fix(deps): update dependency axios to v1.7.4 [security]

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
axios (source)	1.6.8 -> 1.7.4

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

GitHub Vulnerability Alerts

CVE-2023-45857

An issue discovered in Axios 0.8.1 through 1.5.1 inadvertently reveals the confidential XSRF-TOKEN stored in cookies by including it in the HTTP header X-XSRF-TOKEN for every request made to any host allowing attackers to view sensitive information.

CVE-2024-39338

axios 1.7.2 allows SSRF via unexpected behavior where requests for path relative URLs get processed as protocol relative URLs.

---

Release Notes

axios/axios (axios)

v1.7.4

Compare Source

Bug Fixes

• sec: CVE-2024-39338 (#​6539) (#​6543) (6b6b605)
• sec: disregard protocol-relative URL to remediate SSRF (#​6539) (07a661a)

Contributors to this release

• Lev Pachmanov
• Đỗ Trọng Hải

v1.7.3

Compare Source

Bug Fixes

• adapter: fix progress event emitting; (#​6518) (e3c76fc)
• fetch: fix withCredentials request config (#​6505) (85d4d0e)
• xhr: return original config on errors from XHR adapter (#​6515) (8966ee7)

Contributors to this release

• Dmitriy Mozgovoy
• Valerii Sidorenko
• prianYu

v1.7.2

Compare Source

Bug Fixes

• fetch: enhance fetch API detection; (#​6413) (4f79aef)

Contributors to this release

• Dmitriy Mozgovoy

v1.7.1

Compare Source

Bug Fixes

• fetch: fixed ReferenceError issue when TextEncoder is not available in the environment; (#​6410) (733f15f)

Contributors to this release

• Dmitriy Mozgovoy

v1.7.0

Compare Source

Features

• adapter: add fetch adapter; (#​6371) (a3ff99b)

Bug Fixes

• core/axios: handle un-writable error stack (#​6362) (81e0455)

Contributors to this release

• Dmitriy Mozgovoy
• Jay
• Alexandre ABRIOUX

---

Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: react-front-end/package-lock.json

npm WARN skipping integrity check for git dependency ssh://[email protected]/apereo/openEQUELLA-cloudprovidersdk.git 
npm WARN deprecated [email protected]: Modern JS already guarantees Array#sort() is a stable sort, so this library is deprecated. See the compatibility table on MDN: https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/Array/sort#browser_compatibility
npm ERR! code 127
npm ERR! path /tmp/renovate/repos/github/openequella/openEQUELLA/oeq-ts-rest-api
npm ERR! command failed
npm ERR! command sh -c -- cd gen-io-ts && npm ci && npm run gen && cd -
npm ERR! added 70 packages, and audited 71 packages in 4s
npm ERR! 
npm ERR! 1 high severity vulnerability
npm ERR! 
npm ERR! To address all issues, run:
npm ERR!   npm audit fix
npm ERR! 
npm ERR! Run `npm audit` for details.
npm ERR! 
npm ERR! > [email protected] gen
npm ERR! > ts-node src/index.ts --source ../src --dest ../src/gen  && eslint --fix ../src
npm ERR! 
npm ERR! Searching TS files from directory: /tmp/renovate/repos/github/openequella/openEQUELLA/oeq-ts-rest-api/src
npm ERR! Searching TS files from directory: /tmp/renovate/repos/github/openequella/openEQUELLA/oeq-ts-rest-api/src/fp-ts-ord
npm ERR! Searching TS files from directory: /tmp/renovate/repos/github/openequella/openEQUELLA/oeq-ts-rest-api/src/gen
npm ERR! Writing codec content to Acl.ts...
npm ERR! Writing codec content to AdvancedSearch.ts...
npm ERR! Writing codec content to BatchOperationResponse.ts...
npm ERR! Writing codec content to BrowseHierarchy.ts...
npm ERR! Writing codec content to Collection.ts...
npm ERR! Writing codec content to Common.ts...
npm ERR! Writing codec content to Drm.ts...
npm ERR! Writing codec content to Errors.ts...
npm ERR! Writing codec content to FacetedSearchSettings.ts...
npm ERR! Writing codec content to Favourite.ts...
npm ERR! Writing codec content to Hierarchy.ts...
npm ERR! Writing codec content to LegacyContent.ts...
npm ERR! Writing codec content to LtiPlatform.ts...
npm ERR! Writing codec content to MimeType.ts...
npm ERR! Writing codec content to Schema.ts...
npm ERR! Writing codec content to Search.ts...
npm ERR! Writing codec content to SearchFacets.ts...
npm ERR! Writing codec content to SearchFilterSettings.ts...
npm ERR! Writing codec content to SearchSettings.ts...
npm ERR! Writing codec content to Security.ts...
npm ERR! Writing codec content to Settings.ts...
npm ERR! Writing codec content to Taxonomy.ts...
npm ERR! Writing codec content to Theme.ts...
npm ERR! Writing codec content to UserQuery.ts...
npm ERR! Writing codec content to WizardCommonTypes.ts...
npm ERR! Writing codec content to WizardControl.ts...
npm ERR! sh: 1: eslint: not found

npm ERR! A complete log of this run can be found in:
npm ERR!     /tmp/renovate/cache/others/npm/_logs/2024-08-15T00_51_41_539Z-debug-0.log