fix(deps): bump follow-redirects and markdown-it to patched versions

Merged
RE
5d ago
+4-4

Context & Requests for Reviewers

Bumping two transitive dependencies:

  • follow-redirects 1.16.0 → 1.16.1 (GHSA-8r9p-f939-6h3c, GHSA-q3jh-wrc6-jgq8)
  • markdown-it 14.3.2 → 14.3.3 (GHSA-gfr2-rv44-r23c, GHSA-vfgh-jcmw-g37q)

This clears Dependabot alerts #575–#578. Patch releases within existing ranges, with no package.json changes.

Tests

We had a CI path filter bug that causes server/client lint, typecheck, build and tests to be skipped (fixed in #1462), so ran those locally before stacking on the CI fix PR.

Checklist

Only check items that apply to this PR; leave the rest unchecked.

  • If you changed anything user-facing (i.e. user interface or APIs):
    Did you update related docs?

  • If the change is notable (refer to Keep a Changelog conventions):
    Did you update CHANGELOG.md?

  • If you changed db/src/scripts/** and used CREATE TABLE, ADD COLUMN, or ALTER COLUMN:
    Are as many columns marked NOT NULL as possible? If some columns can sometimes be null depending on other columns, are there CHECK constraints capturing those relationships, and are these also reflected using unions in the associated Kysely types?

  • If you added a new signal in server/services/signalsService/signals/**:
    Did you classify every error case as a permanent error (SignalPermanentError, no retry) or a normal error (retryable)? Any case where the signal can't determine a score should be a SignalPermanentError.