Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update dependency axios to v0.21.2 - autoclosed #61

Closed

Conversation

mend-for-github-com[bot]
Copy link
Contributor

@mend-for-github-com mend-for-github-com bot commented Aug 13, 2022

This PR contains the following updates:

Package Type Update Change
axios (source) dependencies patch 0.21.1 -> 0.21.2

By merging this PR, the issue #58 will be automatically resolved and closed:

Severity CVSS Score CVE
High High 7.5 CVE-2021-3749
Medium Medium 6.5 CVE-2022-0155
Medium Medium 5.9 CVE-2022-0536

Release Notes

axios/axios

v0.21.2

Compare Source

Fixes and Functionality:
  • Updating axios requests to be delayed by pre-emptive promise creation (#​2702)
  • Adding "synchronous" and "runWhen" options to interceptors api (#​2702)
  • Updating of transformResponse (#​3377)
  • Adding ability to omit User-Agent header (#​3703)
  • Adding multiple JSON improvements (#​3688, #​3763)
  • Fixing quadratic runtime and extra memory usage when setting a maxContentLength (#​3738)
  • Adding parseInt to config.timeout (#​3781)
  • Adding custom return type support to interceptor (#​3783)
  • Adding security fix for ReDoS vulnerability (#​3980)
Internal and Tests:
  • Updating build dev dependancies (#​3401)
  • Fixing builds running on Travis CI (#​3538)
  • Updating follow rediect version (#​3694, #​3771)
  • Updating karma sauce launcher to fix failing sauce tests (#​3712, #​3717)
  • Updating content-type header for application/json to not contain charset field, according do RFC 8259 (#​2154)
  • Fixing tests by bumping karma-sauce-launcher version (#​3813)
  • Changing testing process from Travis CI to GitHub Actions (#​3938)
Documentation:
  • Updating documentation around the use of AUTH_TOKEN with multiple domain endpoints (#​3539)
  • Remove duplication of item in changelog (#​3523)
  • Fixing gramatical errors (#​2642)
  • Fixing spelling error (#​3567)
  • Moving gitpod metion (#​2637)
  • Adding new axios documentation website link (#​3681, #​3707)
  • Updating documentation around dispatching requests (#​3772)
  • Adding documentation for the type guard isAxiosError (#​3767)
  • Adding explanation of cancel token (#​3803)
  • Updating CI status badge (#​3953)
  • Fixing errors with JSON documentation (#​3936)
  • Fixing README typo under Request Config (#​3825)
  • Adding axios-multi-api to the ecosystem file (#​3817)
  • Adding SECURITY.md to properly disclose security vulnerabilities (#​3981)

Huge thanks to everyone who contributed to this release via code (authors listed below) or via reviews and triaging on GitHub:


  • If you want to rebase/retry this PR, check this box

@mend-for-github-com mend-for-github-com bot added the security fix Security fix generated by Mend label Aug 13, 2022
@mend-for-github-com mend-for-github-com bot changed the title Update dependency axios to v0.21.2 Update dependency axios to v0.21.2 - autoclosed Feb 15, 2023
@mend-for-github-com mend-for-github-com bot deleted the whitesource-remediate/axios-0.x-lockfile branch February 15, 2023 00:23
@mend-for-github-com mend-for-github-com bot changed the title Update dependency axios to v0.21.2 - autoclosed Update dependency axios to v0.21.2 Feb 15, 2023
@mend-for-github-com mend-for-github-com bot reopened this Feb 15, 2023
@mend-for-github-com mend-for-github-com bot restored the whitesource-remediate/axios-0.x-lockfile branch February 15, 2023 01:34
@mend-for-github-com mend-for-github-com bot changed the title Update dependency axios to v0.21.2 Update dependency axios to v0.21.2 - autoclosed Feb 20, 2024
@mend-for-github-com mend-for-github-com bot deleted the whitesource-remediate/axios-0.x-lockfile branch February 20, 2024 04:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
security fix Security fix generated by Mend
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

0 participants