comms-router Update dependency axios to ^0.30.0 (main)

Update dependency axios to ^0.30.0 (main)

Open mend-for-github-com[bot] opened this issue 1 month ago • 0 comments

This PR contains the following updates:

Package	Type	Update	Change
axios (source)	dependencies	minor	`^0.15.3` -> `^0.30.0`

By merging this PR, the issue #115 will be automatically resolved and closed:

Severity	CVSS Score	Vulnerability	Reachability
High	7.5	CVE-2021-3749	Reachable
High	7.5	CVE-2025-27152
High	7.5	CVE-2025-58754
High	7.3	CVE-2023-26159	Reachable
Medium	6.5	CVE-2022-0155	Reachable
Medium	6.5	CVE-2023-45857
Medium	6.5	CVE-2024-28849	Reachable
Medium	5.9	CVE-2020-28168	Reachable
Low	2.6	CVE-2022-0536	Reachable

Release Notes

axios/axios (axios)

`v0.30.2`

Compare Source

What's Changed

Backport maxContentLength vulnerability fix to v0.x by @FeBe95 in #7034

New Contributors

@FeBe95 made their first contribution in #7034

Full Changelog: https://github.com/axios/axios/compare/v0.30.1...v0.30.2

`v0.30.1`

Compare Source

Release notes:

Bug Fixes

chore(deps): bump form-data from 4.0.0 to 4.0.4 for v0.x by @wolandec in #6978

Contributors to this release

@wolandec made their first contribution in #6978

Full Changelog: https://github.com/axios/axios/compare/v0.30.0...v0.30.1

`v0.30.0`

Compare Source

Release notes:

Bug Fixes

fix: modify log while request is aborted by @mori5321 in #4917
fix: update CHANGELOG.md for v0.x by @TehZarathustra in #6271
fix: modify upgrade guide for 0.28.1's breaking change by @nafeger in #6787
fix: backport allowAbsoluteUrls vulnerability fix to v0.x by @thatguyinabeanie in #6829
fix: add allowAbsoluteUrls type by @thatguyinabeanie in #6849

Contributors to this release

@mori5321 made their first contribution in #4917
@TehZarathustra made their first contribution in #6271
@nafeger made their first contribution in #6787
@thatguyinabeanie made their first contribution in #6829

Full Changelog: https://github.com/axios/axios/compare/v0.29.0...v0.30.0

`v0.29.0`

Compare Source

Release notes:

Bug Fixes

fix(backport): backport security fixes in commits #6167 and #6163 to v0.x by @Sean-Powell in #6402
fix: omit nulls in params by @Willshaw in #6394
fix(backport): fix paramsSerializer function validation by @solonzhu in #6361
fix: Regular Expression Denial of Service (ReDoS) by @qiongshusheng in #6708

Contributors to this release

@Sean-Powell made their first contribution in #6402
@Willshaw made their first contribution in #6394
@solonzhu made their first contribution in #6361
@qiongshusheng made their first contribution in #6708

`v0.28.1`

Compare Source

Release notes:

Bug Fixes

fix(backport): custom params serializer support (#6263)
fix(backport): uncaught ReferenceError req is not defined (#6307)

`v0.28.0`

Compare Source

Release notes:

Bug Fixes

fix(security): fixed CVE-2023-45857 by backporting withXSRFToken option to v0.x (#6091)

Backports from v1.x:

Allow null indexes on formSerializer and paramsSerializer v0.x (#4961)
Fixing content-type header repeated #4745
Fixed timeout error message for HTTP 4738
Added axios.formToJSON method (#4735)
URL params serializer (#4734)
Fixed toFormData Blob issue on node>v17 #4728
Adding types for progress event callbacks #4675
Fixed max body length defaults #4731
Added data URL support for node.js (#4725)
Added isCancel type assert (#4293)
Added the ability for the url-encoded-form serializer to respect the formSerializer config (#4721)
Add string[] to AxiosRequestHeaders type (#4322)
Allow type definition for axios instance methods (#4224)
Fixed AxiosError stack capturing; (#4718)
Fixed AxiosError status code type; (#4717)
Adding Canceler parameters config and request (#4711)
fix(types): allow to specify partial default headers for instance creation (#4185)
Added blob to the list of protocols supported by the browser (#4678)
Fixing Z_BUF_ERROR when no content (#4701)
Fixed race condition on immediate requests cancellation (#4261)
Added a clear() function to the request and response interceptors object so a user can ensure that all interceptors have been removed from an Axios instance #4248
Added generic AxiosAbortSignal TS interface to avoid importing AbortController polyfill (#4229)
Fix TS definition for AxiosRequestTransformer (#4201)
Use type alias instead of interface for AxiosPromise (#4505)
Include request and config when creating a CanceledError instance (#4659)
Added generic TS types for the exposed toFormData helper (#4668)
Optimized the code that checks cancellation (#4587)
Replaced webpack with rollup (#4596)
Added stack trace to AxiosError (#4624)
Updated AxiosError.config to be optional in the type definition (#4665)
Removed incorrect argument for NetworkError constructor (#4656)

`v0.27.2`

Compare Source

Fixes and Functionality:

Fixed FormData posting in browser environment by reverting #3785 (#4640)
Enhanced protocol parsing implementation (#4639)
Fixed bundle size

`v0.27.1`

Compare Source

Fixes and Functionality:

Removed import of url module in browser build due to huge size overhead and builds being broken (#4594)
Bumped follow-redirects to ^1.14.9 (#4615)

`v0.27.0`

Compare Source

Breaking changes:

New toFormData helper function that allows the implementor to pass an object and allow axios to convert it to FormData (#3757)
Removed functionality that removed the the Content-Type request header when passing FormData (#3785)
(*) Refactored error handling implementing AxiosError as a constructor, this is a large change to error handling on the whole (#3645)
Separated responsibility for FormData instantiation between transformRequest and toFormData (#4470)
(*) Improved and fixed multiple issues with FormData support (#4448)

QOL and DevX improvements:

Added a multipart/form-data testing playground allowing contributors to debug changes easily (#4465)

Fixes and Functionality:

Refactored project file structure to avoid circular imports (#4515) & (#4516)
Bumped follow-redirects to ^1.14.9 (#4562)

Internal and Tests:

Updated dev dependencies to latest version

Documentation:

Fixing incorrect link in changelog (#4551)

Notes:

(*) Please read these pull requests before updating, these changes are very impactful and far reaching.

`v0.26.1`

Compare Source

Fixes and Functionality:

Refactored project file structure to avoid circular imports (#4220)

`v0.26.0`

Compare Source

Fixes and Functionality:

Fixed The timeoutErrorMessage property in config not work with Node.js (#3581)
Added errors to be displayed when the query parsing process itself fails (#3961)
Fix/remove url required (#4426)
Update follow-redirects dependency due to Vulnerability (#4462)
Bump karma from 6.3.11 to 6.3.14 (#4461)
Bump follow-redirects from 1.14.7 to 1.14.8 (#4473)

`v0.25.0`

Compare Source

Breaking changes:

Fixing maxBodyLength enforcement (#3786)
Don't rely on strict mode behaviour for arguments (#3470)
Adding error handling when missing url (#3791)
Update isAbsoluteURL.js removing escaping of non-special characters (#3809)
Use native Array.isArray() in utils.js (#3836)
Adding error handling inside stream end callback (#3967)

Fixes and Functionality:

Added aborted even handler (#3916)
Header types expanded allowing boolean and number types (#4144)
Fix cancel signature allowing cancel message to be undefined (#3153)
Updated type checks to be formulated better (#3342)
Avoid unnecessary buffer allocations (#3321)
Adding a socket handler to keep TCP connection live when processing long living requests (#3422)
Added toFormData helper function (#3757)
Adding responseEncoding prop type in AxiosRequestConfig (#3918)

Internal and Tests:

Adding axios-test-instance to ecosystem (#3786)
Optimize the logic of isAxiosError (#3546)
Add tests and documentation to display how multiple inceptors work (#3564)
Updating follow-redirects to version 1.14.7 (#4379)

Documentation:

Fixing changelog to show corrext pull request (#4219)
Update upgrade guide for https proxy setting (#3604)

Huge thanks to everyone who contributed to this release via code (authors listed below) or via reviews and triaging on GitHub:

`v0.24.0`

Compare Source

Breaking changes:

Revert: change type of AxiosResponse to any, please read lengthy discussion here: (#4141) pull request: (#4186)

Huge thanks to everyone who contributed to this release via code (authors listed below) or via reviews and triaging on GitHub:

`v0.23.0`

Compare Source

Breaking changes:

Distinguish request and response data types (#4116)
Change never type to unknown (#4142)
Fixed TransitionalOptions typings (#4147)

Fixes and Functionality:

Adding globalObject: 'this' to webpack config (#3176)
Adding insecureHTTPParser type to AxiosRequestConfig (#4066)
Fix missing semicolon in typings (#4115)
Fix response headers types (#4136)

Internal and Tests:

Improve timeout error when timeout is browser default (#3209)
Fix node version on CI (#4069)
Added testing to TypeScript portion of project (#4140)

Documentation:

Rename Angular to AngularJS (#4114)

Huge thanks to everyone who contributed to this release via code (authors listed below) or via reviews and triaging on GitHub:

`v0.22.0`

Compare Source

Fixes and Functionality:

Caseless header comparing in HTTP adapter (#2880)
Avoid package.json import fixing issues and warnings related to this (#4041), (#4065)
Fixed cancelToken leakage and added AbortController support (#3305)
Updating CI to run on release branches
Bump follow redirects version
Fixed default transitional config for custom Axios instance; (#4052)

Huge thanks to everyone who contributed to this release via code (authors listed below) or via reviews and triaging on GitHub:

`v0.21.4`

Compare Source

Fixes and Functionality:

Fixing JSON transform when data is stringified. Providing backward compatibility and complying to the JSON RFC standard (#4020)

Huge thanks to everyone who contributed to this release via code (authors listed below) or via reviews and triaging on GitHub:

`v0.21.3`

Compare Source

Fixes and Functionality:

Fixing response interceptor not being called when request interceptor is attached (#4013)

Huge thanks to everyone who contributed to this release via code (authors listed below) or via reviews and triaging on GitHub:

Julian Hollmann

`v0.21.2`

Compare Source

Fixes and Functionality:

Updating axios requests to be delayed by pre-emptive promise creation (#2702)
Adding "synchronous" and "runWhen" options to interceptors api (#2702)
Updating of transformResponse (#3377)
Adding ability to omit User-Agent header (#3703)
Adding multiple JSON improvements (#3688, #3763)
Fixing quadratic runtime and extra memory usage when setting a maxContentLength (#3738)
Adding parseInt to config.timeout (#3781)
Adding custom return type support to interceptor (#3783)
Adding security fix for ReDoS vulnerability (#3980)

Internal and Tests:

Updating build dev dependancies (#3401)
Fixing builds running on Travis CI (#3538)
Updating follow rediect version (#3694, #3771)
Updating karma sauce launcher to fix failing sauce tests (#3712, #3717)
Updating content-type header for application/json to not contain charset field, according do RFC 8259 (#2154)
Fixing tests by bumping karma-sauce-launcher version (#3813)
Changing testing process from Travis CI to GitHub Actions (#3938)

Documentation:

Updating documentation around the use of AUTH_TOKEN with multiple domain endpoints (#3539)
Remove duplication of item in changelog (#3523)
Fixing gramatical errors (#2642)
Fixing spelling error (#3567)
Moving gitpod metion (#2637)
Adding new axios documentation website link (#3681, #3707)
Updating documentation around dispatching requests (#3772)
Adding documentation for the type guard isAxiosError (#3767)
Adding explanation of cancel token (#3803)
Updating CI status badge (#3953)
Fixing errors with JSON documentation (#3936)
Fixing README typo under Request Config (#3825)
Adding axios-multi-api to the ecosystem file (#3817)
Adding SECURITY.md to properly disclose security vulnerabilities (#3981)

Huge thanks to everyone who contributed to this release via code (authors listed below) or via reviews and triaging on GitHub:

`v0.21.1`

Compare Source

Fixes and Functionality:

Hotfix: Prevent SSRF (#3410)
Protocol not parsed when setting proxy config from env vars (#3070)
Updating axios in types to be lower case (#2797)
Adding a type guard for AxiosError (#2949)

Internal and Tests:

Remove the skipping of the socket http test (#3364)
Use different socket for Win32 test (#3375)

Huge thanks to everyone who contributed to this release via code (authors listed below) or via reviews and triaging on GitHub:

Daniel Lopretto <timemachine3030@users.noreply.github.com>
Jason Kwok [email protected]
Jay [email protected]
Jonathan Foster [email protected]
Remco Haszing [email protected]
Xianming Zhong [email protected]

`v0.21.0`

Compare Source

Fixes and Functionality:

Fixing requestHeaders.Authorization (#3287)
Fixing node types (#3237)
Fixing axios.delete ignores config.data (#3282)
Revert "Fixing overwrite Blob/File type as Content-Type in browser. (#1773)" (#3289)
Fixing an issue that type 'null' and 'undefined' is not assignable to validateStatus when typescript strict option is enabled (#3200)

Internal and Tests:

Lock travis to not use node v15 (#3361)

Documentation:

Fixing simple typo, existant -> existent (#3252)
Fixing typos (#3309)

Huge thanks to everyone who contributed to this release via code (authors listed below) or via reviews and triaging on GitHub:

Allan Cruz [email protected]
George Cheng [email protected]
Jay [email protected]
Kevin Kirsche [email protected]
Remco Haszing [email protected]
Taemin Shin <cprayer13@gmail.com>
Tim Gates [email protected]
Xianming Zhong [email protected]

`v0.20.0`

Compare Source

Release of 0.20.0-pre as a full release with no other changes.

`v0.19.2`

Compare Source

Remove unnecessary XSS check (#2679) (see (#2646) for discussion)

`v0.19.1`

Compare Source

Fixes and Functionality:

Fixing invalid agent issue (#1904)
Fix ignore set withCredentials false (#2582)
Delete useless default to hash (#2458)
Fix HTTP/HTTPs agents passing to follow-redirect (#1904)
Fix ignore set withCredentials false (#2582)
Fix CI build failure (#2570)
Remove dependency on is-buffer from package.json (#1816)
Adding options typings (#2341)
Adding Typescript HTTP method definition for LINK and UNLINK. (#2444)
Update dist with newest changes, fixes Custom Attributes issue
Change syntax to see if build passes (#2488)
Update Webpack + deps, remove now unnecessary polyfills (#2410)
Fix to prevent XSS, throw an error when the URL contains a JS script (#2464)
Add custom timeout error copy in config (#2275)
Add error toJSON example (#2466)
Fixing Vulnerability A Fortify Scan finds a critical Cross-Site Scrip… (#2451)
Fixing subdomain handling on no_proxy (#2442)
Make redirection from HTTP to HTTPS work ([#2426](#2426] and (#2547)
Add toJSON property to AxiosError type (#2427)
Fixing socket hang up error on node side for slow response. (#1752)
Alternative syntax to send data into the body (#2317)
Fixing custom config options (#2207)
Fixing set config.method after mergeConfig for Axios.prototype.request (#2383)
Axios create url bug (#2290)
Do not modify config.url when using a relative baseURL (resolves #1628) (#2391)
Add typescript HTTP method definition for LINK and UNLINK (#2444)

Internal:

Revert "Update Webpack + deps, remove now unnecessary polyfills" (#2479)
Order of if/else blocks is causing unit tests mocking XHR. (#2201)
Add license badge (#2446)
Fix travis CI build #2386
Fix cancellation error on build master. #2290 #2207 (#2407)

Documentation:

Fixing typo in CHANGELOG.md: s/Functionallity/Functionality (#2639)
Fix badge, use master branch (#2538)
Fix typo in changelog #2193
Document fix (#2514)
Update docs with no_proxy change, issue #2484 (#2513)
Fixing missing words in docs template (#2259)
🐛Fix request finally documentation in README (#2189)
updating spelling and adding link to docs (#2212)
docs: minor tweak (#2404)
Update response interceptor docs (#2399)
Update README.md (#2504)
Fix word 'sintaxe' to 'syntax' in README.md (#2432)
upadating README: notes on CommonJS autocomplete (#2256)
Fix grammar in README.md (#2271)
Doc fixes, minor examples cleanup (#2198)

`v0.19.0`

Compare Source

Fixes and Functionality:

Unzip response body only for statuses != 204 (#1129) - drawski
Destroy stream on exceeding maxContentLength (fixes #1098) (#1485) - Gadzhi Gadzhiev
Makes Axios error generic to use AxiosResponse (#1738) - Suman Lama
Fixing Mocha tests by locking follow-redirects version to 1.5.10 (#1993) - grumblerchester
Allow uppercase methods in typings. (#1781) - Ken Powers
Fixing .eslintrc without extension (#1789) - Manoel
Consistent coding style (#1787) - Ali Servet Donmez
Fixing building url with hash mark (#1771) - Anatoly Ryabov
This commit fix building url with hash map (fragment identifier) when parameters are present: they must not be added after #, because client cut everything after #
Preserve HTTP method when following redirect (#1758) - Rikki Gibson
Add getUri signature to TypeScript definition. (#1736) - Alexander Trauzzi
Adding isAxiosError flag to errors thrown by axios (#1419) - Ayush Gupta
Fix failing SauceLabs tests by updating configuration - Emily Morehouse

Documentation:

Add information about auth parameter to README (#2166) - xlaguna
Add DELETE to list of methods that allow data as a config option (#2169) - Daniela Borges Matos de Carvalho
Update ECOSYSTEM.md - Add Axios Endpoints (#2176) - Renan
Add r2curl in ECOSYSTEM (#2141) - 유용우 / CX
Update README.md - Add instructions for installing with yarn (#2036) - Victor Hermes
Fixing spacing for README.md (#2066) - Josh McCarty
Update README.md. - Change .then to .finally in example code (#2090) - Omar Cai
Clarify what values responseType can have in Node (#2121) - Tyler Breisacher
docs(ECOSYSTEM): add axios-api-versioning (#2020) - Weffe
It seems that responseType: 'blob' doesn't actually work in Node (when I tried using it, response.data was a string, not a Blob, since Node doesn't have Blobs), so this clarifies that this option should only be used in the browser
Add issue templates - Emily Morehouse
Update README.md. - Add Querystring library note (#1896) - Dmitriy Eroshenko
Add react-hooks-axios to Libraries section of ECOSYSTEM.md (#1925) - Cody Chan
Clarify in README that default timeout is 0 (no timeout) (#1750) - Ben Standefer

`v0.18.1`

Compare Source

Security Fix:

Destroy stream on exceeding maxContentLength (fixes #1098) (#1485) - Gadzhi Gadzhiev

`v0.18.0`: v.0.18.0

Compare Source

Adding support for UNIX Sockets when running with Node.js (#1070)
Fixing typings (#1177):
- AxiosRequestConfig.proxy: allows type false
- AxiosProxyConfig: added auth field
Adding function signature in AxiosInstance interface so AxiosInstance can be invoked (#1192, #1254)
Allowing maxContentLength to pass through to redirected calls as maxBodyLength in follow-redirects config (#1287)
Fixing configuration when using an instance - method can now be set (#1342)

0.17.1 (Nov 11, 2017)

Fixing issue with web workers (#1160)
Allowing overriding transport (#1080)
Updating TypeScript typings (#1165, #1125, #1131)

[ ] If you want to rebase/retry this PR, check this box

Nov 04 '25 12:11 mend-for-github-com[bot]

comms-router comms-router copied to clipboard

Update dependency axios to ^0.30.0 (main)

Release Notes

What's Changed

New Contributors

Release notes:

Bug Fixes

Contributors to this release

Release notes:

Bug Fixes

Contributors to this release

Release notes:

Bug Fixes

Contributors to this release

Release notes:

Release notes:

Bug Fixes

Release notes:

Bug Fixes

Backports from v1.x:

Fixes and Functionality:

Breaking changes:

QOL and DevX improvements:

Fixes and Functionality:

Internal and Tests:

Documentation:

Notes:

Fixes and Functionality:

Fixes and Functionality:

Breaking changes:

Fixes and Functionality:

Internal and Tests:

Documentation:

Breaking changes:

Breaking changes:

Fixes and Functionality:

Internal and Tests:

Documentation:

Fixes and Functionality:

Fixes and Functionality:

Fixes and Functionality:

Fixes and Functionality:

Internal and Tests:

Documentation:

Fixes and Functionality:

Internal and Tests:

Fixes and Functionality:

Internal and Tests:

Documentation:

Fixes and Functionality:

Internal:

Documentation:

Fixes and Functionality:

Documentation:

Security Fix:

v0.18.0: v.0.18.0

0.17.1 (Nov 11, 2017)

comms-router
comms-router copied to clipboard

`v0.18.0`: v.0.18.0