sorenlouv / backport

A simple CLI tool that automates the process of backporting commits on a GitHub repo
https://github.com/sqren/backport/blob/main/docs/config-file-options.md
Apache License 2.0
241 stars 57 forks source link

Upgrade Axios to dismiss security alerts #482

Open xiehan opened 7 months ago

xiehan commented 7 months ago

Everyone with even an indirect dependency on this library is now getting this security alert: https://github.com/advisories/GHSA-wf5p-g6vw-rhxx

Upgrading Axios to ^1.6.0 should fix it.

I tried submitting a PR but got stuck on a bunch of tests failing and don't have the bandwidth to dig into why that is happening.