[Snyk] Upgrade axios from 1.2.6 to 1.3.4

snyk-bot commented 1 year ago

Snyk has created this PR to upgrade axios from 1.2.6 to 1.3.4.

:information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version is 5 versions ahead of your current version.
The recommended version was released 2 months ago, on 2023-02-22.

Release notes

Package name: axios

1.3.4 - 2023-02-22
Release notes:

Bug Fixes
- blob: added a check to make sure the Blob class is available in the browser's global scope; (#5548) (3772c8f)
- http: fixed regression bug when handling synchronous errors inside the adapter; (#5564) (a3b246c)
Contributors to this release
1.3.3 - 2023-02-13
Release notes:

Bug Fixes
- formdata: added a check to make sure the FormData class is available in the browser's global scope; (#5545) (a6dfa72)
- formdata: fixed setting NaN as Content-Length for form payload in some cases; (#5535) (c19f7bf)
- headers: fixed the filtering logic of the clear method; (#5542) (ea87ebf)
Contributors to this release
- Dmitriy Mozgovoy
- 陈若枫
1.3.2 - 2023-02-03
Release notes:

Bug Fixes
- http: treat http://localhost as base URL for relative paths to avoid ERR_INVALID_URL error; (#5528) (128d56f)
- http: use explicit import instead of TextEncoder global; (#5530) (6b3c305)
Contributors to this release
- Dmitriy Mozgovoy
1.3.1 - 2023-02-01
Release notes:

Bug Fixes
- formdata: add hotfix to use the asynchronous API to compute the content-length header value; (#5521) (96d336f)
- serializer: fixed serialization of array-like objects; (#5518) (08104c0)
Contributors to this release
- Dmitriy Mozgovoy
1.3.0 - 2023-01-31
Release notes:

Bug Fixes
- headers: fixed & optimized clear method; (#5507) (9915635)
- http: add zlib headers if missing (#5497) (65e8d1e)
Features
- fomdata: added support for spec-compliant FormData & Blob types; (#5316) (6ac574e)
Contributors to this release
- Dmitriy Mozgovoy
- ItsNotGoodName
1.2.6 - 2023-01-28
Release notes:

Bug Fixes
- headers: added missed Authorization accessor; (#5502) (342c0ba)
- types: fixed CommonRequestHeadersList & CommonResponseHeadersList types to be private in commonJS; (#5503) (5a3d0a3)
Contributors to this release
- Dmitriy Mozgovoy

from axios GitHub release notes

Commit messages

Package name: axios

2e70cec chore(release): v1.3.4 (#5565)
cbe2de6 chore(ci): remove team-reviewers config; (#5566)
2b1fc73 chore(docs): added missing config.transport doc (#5444)
3772c8f fix(blob): added a check to make sure the Blob class is available in the browser's global scope; (#5548)
a3b246c fix(http): fixed regression bug when handling synchronous errors inside the adapter; (#5564)
d9ebf8f chore(release): v1.3.3 (#5546)
a43bca0 chore(example): fix source map urls; (#5467)
a6dfa72 fix(formdata): added a check to make sure the FormData class is available in the browser's global scope; (#5545)
c19f7bf fix(formdata): fixed setting NaN as Content-Length for form payload in some cases; (#5535)
ea87ebf fix(headers): fixed the filtering logic of the clear method; (#5542)
0b44929 chore(release): v1.3.2 (#5531)
6b3c305 fix(http): use explicit import instead of TextEncoder global; (#5530)
128d56f fix(http): treat http://localhost as base URL for relative paths to avoid `ERR_INVALID_URL` error; (#5528)
54d3fac chore(release): v1.3.1 (#5522)
96d336f fix(formdata): add hotfix to use the asynchronous API to compute the content-length header value; (#5521)
08104c0 fix(serializer): fixed serialization of array-like objects; (#5518)
7fbfbbe chore(release): v1.3.0 (#5513)
9263473 chore(ci): fixed contributors avatar rendering for CHANGELOG.md; (#5514)
9957377 chore(ci): change release-it git config; (#5512)
46a650c chore(ci): prepare package-lock.json for commit on build stage; (#5510)
4bf5052 chore(ci): add git diff echo; (#5509)
91d6009 chore(ci): add git status echo; (#5508)
6ac574e feat(fomdata): added support for spec-compliant FormData & Blob types; (#5316)
65e8d1e fix(http): add zlib headers if missing (#5497)

Compare

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

socket-security[bot] commented 1 year ago

New dependency changes detected. Learn more about Socket for GitHub ↗︎

👍 No new dependency issues detected in pull request

Bot Commands

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of package-name@version specifiers. e.g. @SocketSecurity ignore foo@1.0.0 bar@* or ignore all packages with @SocketSecurity ignore-all

Pull request alert summary

Issue	Status
Install scripts	✅ 0 issues
Native code	✅ 0 issues
Bin script shell injection	✅ 0 issues
Unresolved require	✅ 0 issues
Invalid package.json	✅ 0 issues
HTTP dependency	✅ 0 issues
Git dependency	✅ 0 issues
Potential typo squat	✅ 0 issues
Known Malware	✅ 0 issues
Telemetry	✅ 0 issues
Protestware/Troll package	✅ 0 issues