Update dependency axios to v1.7.8 #17

renovate · 2023-08-26T23:04:43Z

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
axios (source)	`1.4.0` -> `1.7.8`

Release Notes

axios/axios (axios)

`v1.7.8`

Compare Source

Bug Fixes

allow passing a callback as paramsSerializer to buildURL (#6680) (eac4619)
core: fixed config merging bug (#6668) (5d99fe4)
fixed width form to not shrink after 'Send Request' button is clicked (#6644) (7ccd5fd)
http: add support for File objects as payload in http adapter (#6588) (#6605) (6841d8d)
http: fixed proxy-from-env module import (#5222) (12b3295)
http: use globalThis.TextEncoder when available (#6634) (df956d1)
ios11 breaks when build (#6608) (7638952)
types: add missing types for mergeConfig function (#6590) (00de614)
types: export CJS types from ESM (#6218) (c71811b)
updated stream aborted error message to be more clear (#6615) (cc3217a)
use URL API instead of DOM to fix a potential vulnerability warning; (#6714) (0a8d6e1)

Contributors to this release

`v1.7.7`

Compare Source

Bug Fixes

fetch: fix stream handling in Safari by fallback to using a stream reader instead of an async iterator; (#6584) (d198085)
http: fixed support for IPv6 literal strings in url (#5731) (364993f)

Contributors to this release

`v1.7.6`

Compare Source

Bug Fixes

fetch: fix content length calculation for FormData payload; (#6524) (085f568)
fetch: optimize signals composing logic; (#6582) (df9889b)

Contributors to this release

`v1.7.5`

Compare Source

Bug Fixes

adapter: fix undefined reference to hasBrowserEnv (#6572) (7004707)
core: add the missed implementation of AxiosError#status property; (#6573) (6700a8a)
core: fix ReferenceError: navigator is not defined for custom environments; (#6567) (fed1a4b)
fetch: fix credentials handling in Cloudflare workers (#6533) (550d885)

Contributors to this release

`v1.7.4`

Compare Source

Bug Fixes

sec: CVE-2024-39338 (#6539) (#6543) (6b6b605)
sec: disregard protocol-relative URL to remediate SSRF (#6539) (07a661a)

Contributors to this release

`v1.7.3`

Compare Source

Bug Fixes

adapter: fix progress event emitting; (#6518) (e3c76fc)
fetch: fix withCredentials request config (#6505) (85d4d0e)
xhr: return original config on errors from XHR adapter (#6515) (8966ee7)

Contributors to this release

`v1.7.2`

Compare Source

Bug Fixes

fetch: enhance fetch API detection; (#6413) (4f79aef)

Contributors to this release

Dmitriy Mozgovoy

`v1.7.1`

Compare Source

Bug Fixes

fetch: fixed ReferenceError issue when TextEncoder is not available in the environment; (#6410) (733f15f)

Contributors to this release

Dmitriy Mozgovoy

`v1.7.0`

Compare Source

Features

adapter: add fetch adapter; (#6371) (a3ff99b)

Bug Fixes

core/axios: handle un-writable error stack (#6362) (81e0455)

Contributors to this release

`v1.6.8`

Compare Source

Bug Fixes

AxiosHeaders: fix AxiosHeaders conversion to an object during config merging (#6243) (2656612)
import: use named export for EventEmitter; (7320430)
vulnerability: update follow-redirects to 1.15.6 (#6300) (8786e0f)

Contributors to this release

`v1.6.7`

Compare Source

Bug Fixes

capture async stack only for rejections with native error objects; (#6203) (1a08f90)

Contributors to this release

`v1.6.6`

Compare Source

Bug Fixes

fixed missed dispatchBeforeRedirect argument (#5778) (a1938ff)
wrap errors to improve async stack trace (#5987) (123f354)

Contributors to this release

`v1.6.5`

Compare Source

Bug Fixes

ci: refactor notify action as a job of publish action; (#6176) (0736f95)
dns: fixed lookup error handling; (#6175) (f4f2b03)

Contributors to this release

`v1.6.4`

Compare Source

Bug Fixes

security: fixed formToJSON prototype pollution vulnerability; (#6167) (3c0c11c)
security: fixed security vulnerability in follow-redirects (#6163) (75af1cd)

Contributors to this release

`v1.6.3`

Compare Source

Bug Fixes

Regular Expression Denial of Service (ReDoS) (#6132) (5e7ad38)

Contributors to this release

`v1.6.2`

Compare Source

Features

withXSRFToken: added withXSRFToken option as a workaround to achieve the old withCredentials behavior; (#6046) (cff9967)

PRs

feat(withXSRFToken): added withXSRFToken option as a workaround to achieve the old `withCredentials` behavior; ( #6046 )


📢 This PR added &#x27;withXSRFToken&#x27; option as a replacement for old withCredentials behaviour. 
You should now use withXSRFToken along with withCredential to get the old behavior.
This functionality is considered as a fix.

Contributors to this release

`v1.6.1`

Compare Source

Bug Fixes

formdata: fixed content-type header normalization for non-standard browser environments; (#6056) (dd465ab)
platform: fixed emulated browser detection in node.js environment; (#6055) (3dc8369)

Contributors to this release

`v1.6.0`

Compare Source

Bug Fixes

CSRF: fixed CSRF vulnerability CVE-2023-45857 (#6028) (96ee232)
dns: fixed lookup function decorator to work properly in node v20; (#6011) (5aaff53)
types: fix AxiosHeaders types; (#5931) (a1c8ad0)

PRs

CVE 2023 45857 ( #6028 )


⚠️ Critical vulnerability fix. See https://security.snyk.io/vuln/SNYK-JS-AXIOS-6032459

Contributors to this release

1.5.1 (2023-09-26)

Bug Fixes

adapters: improved adapters loading logic to have clear error messages; (#5919) (e410779)
formdata: fixed automatic addition of the Content-Type header for FormData in non-browser environments; (#5917) (bc9af51)
headers: allow content-encoding header to handle case-insensitive values (#5890) (#5892) (4c89f25)
types: removed duplicated code (9e62056)

Contributors to this release

PRs

CVE 2023 45857 ( #6028 )


⚠️ Critical vulnerability fix. See https://security.snyk.io/vuln/SNYK-JS-AXIOS-6032459

`v1.5.1`

Compare Source

Bug Fixes

adapters: improved adapters loading logic to have clear error messages; (#5919) (e410779)
formdata: fixed automatic addition of the Content-Type header for FormData in non-browser environments; (#5917) (bc9af51)
headers: allow content-encoding header to handle case-insensitive values (#5890) (#5892) (4c89f25)
types: removed duplicated code (9e62056)

Contributors to this release

`v1.5.0`

Compare Source

Bug Fixes

adapter: make adapter loading error more clear by using platform-specific adapters explicitly (#5837) (9a414bb)
dns: fixed cacheable-lookup integration; (#5836) (b3e327d)
headers: added support for setting header names that overlap with class methods; (#5831) (d8b4ca0)
headers: fixed common Content-Type header merging; (#5832) (8fda276)

Features

export getAdapter function (#5324) (ca73eb8)
export: export adapters without unsafe prefix (#5839) (1601f4a)

Contributors to this release

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

coderabbitai · 2024-08-28T07:10:50Z

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Walkthrough

The changes involve updates to the axios dependency in the devDependencies section of the package.json file. The version has been upgraded multiple times from 1.4.0 to 1.7.7, reflecting a series of enhancements in the library used for making HTTP requests in JavaScript applications.

Changes

Files	Change Summary
package.json	Updated `axios` version from `1.4.0` to `1.7.7`

Sequence Diagram(s)

(No sequence diagrams generated as the changes are too simple.)

Poem

🐰 In the code where bunnies hop,
Axios leaped, it couldn't stop!
From 1.4 to 1.7,
A sprightly jump to code heaven!
With every request, swift and bright,
Our HTTP dreams take flight! 🌟

🪧 Tips

Chat

There are 3 ways to chat with CodeRabbit:

Review comments: Directly reply to a review comment made by CodeRabbit. Example:
- I pushed a fix in commit <commit_id>, please review it.
- Generate unit testing code for this file.
- Open a follow-up GitHub issue for this discussion.
Files and specific lines of code (under the "Files changed" tab): Tag @coderabbitai in a new review comment at the desired location with your query. Examples:
- @coderabbitai generate unit testing code for this file.
- @coderabbitai modularize this function.
PR comments: Tag @coderabbitai in a new PR comment to ask questions about the PR branch. For the best results, please provide a very specific query, as very limited context is provided in this mode. Examples:
- @coderabbitai gather interesting stats about this repository and render them as a table. Additionally, render a pie chart showing the language distribution in the codebase.
- @coderabbitai read src/utils.ts and generate unit testing code.
- @coderabbitai read the files in the src/scheduler package and generate a class diagram using mermaid and a README in the markdown format.
- @coderabbitai help me debug CodeRabbit configuration file.

Note: Be mindful of the bot's finite context window. It's strongly recommended to break down tasks such as reading entire modules into smaller chunks. For a focused discussion, use review comments to chat about specific files and their changes, instead of using the PR comments.

CodeRabbit Commands (Invoked using PR comments)

@coderabbitai pause to pause the reviews on a PR.
@coderabbitai resume to resume the paused reviews.
@coderabbitai review to trigger an incremental review. This is useful when automatic reviews are disabled for the repository.
@coderabbitai full review to do a full review from scratch and review all the files again.
@coderabbitai summary to regenerate the summary of the PR.
@coderabbitai resolve resolve all the CodeRabbit review comments.
@coderabbitai configuration to show the current CodeRabbit configuration for the repository.
@coderabbitai help to get help.

Other keywords and placeholders

Add @coderabbitai ignore anywhere in the PR description to prevent this PR from being reviewed.
Add @coderabbitai summary to generate the high-level summary at a specific location in the PR description.
Add @coderabbitai anywhere in the PR title to generate the title automatically.

CodeRabbit Configuration File (`.coderabbit.yaml`)

You can programmatically configure CodeRabbit by adding a .coderabbit.yaml file to the root of your repository.
Please see the configuration documentation for more information.
If your editor has YAML language server enabled, you can add the path at the top of this file to enable auto-completion and validation: # yaml-language-server: $schema=https://coderabbit.ai/integrations/schema.v2.json

Documentation and Community

Visit our Documentation for detailed information on how to use CodeRabbit.
Join our Discord Community to get help, request features, and share feedback.
Follow us on X/Twitter for updates and announcements.

coderabbitai

Actionable comments posted: 1

Review details

Configuration used: CodeRabbit UI
Review profile: CHILL

Commits

Files that changed from the base of the PR and between c376e12 and 5c5e438.

Files ignored due to path filters (1)

package-lock.json is excluded by !**/package-lock.json

Files selected for processing (1)

package.json (1 hunks)

Additional comments not posted (1)

package.json (1)
27-27: Approve the version update of axios.

The update from 1.4.0 to 1.7.5 in axios brings important bug fixes and new features which could enhance the functionality and security of the application.

The version update is approved.

Consider verifying the application's compatibility with the new axios version. This includes checking for any breaking changes that might affect existing functionality.

Verification successful

No issues found with axios update.

The axios usage in the codebase does not involve any deprecated methods or properties that would be affected by the update to version 1.7.5. It's recommended to test the application to ensure full compatibility.

File: req.js shows usage of axios without deprecated features.
Scripts executed

The following scripts were executed for the analysis:

Script:
#!/bin/bash
# Description: Verify the application's compatibility with the new `axios` version.

# Test: Search for `axios` usage in the application. Expect: No deprecated methods or properties.
rg --type json -A 5 $'axios'
Length of output: 1426

Script:
#!/bin/bash
# Description: Search for `axios` usage in JavaScript or TypeScript files to verify compatibility with the new version.

# Test: Search for `axios` usage in the application code. Expect: No deprecated methods or properties.
rg --type js --type ts -A 5 'axios'
Length of output: 392

coderabbitai · 2024-08-28T07:12:19Z

package.json

@@ -24,7 +24,7 @@
    "ramda": "^0.29.0"
  },
  "devDependencies": {
-    "axios": "1.4.0",
+    "axios": "1.7.5",


Check for changes in axios usage.

The PR notes mention that withXSRFToken has replaced the withCredentials behavior. Ensure that all instances of withCredentials are reviewed and updated if necessary.

Would you like me to help update the usage of withCredentials to withXSRFToken across the application? I can generate the necessary changes or open a GitHub issue to track this task.

coderabbitai

Actionable comments posted: 0

Review details

Configuration used: CodeRabbit UI
Review profile: CHILL

Commits

Files that changed from the base of the PR and between 5c5e438 and b1e83ef.

Files ignored due to path filters (1)

package-lock.json is excluded by !**/package-lock.json

Files selected for processing (1)

package.json (1 hunks)

Files skipped from review as they are similar to previous changes (1)

package.json

coderabbitai

Actionable comments posted: 0

Review details

Configuration used: CodeRabbit UI
Review profile: CHILL

Commits

Files that changed from the base of the PR and between b1e83ef and bbaa8c4.

Files ignored due to path filters (1)

package-lock.json is excluded by !**/package-lock.json

Files selected for processing (1)

package.json (1 hunks)

Files skipped from review as they are similar to previous changes (1)

package.json

renovate bot changed the title ~~Update dependency axios to v1.5.0~~ Update dependency axios to v1.5.1 Sep 26, 2023

renovate bot force-pushed the renovate/axios-1.x branch from 67d0338 to c5e4f36 Compare September 26, 2023 18:50

renovate bot changed the title ~~Update dependency axios to v1.5.1~~ Update dependency axios to v1.6.0 Oct 26, 2023

renovate bot force-pushed the renovate/axios-1.x branch from c5e4f36 to 18c7180 Compare October 26, 2023 21:54

renovate bot changed the title ~~Update dependency axios to v1.6.0~~ Update dependency axios to v1.6.1 Nov 8, 2023

renovate bot force-pushed the renovate/axios-1.x branch from 18c7180 to e2e2336 Compare November 8, 2023 17:06

renovate bot changed the title ~~Update dependency axios to v1.6.1~~ Update dependency axios to v1.6.2 Nov 14, 2023

renovate bot force-pushed the renovate/axios-1.x branch from e2e2336 to 6df42f8 Compare November 14, 2023 22:29

renovate bot changed the title ~~Update dependency axios to v1.6.2~~ Update dependency axios to v1.6.3 Dec 27, 2023

renovate bot force-pushed the renovate/axios-1.x branch from 6df42f8 to 2bb8e1f Compare December 27, 2023 00:12

renovate bot force-pushed the renovate/axios-1.x branch from 2bb8e1f to 0256eef Compare January 4, 2024 00:44

renovate bot changed the title ~~Update dependency axios to v1.6.3~~ Update dependency axios to v1.6.4 Jan 4, 2024

renovate bot changed the title ~~Update dependency axios to v1.6.4~~ Update dependency axios to v1.6.5 Jan 5, 2024

renovate bot force-pushed the renovate/axios-1.x branch from 0256eef to 23cc031 Compare January 5, 2024 22:53

renovate bot changed the title ~~Update dependency axios to v1.6.5~~ Update dependency axios to v1.6.6 Jan 25, 2024

renovate bot force-pushed the renovate/axios-1.x branch 2 times, most recently from 44e3b74 to 83940a5 Compare January 25, 2024 22:45

renovate bot changed the title ~~Update dependency axios to v1.6.6~~ Update dependency axios to v1.6.7 Jan 25, 2024

renovate bot changed the title ~~Update dependency axios to v1.6.7~~ Update dependency axios to v1.6.8 Mar 15, 2024

renovate bot force-pushed the renovate/axios-1.x branch from 83940a5 to 54ea158 Compare March 15, 2024 19:41

renovate bot force-pushed the renovate/axios-1.x branch from 54ea158 to 00fcfa9 Compare May 19, 2024 22:30

renovate bot changed the title ~~Update dependency axios to v1.6.8~~ Update dependency axios to v1.7.0 May 19, 2024

renovate bot force-pushed the renovate/axios-1.x branch from 00fcfa9 to 06248c5 Compare May 20, 2024 16:16

renovate bot changed the title ~~Update dependency axios to v1.7.0~~ Update dependency axios to v1.7.1 May 20, 2024

renovate bot force-pushed the renovate/axios-1.x branch from 06248c5 to 3a12aee Compare May 21, 2024 22:31

renovate bot changed the title ~~Update dependency axios to v1.7.1~~ Update dependency axios to v1.7.2 May 21, 2024

renovate bot changed the title ~~Update dependency axios to v1.7.2~~ Update dependency axios to v1.7.3 Aug 1, 2024

renovate bot force-pushed the renovate/axios-1.x branch from 3a12aee to 47af52a Compare August 1, 2024 16:57

renovate bot force-pushed the renovate/axios-1.x branch from 47af52a to cf6db9b Compare August 13, 2024 21:50

renovate bot changed the title ~~Update dependency axios to v1.7.3~~ Update dependency axios to v1.7.4 Aug 13, 2024

renovate bot changed the title ~~Update dependency axios to v1.7.4~~ Update dependency axios to v1.7.5 Aug 23, 2024

renovate bot force-pushed the renovate/axios-1.x branch from cf6db9b to 5c5e438 Compare August 28, 2024 07:10

coderabbitai bot reviewed Aug 28, 2024

View reviewed changes

renovate bot force-pushed the renovate/axios-1.x branch from 5c5e438 to b1e83ef Compare August 30, 2024 20:05

renovate bot changed the title ~~Update dependency axios to v1.7.5~~ Update dependency axios to v1.7.6 Aug 30, 2024

coderabbitai bot reviewed Aug 30, 2024

View reviewed changes

renovate bot changed the title ~~Update dependency axios to v1.7.6~~ Update dependency axios to v1.7.7 Aug 31, 2024

renovate bot force-pushed the renovate/axios-1.x branch from b1e83ef to bbaa8c4 Compare August 31, 2024 22:57

coderabbitai bot reviewed Aug 31, 2024

View reviewed changes

Update dependency axios to v1.7.8

f17e53f

renovate bot force-pushed the renovate/axios-1.x branch from bbaa8c4 to f17e53f Compare November 25, 2024 23:33

renovate bot changed the title ~~Update dependency axios to v1.7.7~~ Update dependency axios to v1.7.8 Nov 25, 2024

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Update dependency axios to v1.7.8 #17

Update dependency axios to v1.7.8 #17

renovate bot commented Aug 26, 2023 •

edited

Loading

coderabbitai bot commented Aug 28, 2024 •

edited

Loading

Review skipped

Chat

CodeRabbit Commands (Invoked using PR comments)

Other keywords and placeholders

CodeRabbit Configuration File (`.coderabbit.yaml`)

Documentation and Community

coderabbitai bot left a comment

coderabbitai bot Aug 28, 2024

coderabbitai bot left a comment

coderabbitai bot left a comment

Update dependency axios to v1.7.8 #17

Are you sure you want to change the base?

Update dependency axios to v1.7.8 #17

Conversation

renovate bot commented Aug 26, 2023 • edited Loading

Release Notes

Bug Fixes

Contributors to this release

Bug Fixes

Contributors to this release

Bug Fixes

Contributors to this release

Bug Fixes

Contributors to this release

Bug Fixes

Contributors to this release

Bug Fixes

Contributors to this release

Bug Fixes

Contributors to this release

Bug Fixes

Contributors to this release

Features

Bug Fixes

Contributors to this release

Bug Fixes

Contributors to this release

Bug Fixes

Contributors to this release

Bug Fixes

Contributors to this release

Bug Fixes

Contributors to this release

Bug Fixes

Contributors to this release

Bug Fixes

Contributors to this release

Features

PRs

Contributors to this release

Bug Fixes

Contributors to this release

Bug Fixes

PRs

Contributors to this release

1.5.1 (2023-09-26)

Bug Fixes

Contributors to this release

PRs

Bug Fixes

Contributors to this release

Bug Fixes

Features

Contributors to this release

Configuration

coderabbitai bot commented Aug 28, 2024 • edited Loading

Review skipped

Walkthrough

Changes

Sequence Diagram(s)

Poem

Chat

CodeRabbit Commands (Invoked using PR comments)

Other keywords and placeholders

CodeRabbit Configuration File (.coderabbit.yaml)

Documentation and Community

coderabbitai bot left a comment

Choose a reason for hiding this comment

coderabbitai bot Aug 28, 2024

Choose a reason for hiding this comment

coderabbitai bot left a comment

Choose a reason for hiding this comment

coderabbitai bot left a comment

Choose a reason for hiding this comment

renovate bot commented Aug 26, 2023 •

edited

Loading

coderabbitai bot commented Aug 28, 2024 •

edited

Loading

CodeRabbit Configuration File (`.coderabbit.yaml`)