Skip to content

build(deps): bump follow-redirects from 1.16.1 to 1.16.3 - #1794

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/follow-redirects-1.16.3
Open

build(deps): bump follow-redirects from 1.16.1 to 1.16.3#1794
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/follow-redirects-1.16.3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 9, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps follow-redirects from 1.16.1 to 1.16.3.

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Nov 9, 2026
@chagong

Changyong Gong (chagong) commented Nov 9, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Decision: NOT_MERGED

Dependabot PR Manager result

Repository: microsoft/vscode-java-pack
Pull request: microsoft/vscode-java-pack#1794 - build(deps): bump follow-redirects from 1.16.1 to 1.16.3
Update: follow-redirects 1.16.1 -> 1.16.3 (transitive patch).
Safety assessment: Dependabot-only history; standard dependency gate, lockfile-only diff. Runtime axios requires this transitive dependency; upstream maintenance is paused.
Final state: Head 83c78f9; OPEN, MERGEABLE, BLOCKED, REVIEW_REQUIRED. CI: 84 success, 1 neutral, 1 skipped, 2 failed, 0 pending. INDETERMINATE: VSCode-Java-Pack-CI-Build and VSCode-Java-Pack-CI-Build (Build Validate dependencies from CFS).
Actions taken: Verified ancestry, diff, dependency relationship, upstream patch and registry integrity; inspected check annotations and pipeline configuration. CI log lookup found no matching GitHub Actions job; Azure build and timeline APIs returned HTTP 401. No rebase, rerun, remediation, approval or merge.
Reason: CFS validation failed with Bash exit 1; inaccessible logs prevent determining causality. Code-owner approval is required; classic branch protection returned HTTP 403.
Next action: Inspect Azure build 32549254 with authorized access, classify and resolve the failures, verify required-check policy and obtain code-owner approval.

@chagong

Changyong Gong (chagong) commented Nov 10, 2026

Copy link
Copy Markdown
Contributor

Dependabot (@dependabot) rebase

@dependabot
build(deps): bump follow-redirects from 1.16.1 to 1.16.3
83c78f9 
Bumps [follow-redirects](https://github.com/follow-redirects/follow-redirects) from 1.16.1 to 1.16.3.
- [Release notes](https://github.com/follow-redirects/follow-redirects/releases)
- [Commits](follow-redirects/follow-redirects@v1.16.1...v1.16.3)

---
updated-dependencies:
- dependency-name: follow-redirects
  dependency-version: 1.16.3
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/follow-redirects-1.16.3 branch from 3c0fe9d to 83c78f9 Compare November 10, 2026 10:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@jdneo Sheng Chen (jdneo) Awaiting requested review from jdneo jdneo is a code owner
@testforstephen Jinbo Wang (testforstephen) Awaiting requested review from testforstephen testforstephen is a code owner
@chagong Changyong Gong (chagong) Awaiting requested review from chagong chagong is a code owner
@wenytang-ms wenyt (wenytang-ms) Awaiting requested review from wenytang-ms wenytang-ms is a code owner

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@chagong