8000 Update axios overrides to 1.8.2 by vadym-khodak · Pull Request #5876 · rollup/rollup · GitHub
[go: up one dir, main page]
More Web Proxy on the site http://driver.im/
Skip to content

Update axios overrides to 1.8.2 #5876

New is 8000 sue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
merged 4 commits into from
Mar 17, 2025
Merged

Update axios overrides to 1.8.2 #5876

merged 4 commits into from
Mar 17, 2025

Conversation

vadym-khodak
Copy link
Contributor

This PR contains:

  • bugfix
  • feature
  • refactor
  • documentation
  • other (fix security vulnerability)

Are tests included?

  • yes (bugfixes and features will not be merged without tests)
  • no

Breaking Changes?

  • yes (breaking changes will not be merged unless absolutely necessary)
  • no

List any relevant issue numbers:

Description

There is a security vulnerability in axios version 1.8.1 CVE-2025-27152 which is fixed in axios version 1.8.2

@vercel Vercel
Copy link
vercel bot commented Mar 12, 2025 •
edited
Loading

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name Status Preview Comments Updated (UTC)
rollup ✅ Ready (Inspect) Visit Preview 💬 Add feedback Mar 14, 2025 0:17am

lukastaegert
lukastaegert reviewed Mar 13, 2025
View reviewed changes
Copy link
Member
@lukastaegert lukastaegert left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks! Can you please run npm install to update the lock file?

@vadym-khodak
Copy link
Contributor Author

Thanks! Can you please run npm install to update the lock file?

It looks like these changes are unnecessary because someone has already updated package-lock.json file.
There will be the newest axios version 1.8.3 in the next release of rollup. that will fix the security vulnerability.

@lukastaegert lukastaegert enabled auto-merge March 17, 2025 05:59
@codecov Codecov
Copy link
codecov bot commented Mar 17, 2025 •
edited
Loading

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 98.54%. Comparing base (7710d69) to head (f00a621).
Report is 4 commits behind head on master.

Additional details and impacted files 
@@           Coverage Diff           @@
##           master    #5876   +/-   ##
=======================================
  Coverage   98.54%   98.54%           
=======================================
  Files         269      269           
  Lines        8550     8550           
  Branches     1467     1467           
=======================================
  Hits         8426     8426           
  Misses         92       92           
  Partials       32       32

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@lukastaegert lukastaegert added this pull request to the merge queue Mar 17, 2025
Merged via the queue into rollup:master with commit f687af5 Mar 17, 2025
40 checks passed
@github-actions GitHub Actions
Copy link

This PR has been released as part of rollup@4.36.0. You can test it via npm install rollup.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@lukastaegert lukastaegert lukastaegert approved these changes

Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@vadym-khodak @lukastaegert
0