Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix(deps): update dependency axios [security] #3641

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Nov 11, 2023

Mend Renovate

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
axios (source) 1.4.0 -> 1.6.0 age adoption passing confidence
axios (source) 0.27.2 -> 0.28.0 age adoption passing confidence
axios (source) 1.3.4 -> 1.6.0 age adoption passing confidence

GitHub Vulnerability Alerts

CVE-2023-45857

An issue discovered in Axios 0.8.1 through 1.5.1 inadvertently reveals the confidential XSRF-TOKEN stored in cookies by including it in the HTTP header X-XSRF-TOKEN for every request made to any host allowing attackers to view sensitive information.


Release Notes

axios/axios (axios)

v1.6.0

Compare Source

Bug Fixes
PRs

⚠️ Critical vulnerability fix. See https://security.snyk.io/vuln/SNYK-JS-AXIOS-6032459
Contributors to this release

1.5.1 (2023-09-26)

Bug Fixes
  • adapters: improved adapters loading logic to have clear error messages; (#​5919) (e410779)
  • formdata: fixed automatic addition of the Content-Type header for FormData in non-browser environments; (#​5917) (bc9af51)
  • headers: allow content-encoding header to handle case-insensitive values (#​5890) (#​5892) (4c89f25)
  • types: removed duplicated code (9e62056)
Contributors to this release
PRs

⚠️ Critical vulnerability fix. See https://security.snyk.io/vuln/SNYK-JS-AXIOS-6032459

v1.5.1

Compare Source

Bug Fixes
  • adapters: improved adapters loading logic to have clear error messages; (#​5919) (e410779)
  • formdata: fixed automatic addition of the Content-Type header for FormData in non-browser environments; (#​5917) (bc9af51)
  • headers: allow content-encoding header to handle case-insensitive values (#​5890) (#​5892) (4c89f25)
  • types: removed duplicated code (9e62056)
Contributors to this release

v1.5.0

Compare Source

Bug Fixes
  • adapter: make adapter loading error more clear by using platform-specific adapters explicitly (#​5837) (9a414bb)
  • dns: fixed cacheable-lookup integration; (#​5836) (b3e327d)
  • headers: added support for setting header names that overlap with class methods; (#​5831) (d8b4ca0)
  • headers: fixed common Content-Type header merging; (#​5832) (8fda276)
Features
Contributors to this release

Configuration

📅 Schedule: Branch creation - "" in timezone Asia/Singapore, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

Copy link

vercel bot commented Nov 11, 2023

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name Status Preview Comments Updated (UTC)
nusmods-export ✅ Ready (Inspect) Visit Preview 💬 Add feedback May 19, 2024 1:33am
nusmods-website ✅ Ready (Inspect) Visit Preview 💬 Add feedback May 19, 2024 1:33am

Copy link

codecov bot commented Nov 11, 2023

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 53.59%. Comparing base (c26ef0b) to head (cfe3598).

Additional details and impacted files
@@           Coverage Diff           @@
##           master    #3641   +/-   ##
=======================================
  Coverage   53.59%   53.59%           
=======================================
  Files         272      272           
  Lines        5988     5988           
  Branches     1434     1434           
=======================================
  Hits         3209     3209           
  Misses       2779     2779           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

@renovate renovate bot force-pushed the renovate/npm-axios-vulnerability branch from c536aab to 4c065ac Compare November 11, 2023 13:52
@renovate renovate bot changed the title fix(deps): update dependency axios to v1 [security] fix(deps): update dependency axios to v1.6.0 [security] Nov 11, 2023
@renovate renovate bot force-pushed the renovate/npm-axios-vulnerability branch from 4c065ac to 9480dae Compare November 11, 2023 15:36
@renovate renovate bot force-pushed the renovate/npm-axios-vulnerability branch from 9480dae to 71af68e Compare November 16, 2023 11:25
@renovate renovate bot force-pushed the renovate/npm-axios-vulnerability branch from 71af68e to a32c7da Compare December 12, 2023 13:02
@renovate renovate bot force-pushed the renovate/npm-axios-vulnerability branch from a32c7da to f037d36 Compare December 17, 2023 03:28
@renovate renovate bot force-pushed the renovate/npm-axios-vulnerability branch from f037d36 to a4f0002 Compare December 28, 2023 06:52
@renovate renovate bot force-pushed the renovate/npm-axios-vulnerability branch from a4f0002 to fff9b24 Compare December 29, 2023 13:04
@renovate renovate bot force-pushed the renovate/npm-axios-vulnerability branch from fff9b24 to df32df4 Compare January 12, 2024 04:21
@renovate renovate bot force-pushed the renovate/npm-axios-vulnerability branch from 1708616 to 0d91f03 Compare April 10, 2024 15:11
@renovate renovate bot force-pushed the renovate/npm-axios-vulnerability branch from 0d91f03 to 2af872e Compare April 15, 2024 03:48
@renovate renovate bot force-pushed the renovate/npm-axios-vulnerability branch from 2af872e to 1c7780e Compare April 16, 2024 06:43
@renovate renovate bot force-pushed the renovate/npm-axios-vulnerability branch from 1c7780e to b681b03 Compare April 17, 2024 07:19
@renovate renovate bot force-pushed the renovate/npm-axios-vulnerability branch from b681b03 to 3125e10 Compare April 17, 2024 08:39
@renovate renovate bot force-pushed the renovate/npm-axios-vulnerability branch from 3125e10 to 399f005 Compare April 17, 2024 09:06
@renovate renovate bot force-pushed the renovate/npm-axios-vulnerability branch from 399f005 to 18583fb Compare April 17, 2024 14:06
@renovate renovate bot force-pushed the renovate/npm-axios-vulnerability branch from 18583fb to a24dfbb Compare April 20, 2024 17:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

0 participants