Skip to content

Conversation

@renovate
Copy link
Contributor

@renovaterenovatebot commented May 24, 2023

Mend Renovate

This PR contains the following updates:

PackageChangeAgeAdoptionPassingConfidence
axios (source)=0.21.1 -> =0.21.2ageadoptionpassingconfidence

GitHub Vulnerability Alerts

CVE-2021-3749

axios before v0.21.2 is vulnerable to Inefficient Regular Expression Complexity.


Release Notes

axios/axios

v0.21.2

Compare Source

Fixes and Functionality:
  • Updating axios requests to be delayed by pre-emptive promise creation (#​2702)
  • Adding "synchronous" and "runWhen" options to interceptors api (#​2702)
  • Updating of transformResponse (#​3377)
  • Adding ability to omit User-Agent header (#​3703)
  • Adding multiple JSON improvements (#​3688, #​3763)
  • Fixing quadratic runtime and extra memory usage when setting a maxContentLength (#​3738)
  • Adding parseInt to config.timeout (#​3781)
  • Adding custom return type support to interceptor (#​3783)
  • Adding security fix for ReDoS vulnerability (#​3980)
Internal and Tests:
  • Updating build dev dependancies (#​3401)
  • Fixing builds running on Travis CI (#​3538)
  • Updating follow rediect version (#​3694, #​3771)
  • Updating karma sauce launcher to fix failing sauce tests (#​3712, #​3717)
  • Updating content-type header for application/json to not contain charset field, according do RFC 8259 (#​2154)
  • Fixing tests by bumping karma-sauce-launcher version (#​3813)
  • Changing testing process from Travis CI to GitHub Actions (#​3938)
Documentation:
  • Updating documentation around the use of AUTH_TOKEN with multiple domain endpoints (#​3539)
  • Remove duplication of item in changelog (#​3523)
  • Fixing gramatical errors (#​2642)
  • Fixing spelling error (#​3567)
  • Moving gitpod metion (#​2637)
  • Adding new axios documentation website link (#​3681, #​3707)
  • Updating documentation around dispatching requests (#​3772)
  • Adding documentation for the type guard isAxiosError (#​3767)
  • Adding explanation of cancel token (#​3803)
  • Updating CI status badge (#​3953)
  • Fixing errors with JSON documentation (#​3936)
  • Fixing README typo under Request Config (#​3825)
  • Adding axios-multi-api to the ecosystem file (#​3817)
  • Adding SECURITY.md to properly disclose security vulnerabilities (#​3981)

Huge thanks to everyone who contributed to this release via code (authors listed below) or via reviews and triaging on GitHub:


Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

@renovaterenovatebot added the dependency Dependency updates label May 24, 2023
@renovaterenovatebotforce-pushed the renovate/npm-axios-vulnerability branch 4 times, most recently from a163762 to 3535d3fCompareMay 24, 2023 11:27
@renovaterenovatebotforce-pushed the renovate/npm-axios-vulnerability branch from 687ff50 to 8ffd346CompareMay 29, 2023 20:33
@afonsojramosafonsojramos merged commit e31b92b into mainMay 29, 2023
@afonsojramosafonsojramos deleted the renovate/npm-axios-vulnerability branch May 29, 2023 20:36
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencyDependency updates

Development

Successfully merging this pull request may close these issues.

2 participants

@afonsojramos