Update dependency axios to v0.28.0 [SECURITY]

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
axios (source)	0.27.2 -> 0.28.0

GitHub Vulnerability Alerts

CVE-2023-45857

An issue discovered in Axios 0.8.1 through 1.5.1 inadvertently reveals the confidential XSRF-TOKEN stored in cookies by including it in the HTTP header X-XSRF-TOKEN for every request made to any host allowing attackers to view sensitive information.

---

Release Notes

axios/axios (axios)

v0.28.0

Compare Source

Release notes:

Bug Fixes

• fix(security): fixed CVE-2023-45857 by backporting withXSRFToken option to v0.x (#​6091)

Backports from v1.x:

• Allow null indexes on formSerializer and paramsSerializer v0.x (#​4961)
• Fixing content-type header repeated #​4745
• Fixed timeout error message for HTTP 4738
• Added axios.formToJSON method (#​4735)
• URL params serializer (#​4734)
• Fixed toFormData Blob issue on node>v17 #​4728
• Adding types for progress event callbacks #​4675
• Fixed max body length defaults #​4731
• Added data URL support for node.js (#​4725)
• Added isCancel type assert (#​4293)
• Added the ability for the url-encoded-form serializer to respect the formSerializer config (#​4721)
• Add string[] to AxiosRequestHeaders type (#​4322)
• Allow type definition for axios instance methods (#​4224)
• Fixed AxiosError stack capturing; (#​4718)
• Fixed AxiosError status code type; (#​4717)
• Adding Canceler parameters config and request (#​4711)
• fix(types): allow to specify partial default headers for instance creation (#​4185)
• Added blob to the list of protocols supported by the browser (#​4678)
• Fixing Z_BUF_ERROR when no content (#​4701)
• Fixed race condition on immediate requests cancellation (#​4261)
• Added a clear() function to the request and response interceptors object so a user can ensure that all interceptors have been removed from an Axios instance https://github.com/axios/axios/pull/4248
• Added generic AxiosAbortSignal TS interface to avoid importing AbortController polyfill (#​4229)
• Fix TS definition for AxiosRequestTransformer (#​4201)
• Use type alias instead of interface for AxiosPromise (#​4505)
• Include request and config when creating a CanceledError instance (#​4659)
• Added generic TS types for the exposed toFormData helper (#​4668)
• Optimized the code that checks cancellation (#​4587)
• Replaced webpack with rollup (#​4596)
• Added stack trace to AxiosError (#​4624)
• Updated AxiosError.config to be optional in the type definition (#​4665)
• Removed incorrect argument for NetworkError constructor (#​4656)

---

Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

Terraform Format and Style 🖌success

Terraform Initialization ⚙️success

Terraform Plan 📖success

Show Plan

terraform
module.thadmin_routing.module.acm.aws_acm_certificate.this: Refreshing state... [id=arn:aws:acm:us-east-1:627002765486:certificate/565d3a00-d047-48f2-956a-aed08dd6956b]
module.thadmin_hosting.aws_s3_bucket.this: Refreshing state... [id=thalia-thadmin-staging]
module.thadmin_routing.module.cloudfront.aws_cloudfront_origin_access_identity.this["s3_bucket"]: Refreshing state... [id=E3JOC36ODMBL65]
module.thadmin_routing.module.acm.aws_route53_record.validation["thadmin-staging.technicie.nl"]: Refreshing state... [id=Z3I4ZHBBD5NSHU__f4c1968cf0da5157d0f46ed63ecf426e.thadmin-staging.technicie.nl._CNAME]
module.thadmin_routing.module.acm.aws_acm_certificate_validation.this: Refreshing state... [id=2022-03-15 04:55:50.004 +0000 UTC]
module.thadmin_hosting.aws_s3_bucket_acl.this: Refreshing state... [id=thalia-thadmin-staging,private]
module.thadmin_hosting.aws_s3_bucket_cors_configuration.this: Refreshing state... [id=thalia-thadmin-staging]
module.thadmin_routing.aws_s3_bucket_policy.bucket_policy: Refreshing state... [id=thalia-thadmin-staging]
module.thadmin_routing.module.cloudfront.aws_cloudfront_distribution.this[0]: Refreshing state... [id=E2ZP8HCBLISQFN]
module.thadmin_routing.aws_route53_record.api: Refreshing state... [id=Z3I4ZHBBD5NSHU_thadmin-staging_A]
module.thadmin_hosting.aws_s3_object.code_build_object["apple-splash-2532-1170.jpg"]: Refreshing state... [id=apple-splash-2532-1170.jpg]
module.thadmin_hosting.aws_s3_object.code_build_object["apple-splash-1620-2160.jpg"]: Refreshing state... [id=apple-splash-1620-2160.jpg]
module.thadmin_hosting.aws_s3_object.code_build_object["apple-splash-1792-828.jpg"]: Refreshing state... [id=apple-splash-1792-828.jpg]
module.thadmin_hosting.aws_s3_object.code_build_object["apple-splash-2778-1284.jpg"]: Refreshing state... [id=apple-splash-2778-1284.jpg]
module.thadmin_hosting.aws_s3_object.code_build_object["favicon.svg"]: Refreshing state... [id=favicon.svg]
module.thadmin_hosting.aws_s3_object.code_build_object["apple-splash-2436-1125.jpg"]: Refreshing state... [id=apple-splash-2436-1125.jpg]
module.thadmin_hosting.aws_s3_object.code_build_object["img/backgroundImage.24f22a44.jpg"]: Refreshing state... [id=img/backgroundImage.24f22a44.jpg]
module.thadmin_hosting.aws_s3_object.code_build_object["mstile-144x144.png"]: Refreshing state... [id=mstile-144x144.png]
module.thadmin_hosting.aws_s3_object.code_build_object["browserconfig.xml"]: Refreshing state... [id=browserconfig.xml]
module.thadmin_hosting.aws_s3_object.code_build_object["favicon.ico"]: Refreshing state... [id=favicon.ico]
module.thadmin_hosting.aws_s3_object.code_build_object["apple-splash-1668-2224.jpg"]: Refreshing state... [id=apple-splash-1668-2224.jpg]
module.thadmin_hosting.aws_s3_object.code_build_object["mstile-150x150.png"]: Refreshing state... [id=mstile-150x150.png]
module.thadmin_hosting.aws_s3_object.code_build_object["js/chunk-vendors.d04bdbda.js.map"]: Refreshing state... [id=js/chunk-vendors.d04bdbda.js.map]
module.thadmin_hosting.aws_s3_object.code_build_object["apple-splash-2048-1536.jpg"]: Refreshing state... [id=apple-splash-2048-1536.jpg]
module.thadmin_hosting.aws_s3_object.code_build_object["favicon.png"]: Refreshing state... [id=favicon.png]
module.thadmin_hosting.aws_s3_object.code_build_object["index.html"]: Refreshing state... [id=index.html]
module.thadmin_hosting.aws_s3_object.code_build_object["safari-pinned-tab.svg"]: Refreshing state... [id=safari-pinned-tab.svg]
module.thadmin_hosting.aws_s3_object.code_build_object["apple-splash-2388-1668.jpg"]: Refreshing state... [id=apple-splash-2388-1668.jpg]
module.thadmin_hosting.aws_s3_object.code_build_object["apple-splash-1242-2208.jpg"]: Refreshing state... [id=apple-splash-1242-2208.jpg]
module.thadmin_hosting.aws_s3_object.code_build_object["mstile-70x70.png"]: Refreshing state... [id=mstile-70x70.png]
module.thadmin_hosting.aws_s3_object.code_build_object["js/499.d892580e.js"]: Refreshing state... [id=js/499.d892580e.js]
module.thadmin_hosting.aws_s3_object.code_build_object["js/499.d892580e.js.map"]: Refreshing state... [id=js/499.d892580e.js.map]
module.thadmin_hosting.aws_s3_object.code_build_object["apple-splash-1125-2436.jpg"]: Refreshing state... [id=apple-splash-1125-2436.jpg]
module.thadmin_hosting.aws_s3_object.code_build_object["apple-splash-1284-2778.jpg"]: Refreshing state... [id=apple-splash-1284-2778.jpg]
module.thadmin_hosting.aws_s3_object.code_build_object["js/app.0db7aa27.js.map"]: Refreshing state... [id=js/app.0db7aa27.js.map]
module.thadmin_hosting.aws_s3_object.code_build_object["favicon-16x16.png"]: Refreshing state... [id=favicon-16x16.png]
module.thadmin_hosting.aws_s3_object.code_build_object["apple-splash-640-1136.jpg"]: Refreshing state... [id=apple-splash-640-1136.jpg]
module.thadmin_hosting.aws_s3_object.code_build_object["apple-splash-2048-2732.jpg"]: Refreshing state... [id=apple-splash-2048-2732.jpg]
module.thadmin_hosting.aws_s3_object.code_build_object["mstile-310x310.png"]: Refreshing state... [id=mstile-310x310.png]
module.thadmin_hosting.aws_s3_object.code_build_object["site.webmanifest"]: Refreshing state... [id=site.webmanifest]
module.thadmin_hosting.aws_s3_object.code_build_object["apple-splash-2688-1242.jpg"]: Refreshing state... [id=apple-splash-2688-1242.jpg]
module.thadmin_hosting.aws_s3_object.code_build_object["apple-splash-1136-640.jpg"]: Refreshing state... [id=apple-splash-1136-640.jpg]
module.thadmin_hosting.aws_s3_object.code_build_object["apple-splash-2732-2048.jpg"]: Refreshing state... [id=apple-splash-2732-2048.jpg]
module.thadmin_hosting.aws_s3_object.code_build_object["css/chunk-vendors.7eece550.css"]: Refreshing state... [id=css/chunk-vendors.7eece550.css]
module.thadmin_hosting.aws_s3_object.code_build_object["apple-splash-1170-2532.jpg"]: Refreshing state... [id=apple-splash-1170-2532.jpg]
module.thadmin_hosting.aws_s3_object.code_build_object["android-chrome-192x192.png"]: Refreshing state... [id=android-chrome-192x192.png]
module.thadmin_hosting.aws_s3_object.code_build_object["js/app.0db7aa27.js"]: Refreshing state... [id=js/app.0db7aa27.js]
module.thadmin_hosting.aws_s3_object.code_build_object["apple-splash-2208-1242.jpg"]: Refreshing state... [id=apple-splash-2208-1242.jpg]
module.thadmin_hosting.aws_s3_object.code_build_object["apple-splash-1242-2688.jpg"]: Refreshing state... [id=apple-splash-1242-2688.jpg]
module.thadmin_hosting.aws_s3_object.code_build_object["apple-splash-828-1792.jpg"]: Refreshing state... [id=apple-splash-828-1792.jpg]
module.thadmin_hosting.aws_s3_object.code_build_object["apple-touch-icon.png"]: Refreshing state... [id=apple-touch-icon.png]
module.thadmin_hosting.aws_s3_object.code_build_object["img/anonymousUser.c7a94bce.jpg"]: Refreshing state... [id=img/anonymousUser.c7a94bce.jpg]
module.thadmin_hosting.aws_s3_object.code_build_object["mstile-310x150.png"]: Refreshing state... [id=mstile-310x150.png]
module.thadmin_hosting.aws_s3_object.code_build_object["apple-splash-1536-2048.jpg"]: Refreshing state... [id=apple-splash-1536-2048.jpg]
module.thadmin_hosting.aws_s3_object.code_build_object["apple-splash-1334-750.jpg"]: Refreshing state... [id=apple-splash-1334-750.jpg]
module.thadmin_hosting.aws_s3_object.code_build_object["css/app.5b725460.css"]: Refreshing state... [id=css/app.5b725460.css]
module.thadmin_hosting.aws_s3_object.code_build_object["favicon-32x32.png"]: Refreshing state... [id=favicon-32x32.png]
module.thadmin_hosting.aws_s3_object.code_build_object["apple-splash-750-1334.jpg"]: Refreshing state... [id=apple-splash-750-1334.jpg]
module.thadmin_hosting.aws_s3_object.code_build_object["android-chrome-512x512.png"]: Refreshing state... [id=android-chrome-512x512.png]
module.thadmin_hosting.aws_s3_object.code_build_object["js/chunk-vendors.d04bdbda.js"]: Refreshing state... [id=js/chunk-vendors.d04bdbda.js]
module.thadmin_hosting.aws_s3_object.code_build_object["apple-splash-1668-2388.jpg"]: Refreshing state... [id=apple-splash-1668-2388.jpg]
module.thadmin_hosting.aws_s3_object.code_build_object["apple-splash-2224-1668.jpg"]: Refreshing state... [id=apple-splash-2224-1668.jpg]
module.thadmin_hosting.aws_s3_object.code_build_object["apple-splash-2160-1620.jpg"]: Refreshing state... [id=apple-splash-2160-1620.jpg]
An execution plan has been generated and is shown below.

Resource actions are indicated with the following symbols:

create

~ update in-place


destroy

Terraform will perform the following actions:
module.thadmin_hosting.aws_s3_object.code_build_object["img/backgroundImage.24f22a44.jpg"] will be updated in-place
~ resource "aws_s3_object" "code_build_object" {

~ etag                   = "407e69540c950ce3e893be2cbadd0f30-2" -> "5f59aad8b5eddf226c7e5a21939e4018"

id                     = "img/backgroundImage.24f22a44.jpg"

tags                   = {}

+ version_id             = (known after apply)

# (10 unchanged attributes hidden)

}
module.thadmin_hosting.aws_s3_object.code_build_object["index.html"] will be updated in-place
~ resource "aws_s3_object" "code_build_object" {

~ etag                   = "826e1c64c4b0a1cf9bcc8cd8ac9f97ce" -> "7f1985ec6e491d1bbfbb8bc92b3202b3"

id                     = "index.html"

tags                   = {}

+ version_id             = (known after apply)

# (10 unchanged attributes hidden)

}
module.thadmin_hosting.aws_s3_object.code_build_object["js/app.0db7aa27.js"] will be destroyed

resource "aws_s3_object" "code_build_object" {

bucket                 = "thalia-thadmin-staging" -> null
bucket_key_enabled     = false -> null
content_type           = "text/javascript" -> null
etag                   = "2ed26b8f942964a37e85aa9c46980634" -> null
force_destroy          = false -> null
id                     = "js/app.0db7aa27.js" -> null
key                    = "js/app.0db7aa27.js" -> null
metadata               = {} -> null
server_side_encryption = "AES256" -> null
source                 = "/home/runner/work/thadmin/thadmin/infra/modules/hosting/../../..//dist/js/app.0db7aa27.js" -> null
storage_class          = "STANDARD" -> null
tags                   = {} -> null
tags_all               = {} -> null

}



module.thadmin_hosting.aws_s3_object.code_build_object["js/app.0db7aa27.js.map"] will be destroyed

resource "aws_s3_object" "code_build_object" {

bucket                 = "thalia-thadmin-staging" -> null
bucket_key_enabled     = false -> null
content_type           = "application/octet-stream" -> null
etag                   = "1af11fc875e0ee3444ac0d114b508df5" -> null
force_destroy          = false -> null
id                     = "js/app.0db7aa27.js.map" -> null
key                    = "js/app.0db7aa27.js.map" -> null
metadata               = {} -> null
server_side_encryption = "AES256" -> null
source                 = "/home/runner/work/thadmin/thadmin/infra/modules/hosting/../../..//dist/js/app.0db7aa27.js.map" -> null
storage_class          = "STANDARD" -> null
tags                   = {} -> null
tags_all               = {} -> null

}



module.thadmin_hosting.aws_s3_object.code_build_object["js/app.74cff703.js"] will be created

resource "aws_s3_object" "code_build_object" {

acl                    = (known after apply)
bucket                 = "thalia-thadmin-staging"
bucket_key_enabled     = (known after apply)
checksum_crc32         = (known after apply)
checksum_crc32c        = (known after apply)
checksum_sha1          = (known after apply)
checksum_sha256        = (known after apply)
content_type           = "text/javascript"
etag                   = "c40f1df2197f044539a955da59fc7181"
force_destroy          = false
id                     = (known after apply)
key                    = "js/app.74cff703.js"
kms_key_id             = (known after apply)
server_side_encryption = (known after apply)
source                 = "/home/runner/work/thadmin/thadmin/infra/modules/hosting/../../..//dist/js/app.74cff703.js"
storage_class          = (known after apply)
tags_all               = (known after apply)
version_id             = (known after apply)

}



module.thadmin_hosting.aws_s3_object.code_build_object["js/app.74cff703.js.map"] will be created

resource "aws_s3_object" "code_build_object" {

acl                    = (known after apply)
bucket                 = "thalia-thadmin-staging"
bucket_key_enabled     = (known after apply)
checksum_crc32         = (known after apply)
checksum_crc32c        = (known after apply)
checksum_sha1          = (known after apply)
checksum_sha256        = (known after apply)
content_type           = "application/octet-stream"
etag                   = "24e974cc8864199f9565c06d47d73f0e"
force_destroy          = false
id                     = (known after apply)
key                    = "js/app.74cff703.js.map"
kms_key_id             = (known after apply)
server_side_encryption = (known after apply)
source                 = "/home/runner/work/thadmin/thadmin/infra/modules/hosting/../../..//dist/js/app.74cff703.js.map"
storage_class          = (known after apply)
tags_all               = (known after apply)
version_id             = (known after apply)

}



module.thadmin_hosting.aws_s3_object.code_build_object["js/chunk-vendors.a030eec9.js"] will be created

resource "aws_s3_object" "code_build_object" {

acl                    = (known after apply)
bucket                 = "thalia-thadmin-staging"
bucket_key_enabled     = (known after apply)
checksum_crc32         = (known after apply)
checksum_crc32c        = (known after apply)
checksum_sha1          = (known after apply)
checksum_sha256        = (known after apply)
content_type           = "text/javascript"
etag                   = "50c8da0c2722b8f960016010a280bfcf"
force_destroy          = false
id                     = (known after apply)
key                    = "js/chunk-vendors.a030eec9.js"
kms_key_id             = (known after apply)
server_side_encryption = (known after apply)
source                 = "/home/runner/work/thadmin/thadmin/infra/modules/hosting/../../..//dist/js/chunk-vendors.a030eec9.js"
storage_class          = (known after apply)
tags_all               = (known after apply)
version_id             = (known after apply)

}



module.thadmin_hosting.aws_s3_object.code_build_object["js/chunk-vendors.a030eec9.js.map"] will be created

resource "aws_s3_object" "code_build_object" {

acl                    = (known after apply)
bucket                 = "thalia-thadmin-staging"
bucket_key_enabled     = (known after apply)
checksum_crc32         = (known after apply)
checksum_crc32c        = (known after apply)
checksum_sha1          = (known after apply)
checksum_sha256        = (known after apply)
content_type           = "application/octet-stream"
etag                   = "4638aa1d62a5fb26e11c0af3567ac480"
force_destroy          = false
id                     = (known after apply)
key                    = "js/chunk-vendors.a030eec9.js.map"
kms_key_id             = (known after apply)
server_side_encryption = (known after apply)
source                 = "/home/runner/work/thadmin/thadmin/infra/modules/hosting/../../..//dist/js/chunk-vendors.a030eec9.js.map"
storage_class          = (known after apply)
tags_all               = (known after apply)
version_id             = (known after apply)

}



module.thadmin_hosting.aws_s3_object.code_build_object["js/chunk-vendors.d04bdbda.js"] will be destroyed

resource "aws_s3_object" "code_build_object" {

bucket                 = "thalia-thadmin-staging" -> null
bucket_key_enabled     = false -> null
content_type           = "text/javascript" -> null
etag                   = "e804114980e0cdb5c1817f2056c3b735" -> null
force_destroy          = false -> null
id                     = "js/chunk-vendors.d04bdbda.js" -> null
key                    = "js/chunk-vendors.d04bdbda.js" -> null
metadata               = {} -> null
server_side_encryption = "AES256" -> null
source                 = "/home/runner/work/thadmin/thadmin/infra/modules/hosting/../../..//dist/js/chunk-vendors.d04bdbda.js" -> null
storage_class          = "STANDARD" -> null
tags                   = {} -> null
tags_all               = {} -> null

}



module.thadmin_hosting.aws_s3_object.code_build_object["js/chunk-vendors.d04bdbda.js.map"] will be destroyed

resource "aws_s3_object" "code_build_object" {

bucket                 = "thalia-thadmin-staging" -> null
bucket_key_enabled     = false -> null
content_type           = "application/octet-stream" -> null
etag                   = "76631161aba37e46e71cdbb8bb738276" -> null
force_destroy          = false -> null
id                     = "js/chunk-vendors.d04bdbda.js.map" -> null
key                    = "js/chunk-vendors.d04bdbda.js.map" -> null
metadata               = {} -> null
server_side_encryption = "AES256" -> null
source                 = "/home/runner/work/thadmin/thadmin/infra/modules/hosting/../../..//dist/js/chunk-vendors.d04bdbda.js.map" -> null
storage_class          = "STANDARD" -> null
tags                   = {} -> null
tags_all               = {} -> null

}



Plan: 4 to add, 2 to change, 4 to destroy.
Warning: Value for undeclared variable
The root module does not declare a variable named "aws_profile" but a value

was found in file "terraform.tfvars". To use this value, add a "variable"

block to the configuration.
Using a variables file to set an undeclared variable is deprecated and will

become an error in a future release. If you wish to provide certain "global"

settings to all configurations in your organization, use TF_VAR_...

environment variables to set these instead.

Note: You didn't specify an "-out" parameter to save this plan, so Terraform

can't guarantee that exactly these actions will be performed if

"terraform apply" is subsequently run.