socket-security[bot]
commented
1 year ago New dependency changes detected. Learn more about Socket for GitHub āļø
š No new dependency issues detected in pull request
Bot Commands
To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of package-name@version specifiers. e.g. @SocketSecurity ignore foo@1.0.0 bar@* or ignore all packages with @SocketSecurity ignore-all
Pull request alert summary
| Issue | Status |
|---|---|
| Install scripts | ā 0 issues |
| Native code | ā 0 issues |
| Bin script shell injection | ā 0 issues |
| Unresolved require | ā 0 issues |
| Invalid package.json | ā 0 issues |
| HTTP dependency | ā 0 issues |
| Git dependency | ā 0 issues |
| Potential typo squat | ā 0 issues |
| Known Malware | ā 0 issues |
| Telemetry | ā 0 issues |
| Protestware/Troll package | ā 0 issues |
š Modified Dependency Overview:
š® Removed packages: axios@1.2.6
sonarcloud[bot]
This PR was automatically created by Snyk using the credentials of a real user.
Snyk has created this PR to upgrade axios from 1.2.6 to 1.3.5.
:information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.- The recommended version is **6 versions** ahead of your current version. - The recommended version was released **21 days ago**, on 2023-04-05.
Release notes
Package name: axios
-
1.3.5 - 2023-04-05
- headers: fixed isValidHeaderName to support full list of allowed characters; (#5584) (e7decef)
- params: re-added the ability to set the function as
Dmitriy Mozgovoy
-
1.3.4 - 2023-02-22
- blob: added a check to make sure the Blob class is available in the browser's global scope; (#5548) (3772c8f)
- http: fixed regression bug when handling synchronous errors inside the adapter; (#5564) (a3b246c)
Dmitriy Mozgovoy
lcysgsg
Michael Di Prisco
-
1.3.3 - 2023-02-13
- formdata: added a check to make sure the FormData class is available in the browser's global scope; (#5545) (a6dfa72)
- formdata: fixed setting NaN as Content-Length for form payload in some cases; (#5535) (c19f7bf)
- headers: fixed the filtering logic of the clear method; (#5542) (ea87ebf)
Dmitriy Mozgovoy
éč„ę«
-
1.3.2 - 2023-02-03
- http: treat http://localhost as base URL for relative paths to avoid
- http: use explicit import instead of TextEncoder global; (#5530) (6b3c305)
Dmitriy Mozgovoy
-
1.3.1 - 2023-02-01
- formdata: add hotfix to use the asynchronous API to compute the content-length header value; (#5521) (96d336f)
- serializer: fixed serialization of array-like objects; (#5518) (08104c0)
Dmitriy Mozgovoy
-
1.3.0 - 2023-01-31
- headers: fixed & optimized clear method; (#5507) (9915635)
- http: add zlib headers if missing (#5497) (65e8d1e)
- fomdata: added support for spec-compliant FormData & Blob types; (#5316) (6ac574e)
Dmitriy Mozgovoy
ItsNotGoodName
-
1.2.6 - 2023-01-28
- headers: added missed Authorization accessor; (#5502) (342c0ba)
- types: fixed
Dmitriy Mozgovoy
from axios GitHub release notesRelease notes:
Bug Fixes
paramsSerializerconfig; (#5633) (a56c866)Contributors to this release
Release notes:
Bug Fixes
Contributors to this release
Release notes:
Bug Fixes
Contributors to this release
Release notes:
Bug Fixes
ERR_INVALID_URLerror; (#5528) (128d56f)Contributors to this release
Release notes:
Bug Fixes
Contributors to this release
Release notes:
Bug Fixes
Features
Contributors to this release
Release notes:
Bug Fixes
CommonRequestHeadersList&CommonResponseHeadersListtypes to be private in commonJS; (#5503) (5a3d0a3)Contributors to this release
Commit messages
Package name: axios
- 4af78a7 chore(release): v1.3.5 (#5634)
- a56c866 fix(params): re-added the ability to set the function as `paramsSerializer` config; (#5633)
- e7decef fix(headers): fixed isValidHeaderName to support full list of allowed characters; (#5584)
- 2e70cec chore(release): v1.3.4 (#5565)
- cbe2de6 chore(ci): remove team-reviewers config; (#5566)
- 2b1fc73 chore(docs): added missing config.transport doc (#5444)
- 3772c8f fix(blob): added a check to make sure the Blob class is available in the browser's global scope; (#5548)
- a3b246c fix(http): fixed regression bug when handling synchronous errors inside the adapter; (#5564)
- d9ebf8f chore(release): v1.3.3 (#5546)
- a43bca0 chore(example): fix source map urls; (#5467)
- a6dfa72 fix(formdata): added a check to make sure the FormData class is available in the browser's global scope; (#5545)
- c19f7bf fix(formdata): fixed setting NaN as Content-Length for form payload in some cases; (#5535)
- ea87ebf fix(headers): fixed the filtering logic of the clear method; (#5542)
- 0b44929 chore(release): v1.3.2 (#5531)
- 6b3c305 fix(http): use explicit import instead of TextEncoder global; (#5530)
- 128d56f fix(http): treat http://localhost as base URL for relative paths to avoid `ERR_INVALID_URL` error; (#5528)
- 54d3fac chore(release): v1.3.1 (#5522)
- 96d336f fix(formdata): add hotfix to use the asynchronous API to compute the content-length header value; (#5521)
- 08104c0 fix(serializer): fixed serialization of array-like objects; (#5518)
- 7fbfbbe chore(release): v1.3.0 (#5513)
- 9263473 chore(ci): fixed contributors avatar rendering for CHANGELOG.md; (#5514)
- 9957377 chore(ci): change release-it git config; (#5512)
- 46a650c chore(ci): prepare package-lock.json for commit on build stage; (#5510)
- 4bf5052 chore(ci): add git diff echo; (#5509)
Compare**Note:** *You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.* For more information: