From 370b8341709dea98fb36a7170a9eea50577e78e5 Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Fri, 2 Aug 2024 09:56:00 +0000
Subject: [PATCH] fix: package.json & package-lock.json to reduce
 vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-AXIOS-6144788
---
 package-lock.json | 32 ++++++++------------------------
 package.json      |  2 +-
 2 files changed, 9 insertions(+), 25 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index 98d351db46..09c7110159 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -14,7 +14,7 @@
                 "@louislam/sqlite3": "15.1.6",
                 "@vvo/tzdb": "^6.125.0",
                 "args-parser": "~1.3.0",
-                "axios": "~0.28.1",
+                "axios": "^1.6.4",
                 "badge-maker": "~3.3.1",
                 "bcryptjs": "~2.4.3",
                 "chardet": "~1.4.0",
@@ -2546,7 +2546,7 @@
             "version": "2.1.1",
             "resolved": "https://registry.npmjs.org/@fastify/busboy/-/busboy-2.1.1.tgz",
             "integrity": "sha512-vBZP4NlzfOlerQTnba4aqZoMhE/a9HY7HRqoOPaETQcSQuWEIyZMHGfVu6w9wGtGK5fED5qRs2DteVCjOH60sA==",
-            "dev": true,
+            "devOptional": true,
             "license": "MIT",
             "engines": {
                 "node": ">=14"
@@ -5570,12 +5570,12 @@
             "license": "MIT"
         },
         "node_modules/axios": {
-            "version": "0.28.1",
-            "resolved": "https://registry.npmjs.org/axios/-/axios-0.28.1.tgz",
-            "integrity": "sha512-iUcGA5a7p0mVb4Gm/sy+FSECNkPFT4y7wt6OM/CDpO/OnNCvSs3PoMG8ibrC9jRoGYU0gUK5pXVC4NPXq6lHRQ==",
+            "version": "1.6.4",
+            "resolved": "https://registry.npmjs.org/axios/-/axios-1.6.4.tgz",
+            "integrity": "sha512-heJnIs6N4aa1eSthhN9M5ioILu8Wi8vmQW9iHQ9NUvfkJb0lEEDUiIdQNAuBtfUt3FxReaKdpQA5DbmMOqzF/A==",
             "license": "MIT",
             "dependencies": {
-                "follow-redirects": "^1.15.0",
+                "follow-redirects": "^1.15.4",
                 "form-data": "^4.0.0",
                 "proxy-from-env": "^1.1.0"
             }
@@ -11299,22 +11299,6 @@
                 "smart-buffer": "^4.1.0"
             }
         },
-        "node_modules/node-abi": {
-            "version": "3.62.0",
-            "resolved": "https://registry.npmjs.org/node-abi/-/node-abi-3.62.0.tgz",
-            "integrity": "sha512-CPMcGa+y33xuL1E0TcNIu4YyaZCxnnvkVaEXrsosR3FxN+fV8xvb7Mzpb7IgKler10qeMkE6+Dp8qJhpzdq35g==",
-            "dependencies": {
-                "semver": "^7.3.5"
-            },
-            "engines": {
-                "node": ">=10"
-            }
-        },
-        "node_modules/node-abort-controller": {
-            "version": "3.1.1",
-            "resolved": "https://registry.npmjs.org/node-abort-controller/-/node-abort-controller-3.1.1.tgz",
-            "integrity": "sha512-AGK2yQKIjRuqnc6VkX2Xj5d+QW8xZ87pa1UK6yA6ouUyuxfHuMP6umE5QK7UmTeOAymo+Zx1Fxiuw9rVx8taHQ=="
-        },
         "node_modules/node-cloudflared-tunnel": {
             "version": "1.0.10",
             "resolved": "https://registry.npmjs.org/node-cloudflared-tunnel/-/node-cloudflared-tunnel-1.0.10.tgz",
@@ -15018,7 +15002,7 @@
             "version": "4.4.4",
             "resolved": "https://registry.npmjs.org/typescript/-/typescript-4.4.4.tgz",
             "integrity": "sha512-DqGhF5IKoBl8WNf8C1gu8q0xZSInh9j1kJJMqT3a94w1JzVaBU4EXOSMrz9yDqMT0xt3selp83fuFMQ0uzv6qA==",
-            "dev": true,
+            "devOptional": true,
             "license": "Apache-2.0",
             "bin": {
                 "tsc": "bin/tsc",
@@ -15054,7 +15038,7 @@
             "version": "5.28.4",
             "resolved": "https://registry.npmjs.org/undici/-/undici-5.28.4.tgz",
             "integrity": "sha512-72RFADWFqKmUb2hmmvNODKL3p9hcB6Gt2DOQMis1SEBaV6a4MH8soBvzg+95CYhCKPFedut2JY9bMfrDl9D23g==",
-            "dev": true,
+            "devOptional": true,
             "license": "MIT",
             "dependencies": {
                 "@fastify/busboy": "^2.0.0"
diff --git a/package.json b/package.json
index a74e4677e2..93d21f91f8 100644
--- a/package.json
+++ b/package.json
@@ -79,7 +79,7 @@
         "@louislam/sqlite3": "15.1.6",
         "@vvo/tzdb": "^6.125.0",
         "args-parser": "~1.3.0",
-        "axios": "~0.28.1",
+        "axios": "~1.6.4",
         "badge-maker": "~3.3.1",
         "bcryptjs": "~2.4.3",
         "chardet": "~1.4.0",