From 16ae5d156ce939abe33cf2b6e13b3f35dc223515 Mon Sep 17 00:00:00 2001 From: Claude Date: Mon, 2 Nov 2026 08:24:33 +0000 Subject: [PATCH] fix(ci): bump follow-redirects to 1.16.2 and SHA-pin check-wix-proxy actions Security Audit: follow-redirects 1.16.1 (via axios) has a high advisory, GHSA-mrwp-f3q8-3g9p, fixed in 1.16.2. Lockfile-only bump. Check Wix Gateway Proxy: every run ended in startup_failure. It was the only workflow using tag refs (actions/checkout@v4, actions/setup-python@v6); every other workflow pins to a full commit SHA and starts fine. Pin both. Co-Authored-By: Claude Opus 5.5 Claude-Session: https://claude.ai/code/session_012ZeH66ieSwEVEmXBvFWP9t --- .github/workflows/check-wix-proxy.yml | 4 ++-- package-lock.json | 6 +++--- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/.github/workflows/check-wix-proxy.yml b/.github/workflows/check-wix-proxy.yml index 7321799f..3caee833 100644 --- a/.github/workflows/check-wix-proxy.yml +++ b/.github/workflows/check-wix-proxy.yml @@ -17,13 +17,13 @@ jobs: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 - name: Wix gateway proxy (mandatory) uses: ./.github/actions/wix-gateway-proxy - name: Set up Python - uses: actions/setup-python@v6 + uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0 with: python-version: "3.12" diff --git a/package-lock.json b/package-lock.json index f7e3155f..6164ffc1 100644 --- a/package-lock.json +++ b/package-lock.json @@ -3022,9 +3022,9 @@ "license": "ISC" }, "node_modules/follow-redirects": { - "version": "1.16.1", - "resolved": "https://registry.npmjs.org/follow-redirects/-/follow-redirects-1.16.1.tgz", - "integrity": "sha512-FNvFGzoMLWmE6Yj9spb/zjd7yiNCHiAW9/Tg9CXrQ8wuu32HtlJOwWO11OJafl5FfY3DxTdQ0vj42zU1kvv5jg==", + "version": "1.16.2", + "resolved": "https://registry.npmjs.org/follow-redirects/-/follow-redirects-1.16.2.tgz", + "integrity": "sha512-/kVP2U8z596Ia0gwFrwyIeo74ta5aVmSeU1FfAUMAmcEP5EP7zydmag3SLiN64NaRKef3lxsq7i/g7ltJQDGow==", "funding": [ { "type": "individual",