fix(deps): mitigate critical and high security vulnerabilities (#6250)

Fluf22 · web-flow · commit 4049f8aaf75b · 2026-04-14T12:51:10.000Z
diff --git a/clients/algoliasearch-client-javascript/package.json b/clients/algoliasearch-client-javascript/package.json
@@ -79,6 +79,10 @@
       }
     ]
   },
+  "resolutions": {
+    "bundlewatch/axios": "^1.15.0",
+    "follow-redirects": "^1.16.0"
+  },
   "engines": {
     "node": ">= 14.0.0",
     "yarn": "^4.0.0"
diff --git a/clients/algoliasearch-client-javascript/yarn.lock b/clients/algoliasearch-client-javascript/yarn.lock
@@ -3075,17 +3075,6 @@ __metadata:
   languageName: node
   linkType: hard
 
-"axios@npm:^0.30.0":
-  version: 0.30.3
-  resolution: "axios@npm:0.30.3"
-  dependencies:
-    follow-redirects: "npm:^1.15.4"
-    form-data: "npm:^4.0.4"
-    proxy-from-env: "npm:^1.1.0"
-  checksum: 10/a39b790b89e78ff058322ecf8c2e42f5293387b4b5d0f1c2f15c35d4187ad6a786e0e044480b39cd7126dfd180b33c9f1bedc76b79a65a8db8e014b3509281a7
-  languageName: node
-  linkType: hard
-
 "axios@npm:^1.12.0":
   version: 1.13.2
   resolution: "axios@npm:1.13.2"
@@ -3097,6 +3086,17 @@ __metadata:
   languageName: node
   linkType: hard
 
+"axios@npm:^1.15.0":
+  version: 1.15.0
+  resolution: "axios@npm:1.15.0"
+  dependencies:
+    follow-redirects: "npm:^1.15.11"
+    form-data: "npm:^4.0.5"
+    proxy-from-env: "npm:^2.1.0"
+  checksum: 10/d39a2c0ebc7ff4739401b282e726cc2673377949d6c46d60eb619458f8d7a2f7eadbcada7097f4dbc7d5c59abb4d3bf6fac33d474412bc3415d3f5aa7ed45530
+  languageName: node
+  linkType: hard
+
 "balanced-match@npm:^1.0.0":
   version: 1.0.2
   resolution: "balanced-match@npm:1.0.2"
@@ -4498,13 +4498,13 @@ __metadata:
   languageName: node
   linkType: hard
 
-"follow-redirects@npm:^1.15.4, follow-redirects@npm:^1.15.6":
-  version: 1.15.11
-  resolution: "follow-redirects@npm:1.15.11"
+"follow-redirects@npm:^1.16.0":
+  version: 1.16.0
+  resolution: "follow-redirects@npm:1.16.0"
   peerDependenciesMeta:
     debug:
       optional: true
-  checksum: 10/07372fd74b98c78cf4d417d68d41fdaa0be4dcacafffb9e67b1e3cf090bc4771515e65020651528faab238f10f9b9c0d9707d6c1574a6c0387c5de1042cde9ba
+  checksum: 10/3fbe3d80b3b544c22705d837aa5d4a0d07a740d913534a2620b0a004c610af4148e3b58723536dd099aaa1c9d3a155964bde9665d6e5cb331460809a1fc572fd
   languageName: node
   linkType: hard
 
@@ -4518,7 +4518,7 @@ __metadata:
   languageName: node
   linkType: hard
 
-"form-data@npm:^4.0.4":
+"form-data@npm:^4.0.4, form-data@npm:^4.0.5":
   version: 4.0.5
   resolution: "form-data@npm:4.0.5"
   dependencies:
@@ -7318,6 +7318,13 @@ __metadata:
   languageName: node
   linkType: hard
 
+"proxy-from-env@npm:^2.1.0":
+  version: 2.1.0
+  resolution: "proxy-from-env@npm:2.1.0"
+  checksum: 10/fbbaf4dab2a6231dc9e394903a5f66f20475e36b734335790b46feb9da07c37d6b32e2c02e3e2ea4d4b23774c53d8562e5b7cc73282cb43f4a597b7eacaee2ee
+  languageName: node
+  linkType: hard
+
 "publint@npm:0.3.18":
   version: 0.3.18
   resolution: "publint@npm:0.3.18"
diff --git a/package.json b/package.json
@@ -45,6 +45,14 @@
     "renovate-config-algolia": "2.2.0",
     "typescript": "5.9.3"
   },
+  "resolutions": {
+    "axios": "^1.15.0",
+    "vite": "^8.0.5",
+    "lodash": "^4.18.0",
+    "lodash-es": "^4.18.0",
+    "@nestjs/core": "^11.1.18",
+    "fast-xml-parser": "^5.5.7"
+  },
   "engines": {
     "node": "^24.0.0",
     "yarn": "^4.0.0"
diff --git a/scripts/ci/actions/restore-artifacts/builddir/index.cjs b/scripts/ci/actions/restore-artifacts/builddir/index.cjs
diff --git a/website/package.json b/website/package.json
@@ -29,5 +29,8 @@
     "react": "19.2.5",
     "react-dom": "19.2.5",
     "remark-smartypants": "3.0.2"
+  },
+  "resolutions": {
+    "follow-redirects": "^1.16.0"
   }
 }
diff --git a/website/yarn.lock b/website/yarn.lock
@@ -9003,13 +9003,13 @@ __metadata:
   languageName: node
   linkType: hard
 
-"follow-redirects@npm:^1.0.0":
-  version: 1.15.11
-  resolution: "follow-redirects@npm:1.15.11"
+"follow-redirects@npm:^1.16.0":
+  version: 1.16.0
+  resolution: "follow-redirects@npm:1.16.0"
   peerDependenciesMeta:
     debug:
       optional: true
-  checksum: 10/07372fd74b98c78cf4d417d68d41fdaa0be4dcacafffb9e67b1e3cf090bc4771515e65020651528faab238f10f9b9c0d9707d6c1574a6c0387c5de1042cde9ba
+  checksum: 10/3fbe3d80b3b544c22705d837aa5d4a0d07a740d913534a2620b0a004c610af4148e3b58723536dd099aaa1c9d3a155964bde9665d6e5cb331460809a1fc572fd
   languageName: node
   linkType: hard
 
diff --git a/yarn.lock b/yarn.lock

Original file line number	Diff line number	Diff line change
`@@ -79,6 +79,10 @@`
`79`	`79`	`}`
`80`	`80`	`]`
`81`	`81`	`},`
	`82`	`+ "resolutions": {`
	`83`	`+ "bundlewatch/axios": "^1.15.0",`
	`84`	`+ "follow-redirects": "^1.16.0"`
	`85`	`+ },`
`82`	`86`	`"engines": {`
`83`	`87`	`"node": ">= 14.0.0",`
`84`	`88`	`"yarn": "^4.0.0"`
Original file line number	Diff line number	Diff line change
`@@ -29,5 +29,8 @@`
`29`	`29`	`"react": "19.2.5",`
`30`	`30`	`"react-dom": "19.2.5",`
`31`	`31`	`"remark-smartypants": "3.0.2"`
	`32`	`+ },`
	`33`	`+ "resolutions": {`
	`34`	`+ "follow-redirects": "^1.16.0"`
`32`	`35`	`}`
`33`	`36`	`}`