From 63741cd40fef6cad3c05317261f3104bc9c74e5b Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Thu, 27 Mar 2025 08:18:43 +0000
Subject: [PATCH] fix: package.json & package-lock.json to reduce
 vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-AXIOS-9403194
---
 package-lock.json | 45 +++++++++++++++++++++++++--------------------
 package.json      |  2 +-
 2 files changed, 26 insertions(+), 21 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index e6a5cdf..b4e2214 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1207,12 +1207,13 @@
       "integrity": "sha512-Oei9OH4tRh0YqU3GxhX79dM/mwVgvbZJaSNaRk+bshkj0S5cfHcgYakreBjrHwatXKbz+IoIdYLxrKim2MjW0Q=="
     },
     "axios": {
-      "version": "0.27.2",
-      "resolved": "https://registry.npmjs.org/axios/-/axios-0.27.2.tgz",
-      "integrity": "sha512-t+yRIyySRTp/wua5xEr+z1q60QmLq8ABsS5O9Me1AsE5dfKqgnCFzwiCZZ/cGNd1lq4/7akDWMxdhVlucjmnOQ==",
+      "version": "1.8.3",
+      "resolved": "https://registry.npmjs.org/axios/-/axios-1.8.3.tgz",
+      "integrity": "sha512-iP4DebzoNlP/YN2dpwCgb8zoCmhtkajzS48JvwmkSkXvPI3DHc7m+XYL5tGnSlJtR6nImXZmdCuN5aP8dh1d8A==",
       "requires": {
-        "follow-redirects": "^1.14.9",
-        "form-data": "^4.0.0"
+        "follow-redirects": "^1.15.6",
+        "form-data": "^4.0.0",
+        "proxy-from-env": "^1.1.0"
       }
     },
     "babel-eslint": {
@@ -2377,10 +2378,10 @@
         }
       }
     },
-    "cspell-dict-en-gb": {
-      "version": "1.1.16",
-      "resolved": "https://registry.npmjs.org/cspell-dict-en-gb/-/cspell-dict-en-gb-1.1.16.tgz",
-      "integrity": "sha512-PBzHF40fVj+6Adm3dV3/uhkE2Ptu8W+WJ28socBDDpEfedFMwnC0rpxvAgmKJlLc0OYsn07/yzRnt9srisNrLg==",
+    "cspell-dict-en_us": {
+      "version": "1.2.25",
+      "resolved": "https://registry.npmjs.org/cspell-dict-en_us/-/cspell-dict-en_us-1.2.25.tgz",
+      "integrity": "sha512-owr04YQAO86wMR0nSup8d7Ogkm23vIOoQsPtIMFou1OA2XLUu13Xhla/Cs+qFzopakpcblvRuMSel0RomkAo7g==",
       "dev": true,
       "requires": {
         "configstore": "^5.0.0"
@@ -2459,10 +2460,10 @@
         }
       }
     },
-    "cspell-dict-en_us": {
-      "version": "1.2.25",
-      "resolved": "https://registry.npmjs.org/cspell-dict-en_us/-/cspell-dict-en_us-1.2.25.tgz",
-      "integrity": "sha512-owr04YQAO86wMR0nSup8d7Ogkm23vIOoQsPtIMFou1OA2XLUu13Xhla/Cs+qFzopakpcblvRuMSel0RomkAo7g==",
+    "cspell-dict-en-gb": {
+      "version": "1.1.16",
+      "resolved": "https://registry.npmjs.org/cspell-dict-en-gb/-/cspell-dict-en-gb-1.1.16.tgz",
+      "integrity": "sha512-PBzHF40fVj+6Adm3dV3/uhkE2Ptu8W+WJ28socBDDpEfedFMwnC0rpxvAgmKJlLc0OYsn07/yzRnt9srisNrLg==",
       "dev": true,
       "requires": {
         "configstore": "^5.0.0"
@@ -3886,8 +3887,8 @@
         "cspell-dict-django": "^1.0.15",
         "cspell-dict-dotnet": "^1.0.14",
         "cspell-dict-elixir": "^1.0.13",
-        "cspell-dict-en-gb": "^1.1.16",
         "cspell-dict-en_us": "^1.2.25",
+        "cspell-dict-en-gb": "^1.1.16",
         "cspell-dict-fonts": "^1.0.5",
         "cspell-dict-fullstack": "^1.0.22",
         "cspell-dict-golang": "^1.1.14",
@@ -5081,9 +5082,9 @@
       "dev": true
     },
     "follow-redirects": {
-      "version": "1.15.1",
-      "resolved": "https://registry.npmjs.org/follow-redirects/-/follow-redirects-1.15.1.tgz",
-      "integrity": "sha512-yLAMQs+k0b2m7cVxpS1VKJVvoz7SS9Td1zss3XRwXj+ZDH00RJgnuLx7E44wx02kQLrdM3aOOy+FpzS7+8OizA=="
+      "version": "1.15.9",
+      "resolved": "https://registry.npmjs.org/follow-redirects/-/follow-redirects-1.15.9.tgz",
+      "integrity": "sha512-gew4GsXizNgdoRyqmyfMHyAmXsZDk6mHkSxZFCzW9gwlbtOW44CDtYavM+y+72qD/Vq2l550kMF52DT8fOLJqQ=="
     },
     "form-data": {
       "version": "4.0.0",
@@ -6014,7 +6015,7 @@
         "object-assign": "^4.0.1",
         "read-pkg-up": "^1.0.1",
         "redent": "^1.0.0",
-        "trim-newlines": "^4.0.1"
+        "trim-newlines": "^1.0.0"
       },
       "dependencies": {
         "find-up": {
@@ -6778,6 +6779,11 @@
         "ipaddr.js": "1.9.1"
       }
     },
+    "proxy-from-env": {
+      "version": "1.1.0",
+      "resolved": "https://registry.npmjs.org/proxy-from-env/-/proxy-from-env-1.1.0.tgz",
+      "integrity": "sha512-D+zkORCbA9f1tdWRK0RaCR3GPv50cMxcrz4X8k5LTSUD1Dkw47mKJEZQNunItRTkWwgtaUSo1RVFRIG9ZXiFYg=="
+    },
     "pseudomap": {
       "version": "1.0.2",
       "resolved": "https://registry.npmjs.org/pseudomap/-/pseudomap-1.0.2.tgz",
@@ -7783,8 +7789,7 @@
       "dev": true
     },
     "trim-newlines": {
-      "version": "4.0.1",
-      "resolved": "https://registry.npmjs.org/trim-newlines/-/s-4.0.1.tgz",
+      "version": "https://registry.npmjs.org/trim-newlines/-/s-4.0.1.tgz",
       "integrity": "sha1-WIeWa7WCpFA6QetST301ARgVphM=",
       "dev": true
     },
diff --git a/package.json b/package.json
index c701ac6..69e27d3 100644
--- a/package.json
+++ b/package.json
@@ -41,7 +41,7 @@
   "homepage": "https://github.com/edusoftpro/micro#readme",
   "dependencies": {
     "apollo-server-express": "^3.11.1",
-    "axios": "^0.27.2",
+    "axios": "^1.8.3",
     "dotenv": "^8.2.0",
     "express": "^4.18.2",
     "express-graphql": "^0.9.0",