[Snyk] Security upgrade axios from 0.21.4 to 1.12.0#15
[Snyk] Security upgrade axios from 0.21.4 to 1.12.0#15TimCrooker wants to merge 1 commit intomasterfrom
Conversation
The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-AXIOS-12613773
There was a problem hiding this comment.
Pull Request Overview
This PR upgrades the axios dependency from version 0.21.4 to 1.12.0 to address a medium-severity security vulnerability (SNYK-JS-AXIOS-12613773) related to allocation of resources without limits or throttling.
- Updates axios from ^0.21.1 to ^1.12.0 in package.json
- Addresses security vulnerability with a score of 738/1000
- Major version upgrade that may introduce breaking changes
Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.
| }, | ||
| "dependencies": { | ||
| "axios": "^0.21.1" | ||
| "axios": "^1.12.0" |
There was a problem hiding this comment.
This is a major version upgrade from 0.21.x to 1.12.0 which introduces breaking changes. The axios 1.x series has significant API changes including different error handling, response structure changes, and modified request/response interceptors. Ensure all axios usage in the codebase is compatible with the new API or update the code accordingly before merging this security fix.
Snyk has created this PR to fix 1 vulnerabilities in the npm dependencies of this project.
Snyk changed the following file(s):
plugins/axios/package.jsonVulnerabilities that will be fixed with an upgrade:
SNYK-JS-AXIOS-12613773
Important
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic
Learn how to fix vulnerabilities with free interactive lessons:
🦉 Allocation of Resources Without Limits or Throttling