  • 5e8b8d0 ci: add Node.js 24.x to the CI matrix
  • 7953e22 ci: upgrade GitHub Actions to use setup-node@v6 and checkout@v6
  • 86dc1f8 Sanitizing input.
  • See full diff in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Apr 14, 2026
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/functions/remediators/remediateGoogleAPIKey/npm_and_yarn-85af2c71bb branch from 353a68f to 95e5ae2 Compare April 14, 2026 20:56
@felickz

felickz commented Apr 14, 2026

Copy link
Copy Markdown
Contributor

@dependabot recreate

Bumps the npm_and_yarn group with 1 update in the /functions/remediators/remediateGoogleAPIKey directory: [follow-redirects](https://github.com/follow-redirects/follow-redirects).


Updates `follow-redirects` from 1.15.11 to 1.16.0
- [Release notes](https://github.com/follow-redirects/follow-redirects/releases)
- [Commits](follow-redirects/follow-redirects@v1.15.11...v1.16.0)

---
updated-dependencies:
- dependency-name: follow-redirects
  dependency-version: 1.16.0
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/functions/remediators/remediateGoogleAPIKey/npm_and_yarn-85af2c71bb branch from 95e5ae2 to 9c1f776 Compare April 14, 2026 21:04

Copilot AI commented Apr 15, 2026

Copy link
Copy Markdown
Contributor

@copilot fix the failing CI (https://github.com/advanced-security/GSSAR/actions/runs/24422851753/job/71349408610?pr=62 https://github.com/advanced-security/GSSAR/actions/runs/24422851753/job/713494086...

Fixed in f548c28.

Two issues were causing the CI failures:

  1. remediateAWSAccessKey/yarn.lock: Had a syntax error (Invalid value type 1302:0) — regenerated the lockfile.
  2. remediateGoogleAPIKey TypeScript errors: After the googleapis version bump, auth.getClient() returns a broader union type that's incompatible with google.options({ auth }). Fixed by passing the GoogleAuth instance directly to google.options() instead of the resolved client.

Copilot AI requested a review from felickz April 15, 2026 20:57
@felickz felickz closed this Jun 24, 2026
@dependabot @github

dependabot Bot commented on behalf of github Jun 24, 2026

Copy link
Copy Markdown
Contributor Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@felickz felickz reopened this Jun 24, 2026

Copilot AI commented Jun 24, 2026

Copy link
Copy Markdown
Contributor

@copilot fix the failing CI (https://github.com/advanced-security/GSSAR/actions/runs/28130523137/job/83305290126?pr=62 https://github.com/advanced-security/GSSAR/actions/runs/28130523137/job/833052901...

Fixed in the latest commit. Two issues were causing the CI failures:

  1. yarn.lock syntax errors in functions/helpers/closeSecret and functions/helpers/githubIssueNotifier. The dependabot-generated lockfiles used a format (with dual sha1+sha512 integrity hashes and eslint@* wildcard keys) that yarn v1.22.22 in CI couldn't parse. Regenerated both lockfiles.

  2. CloudFormation Lint failure (exit code 4). The nodejs20.x Lambda runtime was deprecated on 2026-04-30, causing cfn-lint to emit W2531 warnings. Updated all Lambda runtimes in template.yml to nodejs22.x, along with the Node.js engine version in each function's package.json and the CI workflow node-version.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants