AlexeyPopovUA / advanced-logger

It is an extendable isomorphic log sending library written in TypeScript for javascript applications in nodejs and browsers for reporting data (logs) to remote log storages like SumoLogic, Loggly and Elasticsearch with support of different report strategies
https://advancedlogger.com/
MIT License
5 stars 3 forks source link

chore(deps): update dependency axios to v1.7.6 [security] - autoclosed #1206

Closed renovate[bot] closed 2 months ago

renovate[bot] commented 2 months ago

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
axios (source) 1.7.5 -> 1.7.6 age adoption passing confidence

GitHub Vulnerability Alerts

CVE-2024-39338

axios 1.7.2 allows SSRF via unexpected behavior where requests for path relative URLs get processed as protocol relative URLs.


Release Notes

axios/axios (axios) ### [`v1.7.6`](https://redirect.github.com/axios/axios/blob/HEAD/CHANGELOG.md#176-2024-08-30) [Compare Source](https://redirect.github.com/axios/axios/compare/v1.7.5...v1.7.6) ##### Bug Fixes - **fetch:** fix content length calculation for FormData payload; ([#​6524](https://redirect.github.com/axios/axios/issues/6524)) ([085f568](https://redirect.github.com/axios/axios/commit/085f56861a83e9ac02c140ad9d68dac540dfeeaa)) - **fetch:** optimize signals composing logic; ([#​6582](https://redirect.github.com/axios/axios/issues/6582)) ([df9889b](https://redirect.github.com/axios/axios/commit/df9889b83c2cc37e9e6189675a73ab70c60f031f)) ##### Contributors to this release - avatar [Dmitriy Mozgovoy](https://redirect.github.com/DigitalBrainJS "+98/-46 (#​6582 )") - avatar [Jacques Germishuys](https://redirect.github.com/jacquesg "+5/-1 (#​6524 )") - avatar [kuroino721](https://redirect.github.com/kuroino721 "+3/-1 (#​6575 )")

Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.



This PR was generated by Mend Renovate. View the repository job log.

sonarcloud[bot] commented 2 months ago

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarCloud