Bump axios from 0.21.4 to 1.13.5 in /frontend by dependabot[bot] · Pull Request #2469 · doccano/doccano
Bumps axios from 0.21.4 to 1.13.5.
Release notes
Sourced from axios's releases.
v1.13.5
Release 1.13.5
Highlights
- Security: Fixed a potential Denial of Service issue involving the
__proto__key inmergeConfig. (PR #7369)- Bug fix: Resolved an issue where
AxiosErrorcould be missing thestatusfield on and after v1.13.3. (PR #7368)Changes
Security
- Fix Denial of Service via
__proto__key inmergeConfig. (PR #7369)Fixes
Features / Improvements
Documentation
- Clarify object-check comment. (PR #7323)
- Fix deprecated
Bufferconstructor usage and README formatting. (PR #7371)CI / Maintenance
- Chore: fix issues with YAML. (PR #7355)
- CI: update workflow YAMLs. (PR #7372)
- CI: fix run condition. (PR #7373)
- Dev deps: bump
karma-sourcemap-loaderfrom 0.3.8 to 0.4.0. (PR #7360)- Chore(release): prepare release 1.13.5. (PR #7379)
New Contributors
@sachin11063(first contribution — PR #7323)@asmitha-16(first contribution — PR #7326)Full Changelog: axios/axios@v1.13.4...v1.13.5
v1.13.4
Overview
The release addresses issues discovered in v1.13.3 and includes significant CI/CD improvements.
Full Changelog: v1.13.3...v1.13.4
What's New in v1.13.4
Bug Fixes
... (truncated)
Commits
29f7542chore(release): prepare release 1.13.5 (#7379)431c3a3ci: fix run condition (#7373)9ff3a78ci: update ymls (#7372)265b712docs: fix deprecated Buffer constructor and formatting issues in README (#7371)475e75afeat: add input validation to isAbsoluteURL (#7326)28c7215fix: Denial of Service via proto Key in mergeConfig (#7369)04cf019docs: clarify object check comment (#7323)696fa75fix: status is missing in AxiosError on and after v1.13.3 (#7368)569f028fix: added a option to choose between legacy and the new request/response int...44b7c9fchore(deps-dev): bump karma-sourcemap-loader (#7360)- Additional commits viewable in compare view
Maintainer changes
This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for axios since your current version.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.