Skip to content

fix: pin axios to 1.13.5 across all packages#2712

Closed
thisisnithin wants to merge 1 commit intomainfrom
nithinkumarb/pin-axios-1.13.5
Closed

fix: pin axios to 1.13.5 across all packages#2712
thisisnithin wants to merge 1 commit intomainfrom
nithinkumarb/pin-axios-1.13.5

Conversation

@thisisnithin
Copy link
Copy Markdown
Member

@thisisnithin thisisnithin commented Mar 31, 2026

Summary

  • Pins axios to exact version 1.13.5 in controlplane, playground, and studio (cli was already pinned)
  • Removes caret (^) ranges to prevent automatic upgrades to unvetted versions
  • Upgrades playground and studio from 1.12.2 to 1.13.5 for consistency

Closes #2711

Test plan

  • pnpm install completes successfully
  • Verify no regressions in API calls across controlplane, playground, and studio

🤖 Generated with Claude Code

Summary by CodeRabbit

  • Chores
    • Pinned axios dependency to version 1.13.5 across multiple packages for consistent behavior.

Removes caret ranges and pins axios to exact version 1.13.5 in
controlplane, playground, and studio to prevent automatic upgrades
to unvetted versions.

Closes #2711

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
@coderabbitai
Copy link
Copy Markdown
Contributor

coderabbitai Bot commented Mar 31, 2026

Caution

Review failed

Pull request was closed or merged during review

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: 0837b99d-fe2a-4746-9135-79f8a76aa72d

📥 Commits

Reviewing files that changed from the base of the PR and between dc4388d and 350dd28.

⛔ Files ignored due to path filters (1)
  • pnpm-lock.yaml is excluded by !**/pnpm-lock.yaml
📒 Files selected for processing (3)
  • controlplane/package.json
  • playground/package.json
  • studio/package.json

Walkthrough

The pull request pins the axios dependency to an exact version (1.13.5) across three workspace packages, changing from caret-pinned version ranges to fixed versions to prevent automatic upgrades to unvetted newer versions.

Changes

Cohort / File(s) Summary
Axios version pinning
controlplane/package.json, playground/package.json, studio/package.json
Updated axios dependency to fixed version 1.13.5 across all three packages, replacing caret ranges (^1.13.5 and ^1.12.2) with exact version specification.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~3 minutes

Possibly related PRs

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title 'fix: pin axios to 1.13.5 across all packages' clearly and concisely summarizes the main change, accurately reflecting the dependency pinning across all packages.
Linked Issues check ✅ Passed The pull request successfully implements all coding requirements from issue #2711: pins axios to 1.13.5 in controlplane, playground, and studio by replacing caret ranges with exact versions.
Out of Scope Changes check ✅ Passed All changes are directly scoped to the objective of pinning axios to 1.13.5 across packages; no unrelated modifications or feature additions are present.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

Warning

Review ran into problems

🔥 Problems

Timed out fetching pipeline failures after 30000ms


Comment @coderabbitai help to get the list of available commands and usage tips.

@codecov
Copy link
Copy Markdown

codecov Bot commented Mar 31, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 39.30%. Comparing base (dc4388d) to head (350dd28).

Additional details and impacted files
@@            Coverage Diff             @@
##             main    #2712      +/-   ##
==========================================
- Coverage   45.67%   39.30%   -6.38%     
==========================================
  Files        1032      747     -285     
  Lines      138877    99859   -39018     
  Branches     8628     4942    -3686     
==========================================
- Hits        63432    39248   -24184     
+ Misses      73719    58888   -14831     
+ Partials     1726     1723       -3     

see 326 files with indirect coverage changes

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@thisisnithin thisisnithin deleted the nithinkumarb/pin-axios-1.13.5 branch March 31, 2026 08:45
@github-actions
Copy link
Copy Markdown

github-actions Bot commented Mar 31, 2026

Router-nonroot image scan passed

✅ No security vulnerabilities found in image:

ghcr.io/wundergraph/cosmo/router:sha-63133c5797fedac3d79b7588cafd40cf592391c4-nonroot

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Pin axios dependency to 1.13.5

1 participant