fix(deps): update axios security release

[ScriptedAlchemy]

Summary

• Updates direct axios dependencies from 1.15.0 to 1.16.1.
• Refreshes pnpm-lock.yaml axios resolutions to the patched release.

Closes #4653

Validation

• corepack pnpm install --frozen-lockfile --lockfile-only --ignore-scripts
• corepack pnpm audit --prod --json checked axios advisories after the lock update.

Skipped checks

• Full package build/test/lint were not run because this PR only updates a direct dependency and lockfile entries for the security advisory.

[changeset-bot]

🦋 Changeset detected

Latest commit: de000cd

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 3 packages

Name	Type
@module-federation/typescript	Patch
@module-federation/native-federation-tests	Patch
@module-federation/native-federation-typescript	Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

[netlify]

✅ Deploy Preview for module-federation-docs ready!

Name	Link
🔨 Latest commit	de000cd
🔍 Latest deploy log	https://app.netlify.com/projects/module-federation-docs/deploys/6a1657b985eb87000879e58c
😎 Deploy Preview	https://deploy-preview-4761--module-federation-docs.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.
🤖 Make changes	Run an agent on this branch

---

To edit notification comments on pull requests, go to your Netlify project configuration.

[pkg-pr-new]

Open in StackBlitz

@module-federation/devtools

pnpm add https://pkg.pr.new/@module-federation/devtools@de000cd

@module-federation/cli

pnpm add https://pkg.pr.new/@module-federation/cli@de000cd

create-module-federation

pnpm add https://pkg.pr.new/create-module-federation@de000cd

@module-federation/dts-plugin

pnpm add https://pkg.pr.new/@module-federation/dts-plugin@de000cd

@module-federation/enhanced

pnpm add https://pkg.pr.new/@module-federation/enhanced@de000cd

@module-federation/error-codes

pnpm add https://pkg.pr.new/@module-federation/error-codes@de000cd

@module-federation/esbuild

pnpm add https://pkg.pr.new/@module-federation/esbuild@de000cd

@module-federation/managers

pnpm add https://pkg.pr.new/@module-federation/managers@de000cd

@module-federation/manifest

pnpm add https://pkg.pr.new/@module-federation/manifest@de000cd

@module-federation/metro

pnpm add https://pkg.pr.new/@module-federation/metro@de000cd

@module-federation/metro-plugin-rnc-cli

pnpm add https://pkg.pr.new/@module-federation/metro-plugin-rnc-cli@de000cd

@module-federation/metro-plugin-rnef

pnpm add https://pkg.pr.new/@module-federation/metro-plugin-rnef@de000cd

@module-federation/metro-plugin-rock

pnpm add https://pkg.pr.new/@module-federation/metro-plugin-rock@de000cd

@module-federation/modern-js

pnpm add https://pkg.pr.new/@module-federation/modern-js@de000cd

@module-federation/modern-js-v3

pnpm add https://pkg.pr.new/@module-federation/modern-js-v3@de000cd

@module-federation/native-federation-tests

pnpm add https://pkg.pr.new/@module-federation/native-federation-tests@de000cd

@module-federation/native-federation-typescript

pnpm add https://pkg.pr.new/@module-federation/native-federation-typescript@de000cd

@module-federation/nextjs-mf

pnpm add https://pkg.pr.new/@module-federation/nextjs-mf@de000cd

@module-federation/node

pnpm add https://pkg.pr.new/@module-federation/node@de000cd

@module-federation/observability-plugin

pnpm add https://pkg.pr.new/@module-federation/observability-plugin@de000cd

@module-federation/retry-plugin

pnpm add https://pkg.pr.new/@module-federation/retry-plugin@de000cd

@module-federation/rsbuild-plugin

pnpm add https://pkg.pr.new/@module-federation/rsbuild-plugin@de000cd

@module-federation/rspack

pnpm add https://pkg.pr.new/@module-federation/rspack@de000cd

@module-federation/rspress-plugin

pnpm add https://pkg.pr.new/@module-federation/rspress-plugin@de000cd

@module-federation/runtime

pnpm add https://pkg.pr.new/@module-federation/runtime@de000cd

@module-federation/runtime-core

pnpm add https://pkg.pr.new/@module-federation/runtime-core@de000cd

@module-federation/runtime-tools

pnpm add https://pkg.pr.new/@module-federation/runtime-tools@de000cd

@module-federation/sdk

pnpm add https://pkg.pr.new/@module-federation/sdk@de000cd

@module-federation/storybook-addon

pnpm add https://pkg.pr.new/@module-federation/storybook-addon@de000cd

@module-federation/third-party-dts-extractor

pnpm add https://pkg.pr.new/@module-federation/third-party-dts-extractor@de000cd

@module-federation/treeshake-frontend

pnpm add https://pkg.pr.new/@module-federation/treeshake-frontend@de000cd

@module-federation/treeshake-server

pnpm add https://pkg.pr.new/@module-federation/treeshake-server@de000cd

@module-federation/typescript

pnpm add https://pkg.pr.new/@module-federation/typescript@de000cd

@module-federation/utilities

pnpm add https://pkg.pr.new/@module-federation/utilities@de000cd

@module-federation/webpack-bundler-runtime

pnpm add https://pkg.pr.new/@module-federation/webpack-bundler-runtime@de000cd

@module-federation/bridge-react

pnpm add https://pkg.pr.new/@module-federation/bridge-react@de000cd

@module-federation/bridge-react-webpack-plugin

pnpm add https://pkg.pr.new/@module-federation/bridge-react-webpack-plugin@de000cd

@module-federation/bridge-shared

pnpm add https://pkg.pr.new/@module-federation/bridge-shared@de000cd

@module-federation/bridge-vue3

pnpm add https://pkg.pr.new/@module-federation/bridge-vue3@de000cd

@module-federation/inject-external-runtime-core-plugin

pnpm add https://pkg.pr.new/@module-federation/inject-external-runtime-core-plugin@de000cd

commit: de000cd

[github-actions]

Bundle Size Report

12 package(s) changed, 29 unchanged.

Package dist + ESM entry

Package	Total dist (raw)	Delta	ESM gzip	Delta
@module-federation/cli	26.3 kB	no change	786 B	no change
@module-federation/core	39.1 kB	no change	173 B	no change
@module-federation/devtools	664.0 kB	no change	4.0 kB	no change
@module-federation/enhanced	807.9 kB	no change	672 B	no change
@module-federation/managers	69.8 kB	no change	334 B	no change
@module-federation/manifest	136.1 kB	no change	182 B	no change
@module-federation/metro-plugin-rnc-cli	0 B	no change	314 B	no change
@module-federation/node	193.4 kB	no change	217 B	no change
@module-federation/runtime	20.0 kB	-13 B (-0.1%)	715 B	no change
@module-federation/runtime-tools	7.8 kB	+65 B (+0.8%)	142 B	no change
@module-federation/storybook-addon	77.9 kB	no change	100 B	no change
@module-federation/utilities	110.6 kB	no change	328 B	no change

Bundle targets

Package	Web bundle (gzip)	Delta	Node bundle (gzip)	Delta
@module-federation/cli	2.3 kB	-31 B (-1.3%)	2.3 kB	-31 B (-1.3%)
@module-federation/core	1.1 kB	-32 B (-2.9%)	1.0 kB	-31 B (-2.9%)
@module-federation/devtools	30.2 kB	-34 B (-0.1%)	30.2 kB	-34 B (-0.1%)
@module-federation/enhanced	2.6 kB	-45 B (-1.6%)	2.6 kB	-45 B (-1.6%)
@module-federation/managers	2.4 kB	-27 B (-1.1%)	2.4 kB	-27 B (-1.1%)
@module-federation/manifest	6.1 kB	-40 B (-0.6%)	6.1 kB	-40 B (-0.6%)
@module-federation/metro-plugin-rnc-cli	411 B	-26 B (-5.9%)	411 B	-26 B (-5.9%)
@module-federation/node	9.2 kB	-28 B (-0.3%)	9.2 kB	-28 B (-0.3%)
@module-federation/runtime	687 B	no change	687 B	no change
@module-federation/runtime-tools	89 B	no change	89 B	no change
@module-federation/storybook-addon	1.9 kB	-25 B (-1.3%)	1.7 kB	-25 B (-1.4%)
@module-federation/utilities	2.6 kB	-32 B (-1.2%)	2.6 kB	-32 B (-1.2%)

Consumer scenarios

Scenario	Web output (gzip)	Delta	Node output (gzip)	Delta	Gap (node-web)	Delta
Enhanced remoteEntry	21.4 kB	-15 B (-0.1%)	22.5 kB	-11 B (-0.0%)	+1.1 kB	+4 B

Total dist (raw): 6.78 MB (+52 B (+0.0%))
Total ESM gzip: 76.6 kB (no change)
Total web bundle (gzip): 205.4 kB (-320 B (-0.2%))
Total node bundle (gzip): 205.9 kB (-319 B (-0.2%))
Tracked ./bundler entry gzip: 556 B (no change)
Tracked ./bundler web bundle (gzip): 4.8 kB (no change)
Tracked ./bundler node bundle (gzip): 4.8 kB (no change)

Bundle sizes are generated with rslib (Rspack). Package-root metrics preserve the historical report. Tracked subpath exports such as ./bundler are measured separately so ENV_TARGET-driven tree-shaking is visible. Bare imports are externalized to keep package-level sizes consistent, and assets are emitted as resources.