[Snyk] Fix for 1 vulnerabilities

[Stanislav1975]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	661/1000 Why? Recently disclosed, Has a fix available, CVSS 7.5	Prototype Pollution SNYK-JS-AXIOS-6144788	Yes	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: @nextcloud/axios

The new version differs by 250 commits.

• 27e2158 chore(deps): update dependency @ rollup/plugin-typescript to ^11.1.2
• e73e84f chore(deps): update babel monorepo to ^7.22.5
• 028e5d6 Merge pull request Bump @nextcloud/eslint-plugin from 1.4.0 to 1.5.0 nextcloud/forms#634 from nextcloud/fix/readme-badges
• 2c1c298 fix(docs): Fix "build status" aka tests badge in README
• 865af43 Merge pull request Bump @nextcloud/initial-state from 1.1.2 to 1.2.0 nextcloud/forms#631 from nextcloud/feat/add-eslint
• cc2b0f9 Merge pull request Bump @nextcloud/vue from 2.6.8 to 2.7.0 nextcloud/forms#630 from nextcloud/chore/npmignore
• 9498817 chore: Add eslint and fix linter issues
• 407abfd Merge pull request Bump file-loader from 6.1.0 to 6.1.1 nextcloud/forms#632 from nextcloud/fix/drop-tslib
• 36686f2 Merge pull request Bump webpack-merge from 5.1.4 to 5.2.0 nextcloud/forms#633 from nextcloud/chore/update-ci
• aef0573 chore: Update CI workflows from organization templates
• d4166e2 fix: Remove unnecessary `tslib` runtime dependency (move to development dependencies)
• 8e70f7f Merge pull request Bump vue-router from 3.4.5 to 3.4.6 nextcloud/forms#628 from nextcloud/chore/prepare-2-4-0-release
• 077062e chore: Remove unneeded `.npmignore` as we use the whitelist `files` section of `package.json`
• 8c6c27c chore: Prepare 2.4.0 release
• 9bdf526 Merge pull request Add sections or multiple descriptions nextcloud/forms#624 from nextcloud/fix/silence-console-while-testing
• 7e985d8 Merge pull request Update christophwurst/nextcloud requirement from ^19.0 to ^20.0 nextcloud/forms#626 from nextcloud/fix/typescript-projects
• f04f487 Merge pull request Using iphone and safari nextcloud/forms#625 from nextcloud/fix/add-missing-retry-test
• ad283a6 fix: Allow Typescript projects with module resolution of `node16` or `nodenext` to import the package
• 34212b1 chore: Add missing test case for stop retrying in maintenance mode if retried too often
• 073531b fix: Silence console messages while testing
• dca142f Merge pull request Bump eslint-plugin-import from 2.22.0 to 2.22.1 nextcloud/forms#623 from nextcloud/automated/update-engines/default
• 291d5f0 chore: update node testing to 20
• d4aa327 chore: update node engines to next LTS (node 20 / npm 9)
• 05cc245 fix(deps): update dependency @ nextcloud/router to ^2.1.2

See the full diff

Package name: @nextcloud/vue

The new version differs by 250 commits.

• d4af617 Merge pull request #3356 from nextcloud/backport/3277/stable6
• 0783efb v6.0.0
• 1a87a23 Merge pre-releases changelong for v6
• 9b120bc Merge pull request #3353 from nextcloud/backport/3343/stable6
• 13fc25f Fix emoji picker and Popover no-Auto-Focus
• ec71030 Merge pull request #3305 from nextcloud/backport/3304/stable6
• 5f032be Make Viewer title h2
• 1b76962 Merge pull request #3288 from nextcloud/backport/3197/stable6
• 8be1c7d fix NcAppNavigationItem, pass boundaries-element NcActions's prop as a dom element
• b4cbc54 Merge pull request #3247 from nextcloud/v6.0.0-beta.8
• d0273ee Merge pull request #3251 from nextcloud/backport/3250/stable6
• 712e032 Update src/components/NcAppNavigationItem/NcAppNavigationItem.vue
• 6852c29 Add proper margin to the counter
• 741e4a0 6.0.0-beta.8
• 3ff6a96 Merge pull request #3226 from nextcloud/backport/3225/stable6
• 4114f09 Fix a word puzzle in NcDashboardWidget component
• 20cdb2f Merge pull request #3214 from nextcloud/backport/3212/stable6
• 43f641f Fix single action detection
• 8693d82 Merge pull request #3210 from nextcloud/backport/3201/stable6
• 2d90042 Fix active and focus frame
• e7cdd5a Merge pull request #3207 from nextcloud/backport/3202/stable6
• 9e0b306 Fix overwriting placeholder property
• 50027b8 Merge pull request #3186 from nextcloud/fix/noid/appnav-border-radius
• ef28796 Adjust appnavigation settings border radius

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Prototype Pollution