[Bug]: openai-node outdated

[stephane-martin]

Opencommit Version

1.0.2

Node Version

18.17.1

NPM Version

9.6.7

What OS are you seeing the problem on?

Other Linux Distro

What happened?

• opencommit requires openai "^3.2.1".
• which requires axios "^0.26.0".
• axios < 1.6.0 is subject to CVE-2023-45857.
• (which makes dependabot protest in projects including opencommit)

Expected Behavior

up to date openai-node dependency

Current Behavior

dependabot reports outdated axios

Possible Solution

update openai-node to v4.17.x

Steps to Reproduce

N/A

Relevant log output

axios >= 0.8.1, < 1.6.0
An issue discovered in Axios 0.8.1 through 1.5.1 inadvertently reveals the confidential XSRF-TOKEN stored in cookies by including it in the HTTP header X-XSRF-TOKEN for every request made to any host allowing attackers to view sensitive information.

[github-actions[bot]]

Stale issue message

[di-sukharev]

reopening, will take a look at this

[di-sukharev]

@stephane-martin please update to the latest npm i -g opencommit@latest version and close the issue if its not bothering anymore