[dependabot]

Bumps follow-redirects from 1.16.0 to 1.16.1.

Commits

• 4630125 Release version 1.16.1 of the npm package.
• 9865ca4 Support key/value header arrays.
• 080a76d Escape all RegExp modifiers.
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.

[Changyong Gong (chagong)]

Decision: MERGED

Dependabot PR Manager result

Repository: microsoft/vscode-java-pack
Pull request: microsoft/vscode-java-pack#1785 - build(deps): bump follow-redirects from 1.16.0 to 1.16.1
Update: follow-redirects 1.16.0 -> 1.16.1 (patch; transitive runtime dependency).
Safety assessment: One Dependabot-authored commit; Standard Dependency Gate passed with only the expected lockfile version, URL, and integrity changes. Axios requires follow-redirects for HTTP redirects used by JDK discovery and formatter downloads; removal is inappropriate. Upstream patch and Node requirements reviewed; low risk. No unresolved review threads.
Final state: MERGED at 2026-10-21T07:37:24Z; head 5bc08f3; squash commit e67448f; review APPROVED; mergeability/state UNKNOWN after merge (CLEAN and MERGEABLE immediately before merge). Current-head CI: 77 successful, 1 skipped, 0 failed, 0 pending.
Actions taken: Verified base ancestry (behind_by=0); no branch update or remediation needed. Reviewed all three failed E2E job logs and diagnostic artifacts. Reran failed jobs in run 39474008213 once; attempt 2 passed unchanged, classifying Windows java27-primitive-patterns (hidden output panel), Ubuntu java-extension-pack (JDK selector), and macOS java-gradle-java27 (source-compliance metadata) as FLAKY_OR_TRANSIENT. Verified existing current-head CI clean installation, 79/79 unit tests, production build, VSIX packaging, and E2E checks. Approved the audited head, refreshed reviews/checks/ancestry, squash-merged, and verified mergedAt. No source changes, commits, or pushes. Classic protection API returned 403; active branch rules, required-check query, and final GitHub merge eligibility were inspected.
Reason: None
Next action: None