From cdc2f5c5cf24f8b7d4d7d12954e72f94619d658a Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" <41898282+github-actions[bot]@users.noreply.github.com> Date: Mon, 2 Nov 2026 00:18:45 +0000 Subject: [PATCH 1/2] fix: apply audit fixes --- dist/index.js | 11 ++++++++++- 1 file changed, 10 insertions(+), 1 deletion(-) diff --git a/dist/index.js b/dist/index.js index ca84899..b56fd88 100644 --- a/dist/index.js +++ b/dist/index.js @@ -4222,6 +4222,15 @@ RedirectableRequest.prototype._sanitizeOptions = function (options) { if (!options.headers) { options.headers = {}; } + // Convert [header1, value1, header2, value2, …] to object + else if (Array.isArray(options.headers)) { + var headerList = options.headers; + options.headers = {}; + for (var i = 0; i < headerList.length; i += 2) { + options.headers[headerList[i]] = headerList[i + 1]; + } + } + // Ensure sensitive headers are always present if (!isArray(options.sensitiveHeaders)) { options.sensitiveHeaders = []; } @@ -4621,7 +4630,7 @@ function isURL(value) { } function escapeRegex(regex) { - return regex.replace(/[\]\\/()*+?.$]/g, "\\$&"); + return regex.replace(/[[\]\\/()*+?.^$|]/g, "\\$&"); } // Exports From cc76a1a7c4fa34216113543a2ee87ada04f13bd2 Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" <41898282+github-actions[bot]@users.noreply.github.com> Date: Mon, 2 Nov 2026 00:18:47 +0000 Subject: [PATCH 2/2] fix: apply audit fixes --- yarn.lock | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/yarn.lock b/yarn.lock index cec51fd..9db36e1 100644 --- a/yarn.lock +++ b/yarn.lock @@ -108,9 +108,9 @@ es-set-tostringtag@^2.1.0: hasown "^2.0.2" follow-redirects@^1.16.0: - version "1.16.1" - resolved "https://registry.yarnpkg.com/follow-redirects/-/follow-redirects-1.16.1.tgz#6e0efa40a727fb369b98dab15883ec34787d675e" - integrity sha512-FNvFGzoMLWmE6Yj9spb/zjd7yiNCHiAW9/Tg9CXrQ8wuu32HtlJOwWO11OJafl5FfY3DxTdQ0vj42zU1kvv5jg== + version "1.16.2" + resolved "https://registry.yarnpkg.com/follow-redirects/-/follow-redirects-1.16.2.tgz#a233160dd1bc9b16cbbab43709e6adc7cc941c8c" + integrity sha512-/kVP2U8z596Ia0gwFrwyIeo74ta5aVmSeU1FfAUMAmcEP5EP7zydmag3SLiN64NaRKef3lxsq7i/g7ltJQDGow== form-data@^4.0.6: version "4.0.6"