Skip to content

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Apr 5, 2023

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence
axios (source) 1.3.41.13.3 age confidence

Release Notes

axios/axios (axios)

v1.13.3

Compare Source

Bug Fixes
  • http2: Use port 443 for HTTPS connections by default. (#​7256) (d7e6065)
  • interceptor: handle the error in the same interceptor (#​6269) (5945e40)
  • main field in package.json should correspond to cjs artifacts (#​5756) (7373fbf)
  • package.json: add 'bun' package.json 'exports' condition. Load the Node.js build in Bun instead of the browser build (#​5754) (b89217e)
  • silentJSONParsing=false should throw on invalid JSON (#​7253) (#​7257) (7d19335)
  • turn AxiosError into a native error (#​5394) (#​5558) (1c6a86d)
  • types: add handlers to AxiosInterceptorManager interface (#​5551) (8d1271b)
  • types: restore AxiosError.cause type from unknown to Error (#​7327) (d8233d9)
  • unclear error message is thrown when specifying an empty proxy authorization (#​6314) (6ef867e)
Features
Reverts
Contributors to this release

v1.13.2

Compare Source

Bug Fixes
  • http: fix 'socket hang up' bug for keep-alive requests when using timeouts; (#​7206) (8d37233)
  • http: use default export for http2 module to support stubs; (#​7196) (0588880)
Performance Improvements
Contributors to this release

v1.13.1

Compare Source

Bug Fixes
  • http: fixed a regression that caused the data stream to be interrupted for responses with non-OK HTTP statuses; (#​7193) (bcd5581)
Contributors to this release

v1.13.0

Compare Source

Bug Fixes
Features
Contributors to this release

1.12.2 (2025-09-14)

Bug Fixes
  • fetch: use current global fetch instead of cached one when env fetch is not specified to keep MSW support; (#​7030) (cf78825)
Contributors to this release

1.12.1 (2025-09-12)

Bug Fixes
Contributors to this release

v1.12.2

Compare Source

Bug Fixes
  • fetch: use current global fetch instead of cached one when env fetch is not specified to keep MSW support; (#​7030) (cf78825)
Contributors to this release

v1.12.1

Compare Source

Bug Fixes
Contributors to this release

v1.12.0

Compare Source

Bug Fixes
Features
  • adapter: surface low‑level network error details; attach original error via cause (#​6982) (78b290c)
  • fetch: add fetch, Request, Response env config variables for the adapter; (#​7003) (c959ff2)
  • support reviver on JSON.parse (#​5926) (2a97634), closes #​5924
  • types: extend AxiosResponse interface to include custom headers type (#​6782) (7960d34)
Contributors to this release

v1.11.0

Compare Source

Bug Fixes
Contributors to this release

v1.10.0

Compare Source

Bug Fixes
  • adapter: pass fetchOptions to fetch function (#​6883) (0f50af8)
  • form-data: convert boolean values to strings in FormData serialization (#​6917) (5064b10)
  • package: add module entry point for React Native; (#​6933) (3d343b8)
Features
Contributors to this release

v1.9.0

Compare Source

Bug Fixes
  • core: fix the Axios constructor implementation to treat the config argument as optional; (#​6881) (6c5d4cd)
  • fetch: fixed ERR_NETWORK mapping for Safari browsers; (#​6767) (dfe8411)
  • headers: allow iterable objects to be a data source for the set method; (#​6873) (1b1f9cc)
  • headers: fix getSetCookie by using 'get' method for caseless access; (#​6874) (d4f7df4)
  • headers: fixed support for setting multiple header values from an iterated source; (#​6885) (f7a3b5e)
  • http: send minimal end multipart boundary (#​6661) (987d2e2)
  • types: fix autocomplete for adapter config (#​6855) (e61a893)
Features
  • AxiosHeaders: add getSetCookie method to retrieve set-cookie headers values (#​5707) (80ea756)
Contributors to this release

1.8.4 (2025-03-19)

Bug Fixes
  • buildFullPath: handle allowAbsoluteUrls: false without baseURL (#​6833) (f10c2e0)
Contributors to this release

1.8.3 (2025-03-10)

Bug Fixes
  • add missing type for allowAbsoluteUrls (#​6818) (10fa70e)
  • xhr/fetch: pass allowAbsoluteUrls to buildFullPath in xhr and fetch adapters (#​6814) (ec159e5)
Contributors to this release

1.8.2 (2025-03-07)

Bug Fixes
  • http-adapter: add allowAbsoluteUrls to path building (#​6810) (fb8eec2)
Contributors to this release

1.8.1 (2025-02-26)

Bug Fixes
  • utils: move generateString to platform utils to avoid importing crypto module into client builds; (#​6789) (36a5a62)
Contributors to this release

v1.8.4

Compare Source

Bug Fixes
  • core: fix the Axios constructor implementation to treat the config argument as optional; (#​6881) (6c5d4cd)
  • fetch: fixed ERR_NETWORK mapping for Safari browsers; (#​6767) (dfe8411)
  • headers: allow iterable objects to be a data source for the set method; (#​6873) (1b1f9cc)
  • headers: fix getSetCookie by using 'get' method for caseless access; (#​6874) (d4f7df4)
  • headers: fixed support for setting multiple header values from an iterated source; (#​6885) (f7a3b5e)
  • http: send minimal end multipart boundary (#​6661) (987d2e2)
  • types: fix autocomplete for adapter config (#​6855) (e61a893)
Features
  • AxiosHeaders: add getSetCookie method to retrieve set-cookie headers values (#​5707) (80ea756)
Contributors to this release

1.8.4 (2025-03-19)

Bug Fixes
  • buildFullPath: handle allowAbsoluteUrls: false without baseURL (#​6833) (f10c2e0)
Contributors to this release

1.8.3 (2025-03-10)

Bug Fixes
  • add missing type for allowAbsoluteUrls (#​6818) (10fa70e)
  • xhr/fetch: pass allowAbsoluteUrls to buildFullPath in xhr and fetch adapters (#​6814) (ec159e5)
Contributors to this release

1.8.2 (2025-03-07)

Bug Fixes
  • http-adapter: add allowAbsoluteUrls to path building (#​6810) (fb8eec2)
Contributors to this release

1.8.1 (2025-02-26)

Bug Fixes
  • utils: move generateString to platform utils to avoid importing crypto module into client builds; (#​6789) (36a5a62)
Contributors to this release

v1.8.3

Compare Source

Bug Fixes
  • core: fix the Axios constructor implementation to treat the config argument as optional; (#​6881) (6c5d4cd)
  • fetch: fixed ERR_NETWORK mapping for Safari browsers; (#​6767) (dfe8411)
  • headers: allow iterable objects to be a data source for the set method; (#​6873) (1b1f9cc)
  • headers: fix getSetCookie by using 'get' method for caseless access; (#​6874) (d4f7df4)
  • headers: fixed support for setting multiple header values from an iterated source; (#​6885) (f7a3b5e)
  • http: send minimal end multipart boundary (#​6661) (987d2e2)
  • types: fix autocomplete for adapter config (#​6855) (e61a893)
Features
  • AxiosHeaders: add getSetCookie method to retrieve set-cookie headers values (#​5707) (80ea756)
Contributors to this release

1.8.4 (2025-03-19)

Bug Fixes
  • buildFullPath: handle allowAbsoluteUrls: false without baseURL (#​6833) (f10c2e0)
Contributors to this release

1.8.3 (2025-03-10)

Bug Fixes
  • add missing type for allowAbsoluteUrls (#​6818) (10fa70e)
  • xhr/fetch: pass allowAbsoluteUrls to buildFullPath in xhr and fetch adapters (#​6814) (ec159e5)
Contributors to this release

1.8.2 (2025-03-07)

Bug Fixes
  • http-adapter: add allowAbsoluteUrls to path building (#​6810) (fb8eec2)
Contributors to this release

1.8.1 (2025-02-26)

Bug Fixes
  • utils: move generateString to platform utils to avoid importing crypto module into client builds; (#​6789) (36a5a62)
Contributors to this release

v1.8.2

Compare Source

Bug Fixes
  • core: fix the Axios constructor implementation to treat the config argument as optional; (#​6881) (6c5d4cd)
  • fetch: fixed ERR_NETWORK mapping for Safari browsers; (#​6767) (dfe8411)
  • headers: allow iterable objects to be a data source for the set method; (#​6873) (1b1f9cc)
  • headers: fix getSetCookie by using 'get' method for caseless access; (#​6874) (d4f7df4)
  • headers: fixed support for setting multiple header values from an iterated source; (#​6885) (f7a3b5e)
  • http: send minimal end multipart boundary (#​6661) (987d2e2)
  • types: fix autocomplete for adapter config (#​6855) (e61a893)
Features
  • AxiosHeaders: add getSetCookie method to retrieve set-cookie headers values (#​5707) (80ea756)
Contributors to this release

1.8.4 (2025-03-19)

Bug Fixes
  • buildFullPath: handle allowAbsoluteUrls: false without baseURL (#​6833) (f10c2e0)
Contributors to this release

1.8.3 (2025-03-10)

Bug Fixes
  • add missing type for allowAbsoluteUrls (#​6818) (10fa70e)
  • xhr/fetch: pass allowAbsoluteUrls to buildFullPath in xhr and fetch adapters (#​6814) (ec159e5)
Contributors to this release

1.8.2 (2025-03-07)

Bug Fixes
  • http-adapter: add allowAbsoluteUrls to path building (#​6810) (fb8eec2)
Contributors to this release

1.8.1 (2025-02-26)

Bug Fixes
  • utils: move generateString to platform utils to avoid importing crypto module into client builds; (#​6789) (36a5a62)
Contributors to this release

v1.8.1

Compare Source

Bug Fixes
  • core: fix the Axios constructor implementation to treat the config argument as optional; (#​6881) (6c5d4cd)
  • fetch: fixed ERR_NETWORK mapping for Safari browsers; (#​6767) (dfe8411)
  • headers: allow iterable objects t

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot added d:patch Pull requests that update a patch dependency dependencies Pull requests that update a dependency file labels Apr 5, 2023
@renovate renovate bot changed the title fix(deps): update dependency axios to v1.3.5 fix(deps): update dependency axios to v1.3.6 Apr 19, 2023
@renovate renovate bot force-pushed the deps/axios-1.x-lockfile branch from 953b5ee to 2a86672 Compare April 19, 2023 22:10
@renovate renovate bot changed the title fix(deps): update dependency axios to v1.3.6 fix(deps): update dependency axios to v1.4.0 Jun 3, 2023
@renovate renovate bot force-pushed the deps/axios-1.x-lockfile branch from 2a86672 to 1faf458 Compare June 3, 2023 11:49
@renovate renovate bot changed the title fix(deps): update dependency axios to v1.4.0 fix(deps): update dependency axios to v1.5.0 Aug 26, 2023
@renovate renovate bot force-pushed the deps/axios-1.x-lockfile branch from 1faf458 to a235dae Compare August 26, 2023 22:38
@renovate renovate bot changed the title fix(deps): update dependency axios to v1.5.0 fix(deps): update dependency axios to v1.5.1 Sep 26, 2023
@renovate renovate bot force-pushed the deps/axios-1.x-lockfile branch from a235dae to 655ba42 Compare September 26, 2023 19:29
@renovate renovate bot changed the title fix(deps): update dependency axios to v1.5.1 fix(deps): update dependency axios to v1.6.0 Oct 26, 2023
@renovate renovate bot force-pushed the deps/axios-1.x-lockfile branch from 655ba42 to 20d5318 Compare October 26, 2023 22:31
@secure-code-warrior-for-github

Micro-Learning Topic: Cross-site request forgery (Detected by phrase)

Matched on "CSRF"

What is this? (2min video)

Session-related but not session-based, this attack is based on the ability of an attacker to force an action on a user’s browser (commonly in the form of a POST request) to perform an unauthorized action on behalf of the user. This can often occur without the user even noticing it… or only noticing when it is too late. The root cause is that browsers automatically send session cookies with all requests to a given domain, regardless of where the source of the request came from, and the application server cannot differentiate between a request that came from pages it served or a request that came from an unrelated page.

Try a challenge in Secure Code Warrior

Helpful references

1 similar comment
@secure-code-warrior-for-github

Micro-Learning Topic: Cross-site request forgery (Detected by phrase)

Matched on "CSRF"

What is this? (2min video)

Session-related but not session-based, this attack is based on the ability of an attacker to force an action on a user’s browser (commonly in the form of a POST request) to perform an unauthorized action on behalf of the user. This can often occur without the user even noticing it… or only noticing when it is too late. The root cause is that browsers automatically send session cookies with all requests to a given domain, regardless of where the source of the request came from, and the application server cannot differentiate between a request that came from pages it served or a request that came from an unrelated page.

Try a challenge in Secure Code Warrior

Helpful references

@renovate renovate bot changed the title fix(deps): update dependency axios to v1.6.0 fix(deps): update dependency axios to v1.6.1 Nov 8, 2023
@renovate renovate bot force-pushed the deps/axios-1.x-lockfile branch from 20d5318 to d52c253 Compare November 8, 2023 15:45
@renovate renovate bot changed the title fix(deps): update dependency axios to v1.6.1 fix(deps): update dependency axios to v1.6.2 Nov 14, 2023
@renovate renovate bot force-pushed the deps/axios-1.x-lockfile branch from d52c253 to 7b74695 Compare November 14, 2023 23:02
@renovate renovate bot force-pushed the deps/axios-1.x-lockfile branch from 7b74695 to 0f4e046 Compare December 27, 2023 00:18
@renovate renovate bot changed the title fix(deps): update dependency axios to v1.6.2 fix(deps): update dependency axios to v1.6.3 Dec 27, 2023
@secure-code-warrior-for-github

Micro-Learning Topic: Regular expression denial of service (Detected by phrase)

Matched on "Regular Expression Denial of Service"

What is this? (2min video)

Denial of Service (DoS) attacks caused by Regular Expression which causes the system to hang or cause them to work very slowly when attacker sends a well-crafted input(exponentially related to input size).Denial of service attacks significantly degrade the service quality experienced by legitimate users. These attacks introduce large response delays, excessive losses, and service interruptions, resulting in direct impact on availability.

Try a challenge in Secure Code Warrior

Micro-Learning Topic: Denial of service (Detected by phrase)

Matched on "Denial of Service"

The Denial of Service (DoS) attack is focused on making a resource (site, application, server) unavailable for the purpose it was designed. There are many ways to make a service unavailable for legitimate users by manipulating network packets, programming, logical, or resources handling vulnerabilities, among others. Source: https://www.owasp.org/index.php/Denial_of_Service

Try a challenge in Secure Code Warrior

1 similar comment
@secure-code-warrior-for-github

Micro-Learning Topic: Regular expression denial of service (Detected by phrase)

Matched on "Regular Expression Denial of Service"

What is this? (2min video)

Denial of Service (DoS) attacks caused by Regular Expression which causes the system to hang or cause them to work very slowly when attacker sends a well-crafted input(exponentially related to input size).Denial of service attacks significantly degrade the service quality experienced by legitimate users. These attacks introduce large response delays, excessive losses, and service interruptions, resulting in direct impact on availability.

Try a challenge in Secure Code Warrior

Micro-Learning Topic: Denial of service (Detected by phrase)

Matched on "Denial of Service"

The Denial of Service (DoS) attack is focused on making a resource (site, application, server) unavailable for the purpose it was designed. There are many ways to make a service unavailable for legitimate users by manipulating network packets, programming, logical, or resources handling vulnerabilities, among others. Source: https://www.owasp.org/index.php/Denial_of_Service

Try a challenge in Secure Code Warrior

@renovate renovate bot force-pushed the deps/axios-1.x-lockfile branch from 0f4e046 to 4df119a Compare January 4, 2024 00:05
@renovate renovate bot changed the title fix(deps): update dependency axios to v1.6.3 fix(deps): update dependency axios to v1.6.4 Jan 4, 2024
@secure-code-warrior-for-github

Micro-Learning Topic: Prototype pollution (Detected by phrase)

Matched on "prototype pollution"

What is this? (2min video)

By adding or modifying attributes of an object prototype, it is possible to create attributes that exist on every object, or replace critical attributes with malicious ones. This can be problematic if the software depends on existence or non-existence of certain attributes, or uses pre-defined attributes of object prototype (such as hasOwnProperty, toString or valueOf).

Try a challenge in Secure Code Warrior

1 similar comment
@secure-code-warrior-for-github

Micro-Learning Topic: Prototype pollution (Detected by phrase)

Matched on "prototype pollution"

What is this? (2min video)

By adding or modifying attributes of an object prototype, it is possible to create attributes that exist on every object, or replace critical attributes with malicious ones. This can be problematic if the software depends on existence or non-existence of certain attributes, or uses pre-defined attributes of object prototype (such as hasOwnProperty, toString or valueOf).

Try a challenge in Secure Code Warrior

@renovate renovate bot force-pushed the deps/axios-1.x-lockfile branch from 4df119a to 1fe2aa6 Compare January 5, 2024 21:19
@renovate renovate bot changed the title fix(deps): update dependency axios to v1.6.4 fix(deps): update dependency axios to v1.6.5 Jan 5, 2024
@renovate renovate bot force-pushed the deps/axios-1.x-lockfile branch from 1fe2aa6 to 7ba0757 Compare January 25, 2024 04:10
@renovate renovate bot changed the title fix(deps): update dependency axios to v1.6.5 fix(deps): update dependency axios to v1.6.6 Jan 25, 2024
@renovate renovate bot changed the title fix(deps): update dependency axios to v1.8.0 fix(deps): update dependency axios to v1.8.1 Feb 26, 2025
@renovate renovate bot force-pushed the deps/axios-1.x-lockfile branch from 1b508cc to b4b5808 Compare March 7, 2025 09:46
@renovate renovate bot changed the title fix(deps): update dependency axios to v1.8.1 fix(deps): update dependency axios to v1.8.2 Mar 7, 2025
@renovate renovate bot force-pushed the deps/axios-1.x-lockfile branch from b4b5808 to ea6f8e1 Compare March 12, 2025 10:41
@renovate renovate bot changed the title fix(deps): update dependency axios to v1.8.2 fix(deps): update dependency axios to v1.8.3 Mar 12, 2025
@renovate renovate bot force-pushed the deps/axios-1.x-lockfile branch from ea6f8e1 to 3a190ef Compare March 19, 2025 23:06
@renovate renovate bot changed the title fix(deps): update dependency axios to v1.8.3 fix(deps): update dependency axios to v1.8.4 Mar 19, 2025
@renovate renovate bot force-pushed the deps/axios-1.x-lockfile branch from 3a190ef to 1fce0c6 Compare April 24, 2025 22:59
@renovate renovate bot changed the title fix(deps): update dependency axios to v1.8.4 fix(deps): update dependency axios to v1.9.0 Apr 24, 2025
@renovate renovate bot force-pushed the deps/axios-1.x-lockfile branch from 1fce0c6 to dcadf32 Compare June 5, 2025 22:10
@renovate renovate bot force-pushed the deps/axios-1.x-lockfile branch from dcadf32 to 7572b67 Compare June 14, 2025 14:34
@renovate renovate bot changed the title fix(deps): update dependency axios to v1.9.0 fix(deps): update dependency axios to v1.10.0 Jun 14, 2025
@renovate renovate bot force-pushed the deps/axios-1.x-lockfile branch from 7572b67 to 8713d01 Compare July 23, 2025 07:02
@renovate renovate bot changed the title fix(deps): update dependency axios to v1.10.0 fix(deps): update dependency axios to v1.11.0 Jul 23, 2025
@renovate renovate bot force-pushed the deps/axios-1.x-lockfile branch from 8713d01 to 453908b Compare August 10, 2025 14:32
@renovate renovate bot force-pushed the deps/axios-1.x-lockfile branch from 453908b to c8bbafe Compare September 12, 2025 17:14
@renovate renovate bot changed the title fix(deps): update dependency axios to v1.11.0 fix(deps): update dependency axios to v1.12.1 Sep 12, 2025
@renovate renovate bot force-pushed the deps/axios-1.x-lockfile branch from c8bbafe to 3da1444 Compare September 14, 2025 17:04
@renovate renovate bot changed the title fix(deps): update dependency axios to v1.12.1 fix(deps): update dependency axios to v1.12.2 Sep 14, 2025
@renovate renovate bot changed the title fix(deps): update dependency axios to v1.12.2 chore(deps): update dependency axios to v1.12.2 Sep 25, 2025
@renovate renovate bot force-pushed the deps/axios-1.x-lockfile branch from 3da1444 to bf8a002 Compare October 27, 2025 19:01
@renovate renovate bot changed the title chore(deps): update dependency axios to v1.12.2 chore(deps): update dependency axios to v1.13.0 Oct 27, 2025
@renovate renovate bot force-pushed the deps/axios-1.x-lockfile branch from bf8a002 to fb60126 Compare October 28, 2025 23:14
@renovate renovate bot changed the title chore(deps): update dependency axios to v1.13.0 chore(deps): update dependency axios to v1.13.1 Oct 28, 2025
@renovate renovate bot force-pushed the deps/axios-1.x-lockfile branch from fb60126 to cb22279 Compare November 4, 2025 23:15
@renovate renovate bot changed the title chore(deps): update dependency axios to v1.13.1 chore(deps): update dependency axios to v1.13.2 Nov 4, 2025
@renovate renovate bot force-pushed the deps/axios-1.x-lockfile branch from cb22279 to edd3951 Compare November 18, 2025 13:09
| datasource | package | from  | to     |
| ---------- | ------- | ----- | ------ |
| npm        | axios   | 1.3.4 | 1.13.3 |
@renovate renovate bot force-pushed the deps/axios-1.x-lockfile branch from edd3951 to b8a72a3 Compare January 25, 2026 18:13
@renovate renovate bot changed the title chore(deps): update dependency axios to v1.13.2 chore(deps): update dependency axios to v1.13.3 Jan 25, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

d:patch Pull requests that update a patch dependency dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants