bump follow-redirects and istanbul-reports

[freben]

See #9441, #8702

[changeset-bot]

⚠️ No Changeset found

Latest commit: 1043789

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

Name	Type
@backstage/app-defaults	Patch
example-app	Patch
@backstage/backend-common	Patch
@backstage/backend-tasks	Patch
@backstage/backend-test-utils	Patch
example-backend	Patch
@backstage/cli	Patch
@backstage/codemods	Patch
@backstage/core-components	Patch
@backstage/create-app	Patch
@backstage/dev-utils	Patch
@backstage/integration-react	Patch
techdocs-cli-embedded-app	Patch
@techdocs/cli	Patch
@backstage/techdocs-common	Patch
@backstage/plugin-airbrake	Patch
@backstage/plugin-allure	Patch
@backstage/plugin-analytics-module-ga	Patch
@backstage/plugin-apache-airflow	Patch
@backstage/plugin-api-docs	Patch
@backstage/plugin-app-backend	Patch
@backstage/plugin-auth-backend	Patch
@backstage/plugin-azure-devops-backend	Patch
@backstage/plugin-azure-devops	Patch
@backstage/plugin-badges-backend	Patch
@backstage/plugin-badges	Patch
@backstage/plugin-bazaar-backend	Patch
@backstage/plugin-bazaar	Patch
@backstage/plugin-bitrise	Patch
@backstage/plugin-catalog-backend-module-ldap	Patch
@backstage/plugin-catalog-backend-module-msgraph	Patch
@backstage/plugin-catalog-backend	Patch
@backstage/plugin-catalog-graph	Patch
@backstage/plugin-catalog-import	Patch
@backstage/plugin-catalog-react	Patch
@backstage/plugin-catalog	Patch
@backstage/plugin-circleci	Patch
@backstage/plugin-cloudbuild	Patch
@backstage/plugin-code-coverage-backend	Patch
@backstage/plugin-code-coverage	Patch
@backstage/plugin-config-schema	Patch
@backstage/plugin-cost-insights	Patch
@backstage/plugin-explore	Patch
@backstage/plugin-firehydrant	Patch
@backstage/plugin-fossa	Patch
@backstage/plugin-gcp-projects	Patch
@backstage/plugin-git-release-manager	Patch
@backstage/plugin-github-actions	Patch
@backstage/plugin-github-deployments	Patch
@backstage/plugin-gitops-profiles	Patch
@backstage/plugin-gocd	Patch
@backstage/plugin-graphiql	Patch
@backstage/plugin-graphql-backend	Patch
@backstage/plugin-home	Patch
@backstage/plugin-ilert	Patch
@backstage/plugin-jenkins-backend	Patch
@backstage/plugin-jenkins	Patch
@backstage/plugin-kafka-backend	Patch
@backstage/plugin-kafka	Patch
@backstage/plugin-kubernetes-backend	Patch
@backstage/plugin-kubernetes	Patch
@backstage/plugin-lighthouse	Patch
@backstage/plugin-newrelic-dashboard	Patch
@backstage/plugin-newrelic	Patch
@backstage/plugin-org	Patch
@backstage/plugin-pagerduty	Patch
@backstage/plugin-permission-backend	Patch
@backstage/plugin-permission-node	Patch
@backstage/plugin-proxy-backend	Patch
@backstage/plugin-rollbar-backend	Patch
@backstage/plugin-rollbar	Patch
@backstage/plugin-scaffolder-backend-module-cookiecutter	Patch
@backstage/plugin-scaffolder-backend-module-rails	Patch
@backstage/plugin-scaffolder-backend-module-yeoman	Patch
@backstage/plugin-scaffolder-backend	Patch
@backstage/plugin-scaffolder	Patch
@backstage/plugin-search-backend-module-pg	Patch
@backstage/plugin-search-backend	Patch
@backstage/plugin-search	Patch
@backstage/plugin-sentry	Patch
@backstage/plugin-shortcuts	Patch
@backstage/plugin-sonarqube	Patch
@backstage/plugin-splunk-on-call	Patch
@backstage/plugin-tech-insights-backend-module-jsonfc	Patch
@backstage/plugin-tech-insights-backend	Patch
@backstage/plugin-tech-insights-node	Patch
@backstage/plugin-tech-insights	Patch
@backstage/plugin-tech-radar	Patch
@backstage/plugin-techdocs-backend	Patch
@backstage/plugin-techdocs	Patch
@backstage/plugin-todo-backend	Patch
@backstage/plugin-todo	Patch
@backstage/plugin-user-settings	Patch
@backstage/plugin-xcmetrics	Patch

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[benjdlambert]

Feel like we should be bumping the package.jsons for the affected packages too, so that new installs of the packages resolve to packages without the vulnerabilities in.

[freben]

Mm no we don't have any direct imports of that, and the only one that pulls this in (@jest/reporters) doesn't have a newer version either

[benjdlambert]

ah ok. 👍