Bump axios from 0.27.2 to 1.6.0 #1393

dependabot · 2023-11-11T05:33:11Z

Bumps axios from 0.27.2 to 1.6.0.

Release notes

Release v1.6.0

Release notes:

Bug Fixes

CSRF: fixed CSRF vulnerability CVE-2023-45857 (#6028) (96ee232)

dns: fixed lookup function decorator to work properly in node v20; (#6011) (5aaff53)

types: fix AxiosHeaders types; (#5931) (a1c8ad0)

PRs

CVE 2023 45857 ( #6028 )
⚠️ Critical vulnerability fix. See https://security.snyk.io/vuln/SNYK-JS-AXIOS-6032459
Contributors to this release

Dmitriy Mozgovoy

Valentin Panov

Rinku Chaudhari

Release v1.5.1

Release notes:

Bug Fixes

adapters: improved adapters loading logic to have clear error messages; (#5919) (e410779)

formdata: fixed automatic addition of the Content-Type header for FormData in non-browser environments; (#5917) (bc9af51)

headers: allow content-encoding header to handle case-insensitive values (#5890) (#5892) (4c89f25)

types: removed duplicated code (9e62056)

Contributors to this release

Dmitriy Mozgovoy

David Dallas

Sean Sattler

Mustafa Ateş Uzun

Przemyslaw Motacki

Michael Di Prisco

Release v1.5.0

Release notes:

Bug Fixes

adapter: make adapter loading error more clear by using platform-specific adapters explicitly (#5837) (9a414bb)

dns: fixed cacheable-lookup integration; (#5836) (b3e327d)

headers: added support for setting header names that overlap with class methods; (#5831) (d8b4ca0)

headers: fixed common Content-Type header merging; (#5832) (8fda276)

Features

... (truncated)

Changelog

Sourced from axios's changelog.

1.6.0 (2023-10-26)

Bug Fixes

CSRF: fixed CSRF vulnerability CVE-2023-45857 (#6028) (96ee232)

dns: fixed lookup function decorator to work properly in node v20; (#6011) (5aaff53)

types: fix AxiosHeaders types; (#5931) (a1c8ad0)

PRs

CVE 2023 45857 ( #6028 )
⚠️ Critical vulnerability fix. See https://security.snyk.io/vuln/SNYK-JS-AXIOS-6032459
Contributors to this release

Dmitriy Mozgovoy

Valentin Panov

Rinku Chaudhari

1.5.1 (2023-09-26)

Bug Fixes

adapters: improved adapters loading logic to have clear error messages; (#5919) (e410779)

formdata: fixed automatic addition of the Content-Type header for FormData in non-browser environments; (#5917) (bc9af51)

headers: allow content-encoding header to handle case-insensitive values (#5890) (#5892) (4c89f25)

types: removed duplicated code (9e62056)

Contributors to this release

Dmitriy Mozgovoy

David Dallas

Sean Sattler

Mustafa Ateş Uzun

Przemyslaw Motacki

Michael Di Prisco

PRs

CVE 2023 45857 ( #6028 )
⚠️ Critical vulnerability fix. See https://security.snyk.io/vuln/SNYK-JS-AXIOS-6032459
1.5.0 (2023-08-26)

... (truncated)

Commits

f7adacd chore(release): v1.6.0 (#6031)
9917e67 chore(ci): fix release-it arg; (#6032)
96ee232 fix(CSRF): fixed CSRF vulnerability CVE-2023-45857 (#6028)
7d45ab2 chore(tests): fixed tests to pass in node v19 and v20 with keep-alive enabl...
5aaff53 fix(dns): fixed lookup function decorator to work properly in node v20; (#6011)
a48a63a chore(docs): added AxiosHeaders docs; (#5932)
a1c8ad0 fix(types): fix AxiosHeaders types; (#5931)
2ac731d chore(docs): update readme.md (#5889)
88fb52b chore(release): v1.5.1 (#5920)
e410779 fix(adapters): improved adapters loading logic to have clear error messages; ...
Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

Bumps [axios](https://github.com/axios/axios) from 0.27.2 to 1.6.0. - [Release notes](https://github.com/axios/axios/releases) - [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md) - [Commits](axios/axios@v0.27.2...v1.6.0) --- updated-dependencies: - dependency-name: axios dependency-type: direct:production ... Signed-off-by: dependabot[bot] <[email protected]>

coveralls · 2023-11-11T05:41:18Z

Pull Request Test Coverage Report for Build 7093555236

Warning: This coverage report may be inaccurate.

We've detected an issue with your CI configuration that might affect the accuracy of this pull request's coverage report.
To ensure accuracy in future PRs, please see these guidelines.
A quick fix for this PR: rebase it; your next report should be accurate.

0 of 0 changed or added relevant lines in 0 files are covered.
No unchanged relevant lines lost coverage.
Overall coverage remained the same at 85.602%

Totals
Change from base Build 6805052748:	0.0%
Covered Lines:	250
Relevant Lines:	280

💛 - Coveralls

github-actions · 2023-12-04T22:49:07Z

depcheck Result

List up libraries that are defined in dependencies and devDependencies in package.json but not used in your codes.

Unused dependencies

- @popperjs/core
- @sentry/react
- @typescript-eslint/eslint-plugin
- babel-loader
- babel-polyfill
- classnames
- flexboxgrid
- gatsby-legacy-polyfills
- gatsby-plugin-flexsearch
- gatsby-plugin-twitter
- gatsby-react-router-scroll
- html-minifier
- intersection-observer
- md5
- preact
- preact-render-to-string
- react-body-classname
- react-dom
- rimraf
- sass
- typescript

Unused devdependencies

- @babel/core
- @babel/preset-typescript
- @storybook/addon-a11y
- @storybook/addon-controls
- @storybook/addon-essentials
- @storybook/addon-info
- @storybook/addon-interactions
- @storybook/addon-knobs
- @storybook/addon-links
- @storybook/addon-storysource
- @storybook/addon-viewport
- @storybook/builder-webpack5
- @storybook/manager-webpack5
- @textlint-rule/textlint-rule-no-duplicate-abbr
- @types/jest
- @types/react-test-renderer
- @types/responselike
- axe-core
- @babel/eslint-parser
- babel-plugin-transform-runtime
- core-js
- cross-env
- css-loader
- eslint
- eslint-config-airbnb
- eslint-import-resolver-webpack
- eslint-plugin-import
- eslint-plugin-jsx-a11y
- eslint-plugin-react
- gh-pages
- husky
- identity-obj-proxy
- jest
- jest-environment-jsdom
- markdownlint-cli2
- memlab
- netlify-cli
- netlify-lambda
- nyc
- prettier
- react-test-renderer
- sass-loader
- start-server-and-test
- stylelint
- stylelint-config-recess-order
- stylelint-config-recommended-scss
- stylelint-config-standard
- stylelint-scss
- textlint
- textlint-filter-rule-allowlist
- textlint-filter-rule-comments
- textlint-rule-aws-spellcheck
- textlint-rule-ja-no-inappropriate-words
- textlint-rule-no-mixed-zenkaku-and-hankaku-alphabet
- textlint-rule-no-start-duplicated-conjunction
- textlint-rule-preset-smarthr
- textlint-rule-prh
- textlint-rule-terminology
- ts-jest
- yaml-lint

Missing

- colors
  - /github/workspace/src/styles/_hover.scss

- @algolia/transporter
  - /github/workspace/src/components/SearchBox/index.tsx

- @algolia/client-search
  - /github/workspace/src/components/SearchBox/index.tsx

- qs
  - /github/workspace/scripts/benchmark.js

- https
  - /github/workspace/scripts/uploadScreenShot.ts

github-actions · 2023-12-04T22:52:42Z

Deploy Preview

Deploy path: /home/runner/work/blog/blog/public
Functions path: /home/runner/work/blog/blog/functions/src
Configuration path: /home/runner/work/blog/blog/netlify.toml
Deploying to draft URL...

Logs: https://app.netlify.com/sites/pensive-lamport-5822d2/deploys/656e58239b29cb06183886d6
Website Draft URL: https://656e58239b29cb06183886d6--pensive-lamport-5822d2.netlify.app

If everything looks good on your draft URL, deploy it to your main site URL with the --prod flag.
netlify deploy --prod

github-actions · 2023-12-04T22:53:28Z

Storybook Preview

Deploy path: /home/runner/work/blog/blog/storybook-static
Functions path: /home/runner/work/blog/blog/functions/src
Configuration path: /home/runner/work/blog/blog/netlify.toml
Deploying to draft URL...

Logs: https://app.netlify.com/sites/blog-storybook/deploys/656e58649b29cb05fd388cee
Website Draft URL: https://656e58649b29cb05fd388cee--blog-storybook.netlify.app

If everything looks good on your draft URL, deploy it to your main site URL with the --prod flag.
netlify deploy --prod

github-actions · 2023-12-04T23:04:55Z

Bundle Analyzer URL

https://656e58239b29cb06183886d6--pensive-lamport-5822d2.netlify.app/webpack-bundle-analyser

github-actions · 2023-12-04T23:06:14Z

Lighthouse Score

Desktop

performance: 78
accessibility: 100
best-practices: 100
seo: 92
pwa: 100

Mobile

performance: 74
accessibility: 100
best-practices: 95
seo: 93
pwa: 100

tubone24 · 2024-01-08T03:39:31Z

@dependabot rebase

dependabot · 2024-01-08T03:39:34Z

Looks like this PR has been edited by someone other than Dependabot. That means Dependabot can't rebase it - sorry!

If you're happy for Dependabot to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

tubone24 · 2024-01-08T03:47:34Z

@dependabot recreate

dependabot · 2024-01-08T03:48:10Z

Superseded by #1416.

dependabot bot requested a review from tubone24 as a code owner November 11, 2023 05:33

dependabot bot added the dependencies Pull requests that update a dependency file label Nov 11, 2023

github-actions bot added the packages label Nov 11, 2023

fx

e7c1e2e

github-actions bot temporarily deployed to development-storybook December 4, 2023 22:49 Inactive

github-actions bot temporarily deployed to development December 4, 2023 22:49 Inactive

github-actions bot pushed a commit that referenced this pull request Dec 4, 2023

[file upload] Added file for PR #1393

b5c17c2

github-actions bot pushed a commit that referenced this pull request Dec 4, 2023

[file upload] Added file for PR #1393

89250a3

github-actions bot pushed a commit that referenced this pull request Dec 4, 2023

[file upload] Added file for PR #1393

abcbecf

github-actions bot pushed a commit that referenced this pull request Dec 4, 2023

[file upload] Added file for PR #1393

12067fa

dependabot bot closed this Jan 8, 2024

dependabot bot deleted the dependabot/npm_and_yarn/axios-1.6.0 branch January 8, 2024 03:48

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump axios from 0.27.2 to 1.6.0 #1393

Bump axios from 0.27.2 to 1.6.0 #1393

dependabot bot commented on behalf of github Nov 11, 2023 •

edited

Loading

coveralls commented Nov 11, 2023 •

edited

Loading

github-actions bot commented Dec 4, 2023

github-actions bot commented Dec 4, 2023

github-actions bot commented Dec 4, 2023

github-actions bot commented Dec 4, 2023

github-actions bot commented Dec 4, 2023

tubone24 commented Jan 8, 2024

dependabot bot commented on behalf of github Jan 8, 2024

tubone24 commented Jan 8, 2024

dependabot bot commented on behalf of github Jan 8, 2024

Bump axios from 0.27.2 to 1.6.0 #1393

Bump axios from 0.27.2 to 1.6.0 #1393

Conversation

dependabot bot commented on behalf of github Nov 11, 2023 • edited Loading

Release v1.6.0

Release notes:

Bug Fixes

PRs

Contributors to this release

Release v1.5.1

Release notes:

Bug Fixes

Contributors to this release

Release v1.5.0

Release notes:

Bug Fixes

Features

1.6.0 (2023-10-26)

Bug Fixes

PRs

Contributors to this release

1.5.1 (2023-09-26)

Bug Fixes

Contributors to this release

PRs

1.5.0 (2023-08-26)

coveralls commented Nov 11, 2023 • edited Loading

Pull Request Test Coverage Report for Build 7093555236

Warning: This coverage report may be inaccurate.

💛 - Coveralls

github-actions bot commented Dec 4, 2023

depcheck Result

github-actions bot commented Dec 4, 2023

Deploy Preview

github-actions bot commented Dec 4, 2023

Storybook Preview

github-actions bot commented Dec 4, 2023

Bundle Analyzer URL

github-actions bot commented Dec 4, 2023

Lighthouse Score

Desktop

Mobile

tubone24 commented Jan 8, 2024

dependabot bot commented on behalf of github Jan 8, 2024

tubone24 commented Jan 8, 2024

dependabot bot commented on behalf of github Jan 8, 2024

dependabot bot commented on behalf of github Nov 11, 2023 •

edited

Loading

coveralls commented Nov 11, 2023 •

edited

Loading