Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Upgraded axios #14796

Merged
merged 1 commit into from
May 30, 2024
Merged

Upgraded axios #14796

merged 1 commit into from
May 30, 2024

Conversation

snipe
Copy link
Owner

@snipe snipe commented May 30, 2024

Just a dev dependency, but this fixes CVE-2023-45857

Signed-off-by: snipe <[email protected]>
@probot-autolabeler probot-autolabeler bot added dependencies Pull requests that update a dependency file javascript labels May 30, 2024
Copy link

what-the-diff bot commented May 30, 2024

PR Summary

  • Axios upgraded to the latest version
    The axios module, a key part of our code used for making requests to other servers, has been updated to its latest version. This update appears in both the package.json and package-lock.json files.

  • Enhanced 'follow-redirects'
    The follow-redirects module that helps our application move smoothly between different locations within servers or websites is also upgraded to its latest, more efficient and secure version.

  • Introduction of 'proxy-from-env'
    A new tool called proxy-from-env is introduced into our software, designed to allow the program to interface more appropriately and efficiently with different server environments.

  • No Additional Changes to Main Package File
    To ensure stability and compatibility, no changes were made to the core package file(package.json) other than updating the axios version. The form-data module which is crucial in handling data sent via forms on our platform has been left untouched.

@snipe snipe merged commit bed8861 into develop May 30, 2024
7 checks passed
@snipe snipe deleted the chore/sc-25715/axios branch May 30, 2024 12:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file javascript
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

1 participant