-
Notifications
You must be signed in to change notification settings - Fork 6
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
fix(deps): update dependency axios to ^0.28.0 [security] - autoclosed #1730
Conversation
383c8e3
to
d7e7309
Compare
d7e7309
to
80fc706
Compare
80fc706
to
04982af
Compare
04982af
to
cc1933d
Compare
cc1933d
to
6843d48
Compare
6843d48
to
75dd659
Compare
75dd659
to
6e15ca6
Compare
6e15ca6
to
b7cbeca
Compare
b7cbeca
to
1baf1dd
Compare
1baf1dd
to
945f93e
Compare
945f93e
to
ee189a3
Compare
ee189a3
to
6b33077
Compare
6b33077
to
4f83bd8
Compare
⚠ Artifact update problemRenovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is. ♻ Renovate will retry this branch, including artifacts, only when one of the following happens:
The artifact failure details are included below: File name: back/strapi/yarn.lock
|
4f83bd8
to
3dacf76
Compare
Quality Gate passedIssues Measures |
5e7a4e6
to
d5d361b
Compare
d5d361b
to
92cd94f
Compare
92cd94f
to
175c882
Compare
175c882
to
c6453bc
Compare
c6453bc
to
729b792
Compare
729b792
to
7f73a49
Compare
7f73a49
to
260d862
Compare
260d862
to
377c533
Compare
377c533
to
98592df
Compare
Quality Gate passedIssues Measures |
This PR contains the following updates:
^0.21.4
->^0.28.0
GitHub Vulnerability Alerts
CVE-2023-45857
An issue discovered in Axios 0.8.1 through 1.5.1 inadvertently reveals the confidential XSRF-TOKEN stored in cookies by including it in the HTTP header X-XSRF-TOKEN for every request made to any host allowing attackers to view sensitive information.
Release Notes
axios/axios (axios)
v0.28.0
Compare Source
Release notes:
Bug Fixes
withXSRFToken
option to v0.x (#6091)Backports from v1.x:
axios.formToJSON
method (#4735)url-encoded-form
serializer to respect theformSerializer
config (#4721)string[]
toAxiosRequestHeaders
type (#4322)AxiosError
stack capturing; (#4718)AxiosError
status code type; (#4717)blob
to the list of protocols supported by the browser (#4678)v0.27.2
Compare Source
Fixes and Functionality:
v0.27.1
Compare Source
Fixes and Functionality:
v0.27.0
Compare Source
Breaking changes:
Content-Type
request header when passing FormData (#3785)transformRequest
andtoFormData
(#4470)QOL and DevX improvements:
Fixes and Functionality:
Internal and Tests:
Documentation:
Notes:
v0.26.1
Compare Source
Fixes and Functionality:
v0.26.0
Compare Source
Fixes and Functionality:
v0.25.0
Compare Source
Breaking changes:
Fixes and Functionality:
boolean
andnumber
types (#4144)undefined
(#3153)Internal and Tests:
Documentation:
Huge thanks to everyone who contributed to this release via code (authors listed below) or via reviews and triaging on GitHub:
v0.24.0
Compare Source
Breaking changes:
Huge thanks to everyone who contributed to this release via code (authors listed below) or via reviews and triaging on GitHub:
v0.23.0
Compare Source
Breaking changes:
Fixes and Functionality:
Internal and Tests:
Documentation:
Huge thanks to everyone who contributed to this release via code (authors listed below) or via reviews and triaging on GitHub:
v0.22.0
Compare Source
Fixes and Functionality:
Huge thanks to everyone who contributed to this release via code (authors listed below) or via reviews and triaging on GitHub:
Configuration
📅 Schedule: Branch creation - "" in timezone Europe/Paris, Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.