From ee67aaf9fa6a0ba4b0831ffe65a57d6b7468af80 Mon Sep 17 00:00:00 2001 From: support Date: Sat, 31 Oct 2026 08:44:54 +0100 Subject: [PATCH] Update follow-redirects to 1.16.2 in the storefront lockfile The Trivy filesystem gate fails on develop: 1.16.1 has CVE-2026-116689, fixed in 1.16.2. The package comes in through axios, whose range already allows the new version, so only the lockfile moves. --- src/Web/Grand.Web/vueapp/package-lock.json | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/src/Web/Grand.Web/vueapp/package-lock.json b/src/Web/Grand.Web/vueapp/package-lock.json index 0212ace8c..3e512ae0e 100644 --- a/src/Web/Grand.Web/vueapp/package-lock.json +++ b/src/Web/Grand.Web/vueapp/package-lock.json @@ -1842,9 +1842,9 @@ "license": "ISC" }, "node_modules/follow-redirects": { - "version": "1.16.1", - "resolved": "https://registry.npmjs.org/follow-redirects/-/follow-redirects-1.16.1.tgz", - "integrity": "sha512-FNvFGzoMLWmE6Yj9spb/zjd7yiNCHiAW9/Tg9CXrQ8wuu32HtlJOwWO11OJafl5FfY3DxTdQ0vj42zU1kvv5jg==", + "version": "1.16.2", + "resolved": "https://registry.npmjs.org/follow-redirects/-/follow-redirects-1.16.2.tgz", + "integrity": "sha512-/kVP2U8z596Ia0gwFrwyIeo74ta5aVmSeU1FfAUMAmcEP5EP7zydmag3SLiN64NaRKef3lxsq7i/g7ltJQDGow==", "funding": [ { "type": "individual",