[Snyk] Security upgrade axios from 1.7.9 to 1.13.5#21
Conversation
The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-AXIOS-15252993
✅ Deploy Preview for comfy-crostata-209e70 ready!
To edit notification comments on pull requests, go to your Netlify project configuration. |
|
Important Review skippedIgnore keyword(s) in the title. Please check the settings in the CodeRabbit UI or the You can disable this status message by setting the Use the checkbox below for a quick retry:
✨ Finishing touches🧪 Generate unit tests (beta)
Tip Issue Planner is now in beta. Read the docs and try it out! Share your feedback on Discord. Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
There was a problem hiding this comment.
Pull request overview
Updates the project’s HTTP client dependency to address a reported Snyk vulnerability in axios by upgrading to a newer 1.x release.
Changes:
- Bump
axiosdependency inpackage.jsonto^1.13.5. - Regenerate
package-lock.jsonentries to pinaxios@1.13.5and update related transitive dependencies (follow-redirects,form-data, plus newes-set-tostringtag).
Reviewed changes
Copilot reviewed 1 out of 2 changed files in this pull request and generated no comments.
| File | Description |
|---|---|
| package.json | Updates the declared axios version range to ^1.13.5. |
| package-lock.json | Locks axios to 1.13.5 and updates/adds transitive dependency entries accordingly. |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
Snyk has created this PR to fix 1 vulnerabilities in the npm dependencies of this project.
Snyk changed the following file(s):
package.jsonpackage-lock.jsonVulnerabilities that will be fixed with an upgrade:
SNYK-JS-AXIOS-15252993
Important
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic
Learn how to fix vulnerabilities with free interactive lessons:
🦉 Prototype Pollution