Skip to content

[7.115.x] Fix CVEs by updating axios to patched versions#685

Open
sbouchet wants to merge 2 commits intoche-incubator:7.115.xfrom
sbouchet:7.115.x_axios
Open

[7.115.x] Fix CVEs by updating axios to patched versions#685
sbouchet wants to merge 2 commits intoche-incubator:7.115.xfrom
sbouchet:7.115.x_axios

Conversation

@sbouchet
Copy link
Copy Markdown
Collaborator

@sbouchet sbouchet commented Apr 15, 2026

What does this PR do?

backport of #684

What issues does this PR fix?

https://redhat.atlassian.net/browse/CRW-10707
https://redhat.atlassian.net/browse/CRW-10709
https://redhat.atlassian.net/browse/CRW-10691
https://redhat.atlassian.net/browse/CRW-10693
https://redhat.atlassian.net/browse/CRW-10695

How to test this PR?

Does this PR contain changes that override default upstream Code-OSS behavior?

  • the PR contains changes in the code folder (you can skip it if your changes are placed in a che extension )
  • the corresponding items were added to the CHANGELOG.md file
  • rules for automatic git rebase were added to the .rebase folder

@coderabbitai
Copy link
Copy Markdown

coderabbitai bot commented Apr 15, 2026

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: d962b1c7-b68b-402f-a29f-11a2c9c7f953

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

@github-actions
Copy link
Copy Markdown

github-actions bot commented Apr 15, 2026

Click here to review and test in web IDE: Contribute

@sbouchet sbouchet changed the title Fix CVEs by updating axios to patched versions [7.115.x] Fix CVEs by updating axios to patched versions Apr 15, 2026
@github-actions
Copy link
Copy Markdown

Comment thread code/extensions/che-api/package.json Outdated
Comment thread code/extensions/che-api/package-lock.json
Signed-off-by: Stephane Bouchet <sbouchet@redhat.com>
Signed-off-by: Stephane Bouchet <sbouchet@redhat.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants