fix(lambda): bump axios from 1.18.0 to 1.18.1 in /lambdas (#5223)

Bumps [axios](https://github.com/axios/axios) from 1.18.0 to 1.18.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/axios/axios/releases">axios's
releases</a>.</em></p>
<blockquote>
<h2>v1.18.1 — June 21, 2026</h2>
<p>This release focuses on Node HTTP adapter fixes, safer AxiosError
serialisation, runtime/type correctness fixes, documentation updates,
and dependency maintenance.</p>
<h2>🐛 Bug Fixes</h2>
<ul>
<li>AxiosError Serialisation: Made AxiosError#cause non-enumerable to
prevent circular JSON serialisation failures when errors include nested
causes. (<a
href="https://redirect.github.com/axios/axios/issues/10913">#10913</a>)</li>
<li>Node HTTP Adapter: Guarded socket.setKeepAlive for proxy agent
streams, accepted path-only URLs when socketPath is configured, deferred
environment proxy handling to Node, and explicitly passed maxBodyLength
through to follow-redirects. (<a
href="https://redirect.github.com/axios/axios/issues/10917">#10917</a>,
<a
href="https://redirect.github.com/axios/axios/issues/10930">#10930</a>,
<a
href="https://redirect.github.com/axios/axios/issues/10942">#10942</a>,
<a
href="https://redirect.github.com/axios/axios/issues/10993">#10993</a>)</li>
<li>Runtime and Type Correctness: Fixed several runtime crashes, type
definition mismatches, and incorrect error handling paths. (<a
href="https://redirect.github.com/axios/axios/issues/10959">#10959</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11021">#11021</a>)</li>
<li>AxiosURLSearchParams: Switched the encoder callback to an arrow
function so <code>encoder.call(this)</code> receives the
<code>AxiosURLSearchParams</code> instance correctly. (<a
href="https://redirect.github.com/axios/axios/issues/11019">#11019</a>)</li>
</ul>
<h2>🔧 Maintenance &amp; Chores</h2>
<ul>
<li>
<p>Documentation: Documented sensitive headers and status transition
behaviour, prepared cleaned-up docs, added Deno install instructions,
and clarified that request data is request-specific (<a
href="https://redirect.github.com/axios/axios/issues/11007">#11007</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11010">#11010</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11023">#11023</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11025">#11025</a>)</p>
</li>
<li>
<p>Dependencies: Bumped vite, rollup, form-data, js-yaml, and multer
across the root project, docs, smoke tests, and module test workspaces.
(<a
href="https://redirect.github.com/axios/axios/issues/11011">#11011</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11012">#11012</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11013">#11013</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11014">#11014</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11015">#11015</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11016">#11016</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11017">#11017</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11026">#11026</a>)</p>
</li>
</ul>
<h2>🌟 New Contributors</h2>
<p>We are thrilled to welcome our new contributors. Thank you for
helping improve axios:</p>
<ul>
<li><a
href="https://github.com/webdevelopersrinu"><code>@​webdevelopersrinu</code></a>
(<a
href="https://redirect.github.com/axios/axios/issues/10913">#10913</a>)</li>
<li><a href="https://github.com/sijie-Z"><code>@​sijie-Z</code></a> (<a
href="https://redirect.github.com/axios/axios/issues/10993">#10993</a>)</li>
<li><a
href="https://github.com/bartlomieju"><code>@​bartlomieju</code></a> (<a
href="https://redirect.github.com/axios/axios/issues/11023">#11023</a>)</li>
<li><a href="https://github.com/JSap0914"><code>@​JSap0914</code></a>
(<a
href="https://redirect.github.com/axios/axios/issues/11019">#11019</a>)</li>
</ul>
<p><a
href="https://github.com/axios/axios/compare/v1.18.0...v1.18.1">Full
Changelog</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/axios/axios/blob/v1.x/CHANGELOG.md">axios's
changelog</a>.</em></p>
<blockquote>
<h1>Changelog</h1>
<h2>v1.19.0 — July 22, 2026</h2>
<p>This release raises the form-data security floor, adds configuration
and type-system capabilities, and fixes NO_PROXY matching, interceptor
errors, progress reporting, and serialization edge cases.</p>
<h2>🔒 Security Fixes</h2>
<ul>
<li>Multipart Form Data: Raised the form-data dependency floor to
^4.0.6, preventing fresh installations from resolving versions affected
by the CRLF injection vulnerability GHSA-hmw2-7cc7-3qxx (<a
href="https://github.com/advisories/GHSA-hmw2-7cc7-3qxx">https://github.com/advisories/GHSA-hmw2-7cc7-3qxx</a>).
(<a
href="https://redirect.github.com/axios/axios/issues/11028">#11028</a>)</li>
</ul>
<h2>🚀 New Features</h2>
<ul>
<li>Configuration Extensibility: Preserved own-enumerable symbol-keyed
fields through mergeConfig and added a generic params type across public
TypeScript declarations, responses, errors,
adapters, and serializers. (<a
href="https://redirect.github.com/axios/axios/issues/11043">#11043</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11081">#11081</a>)</li>
<li>Header Parameter Parsing: Added the opt-in
AxiosHeaders.parseParameters() parser for quote-aware, RFC-style HTTP
parameter parsing while preserving legacy parsing behavior. (<a
href="https://redirect.github.com/axios/axios/issues/11051">#11051</a>)</li>
<li>HTTP Status Codes: Added the missing Cloudflare 520
WebServerReturnsAnUnknownError status and matching ESM/CJS declarations.
(<a
href="https://redirect.github.com/axios/axios/issues/11067">#11067</a>)</li>
</ul>
<h2>🐛 Bug Fixes</h2>
<ul>
<li>
<p>Form Data Conversion: Limited formDataToJSON path splitting to dot
and bracket notation, preserving literal punctuation in keys, and
removed browser-facing Buffer.from usage from toFormData to avoid
unnecessary polyfills. (<a
href="https://redirect.github.com/axios/axios/issues/11006">#11006</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11018">#11018</a>)</p>
</li>
<li>
<p>Proxy Bypass: Canonicalized IPv4 shorthand, octal, and hexadecimal
forms during NO_PROXY matching and honored * entries within comma- or
space-separated bypass lists. (<a
href="https://redirect.github.com/axios/axios/issues/11029">#11029</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11053">#11053</a>)</p>
</li>
<li>
<p>Cancellation: Propagated already-aborted input signals immediately
when composing abort signals. (<a
href="https://redirect.github.com/axios/axios/issues/11035">#11035</a>)</p>
</li>
<li>
<p>Header Handling: Preserved empty first values for duplicate singleton
headers and made AxiosHeaders#getSetCookie() consistently return arrays
for present values. (<a
href="https://redirect.github.com/axios/axios/issues/11036">#11036</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11037">#11037</a>)</p>
</li>
<li>
<p>URL Handling: Included normalized, safely redacted offending URLs in
malformed-protocol errors and removed repeated trailing slashes when
combining base URLs. (<a
href="https://redirect.github.com/axios/axios/issues/11008">#11008</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11038">#11038</a>)</p>
</li>
<li>
<p>Progress Events: Clamped malformed negative progress values to zero
and ensured final Node.js download progress events are delivered before
streamed responses close. (<a
href="https://redirect.github.com/axios/axios/issues/11039">#11039</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11040">#11040</a>)</p>
</li>
<li>
<p>Error and JSON Serialization: Serialized Set values as arrays in
JSON-compatible snapshots and synthesized useful AxiosError messages
from otherwise-empty AggregateError instances. (<a
href="https://redirect.github.com/axios/axios/issues/11044">#11044</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11059">#11059</a>)</p>
</li>
<li>
<p>Content-Length Enforcement: Corrected base64 data: URL size
estimation so maxContentLength is enforced consistently by the HTTP and
Fetch adapters. (<a
href="https://redirect.github.com/axios/axios/issues/11061">#11061</a>)</p>
</li>
<li>
<p>Synchronous Interceptors: Prevented requests from being dispatched
after synchronous request interceptors fail unless their paired
rejection handler resolves successfully. (<a
href="https://redirect.github.com/axios/axios/issues/11071">#11071</a>)</p>
</li>
</ul>
<h2>🔧 Maintenance &amp; Chores</h2>
<ul>
<li>Dependencies: Updated development and test tooling, the docs
fixture's Axios version, and GitHub Actions integrations including
Checkout, Setup Node, Setup Deno, and Zizmor. (<a
href="https://redirect.github.com/axios/axios/issues/11031">#11031</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11055">#11055</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11056">#11056</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11058">#11058</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11079">#11079</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11080">#11080</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11088">#11088</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11089">#11089</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11090">#11090</a>)</li>
<li>Build Outputs: Limited sourcemap generation to published minified
bundles, removing broken map references from non-minified builds. (<a
href="https://redirect.github.com/axios/axios/issues/11054">#11054</a>)</li>
<li>Form Data Internals: Centralized FormData header handling and made
the Node.js adapter tolerate getHeaders() returning undefined under the
content-only policy. (<a
href="https://redirect.github.com/axios/axios/issues/11062">#11062</a>)</li>
<li>Developer Experience: Ignored common local AI-tooling directories
and fixed a constant-reassignment crash when the development sandbox
serves its root path. (<a
href="https://redirect.github.com/axios/axios/issues/11032">#11032</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11073">#11073</a>)</li>
<li>Documentation: Updated sponsor information, clarified that baseURL
is not a path-security boundary, scoped provenance claims to attested
releases, and corrected the configuration-defaults documentation. (<a
href="https://redirect.github.com/axios/axios/issues/11041">#11041</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11068">#11068</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11076">#11076</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11078">#11078</a>)</li>
<li>Publishing: Simplified v1 publishing to use the npm version bundled
with Node.js 26 and updated package metadata for the 1.19.0 release. (<a
href="https://redirect.github.com/axios/axios/issues/11083">#11083</a>,
<a
href="https://redirect.github.com/axios/axios/issues/11095">#11095</a>)</li>
</ul>
<h2>🌟 New Contributors</h2>
<p>We are thrilled to welcome our new contributors. Thank you for
helping improve Axios:</p>
<ul>
<li><a
href="https://github.com/afonsojramos"><code>@​afonsojramos</code></a>
(<a
href="https://redirect.github.com/axios/axios/issues/11028">#11028</a>)</li>
<li><a
href="https://github.com/MahinAnowar"><code>@​MahinAnowar</code></a> (<a
href="https://redirect.github.com/axios/axios/issues/11006">#11006</a>)</li>
<li><a
href="https://github.com/yassertawfik4"><code>@​yassertawfik4</code></a>
(<a
href="https://redirect.github.com/axios/axios/issues/11024">#11024</a>)</li>
<li><a
href="https://github.com/AnandSundar"><code>@​AnandSundar</code></a> (<a
href="https://redirect.github.com/axios/axios/issues/11029">#11029</a>)</li>
<li><a
href="https://github.com/lin-hongkuan"><code>@​lin-hongkuan</code></a>
(<a
href="https://redirect.github.com/axios/axios/issues/11035">#11035</a>)</li>
<li><a
href="https://github.com/Wali007-lab"><code>@​Wali007-lab</code></a> (<a
href="https://redirect.github.com/axios/axios/issues/11054">#11054</a>)</li>
<li><a href="https://github.com/magicdawn"><code>@​magicdawn</code></a>
(<a
href="https://redirect.github.com/axios/axios/issues/11043">#11043</a>)</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/axios/axios/commit/a209bfb1e5dcbce3cecbf4bd955339d006358887"><code>a209bfb</code></a>
chore(release): prepare release 1.18.1 (<a
href="https://redirect.github.com/axios/axios/issues/11027">#11027</a>)</li>
<li><a
href="https://github.com/axios/axios/commit/fa6a55ef99235074d2c11d80a1064ef02850d598"><code>fa6a55e</code></a>
chore(deps-dev): bump multer from 2.1.1 to 2.2.0 (<a
href="https://redirect.github.com/axios/axios/issues/11026">#11026</a>)</li>
<li><a
href="https://github.com/axios/axios/commit/40e7be8a78dd43caaeb2313cc4be3f8e714be91d"><code>40e7be8</code></a>
docs: clarifies that request data is request-specific in axios (<a
href="https://redirect.github.com/axios/axios/issues/11025">#11025</a>)</li>
<li><a
href="https://github.com/axios/axios/commit/a446b39b19c8b570214a4158520c5ddd5b020366"><code>a446b39</code></a>
fix(AxiosURLSearchParams): use arrow function so encoder.call(this)
receives ...</li>
<li><a
href="https://github.com/axios/axios/commit/cf1306a42d97960b635c894c83658f2692e53585"><code>cf1306a</code></a>
docs: add Deno to install instructions (<a
href="https://redirect.github.com/axios/axios/issues/11023">#11023</a>)</li>
<li><a
href="https://github.com/axios/axios/commit/b32880af48017457a1203ab2e63720902d3b71b3"><code>b32880a</code></a>
fix: incorrect use of error (<a
href="https://redirect.github.com/axios/axios/issues/11021">#11021</a>)</li>
<li><a
href="https://github.com/axios/axios/commit/1792eda11aff8fe0f8c8a6e5ae6ff305740a6460"><code>1792eda</code></a>
fix: ensure maxBodyLength is explicitly passed to follow-redirects (<a
href="https://redirect.github.com/axios/axios/issues/10993">#10993</a>)</li>
<li><a
href="https://github.com/axios/axios/commit/30499d6af0961ec38619792013a534d1933b08a9"><code>30499d6</code></a>
fix: various runtime crashes and type definition mismatches (<a
href="https://redirect.github.com/axios/axios/issues/10959">#10959</a>)</li>
<li><a
href="https://github.com/axios/axios/commit/20ce9c412ebd88823d1a4a47000cb133a8f79440"><code>20ce9c4</code></a>
fix(http): defer env proxy handling to Node (<a
href="https://redirect.github.com/axios/axios/issues/10942">#10942</a>)</li>
<li><a
href="https://github.com/axios/axios/commit/e64bcf9c5af231d6f37d8389b1e57ded314fff86"><code>e64bcf9</code></a>
chore(deps): merge branch 'v1.x' into tests/module/cjs (<a
href="https://redirect.github.com/axios/axios/issues/11014">#11014</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/axios/axios/compare/v1.18.0...v1.18.1">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Author: dependabot[bot]

lambdas/functions/gh-agent-syncer/package.json

@@ -32,7 +32,7 @@
     "@aws-sdk/lib-storage": "^3.1009.0",
     "@middy/core": "^6.4.5",
     "@octokit/rest": "22.0.1",
-    "axios": "^1.18.0"
+    "axios": "^1.18.1"
   },
   "nx": {
     "includedScripts": [

lambdas/yarn.lock

@@ -205,7 +205,7 @@ __metadata:
     aws-sdk-client-mock: "npm:^4.1.0"
     aws-sdk-client-mock-jest: "npm:^4.1.0"
     aws-sdk-client-mock-vitest: "npm:^7.0.1"
-    axios: "npm:^1.18.0"
+    axios: "npm:^1.18.1"
   languageName: unknown
   linkType: soft
 
@@ -6154,15 +6154,15 @@ __metadata:
   languageName: node
   linkType: hard
 
-"axios@npm:^1.18.0":
-  version: 1.18.0
-  resolution: "axios@npm:1.18.0"
+"axios@npm:^1.18.1":
+  version: 1.18.1
+  resolution: "axios@npm:1.18.1"
   dependencies:
     follow-redirects: "npm:^1.16.0"
     form-data: "npm:^4.0.5"
     https-proxy-agent: "npm:^5.0.1"
     proxy-from-env: "npm:^2.1.0"
-  checksum: 10c0/f88aae13fd9dd395dea3053c7299178fee62f436f20424a1d6d79ec11ffb7656ba664b4630defbadab2c387b6ea07e29afb9f28b26d8e0e49d45be766983290d
+  checksum: 10c0/9d9378a3af0d0ad730a52ad9d15ec7201f3926ad6e7e8bbffc5ae21ca2835ad11d1d9598698f5dd9718917486039f55ea1d7dc23d8e44fa827a55cc3262c02fc
   languageName: node
   linkType: hard