package dependencies

[xta]

I'm using "@nuxtjs/axios": "^5.13.6".

In package.json, I see these:

  "dependencies": {
    "@nuxtjs/proxy": "^2.1.0",
    "axios": "^0.23.0",
    "axios-retry": "^3.2.3",
    "consola": "^2.15.3",
    "defu": "^5.0.0"
  },

I've uninstalled & reinstalled @nuxtjs/axios. I still have outdated dependencies.

// package.json

"dependencies": {
    "@nuxtjs/axios": "^5.13.6",
    ...

// package-lock.json

"@nuxtjs/axios": {
      "version": "5.13.6",
      "resolved": "https://registry.npmjs.org/@nuxtjs/axios/-/axios-5.13.6.tgz",
      "integrity": "sha512-XS+pOE0xsDODs1zAIbo95A0LKlilvJi8YW0NoXYuq3/jjxGgWDxizZ6Yx0AIIjZOoGsXJOPc0/BcnSEUQ2mFBA==",
      "requires": {
        "@nuxtjs/proxy": "^2.1.0",
        "axios": "^0.21.1",
        "axios-retry": "^3.1.9",
        "consola": "^2.15.3",
        "defu": "^5.0.0"
      }
    },

I don't want to edit package-lock.json directly. Why is this happening?

Note: I want to use the updated dependencies since "axios": "^0.21.1" has a security notice.

[xta]

I looked at the package.json file in https://registry.npmjs.org/@nuxtjs/axios/-/axios-5.13.6.tgz

That file has old/different dependencies:

"dependencies": {
    "@nuxtjs/proxy": "^2.1.0",
    "axios": "^0.21.1",
    "axios-retry": "^3.1.9",
    "consola": "^2.15.3",
    "defu": "^5.0.0"
  },

Current package.json has

  "dependencies": {
    "@nuxtjs/proxy": "^2.1.0",
    "axios": "^0.23.0",
    "axios-retry": "^3.2.3",
    "consola": "^2.15.3",
    "defu": "^5.0.0"
  },

Was release 5.13.6 built incorrectly?

[mauriciosfriso]

The package.json file was modified after the last build, I think a new build is needed.

You don't need to modify the yarn.lock file directly. I modified the package.json file putting the next and yarn.lock updated automatically

"resolutions": {
    "axios": "^0.23.0",
    "axios-retry": "^3.2.3"
  }

[nmackey]

@pi0 Any chance we could get a new release with the updated dependencies?