nhcarrigan/minori
9
0
Fork 0
generated from nhcarrigan/template
Code Issues Pull Requests 8 Actions Releases Activity

deps: update axios to 1.13.5 #4

Open
minori wants to merge 1 commits from dependencies/update-axios into main
pull from: dependencies/update-axios
merge into: nhcarrigan:main
Conversation 0 Commits 1 Files Changed 2
+6 -6
minori commented 2026-02-18 07:12:32 -08:00
Owner
Copy Link
Copy Source

Dependency Update

Updates axios from 1.13.4 to 1.13.5.

Type

dependencies

Changelog

Changelog

v1.13.5

Release 1.13.5

Highlights

  • Security: Fixed a potential Denial of Service issue involving the __proto__ key in mergeConfig. (PR #7369)
  • Bug fix: Resolved an issue where AxiosError could be missing the status field on and after v1.13.3. (PR #7368)

Changes

Security

  • Fix Denial of Service via __proto__ key in mergeConfig. (PR #7369)

Fixes

  • Fix/5657. (PR #7313)
  • Ensure status is present in AxiosError on and after v1.13.3. (PR #7368)

Features / Improvements

  • Add input validation to isAbsoluteURL. (PR #7326)
  • Refactor: bump minor package versions. (PR #7356)

Documentation

  • Clarify object-check comment. (PR #7323)
  • Fix deprecated Buffer constructor usage and README formatting. (PR #7371)

CI / Maintenance

  • Chore: fix issues with YAML. (PR #7355)
  • CI: update workflow YAMLs. (PR #7372)
  • CI: fix run condition. (PR #7373)
  • Dev deps: bump karma-sourcemap-loader from 0.3.8 to 0.4.0. (PR #7360)
  • Chore(release): prepare release 1.13.5. (PR #7379)

New Contributors

  • @sachin11063 (first contribution — PR #7323)
  • @asmitha-16 (first contribution — PR #7326)

Full Changelog: https://github.com/axios/axios/compare/v1.13.4...v1.13.5

✨ This PR was created by Minori, your friendly dependency updater! 🌸

## Dependency Update Updates **axios** from `1.13.4` to `1.13.5`. ### Type dependencies ### Changelog ## Changelog ### v1.13.5 ## Release 1.13.5 ### Highlights - **Security:** Fixed a potential **Denial of Service** issue involving the `__proto__` key in `mergeConfig`. (PR [#7369](https://github.com/axios/axios/pull/7369)) - **Bug fix:** Resolved an issue where `AxiosError` could be missing the `status` field on and after **v1.13.3**. (PR [#7368](https://github.com/axios/axios/pull/7368)) ### Changes #### Security - Fix Denial of Service via `__proto__` key in `mergeConfig`. (PR [#7369](https://github.com/axios/axios/pull/7369)) #### Fixes - Fix/5657. (PR [#7313](https://github.com/axios/axios/pull/7313)) - Ensure `status` is present in `AxiosError` on and after v1.13.3. (PR [#7368](https://github.com/axios/axios/pull/7368)) #### Features / Improvements - Add input validation to `isAbsoluteURL`. (PR [#7326](https://github.com/axios/axios/pull/7326)) - Refactor: bump minor package versions. (PR [#7356](https://github.com/axios/axios/pull/7356)) #### Documentation - Clarify object-check comment. (PR [#7323](https://github.com/axios/axios/pull/7323)) - Fix deprecated `Buffer` constructor usage and README formatting. (PR [#7371](https://github.com/axios/axios/pull/7371)) #### CI / Maintenance - Chore: fix issues with YAML. (PR [#7355](https://github.com/axios/axios/pull/7355)) - CI: update workflow YAMLs. (PR [#7372](https://github.com/axios/axios/pull/7372)) - CI: fix run condition. (PR [#7373](https://github.com/axios/axios/pull/7373)) - Dev deps: bump `karma-sourcemap-loader` from 0.3.8 to 0.4.0. (PR [#7360](https://github.com/axios/axios/pull/7360)) - Chore(release): prepare release 1.13.5. (PR [#7379](https://github.com/axios/axios/pull/7379)) ### New Contributors - @sachin11063 (first contribution — PR [#7323](https://github.com/axios/axios/pull/7323)) - @asmitha-16 (first contribution — PR [#7326](https://github.com/axios/axios/pull/7326)) **Full Changelog:** https://github.com/axios/axios/compare/v1.13.4...v1.13.5 --- ✨ This PR was created by Minori, your friendly dependency updater! 🌸
minori added 1 commit 2026-02-18 07:12:33 -08:00
deps: update axios to 1.13.5
Node.js CI / CI (pull_request) Failing after 13s
Details
Security Scan and Upload / Security & DefectDojo Upload (pull_request) Successful in 1m7s
Details
2e287e4244
Some checks are pending
Node.js CI / CI (pull_request) Failing after 13s
Details
Security Scan and Upload / Security & DefectDojo Upload (pull_request) Successful in 1m7s
Details
This pull request doesn't have enough required approvals yet. 0 of 1 approvals granted from users or teams on the allowlist.
This branch is out-of-date with the base branch
You are not authorized to merge this pull request.
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin dependencies/update-axios:dependencies/update-axios
git checkout dependencies/update-axios
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
Clear labels
aspect
code
Concerns the software code in the repository
aspect
dx
Concerns developers' experience with the codebase
aspect
interface
Concerns end-users' experience with the software
aspect
text
Concerns the documentation material in the repository
contribute
good first issue
A great opportunity for a team member to learn a new codebase
contribute
help wanted
Open for anyone on our team to grab.
contribute
staff only
Restricted to our executive leadership.
goal
addition
Addition of new feature
goal
fix
Bug fix
goal
improvement
Improvement to an existing feature
points
1
Very simple issue requiring minimal effort and complexity.
points
13
Extremely complex issue representing major undertakings. Should be broken down into smaller pieces.
points
2
Simple issue that requires a bit more thought or investigation.
points
3
Moderate complexity issue requiring more substantial work.
points
5
Complex issue requiring significant effort and expertise.
points
8
Very complex issue requiring extensive work and deep expertise.
priority
critical
1
Must be fixed ASAP
priority
high
2
Stalls work on the project or its dependents
priority
low
4
Low priority and doesn't need to be rushed
priority
medium
3
Not blocking but should be fixed soon
priority
none
5
No priority, should only be performed when a developer is available
status
awaiting triage
Has not been triaged & therefore, not ready for work
status
blocked
Blocked and therefore not ready for work
status
discarded
Will not be worked on
status
discontinued
Not suitable for work as repo is in maintenance
status
label work required
Needs proper labelling before it can be worked on
status
ready for dev
Ready for work
status
ticket work required
Needs more details before it can be worked on
talk
discussion
Open for discussions and feedback
talk
question
Can be resolved with an answer
time
1 day
Approximately one full day of development work.
time
1-2 weeks
One to two weeks of focused development effort.
time
2-3 days
Two to three days of development effort.
time
4-5 days
Approximately one week of development work.
time
<1 day
Less than one day of focused work. Quick fixes or simple tasks.
time
>2 weeks
More than two weeks of development work. Must be broken down into smaller pieces.
No Label
Milestone
No items
No Milestone
Assignees
Clear assignees
gurkirat hanna (Hanna Rose) hikari (Hikari) minori (Minori) naomi (Naomi Carrigan) rain teklu tim
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: nhcarrigan/minori#4
Delete Branch "dependencies/update-axios"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?