[PR #569] [MERGED] chore(deps-dev): bump axios from 0.28.1 to 0.29.0 in /web #579

New issue

Closed

opened 2026-03-03 16:39:05 +03:00 by kerem · 0 comments

kerem commented

2026-03-03 16:39:05 +03:00

Owner

📋 Pull Request Information

Original PR: https://github.com/NdoleStudio/httpsms/pull/569
Author: @dependabot[bot]
Created: 12/1/2024
Status: ✅ Merged
Merged: 12/1/2024
Merged by: @AchoArnold

Base: main ← Head: dependabot/npm_and_yarn/web/axios-0.29.0

📝 Commits (1)

86c4543 chore(deps-dev): bump axios from 0.28.1 to 0.29.0 in /web

📊 Changes

2 files changed (+6 additions, -6 deletions)

View changed files

📝 web/package.json (+1 -1)
📝 web/pnpm-lock.yaml (+5 -5)

📄 Description

Bumps axios from 0.28.1 to 0.29.0.

Release notes

Sourced from axios's releases.

v0.29.0

Release notes:

Bug Fixes

fix(backport): backport security fixes in commits #6167 and #6163 to v0.x by @Sean-Powell in axios/axios#6402

fix: omit nulls in params by @Willshaw in axios/axios#6394

fix(backport): fix paramsSerializer function validation by @solonzhu in axios/axios#6361

fix: Regular Expression Denial of Service (ReDoS) by @qiongshusheng in axios/axios#6708

Contributors to this release

@Sean-Powell made their first contribution in axios/axios#6402

@Willshaw made their first contribution in axios/axios#6394

@solonzhu made their first contribution in axios/axios#6361

@qiongshusheng made their first contribution in axios/axios#6708

Changelog

Sourced from axios's changelog.

0.29.0 (2024-11-21)

Release notes:

Bug Fixes

fix(backport): backport security fixes in commits #6167 and #6163 (#6402)

fix: omit nulls in params (#6394)

fix(backport): fix paramsSerializer function validation (#6361)

fix: regular expression denial of service (ReDoS) (#6708)

Commits

7750b8c chore(release): prep release v0.29.0
4840cb2 fix: regular expression denial of service issues (#6708)
2e36cdb fix(backport): fix paramsSerializer function validation (#6361)
3936f44 Fix: omit nulls in params (#6394)
146848f fix: backported commit #6167 and #6163 (#6402)
See full diff in compare view

Most Recent Ignore Conditions Applied to This Pull Request

Dependency Name	Ignore Conditions
axios	[>= 1.a, < 2]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/NdoleStudio/httpsms/pull/569 **Author:** [@dependabot[bot]](https://github.com/apps/dependabot) **Created:** 12/1/2024 **Status:** ✅ Merged **Merged:** 12/1/2024 **Merged by:** [@AchoArnold](https://github.com/AchoArnold) **Base:** `main` ← **Head:** `dependabot/npm_and_yarn/web/axios-0.29.0` --- ### 📝 Commits (1) - [`86c4543`](https://github.com/NdoleStudio/httpsms/commit/86c454377e6089c11d680a9009b2f67318c0eb8b) chore(deps-dev): bump axios from 0.28.1 to 0.29.0 in /web ### 📊 Changes **2 files changed** (+6 additions, -6 deletions) <details> <summary>View changed files</summary> 📝 `web/package.json` (+1 -1) 📝 `web/pnpm-lock.yaml` (+5 -5) </details> ### 📄 Description Bumps [axios](https://github.com/axios/axios) from 0.28.1 to 0.29.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/axios/axios/releases">axios's releases</a>.</em></p> <blockquote> <h2>v0.29.0</h2> <h2>Release notes:</h2> <h3>Bug Fixes</h3> <ul> <li>fix(backport): backport security fixes in commits <a href="https://redirect.github.com/axios/axios/issues/6167">#6167</a> and <a href="https://redirect.github.com/axios/axios/issues/6163">#6163</a> to v0.x by <a href="https://github.com/Sean-Powell"><code>@Sean-Powell</code></a> in <a href="https://redirect.github.com/axios/axios/pull/6402">axios/axios#6402</a></li> <li>fix: omit nulls in params by <a href="https://github.com/Willshaw"><code>@Willshaw</code></a> in <a href="https://redirect.github.com/axios/axios/pull/6394">axios/axios#6394</a></li> <li>fix(backport): fix paramsSerializer function validation by <a href="https://github.com/solonzhu"><code>@solonzhu</code></a> in <a href="https://redirect.github.com/axios/axios/pull/6361">axios/axios#6361</a></li> <li>fix: Regular Expression Denial of Service (ReDoS) by <a href="https://github.com/qiongshusheng"><code>@qiongshusheng</code></a> in <a href="https://redirect.github.com/axios/axios/pull/6708">axios/axios#6708</a></li> </ul> <h3>Contributors to this release</h3> <ul> <li><a href="https://github.com/Sean-Powell"><code>@Sean-Powell</code></a> made their first contribution in <a href="https://redirect.github.com/axios/axios/pull/6402">axios/axios#6402</a></li> <li><a href="https://github.com/Willshaw"><code>@Willshaw</code></a> made their first contribution in <a href="https://redirect.github.com/axios/axios/pull/6394">axios/axios#6394</a></li> <li><a href="https://github.com/solonzhu"><code>@solonzhu</code></a> made their first contribution in <a href="https://redirect.github.com/axios/axios/pull/6361">axios/axios#6361</a></li> <li><a href="https://github.com/qiongshusheng"><code>@qiongshusheng</code></a> made their first contribution in <a href="https://redirect.github.com/axios/axios/pull/6708">axios/axios#6708</a></li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/axios/axios/blob/v0.29.0/CHANGELOG.md">axios's changelog</a>.</em></p> <blockquote> <h2><a href="https://github.com/axios/axios/compare/v0.28.1...v0.29.0">0.29.0</a> (2024-11-21)</h2> <h2>Release notes:</h2> <h3>Bug Fixes</h3> <ul> <li>fix(backport): backport security fixes in commits <a href="https://redirect.github.com/axios/axios/issues/6167">#6167</a> and <a href="https://redirect.github.com/axios/axios/issues/6163">#6163</a> (<a href="https://redirect.github.com/axios/axios/issues/6402">#6402</a>)</li> <li>fix: omit nulls in params (<a href="https://redirect.github.com/axios/axios/issues/6394">#6394</a>)</li> <li>fix(backport): fix paramsSerializer function validation (<a href="https://redirect.github.com/axios/axios/issues/6361">#6361</a>)</li> <li>fix: regular expression denial of service (ReDoS) (<a href="https://redirect.github.com/axios/axios/issues/6708">#6708</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/axios/axios/commit/7750b8c30b43a28737b496588e818d1f4e7b6abc"><code>7750b8c</code></a> chore(release): prep release v0.29.0</li> <li><a href="https://github.com/axios/axios/commit/4840cb2bd09b62aaa8b7cc9d6ad5a123f666972b"><code>4840cb2</code></a> fix: regular expression denial of service issues (<a href="https://redirect.github.com/axios/axios/issues/6708">#6708</a>)</li> <li><a href="https://github.com/axios/axios/commit/2e36cdb67f3be2ef3a2aedc42926afc0ae1256d9"><code>2e36cdb</code></a> fix(backport): fix paramsSerializer function validation (<a href="https://redirect.github.com/axios/axios/issues/6361">#6361</a>)</li> <li><a href="https://github.com/axios/axios/commit/3936f44b1af5e71ade3f24e3e5efd05c15da6a3e"><code>3936f44</code></a> Fix: omit nulls in params (<a href="https://redirect.github.com/axios/axios/issues/6394">#6394</a>)</li> <li><a href="https://github.com/axios/axios/commit/146848f3e4a271678daf7afc5587e65866bb9ac7"><code>146848f</code></a> fix: backported commit <a href="https://redirect.github.com/axios/axios/issues/6167">#6167</a> and <a href="https://redirect.github.com/axios/axios/issues/6163">#6163</a> (<a href="https://redirect.github.com/axios/axios/issues/6402">#6402</a>)</li> <li>See full diff in <a href="https://github.com/axios/axios/compare/v0.28.1...v0.29.0">compare view</a></li> </ul> </details> <br /> <details> <summary>Most Recent Ignore Conditions Applied to This Pull Request</summary> | Dependency Name | Ignore Conditions | | --- | --- | | axios | [>= 1.a, < 2] | </details> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=axios&package-manager=npm_and_yarn&previous-version=0.28.1&new-version=0.29.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>