Skip to content

build(deps): bump follow-redirects from 1.16.1 to 1.16.3 - #1794

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/follow-redirects-1.16.3
Open

build(deps): bump follow-redirects from 1.16.1 to 1.16.3#1794
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/follow-redirects-1.16.3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 9, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps follow-redirects from 1.16.1 to 1.16.3.

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Nov 9, 2026
@chagong

Changyong Gong (chagong) commented Nov 9, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Decision: NOT_MERGED

Dependabot PR Manager result

Repository: microsoft/vscode-java-pack
Pull request: microsoft/vscode-java-pack#1794 - build(deps): bump follow-redirects from 1.16.1 to 1.16.3
Update: follow-redirects 1.16.1 -> 1.16.3 (patch, transitive runtime dependency).
Safety assessment: Dependabot-only history; Standard Dependency Gate, lockfile-only diff. Axios runtime usage and npm dependency tree confirm necessity; low-risk patch, but upstream maintenance is paused.
Final state: Head 83c78f9; OPEN, MERGEABLE, BLOCKED; REVIEW_REQUIRED. CI: 84 SUCCESS, 1 NEUTRAL, 1 SKIPPED, 2 FAILURE, 0 pending. INDETERMINATE: VSCode-Java-Pack-CI-Build and VSCode-Java-Pack-CI-Build (Build Validate dependencies from CFS).
Actions taken: Dependabot rebased 3c0fe9d -> 83c78f9 onto 735cbc4; verified ancestry, package diff, npm tree and registry integrity. Reran the failed macOS Java 25 Gradle job once; it passed, confirming the prior Gradle-version mismatch as FLAKY_OR_TRANSIENT. Updated local manager guidance for live-base and pending-check detection; no target source edits, approval or merge.
Reason: Azure CFS validation exited with code 1; full logs require authentication (HTTP 401), so failure causality is unverified. Code-owner approval is also required.
Next action: Inspect Azure build 32549254, establish and resolve the CFS failure, rerun checks, and obtain code-owner approval.

@chagong

Changyong Gong (chagong) commented Nov 10, 2026

Copy link
Copy Markdown
Contributor

Dependabot (@dependabot) rebase

@dependabot
build(deps): bump follow-redirects from 1.16.1 to 1.16.3
83c78f9 
Bumps [follow-redirects](https://github.com/follow-redirects/follow-redirects) from 1.16.1 to 1.16.3.
- [Release notes](https://github.com/follow-redirects/follow-redirects/releases)
- [Commits](follow-redirects/follow-redirects@v1.16.1...v1.16.3)

---
updated-dependencies:
- dependency-name: follow-redirects
  dependency-version: 1.16.3
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/follow-redirects-1.16.3 branch from 3c0fe9d to 83c78f9 Compare November 10, 2026 10:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@jdneo Sheng Chen (jdneo) Awaiting requested review from jdneo jdneo is a code owner
@testforstephen Jinbo Wang (testforstephen) Awaiting requested review from testforstephen testforstephen is a code owner
@chagong Changyong Gong (chagong) Awaiting requested review from chagong chagong is a code owner
@wenytang-ms wenyt (wenytang-ms) Awaiting requested review from wenytang-ms wenytang-ms is a code owner

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@chagong