snowflakedb / SnowAlert

Security Analytics Using The Snowflake Data Warehouse
Apache License 2.0
181 stars 57 forks source link

Update dependency axios to ^0.21.0 #621

Open mend-for-github-com[bot] opened 2 years ago

mend-for-github-com[bot] commented 2 years ago

This PR contains the following updates:

Package Type Update Change
axios (source) dependencies minor ^0.20.0 -> ^0.21.0

By merging this PR, the below issues will be automatically resolved and closed:

Severity CVSS Score CVE GitHub Issue
Medium 6.5 CVE-2022-0155 #574
Medium 5.9 CVE-2020-28168 #505
Medium 5.9 CVE-2022-0536 #587

Release Notes

axios/axios ### [`v0.21.1`](https://togithub.com/axios/axios/releases/tag/v0.21.1) [Compare Source](https://togithub.com/axios/axios/compare/v0.21.0...v0.21.1) ##### 0.21.1 (December 21, 2020) Fixes and Functionality: - Hotfix: Prevent SSRF ([#​3410](https://togithub.com/axios/axios/issues/3410)) - Protocol not parsed when setting proxy config from env vars ([#​3070](https://togithub.com/axios/axios/issues/3070)) - Updating axios in types to be lower case ([#​2797](https://togithub.com/axios/axios/issues/2797)) - Adding a type guard for `AxiosError` ([#​2949](https://togithub.com/axios/axios/issues/2949)) Internal and Tests: - Remove the skipping of the `socket` http test ([#​3364](https://togithub.com/axios/axios/issues/3364)) - Use different socket for Win32 test ([#​3375](https://togithub.com/axios/axios/issues/3375)) Huge thanks to everyone who contributed to this release via code (authors listed below) or via reviews and triaging on GitHub: - Daniel Lopretto - Jason Kwok - Jay - Jonathan Foster - Remco Haszing - Xianming Zhong ### [`v0.21.0`](https://togithub.com/axios/axios/releases/tag/v0.21.0) [Compare Source](https://togithub.com/axios/axios/compare/v0.20.0...v0.21.0) ##### 0.21.0 (October 23, 2020) Fixes and Functionality: - Fixing requestHeaders.Authorization ([#​3287](https://togithub.com/axios/axios/pull/3287)) - Fixing node types ([#​3237](https://togithub.com/axios/axios/pull/3237)) - Fixing axios.delete ignores config.data ([#​3282](https://togithub.com/axios/axios/pull/3282)) - Revert "Fixing overwrite Blob/File type as Content-Type in browser. ([#​1773](https://togithub.com/axios/axios/issues/1773))" ([#​3289](https://togithub.com/axios/axios/pull/3289)) - Fixing an issue that type 'null' and 'undefined' is not assignable to validateStatus when typescript strict option is enabled ([#​3200](https://togithub.com/axios/axios/pull/3200)) Internal and Tests: - Lock travis to not use node v15 ([#​3361](https://togithub.com/axios/axios/pull/3361)) Documentation: - Fixing simple typo, existant -> existent ([#​3252](https://togithub.com/axios/axios/pull/3252)) - Fixing typos ([#​3309](https://togithub.com/axios/axios/pull/3309)) Huge thanks to everyone who contributed to this release via code (authors listed below) or via reviews and triaging on GitHub: - Allan Cruz <57270969+Allanbcruz@users.noreply.github.com> - George Cheng - Jay - Kevin Kirsche - Remco Haszing - Taemin Shin - Tim Gates - Xianming Zhong