search

hyperjumptech / monika

Monika is a command line application to monitor every part of your web app using a simple YAML configuration file. Get alert not only when your site is down but also when it's slow.
https://monika.hyperjump.tech
MIT License
605 stars 67 forks source link

Update Axios #1225

Closed sapiderman closed 8 months ago

sapiderman commented 10 months ago

Update Axios to version 1.6.x

Monika still using 0.27.0, a few generations old vs the current 1.6.x version

Target

  1. Update axios to leverage all the new security patches (see references)
  2. Include all the released bug fixes (see reference below)

References:

  1. SNYK-JS-AXIOS-6032459
  2. CVE 2023 45857
  3. Official Axios release page
dennypradipta commented 10 months ago

I've already mentioned that in #1034 that if you upgrade Axios, it will break because of pkg. So, might want to rethink about this (or just replace axios for something else)

sapiderman commented 10 months ago

Sure. Might worth another look and move forward. Update: Also related to this ticket pkg deprecated.

sapiderman commented 10 months ago

maybe closing this ticket in favor of native fetch from ticket #1227