build(deps-dev): bump axios from 1.13.6 to 1.17.0 - #458
Conversation
Bumps [axios](https://github.com/axios/axios) from 1.13.6 to 1.17.0. - [Release notes](https://github.com/axios/axios/releases) - [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md) - [Commits](axios/axios@v1.13.6...v1.17.0) --- updated-dependencies: - dependency-name: axios dependency-version: 1.17.0 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
|
@dependabot rebase |
![github-actions[bot]](https://avatars.githubusercontent.com/in/15368?s=60&v=4){kind=small}
| "@types/estree": "^1.0.0" | ||
| } | ||
| }, | ||
| "node_modules/@vitest/browser-playwright/node_modules/vite": { |
There was a problem hiding this comment.
What: The deletion of numerous dependencies for @vitest/*, such as vite and yaml, appears to be a significant change that could impact project functionality.
Why: Removing these dependencies could lead to broken functionality in the tests or build processes. It's essential to ensure that these modules are no longer needed or that there is a valid alternative in the project.
How: Before merging this change, confirm that the project does not rely on these modules. If they are necessary, consider not deleting them or finding alternatives that accomplish the same tasks.
| @@ -7257,104 +7257,6 @@ | |||
| "@types/estree": "^1.0.0" | |||
There was a problem hiding this comment.
What: The addition of 'https-proxy-agent' should be checked against the project's existing protocols to avoid conflicts.
Why: If the project uses other proxy handling mechanisms, adding a new one might create unexpected behavior or conflict leading to routing issues.
How: Review the project's implementation for handling HTTP and HTTPS requests to determine if the new 'https-proxy-agent' library is indeed required and does not conflict with existing configurations.
| @@ -9070,15 +8887,16 @@ | |||
| } | |||
There was a problem hiding this comment.
What: Update of axios from 1.13.6 to 1.17.0 should be verified to ensure compatibility with the current codebase.
Why: Upgrading dependencies can sometimes introduce breaking changes, especially in major libraries like axios that handle critical features like HTTP requests.
How: Test the project extensively after this change, focusing particularly on areas of the code that utilize axios for making requests to ensure functionality remains intact.
| @@ -7392,104 +7294,6 @@ | |||
| "@types/estree": "^1.0.0" | |||
There was a problem hiding this comment.
What: The use of 'follow-redirects' has been updated to version 1.16.0; verify if the new version maintains backward compatibility.
Why: Updating such libraries without verifying compatibility can lead to unforeseen issues in redirection logic within HTTP requests.
How: Check the changelog of 'follow-redirects' for any breaking changes and run comprehensive tests on the sections of the code involving redirects.
|
Dependabot attempted to update this pull request, but because the branch |
|
Oh no! Something went wrong on our end. Please try again later. If the problem persists, please contact GitHub support for assistance 🙇 |
|
Superseded by #486. |
1 participant
Bumps axios from 1.13.6 to 1.17.0.
Release notes
Sourced from axios's releases.
... (truncated)
Changelog
Sourced from axios's changelog.
... (truncated)
Commits
4306df2chore: add fun 88 sponsorship931cc8fchore(release): prepare release 1.17.0 (#10983)38ba1b3fix(fetch): support basic auth from URL (#10896)32e2515fix: replace ternary side effect in script (#10931)030e722chore(deps): bump axios from 1.15.2 to 1.16.1 in /docs (#10960)ec63164chore: remove openspec (#10958)3dec28ffix(http): preserve TLS options for proxy tunnels (#10957)a2390a5fix: correct isCancel type to narrow to CanceledError<T> (#10952)fa01b92chore(deps-dev): bump tmp from 0.2.5 to 0.2.7 in /docs (#10954)2d2314afix: AxiosHeaderstoJSON()return types (#10956)Install script changes
This version modifies
preparescript that runs during installation. Review the package contents before updating.You can trigger a rebase of this PR by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)You can disable automated security fix PRs for this repo from the Security Alerts page.