Node.js deprecation warning: DEP0169 url.parse() used in proxy resolution

[LiteSun]

Current Behavior

When synchronizing the service using the latest version of ADC (0.24.2), will encounter a warning:(node:8947) [DEP0169] DeprecationWarning: url.parse() behavior is not standardized and prone to errors that have security implications. Use the WHATWG URL API instead. CVEs are not issued for url.parse() vulnerabilities.

Exxpected Behavior

This warning is no longer displayed during sync.

Steps to Reproduce

This warning can be reproduced when executing adc sync

Environment

• APISIX version:
• ADC version (run adc version): 0.24.2
• Operating system (run uname -a):

[LiteSun]

I’ve locally verified the warning issue during synchronization. Upgrading proxy-from-env to version 2.1.0 resolves the warning.

The current issue is that proxy-from-env is introduced via axios. Although their main branch has already updated to proxy-from-env 2.1.0, they haven’t released a new version yet. I suggest waiting for the new axios release, then upgrading axios to fix this problem.

[bzp2010]

I do not agree with or accept that this is a bug in ADC.

The root cause of the warning lies entirely with the upstream library, not the ADC code itself. We use one of the most popular libraries in the Node.js ecosystem, and we are already using nearly the latest major version of the dependency. However, since the upstream has not yet fixed the issue, we will not be implementing any additional direct fixes for it.

Furthermore, I must point out that, to date, there have been no new security reports regarding url.parse. It continues to function normally and securely; the issue arises solely because Node.js has decided to deprecate one of its built-in modules.

I have edited the title of this issue to remove any wording that implies a bug.