[ChiragAgg5k]

The bun audit job fails on main, so it also fails on every PR, including Renovate PRs such as #484, which therefore cannot auto-merge.

Cause: bun/sync-with-meilisearch and bun/sync-with-qdrant lock follow-redirects@1.16.1 (pulled in by node-appwrite > axios), which is flagged high by GHSA-mrwp-f3q8-3g9p (affects >=1.16.0 <=1.16.1).

Fix: bun update follow-redirects in both templates, which moves the lockfiles to 1.16.2 within axios's existing ^1.16.0 range. No package.json changes.

Verified locally: bun audit passes for every template under bun/.

[hansi-codes]

🟢 Tier S · Ready to merge

The Bun Meilisearch and Qdrant sync templates now lock follow-redirects at 1.16.2 instead of 1.16.1. Their package manifests and dependency ranges are unchanged.

Verdict	New comments	Fixed	Still open
✅ Approved	0	0	0

📂 Walkthrough · 2

File	Change
bun/sync-with-meilisearch/bun.lock	Updates the locked follow-redirects package to 1.16.2.
bun/sync-with-qdrant/bun.lock	Updates the locked follow-redirects package to 1.16.2.

---

_{Reviewed 9c8d47c · Details · Comment @hansi-codes review to re-run, or mention @hansi-codes with a question.}

[hansi-codes]

🟢 Tier S · Looks good to merge. Summary