Skip to content

Update dependency axios to v1.18.0 - #1185

Open
mend-for-github-com[bot] wants to merge 1 commit into
mainfrom
whitesource-remediate/axios-1.x-lockfile
Open

Update dependency axios to v1.18.0#1185
mend-for-github-com[bot] wants to merge 1 commit into
mainfrom
whitesource-remediate/axios-1.x-lockfile

Conversation

@mend-for-github-com

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change
axios (source) dependencies minor 1.16.01.18.0

By merging this PR, the issue #1166 will be automatically resolved and closed:

Severity CVSS Score Vulnerability
High High 8.2 CVE-2026-67320
High High 7.5 CVE-2026-12143
Medium Medium 6.5 CVE-2026-67314
Medium Medium 5.8 CVE-2026-67315
Medium Medium 5.8 CVE-2026-67317
Medium Medium 5.8 CVE-2026-67318
Medium Medium 5.3 CVE-2026-67312
Medium Medium 5.3 CVE-2026-67313
Medium Medium 5.3 CVE-2026-67321
Medium Medium 4.0 CVE-2026-67319
Low Low 3.7 CVE-2026-67316

Release Notes

axios/axios (axios)

v1.18.0

Compare Source

This release hardens redirect and URL handling, improves the validateStatus configuration semantics, and includes updates to documentation, dependencies, and release metadata.

v1.17.0

Compare Source

This release adds Node HTTP zstd decompression, hardens config and release workflows, and fixes authentication, header, proxy, and type-handling regressions.

v1.16.1

Compare Source

This release ships a defence-in-depth fix for prototype pollution in formDataToJSON, hardens proxy and CI workflows, restores Webpack 4 compatibility for the fetch adapter, and includes several small bug fixes and maintenance improvements.


  • If you want to rebase/retry this PR, check this box

@mend-for-github-com mend-for-github-com Bot added the security fix Security fix generated by Mend label Aug 5, 2026
@mend-for-github-com mend-for-github-com Bot added the security fix Security fix generated by Mend label Aug 5, 2026
@codecov

codecov Bot commented Aug 5, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 85.52%. Comparing base (cf11c46) to head (52947ad).
⚠️ Report is 3 commits behind head on main.

Additional details and impacted files
@@           Coverage Diff           @@
##             main    #1185   +/-   ##
=======================================
  Coverage   85.52%   85.52%           
=======================================
  Files          61       61           
  Lines        2156     2156           
  Branches      514      566   +52     
=======================================
  Hits         1844     1844           
  Misses        311      311           
  Partials        1        1           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@sean- sean- added the skip-changelog No need to update CHANGELOG. label Aug 5, 2026
@mend-for-github-com
mend-for-github-com Bot force-pushed the whitesource-remediate/axios-1.x-lockfile branch from 1e8a46f to d2694e8 Compare August 8, 2026 04:49
@mend-for-github-com
mend-for-github-com Bot force-pushed the whitesource-remediate/axios-1.x-lockfile branch from d2694e8 to 52947ad Compare August 12, 2026 05:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

security fix Security fix generated by Mend skip-changelog No need to update CHANGELOG.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant