[Manual Backport 2.12][CVE-2023-26159] Bump follow-redirects from 1.1…

…5.2 to 1.15.4 (#5669) (#5859) * [CVE-2023-26159] Bump follow-redirects from 1.15.2 to 1.15.4 (#5669) Signed-off-by: Zilong Xia <[email protected]> (cherry picked from commit f2a44ae) Signed-off-by: Ashwin P Chandran <[email protected]> * fix changelog Signed-off-by: Ashwin P Chandran <[email protected]> --------- Signed-off-by: Zilong Xia <[email protected]> Signed-off-by: Ashwin P Chandran <[email protected]> Co-authored-by: ZilongX <[email protected]>
opensearch-project · Feb 9, 2024 · 359c3d1 · 359c3d1
1 parent bfc34aa
commit 359c3d1
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 4 deletions.
diff --git a/package.json b/package.json
@@ -88,6 +88,7 @@
     "**/d3-color": "^3.1.0",
     "**/flat": "^5.0.2",
     "**/elasticsearch/agentkeepalive": "^4.5.0",
+    "**/follow-redirects": "^1.15.4",
     "**/glob-parent": "^6.0.0",
     "**/hoist-non-react-statics": "^3.3.2",
     "**/json-schema": "^0.4.0",

diff --git a/yarn.lock b/yarn.lock
@@ -8826,10 +8826,10 @@ focus-lock@^0.10.2:
   dependencies:
     tslib "^2.0.3"
 
-follow-redirects@^1.14.9, follow-redirects@^1.15.0:
-  version "1.15.2"
-  resolved "https://registry.yarnpkg.com/follow-redirects/-/follow-redirects-1.15.2.tgz#b460864144ba63f2681096f274c4e57026da2c13"
-  integrity sha512-VQLG33o04KaQ8uYi2tVNbdrWp1QWxNNea+nmIB4EVM28v0hmP17z7aG1+wAkNzVq4KeXTq3221ye5qTJP91JwA==
+follow-redirects@^1.14.9, follow-redirects@^1.15.0, follow-redirects@^1.15.4:
+  version "1.15.5"
+  resolved "https://registry.yarnpkg.com/follow-redirects/-/follow-redirects-1.15.5.tgz#54d4d6d062c0fa7d9d17feb008461550e3ba8020"
+  integrity sha512-vSFWUON1B+yAw1VN4xMfxgn5fTUiaOzAJCKBwIIgT/+7CuGy9+r+5gITvP62j3RmaD5Ph65UaERdOSRGUzZtgw==
 
 [email protected]:
   version "4.7.0"