Skip to content

chore: update axios to version 1.15.0#255

Merged
eliteprox merged 1 commit into
mainfrom
fix/axios-1.15.0
Apr 9, 2026
Merged

chore: update axios to version 1.15.0#255
eliteprox merged 1 commit into
mainfrom
fix/axios-1.15.0

Conversation

@eliteprox

@eliteprox eliteprox commented Apr 9, 2026

Copy link
Copy Markdown
Contributor

Summary

This change unblocks failing CI checks by bumping axios from 1.13.5 to >1.15.0

Changes

  • Upgraded axios from 1.13.5 to 1.15.0 in package-lock.json and package.json.
  • Updated proxy-from-env dependency to version 2.1.0.
  • Added missing package.lock for '@naap/services-rest-client', utilizing axios 1.15.0.

Type

  • Feature
  • Bug fix
  • Refactor
  • Documentation
  • CI / Tooling
  • Plugin (new or update)
  • Dependencies

Plugin(s) Affected

Checklist

  • Tests pass locally
  • Lint passes (npm run lint)
  • Build succeeds (npm run build)
  • No new lint warnings introduced
  • Breaking changes documented below
  • Database migration included (if Prisma schema changed)

Breaking Changes

None

Screenshots / Recordings

Summary by CodeRabbit

  • Chores
    • Upgraded axios HTTP client library dependency to version 1.15.0 to ensure consistency across services.

- Upgraded axios from 1.13.5 to 1.15.0 in package-lock.json and package.json.
- Updated proxy-from-env dependency to version 2.1.0.
- Introduced a new package '@naap/services-rest-client' with its own package-lock.json, utilizing axios 1.15.0.
@github-actions github-actions Bot added the size/L Large PR (201-500 lines) label Apr 9, 2026
@github-actions

github-actions Bot commented Apr 9, 2026

Copy link
Copy Markdown

⚠️ This PR is large (352 lines changed). Consider splitting it into smaller PRs for easier review.

@github-actions github-actions Bot added the scope/packages Shared package changes label Apr 9, 2026
@coderabbitai

coderabbitai Bot commented Apr 9, 2026

Copy link
Copy Markdown
📝 Walkthrough

Walkthrough

The pull request updates the axios dependency across the monorepo. A version override for axios at ^1.15.0 is added to the root package.json overrides section, and the axios dependency in the rest-client package is updated from ^1.7.9 to ^1.15.0.

Changes

Cohort / File(s) Summary
Axios Version Update
package.json, packages/services/rest-client/package.json
Updated axios dependency to ^1.15.0 and added explicit override for the same version in root package configuration.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

🚥 Pre-merge checks | ✅ 3
✅ Passed checks (3 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title accurately describes the main change: updating axios to version 1.15.0, which is reflected in both package.json files modified in the PR.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch fix/axios-1.15.0

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

@vercel

vercel Bot commented Apr 9, 2026

Copy link
Copy Markdown
Contributor

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
naap-platform Ready Ready Preview, Comment Apr 9, 2026 9:16pm

Request Review

@coderabbitai coderabbitai Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🧹 Nitpick comments (1)
package.json (1)

70-70: Prefer exact version in overrides for deterministic installs.

The axios override at line 70 uses ^1.15.0, which allows future 1.x upgrades. For workspace reproducibility and consistent CI behavior, pin this to an exact version like the other overrides in the same block.

♻️ Proposed change
-    "axios": "^1.15.0",
+    "axios": "1.15.0",
🤖 Prompt for AI Agents
Verify each finding against the current code and only fix it if needed.

In `@package.json` at line 70, Update the axios entry in the overrides block to
use an exact version instead of a caret range: replace the current "axios":
"^1.15.0" override with the exact pinned version "axios": "1.15.0" so installs
are deterministic and match the other overrides.
🤖 Prompt for all review comments with AI agents
Verify each finding against the current code and only fix it if needed.

Nitpick comments:
In `@package.json`:
- Line 70: Update the axios entry in the overrides block to use an exact version
instead of a caret range: replace the current "axios": "^1.15.0" override with
the exact pinned version "axios": "1.15.0" so installs are deterministic and
match the other overrides.

ℹ️ Review info
⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro

Run ID: d1155e4b-008b-4ba9-9a5b-f9355de6bba9

📥 Commits

Reviewing files that changed from the base of the PR and between 30d378c and 3065174.

⛔ Files ignored due to path filters (2)
  • package-lock.json is excluded by !**/package-lock.json, !package-lock.json
  • packages/services/rest-client/package-lock.json is excluded by !**/package-lock.json
📒 Files selected for processing (2)
  • package.json
  • packages/services/rest-client/package.json

@eliteprox
eliteprox merged commit 4c85f96 into main Apr 9, 2026
25 checks passed
@eliteprox
eliteprox deleted the fix/axios-1.15.0 branch April 9, 2026 21:20
seanhanca added a commit that referenced this pull request Jul 16, 2026
Record the composite bearer webhook fix PR so John can review and deploy.

Co-authored-by: Cursor <cursoragent@cursor.com>
seanhanca added a commit that referenced this pull request Jul 17, 2026
Live probes show pymthouse#255 still OPEN with merge conflicts, validate
regressed to token-bundle (no composite endpoint), and SDK path fails with
IncompleteRead after 401-class webhook auth. Documents minimum one-shot deploy
set for John and latent post-#255 blockers.

Co-authored-by: Cursor <cursoragent@cursor.com>
seanhanca added a commit that referenced this pull request Jul 18, 2026
Tested the app_98575870 signer-session bundle directly against the
test-production signer, bypassing the NaaP validate / Vercel env blocker.

Key findings:
- Composite bearer PASSES the remote-signer webhook auth
  (/sign-orchestrator-info 200; /generate-live-payment returns a real,
  valid net.Payment proto) -> 401 "not a JWT" is gone; #255 no longer
  the blocker for the composite path.
- submit_byoc_job flux-schnell/flux-dev fail at the orchestrator with
  HTTP 400 "Could not parse payment" -> ProcessPayment (on-chain ticket
  validation) rejects a valid, recipient-correct ticket. Likely sender
  reserve unfunded / ticket-param mismatch on test-production. Owner: John.
- OpenMeter increments at signer payment-gen (platform_ingest), decoupled
  from orch success (+4 reqs / +4 µUSD, floor-rate; no image).

Adds scripts/run50-direct-signer-probe.py (env-only, no secrets).

Co-authored-by: Cursor <cursoragent@cursor.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

scope/packages Shared package changes size/L Large PR (201-500 lines)

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant