<#1146 [Snyk] Security upgrade axios from 1.6.1 to...
# pact-js-development
g
#1146 [Snyk] Security upgrade axios from 1.6.1 to 1.6.4 Pull request opened by mefellows This PR was automatically created by Snyk using the credentials of a real user. Snyk has created this PR to fix one or more vulnerable packages in the
npm
dependencies of this project.
Changes included in this PR • Changes to the following files to upgrade the vulnerable dependencies to a fixed version: • package.json • package-lock.json Vulnerabilities that will be fixed With an upgrade: (*) Note that the real score may have changed since the PR was raised. Commit messages Package name: axios The new version differs by 21 commits. • 8790b8e chore(release): v1.6.4 (#6173) • 0ad520d chore(ci): fix notify action; (#6172) • 3c0c11c fix(security): fixed formToJSON prototype pollution vulnerability; (#6167) • 75af1cd fix(security): fixed security vulnerability in follow-redirects (#6163) • 90864b3 docs: update logos • 1542719 docs: updated headline sponsors • b15b918 chore(release): v1.6.3 (#6151) • b76cce0 chore(ci): added branches filter for notify action; (#6084) • 5e7ad38 fix: Regular Expression Denial of Service (ReDoS) (#6132) • 8befb86 docs: update alloy link (#6145) • d18f40d docs: add headline sponsors • b3be365 chore(release): v1.6.2 (#6082) • 8739acb chore(ci): removed redundant release action; (#6081) • bfa9c30 chore(docs): fix outdated grunt to npm scripts (#6073) • a2b0fb3 chore(docs): update README.md (#6048) • b12a608 chore(ci): removed paths-ignore filter; (#6080) • 0c9d886 chore(ci): reworked ignoring files logic; (#6079) • 30873ee chore(ci): add paths-ignore config to testing action; (#6078) • cff9967 feat(withXSRFToken): added withXSRFToken option as a workaround to achieve the old
withCredentials
behavior; (#6046) • 7009715 chore(ci): fixed release notification action; (#6064) • 7144f10 chore(ci): fixed release notification action; (#6063) See the full diff Check the changes in this PR to ensure they won't cause issues with your project. * * * Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs. For more information: https://camo.githubusercontent.com/59d3330fc6d94f66560b16ab42cd809efb4fa2d8bb863df21c1e9d727727982a/68747470733a2f2f6170692e7365676d656e742e696f2f76312f706978656c2f747261636b3f646174613d65794a33636d6c305a55746c65534936496e4a79576d785a634564485932527954485a7362306c596430645563566734576b4652546e4e434f5545774969776959573576626e6c746233567a535751694f6949305957517a5a6d4d314e69303459324e6b4c54526b597a5174596d51354d43316c4f5749355a4449315a545530593249694c434a6c646d567564434936496c425349485a705a58646c5a434973496e42796233426c636e52705a584d694f6e736963484a4a5a434936496a52685a444e6d597a55324c54686a593251744e47526a4e4331695a446b774c575535596a6c6b4d6a566c4e54526a59694a3966513d3d 🧐 View latest project report 🛠️ Adjust project settings 📚 Read more about Snyk's upgrade and patch logic * * * Learn how to fix vulnerabilities with free interactive lessons: 🦉 Prototype Pollution pact-foundation/pact-js GitHub Actions: build-and-test (20.x, macos-latest) GitHub Actions: build-and-test (18.x, macos-latest) GitHub Actions: build-and-test (16.x, macos-latest) Cirrus CI: Task Summary Cirrus CI: linux_arm arm_containernode16-slim Cirrus CI: Task Summary Cirrus CI: linux_arm arm_containernode18-slim Cirrus CI: Task Summary Cirrus CI: linux_arm arm_containernode20.2-slim ✅ 16 other checks have passed 16/25 successful checks