Skip to content

Upgrade axios to resolve CVE-2026-25639#232

Merged
cigamit merged 1 commit intomainfrom
CVE-2026-25639
Feb 11, 2026
Merged

Upgrade axios to resolve CVE-2026-25639#232
cigamit merged 1 commit intomainfrom
CVE-2026-25639

Conversation

@cigamit
Copy link
Contributor

@cigamit cigamit commented Feb 11, 2026

No description provided.

@cigamit cigamit requested a review from TheWitness February 11, 2026 19:18
@cigamit cigamit self-assigned this Feb 11, 2026
Copilot AI review requested due to automatic review settings February 11, 2026 19:18
@cigamit cigamit added dependencies Pull requests that update a dependency file SECURITY A security related issue like a CVE specifically labels Feb 11, 2026
Copy link
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Updates the AWX UI’s axios dependency to a newer release intended to remediate CVE-2026-25639, and refreshes the lockfile to capture the resulting transitive dependency updates.

Changes:

  • Bump axios from 1.12.0 to ^1.13.5 in the UI package dependencies.
  • Update package-lock.json to lock axios@1.13.5 and refresh related transitive versions (notably follow-redirects and form-data).

Reviewed changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated no comments.

File Description
awx/ui/package.json Updates the direct axios dependency version range.
awx/ui/package-lock.json Locks axios@1.13.5 and updates associated resolved/integrity metadata and transitive deps.
Files not reviewed (1)
  • awx/ui/package-lock.json: Language not supported

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@cigamit cigamit merged commit d76f344 into main Feb 11, 2026
6 checks passed
@cigamit cigamit deleted the CVE-2026-25639 branch February 11, 2026 20:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file SECURITY A security related issue like a CVE specifically

Development

Successfully merging this pull request may close these issues.

3 participants