Skip to content

feat(http): add zstd decompression support#10920

Merged
jasonsaayman merged 2 commits into
v1.xfrom
fix/move-use-zstd-flag-to-transitional
May 20, 2026
Merged

feat(http): add zstd decompression support#10920
jasonsaayman merged 2 commits into
v1.xfrom
fix/move-use-zstd-flag-to-transitional

Conversation

@jasonsaayman

@jasonsaayman jasonsaayman commented May 20, 2026

Copy link
Copy Markdown
Member

Summary

Adds Node HTTP adapter support for zstd-compressed responses while keeping zstd out of the default Accept-Encoding header unless explicitly enabled through transitional config.

Linked issue

Changes

  • Add capability-checked zstd decompression in the Node HTTP adapter.
  • Add transitional.advertiseZstdAcceptEncoding to opt into advertising zstd support.
  • Update TypeScript declarations, validation, unit coverage, and pre-release notes for the new transitional option.
  • Add OpenSpec agent workflow files and repo guidance for future spec-driven changes.

Checklist

  • Tests added or updated (or N/A with reason)
  • Docs / types updated if public API changed (index.d.ts and index.d.cts)
  • No breaking changes (or called out explicitly above)

Summary by cubic

Adds zstd (Zstandard) decompression to the Node HTTP adapter and gates zstd advertising behind a new transitional flag. Defaults unchanged; we only include zstd in Accept-Encoding when transitional.advertiseZstdAcceptEncoding is true.

Description

  • Summary of changes

    • Add capability-checked zstd decompression in the Node HTTP adapter.
    • Introduce transitional.advertiseZstdAcceptEncoding; remove the old advertiseZstd request option.
    • Validate the new flag in Axios; default to false in defaults/transitional.js.
    • Use own-property check on transitional before reading the flag for security hardening.
    • Update types (index.d.ts/index.d.cts), merge rules, and pre-release notes.
  • Reasoning

    • Keep behavior opt-in and predictable; ensure secure handling of transitional flags.
  • Additional context

    • Applies to axios Node adapter; browsers are unaffected.

Docs

  • Update /docs/ and README.md to document transitional.advertiseZstdAcceptEncoding, Node-only support, and decompression-bomb guidance.
  • Update advanced request config examples to use the new transitional flag.

Testing

  • Updated unit test to enable transitional.advertiseZstdAcceptEncoding and assert zstd is included in Accept-Encoding when supported.
  • Optional: add an integration test to verify end-to-end zstd decompression.

Semantic version impact

  • Minor: new opt-in feature with no default behavior changes; the removed advertiseZstd option was not part of a released API.

Written for commit ecc59c7. Summary will update on new commits. Review in cubic

@cubic-dev-ai cubic-dev-ai Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

1 issue found across 8 files

Confidence score: 3/5

  • There is a concrete regression risk in lib/adapters/http.js: switching advertiseZstdAcceptEncoding to direct property access can read inherited prototype values, which may incorrectly advertise zstd on requests.
  • Because this is a medium-severity (6/10) issue with high confidence (9/10) and user-visible request behavior impact, the merge risk is moderate rather than minimal.
  • Pay close attention to lib/adapters/http.js - restore an own-property check for advertiseZstdAcceptEncoding to prevent prototype-derived opt-in behavior.

Reply with feedback, questions, or to request a fix.

Re-trigger cubic

Comment thread lib/adapters/http.js
Co-authored-by: cubic-dev-ai[bot] <191113872+cubic-dev-ai[bot]@users.noreply.github.com>
@jasonsaayman
jasonsaayman merged commit 1337845 into v1.x May 20, 2026
43 of 44 checks passed
@jasonsaayman
jasonsaayman deleted the fix/move-use-zstd-flag-to-transitional branch May 20, 2026 16:30
jasonsaayman added a commit that referenced this pull request May 28, 2026
* fix(http): move zstd advertising flag to transitional

* sec: add has own prop to the transitional

Co-authored-by: cubic-dev-ai[bot] <191113872+cubic-dev-ai[bot]@users.noreply.github.com>

---------

Co-authored-by: cubic-dev-ai[bot] <191113872+cubic-dev-ai[bot]@users.noreply.github.com>
radovanjorgic pushed a commit to devrev/adaas-sdk that referenced this pull request Jul 2, 2026
https://app.devrev.ai/devrev/issue/ASCPT-41


![snyk-top-banner](https://res.cloudinary.com/snyk/image/upload/r-d/scm-platform/snyk-pull-requests/pr-banner-default.svg)


<h3>Snyk has created this PR to upgrade axios from 1.16.1 to
1.17.0.</h3>

:information_source: Keep your dependencies up-to-date. This makes it
easier to fix existing vulnerabilities and to more quickly identify and
fix newly disclosed vulnerabilities when they affect your project.

<hr/>


- The recommended version is **1 version** ahead of your current
version.

- The recommended version was released **22 days ago**.



<details>
<summary><b>Release notes</b></summary>
<br/>
  <details>
    <summary>Package name: <b>axios</b></summary>
    <ul>
      <li>
<b>1.17.0</b> - <a
href="https://redirect.github.com/axios/axios/releases/tag/v1.17.0">2026-06-03</a></br><h2>v1.17.0
— June 1, 2026</h2>
<p>This release adds Node HTTP zstd decompression, hardens config and
release workflows, and fixes authentication, header, proxy, and
type-handling regressions.</p>
<h2>🔒 Security Fixes</h2>
<ul>
<li><strong>Config Hardening:</strong> Guarded <code>socketPath</code>,
<code>params</code>, and <code>paramsSerializer</code> reads with
own-property checks to prevent inherited prototype values from affecting
request behavior, including SSRF-sensitive paths. (<strong><a
class="issue-link js-issue-link" data-error-text="Failed to load title"
data-id="4463370380" data-permission-text="Title is private"
data-url="axios/axios#10901"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10901/hovercard"
href="https://redirect.github.com/axios/axios/pull/10901">#10901</a></strong>,
<strong><a class="issue-link js-issue-link" data-error-text="Failed to
load title" data-id="4490479466" data-permission-text="Title is private"
data-url="axios/axios#10922"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10922/hovercard"
href="https://redirect.github.com/axios/axios/pull/10922">#10922</a></strong>)</li>
<li><strong>Release Publishing:</strong> Switched the publish workflow
to npm staged publishing for safer, auditable package releases with
provenance. (<strong><a class="issue-link js-issue-link"
data-error-text="Failed to load title" data-id="4496414139"
data-permission-text="Title is private"
data-url="axios/axios#10926"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10926/hovercard"
href="https://redirect.github.com/axios/axios/pull/10926">#10926</a></strong>)</li>
</ul>
<h2>🚀 New Features</h2>
<ul>
<li><strong>HTTP Compression:</strong> Added Node HTTP adapter support
for zstd response decompression, with
<code>transitional.advertiseZstdAcceptEncoding</code> controlling
whether <code>zstd</code> is advertised in <code>Accept-Encoding</code>.
(<strong><a class="issue-link js-issue-link" data-error-text="Failed to
load title" data-id="2873194565" data-permission-text="Title is private"
data-url="axios/axios#6792"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/6792/hovercard"
href="https://redirect.github.com/axios/axios/pull/6792">#6792</a></strong>,
<strong><a class="issue-link js-issue-link" data-error-text="Failed to
load title" data-id="4488098721" data-permission-text="Title is private"
data-url="axios/axios#10920"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10920/hovercard"
href="https://redirect.github.com/axios/axios/pull/10920">#10920</a></strong>)</li>
</ul>
<h2>🐛 Bug Fixes</h2>
<ul>
<li><strong>Authentication Handling:</strong> Restored Basic auth on
same-origin Node redirects while continuing to strip credentials
cross-origin, and aligned the fetch adapter with HTTP adapter behavior
for URL-embedded Basic auth. (<strong><a class="issue-link
js-issue-link" data-error-text="Failed to load title"
data-id="4497340497" data-permission-text="Title is private"
data-url="axios/axios#10929"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10929/hovercard"
href="https://redirect.github.com/axios/axios/pull/10929">#10929</a></strong>,
<strong><a class="issue-link js-issue-link" data-error-text="Failed to
load title" data-id="4452495512" data-permission-text="Title is private"
data-url="axios/axios#10896"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10896/hovercard"
href="https://redirect.github.com/axios/axios/pull/10896">#10896</a></strong>)</li>
<li><strong>Proxy TLS:</strong> Preserved user <code>httpsAgent</code>
TLS options when tunneling HTTPS requests through HTTP CONNECT proxies.
(<strong><a class="issue-link js-issue-link" data-error-text="Failed to
load title" data-id="4542876807" data-permission-text="Title is private"
data-url="axios/axios#10957"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10957/hovercard"
href="https://redirect.github.com/axios/axios/pull/10957">#10957</a></strong>)</li>
<li><strong>React Native FormData:</strong> Cleared default
<code>Content-Type</code> for React Native <code>FormData</code> so
multipart boundaries can be generated correctly. (<strong><a
class="issue-link js-issue-link" data-error-text="Failed to load title"
data-id="4460351681" data-permission-text="Title is private"
data-url="axios/axios#10898"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10898/hovercard"
href="https://redirect.github.com/axios/axios/pull/10898">#10898</a></strong>)</li>
<li><strong>Headers:</strong> Silently skipped empty or whitespace-only
header names instead of throwing, matching parsed-header behavior and
avoiding React Native response crashes. (<strong><a class="issue-link
js-issue-link" data-error-text="Failed to load title"
data-id="4414924447" data-permission-text="Title is private"
data-url="axios/axios#10875"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10875/hovercard"
href="https://redirect.github.com/axios/axios/pull/10875">#10875</a></strong>)</li>
<li><strong>Request Data Merging:</strong> Preserved enumerable symbol
keys when cloning plain request data through axios merge logic.
(<strong><a class="issue-link js-issue-link" data-error-text="Failed to
load title" data-id="4340876537" data-permission-text="Title is private"
data-url="axios/axios#10812"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10812/hovercard"
href="https://redirect.github.com/axios/axios/pull/10812">#10812</a></strong>)</li>
<li><strong>Bundler Compatibility:</strong> Converted
<code>resolveConfig</code> from an arrow default export to a named
function export to avoid webpack and Babel transform interop failures.
(<strong><a class="issue-link js-issue-link" data-error-text="Failed to
load title" data-id="4444501376" data-permission-text="Title is private"
data-url="axios/axios#10891"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10891/hovercard"
href="https://redirect.github.com/axios/axios/pull/10891">#10891</a></strong>)</li>
<li><strong>Types:</strong> Corrected <code>AxiosHeaders.toJSON()</code>
return types and updated CommonJS <code>isCancel</code> typings to
narrow to <code>CanceledError&lt;T&gt;</code>. (<strong><a
class="issue-link js-issue-link" data-error-text="Failed to load title"
data-id="4541388760" data-permission-text="Title is private"
data-url="axios/axios#10956"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10956/hovercard"
href="https://redirect.github.com/axios/axios/pull/10956">#10956</a></strong>,
<strong><a class="issue-link js-issue-link" data-error-text="Failed to
load title" data-id="4534902166" data-permission-text="Title is private"
data-url="axios/axios#10952"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10952/hovercard"
href="https://redirect.github.com/axios/axios/pull/10952">#10952</a></strong>)</li>
<li><strong>Build Tooling:</strong> Avoided emitting a null
<code>Authorization</code> header from the GitHub build helper when
<code>GITHUB_TOKEN</code> is unset. (<strong><a class="issue-link
js-issue-link" data-error-text="Failed to load title"
data-id="4497546091" data-permission-text="Title is private"
data-url="axios/axios#10931"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10931/hovercard"
href="https://redirect.github.com/axios/axios/pull/10931">#10931</a></strong>)</li>
</ul>
<h2>🔧 Maintenance &amp; Chores</h2>
<ul>
<li><strong>HTTP/2 Internals:</strong> Extracted
<code>Http2Sessions</code> into its own helper module and added direct
unit coverage for session pooling, timeout, and cleanup behavior.
(<strong><a class="issue-link js-issue-link" data-error-text="Failed to
load title" data-id="4395016914" data-permission-text="Title is private"
data-url="axios/axios#10861"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10861/hovercard"
href="https://redirect.github.com/axios/axios/pull/10861">#10861</a></strong>)</li>
<li><strong>Package Publishing:</strong> Reduced published package size
by switching to a <code>files</code> allowlist and dropping unneeded
unminified bundle source maps. (<strong><a class="issue-link
js-issue-link" data-error-text="Failed to load title"
data-id="4506840788" data-permission-text="Title is private"
data-url="axios/axios#10939"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10939/hovercard"
href="https://redirect.github.com/axios/axios/pull/10939">#10939</a></strong>)</li>
<li><strong>CI and Release Automation:</strong> Added bundle-size
reporting, moved reports to the job summary, fixed bundle-size
comparison coverage, added Node 26 to the matrix, pinned npm for staged
publishing, and prepared the 1.17.0 release. (<strong><a
class="issue-link js-issue-link" data-error-text="Failed to load title"
data-id="4471484133" data-permission-text="Title is private"
data-url="axios/axios#10907"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10907/hovercard"
href="https://redirect.github.com/axios/axios/pull/10907">#10907</a></strong>,
<strong><a class="issue-link js-issue-link" data-error-text="Failed to
load title" data-id="4477353252" data-permission-text="Title is private"
data-url="axios/axios#10911"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10911/hovercard"
href="https://redirect.github.com/axios/axios/pull/10911">#10911</a></strong>,
<strong><a class="issue-link js-issue-link" data-error-text="Failed to
load title" data-id="4479841599" data-permission-text="Title is private"
data-url="axios/axios#10916"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10916/hovercard"
href="https://redirect.github.com/axios/axios/pull/10916">#10916</a></strong>,
<strong><a class="issue-link js-issue-link" data-error-text="Failed to
load title" data-id="4496500463" data-permission-text="Title is private"
data-url="axios/axios#10927"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10927/hovercard"
href="https://redirect.github.com/axios/axios/pull/10927">#10927</a></strong>,
<strong><a class="issue-link js-issue-link" data-error-text="Failed to
load title" data-id="4506636815" data-permission-text="Title is private"
data-url="axios/axios#10935"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10935/hovercard"
href="https://redirect.github.com/axios/axios/pull/10935">#10935</a></strong>,
<strong><a class="issue-link js-issue-link" data-error-text="Failed to
load title" data-id="4564803325" data-permission-text="Title is private"
data-url="axios/axios#10983"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10983/hovercard"
href="https://redirect.github.com/axios/axios/pull/10983">#10983</a></strong>)</li>
<li><strong>Developer Workflow:</strong> Added a dev container and
iterated on OpenSpec workflow files before removing them from the
release branch. (<strong><a class="issue-link js-issue-link"
data-error-text="Failed to load title" data-id="4496362243"
data-permission-text="Title is private"
data-url="axios/axios#10925"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10925/hovercard"
href="https://redirect.github.com/axios/axios/pull/10925">#10925</a></strong>,
<strong><a class="issue-link js-issue-link" data-error-text="Failed to
load title" data-id="4479754974" data-permission-text="Title is private"
data-url="axios/axios#10914"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10914/hovercard"
href="https://redirect.github.com/axios/axios/pull/10914">#10914</a></strong>,
<strong><a class="issue-link js-issue-link" data-error-text="Failed to
load title" data-id="4542923609" data-permission-text="Title is private"
data-url="axios/axios#10958"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10958/hovercard"
href="https://redirect.github.com/axios/axios/pull/10958">#10958</a></strong>)</li>
<li><strong>Documentation and Policy:</strong> Updated disclosure,
contributor, collaboration, threat-model, advanced docs, README badges,
release notes, moderator configuration, and project metadata.
(<strong><a class="issue-link js-issue-link" data-error-text="Failed to
load title" data-id="4439857559" data-permission-text="Title is private"
data-url="axios/axios#10890"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10890/hovercard"
href="https://redirect.github.com/axios/axios/pull/10890">#10890</a></strong>,
<strong><a class="issue-link js-issue-link" data-error-text="Failed to
load title" data-id="4439812615" data-permission-text="Title is private"
data-url="axios/axios#10889"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10889/hovercard"
href="https://redirect.github.com/axios/axios/pull/10889">#10889</a></strong>,
<strong><a class="issue-link js-issue-link" data-error-text="Failed to
load title" data-id="4488493808" data-permission-text="Title is private"
data-url="axios/axios#10921"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10921/hovercard"
href="https://redirect.github.com/axios/axios/pull/10921">#10921</a></strong>,
<strong><a class="issue-link js-issue-link" data-error-text="Failed to
load title" data-id="4521919780" data-permission-text="Title is private"
data-url="axios/axios#10945"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10945/hovercard"
href="https://redirect.github.com/axios/axios/pull/10945">#10945</a></strong>,
<strong><a class="issue-link js-issue-link" data-error-text="Failed to
load title" data-id="4471392208" data-permission-text="Title is private"
data-url="axios/axios#10905"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10905/hovercard"
href="https://redirect.github.com/axios/axios/pull/10905">#10905</a></strong>,
<strong><a class="issue-link js-issue-link" data-error-text="Failed to
load title" data-id="4504485021" data-permission-text="Title is private"
data-url="axios/axios#10933"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10933/hovercard"
href="https://redirect.github.com/axios/axios/pull/10933">#10933</a></strong>,
<strong><a class="issue-link js-issue-link" data-error-text="Failed to
load title" data-id="4479794362" data-permission-text="Title is private"
data-url="axios/axios#10915"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10915/hovercard"
href="https://redirect.github.com/axios/axios/pull/10915">#10915</a></strong>,
<strong><a class="issue-link js-issue-link" data-error-text="Failed to
load title" data-id="4439585604" data-permission-text="Title is private"
data-url="axios/axios#10887"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10887/hovercard"
href="https://redirect.github.com/axios/axios/pull/10887">#10887</a></strong>,
<strong><a class="issue-link js-issue-link" data-error-text="Failed to
load title" data-id="4539242124" data-permission-text="Title is private"
data-url="axios/axios#10955"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10955/hovercard"
href="https://redirect.github.com/axios/axios/pull/10955">#10955</a></strong>)</li>
<li><strong>Dependencies:</strong> Bumped Babel tooling, Commitlint,
ESLint, Rollup, Globals, Vitest, Playwright, <code>fs-extra</code>,
<code>qs</code>, docs dependencies, and GitHub Actions dependencies
including <code>actions/dependency-review-action</code> and
<code>zizmorcore/zizmor-action</code>. (<strong><a class="issue-link
js-issue-link" data-error-text="Failed to load title"
data-id="4413298372" data-permission-text="Title is private"
data-url="axios/axios#10871"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10871/hovercard"
href="https://redirect.github.com/axios/axios/pull/10871">#10871</a></strong>,
<strong><a class="issue-link js-issue-link" data-error-text="Failed to
load title" data-id="4430775028" data-permission-text="Title is private"
data-url="axios/axios#10879"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10879/hovercard"
href="https://redirect.github.com/axios/axios/pull/10879">#10879</a></strong>,
<strong><a class="issue-link js-issue-link" data-error-text="Failed to
load title" data-id="4481451976" data-permission-text="Title is private"
data-url="axios/axios#10918"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10918/hovercard"
href="https://redirect.github.com/axios/axios/pull/10918">#10918</a></strong>,
<strong><a class="issue-link js-issue-link" data-error-text="Failed to
load title" data-id="4481452562" data-permission-text="Title is private"
data-url="axios/axios#10919"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10919/hovercard"
href="https://redirect.github.com/axios/axios/pull/10919">#10919</a></strong>,
<strong><a class="issue-link js-issue-link" data-error-text="Failed to
load title" data-id="4504986865" data-permission-text="Title is private"
data-url="axios/axios#10934"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10934/hovercard"
href="https://redirect.github.com/axios/axios/pull/10934">#10934</a></strong>,
<strong><a class="issue-link js-issue-link" data-error-text="Failed to
load title" data-id="4526297030" data-permission-text="Title is private"
data-url="axios/axios#10947"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10947/hovercard"
href="https://redirect.github.com/axios/axios/pull/10947">#10947</a></strong>,
<strong><a class="issue-link js-issue-link" data-error-text="Failed to
load title" data-id="4537480721" data-permission-text="Title is private"
data-url="axios/axios#10954"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10954/hovercard"
href="https://redirect.github.com/axios/axios/pull/10954">#10954</a></strong>,
<strong><a class="issue-link js-issue-link" data-error-text="Failed to
load title" data-id="4549771364" data-permission-text="Title is private"
data-url="axios/axios#10960"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10960/hovercard"
href="https://redirect.github.com/axios/axios/pull/10960">#10960</a></strong>)</li>
</ul>
<h2>🌟 New Contributors</h2>
<p>We are thrilled to welcome our new contributors. Thank you for
helping improve axios:</p>
<ul>
<li><strong><a class="user-mention notranslate"
data-hovercard-type="user"
data-hovercard-url="/users/BasixKOR/hovercard"
data-octo-click="hovercard-link-click"
data-octo-dimensions="link_type:self"
href="https://redirect.github.com/BasixKOR">@ BasixKOR</a></strong>
(<strong><a class="issue-link js-issue-link" data-error-text="Failed to
load title" data-id="2873194565" data-permission-text="Title is private"
data-url="axios/axios#6792"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/6792/hovercard"
href="https://redirect.github.com/axios/axios/pull/6792">#6792</a></strong>)</li>
<li><strong><a class="user-mention notranslate"
data-hovercard-type="user"
data-hovercard-url="/users/carladams1299-lab/hovercard"
data-octo-click="hovercard-link-click"
data-octo-dimensions="link_type:self"
href="https://redirect.github.com/carladams1299-lab">@
carladams1299-lab</a></strong> (<strong><a class="issue-link
js-issue-link" data-error-text="Failed to load title"
data-id="4395016914" data-permission-text="Title is private"
data-url="axios/axios#10861"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10861/hovercard"
href="https://redirect.github.com/axios/axios/pull/10861">#10861</a></strong>)</li>
<li><strong><a class="user-mention notranslate"
data-hovercard-type="user"
data-hovercard-url="/users/LaplaceYoung/hovercard"
data-octo-click="hovercard-link-click"
data-octo-dimensions="link_type:self"
href="https://redirect.github.com/LaplaceYoung">@
LaplaceYoung</a></strong> (<strong><a class="issue-link js-issue-link"
data-error-text="Failed to load title" data-id="4340876537"
data-permission-text="Title is private"
data-url="axios/axios#10812"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10812/hovercard"
href="https://redirect.github.com/axios/axios/pull/10812">#10812</a></strong>)</li>
<li><strong><a class="user-mention notranslate"
data-hovercard-type="user"
data-hovercard-url="/users/JamieMagee/hovercard"
data-octo-click="hovercard-link-click"
data-octo-dimensions="link_type:self"
href="https://redirect.github.com/JamieMagee">@ JamieMagee</a></strong>
(<strong><a class="issue-link js-issue-link" data-error-text="Failed to
load title" data-id="4506840788" data-permission-text="Title is private"
data-url="axios/axios#10939"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10939/hovercard"
href="https://redirect.github.com/axios/axios/pull/10939">#10939</a></strong>)</li>
<li><strong><a class="user-mention notranslate"
data-hovercard-type="user"
data-hovercard-url="/users/RonGamzu/hovercard"
data-octo-click="hovercard-link-click"
data-octo-dimensions="link_type:self"
href="https://redirect.github.com/RonGamzu">@ RonGamzu</a></strong>
(<strong><a class="issue-link js-issue-link" data-error-text="Failed to
load title" data-id="4471392208" data-permission-text="Title is private"
data-url="axios/axios#10905"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10905/hovercard"
href="https://redirect.github.com/axios/axios/pull/10905">#10905</a></strong>)</li>
<li><strong><a class="user-mention notranslate"
data-hovercard-type="user"
data-hovercard-url="/users/sapirbaruch/hovercard"
data-octo-click="hovercard-link-click"
data-octo-dimensions="link_type:self"
href="https://redirect.github.com/sapirbaruch">@
sapirbaruch</a></strong> (<strong><a class="issue-link js-issue-link"
data-error-text="Failed to load title" data-id="4444501376"
data-permission-text="Title is private"
data-url="axios/axios#10891"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10891/hovercard"
href="https://redirect.github.com/axios/axios/pull/10891">#10891</a></strong>)</li>
<li><strong><a class="user-mention notranslate"
data-hovercard-type="user"
data-hovercard-url="/users/nezukoagent/hovercard"
data-octo-click="hovercard-link-click"
data-octo-dimensions="link_type:self"
href="https://redirect.github.com/nezukoagent">@
nezukoagent</a></strong> (<strong><a class="issue-link js-issue-link"
data-error-text="Failed to load title" data-id="4463370380"
data-permission-text="Title is private"
data-url="axios/axios#10901"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10901/hovercard"
href="https://redirect.github.com/axios/axios/pull/10901">#10901</a></strong>)</li>
<li><strong><a class="user-mention notranslate"
data-hovercard-type="user"
data-hovercard-url="/users/devareddy05/hovercard"
data-octo-click="hovercard-link-click"
data-octo-dimensions="link_type:self"
href="https://redirect.github.com/devareddy05">@
devareddy05</a></strong> (<strong><a class="issue-link js-issue-link"
data-error-text="Failed to load title" data-id="4497340497"
data-permission-text="Title is private"
data-url="axios/axios#10929"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10929/hovercard"
href="https://redirect.github.com/axios/axios/pull/10929">#10929</a></strong>)</li>
<li><strong><a class="user-mention notranslate"
data-hovercard-type="user"
data-hovercard-url="/users/Mohammad-Faiz-Cloud-Engineer/hovercard"
data-octo-click="hovercard-link-click"
data-octo-dimensions="link_type:self"
href="https://redirect.github.com/Mohammad-Faiz-Cloud-Engineer">@
Mohammad-Faiz-Cloud-Engineer</a></strong> (<strong><a class="issue-link
js-issue-link" data-error-text="Failed to load title"
data-id="4490479466" data-permission-text="Title is private"
data-url="axios/axios#10922"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10922/hovercard"
href="https://redirect.github.com/axios/axios/pull/10922">#10922</a></strong>)</li>
<li><strong><a class="user-mention notranslate"
data-hovercard-type="user"
data-hovercard-url="/users/azandabot/hovercard"
data-octo-click="hovercard-link-click"
data-octo-dimensions="link_type:self"
href="https://redirect.github.com/azandabot">@ azandabot</a></strong>
(<strong><a class="issue-link js-issue-link" data-error-text="Failed to
load title" data-id="4497546091" data-permission-text="Title is private"
data-url="axios/axios#10931"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10931/hovercard"
href="https://redirect.github.com/axios/axios/pull/10931">#10931</a></strong>)</li>
<li><strong><a class="user-mention notranslate"
data-hovercard-type="user" data-hovercard-url="/users/niksy/hovercard"
data-octo-click="hovercard-link-click"
data-octo-dimensions="link_type:self"
href="https://redirect.github.com/niksy">@ niksy</a></strong>
(<strong><a class="issue-link js-issue-link" data-error-text="Failed to
load title" data-id="4452495512" data-permission-text="Title is private"
data-url="axios/axios#10896"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10896/hovercard"
href="https://redirect.github.com/axios/axios/pull/10896">#10896</a></strong>)</li>
</ul>
<p><a
href="https://redirect.github.com/axios/axios/compare/v1.16.1...v1.17.0">Full
Changelog</a></p>
      </li>
      <li>
<b>1.16.1</b> - <a
href="https://redirect.github.com/axios/axios/releases/tag/v1.16.1">2026-05-13</a></br><h2>v1.16.1
— May 13, 2026</h2>
<p>This release ships a defence-in-depth fix for prototype pollution in
<code>formDataToJSON</code>, hardens proxy and CI workflows, restores
Webpack 4 compatibility for the fetch adapter, and includes several
small bug fixes and maintenance improvements.</p>
<h2>🔒 Security Fixes</h2>
<ul>
<li><strong>Prototype Pollution Defence-in-Depth:</strong> Hardened
<code>formDataToJSON</code> against already-polluted
<code>Object.prototype</code> by walking own properties only, so
attacker-controlled keys inherited from a poisoned prototype cannot
propagate through deserialization. (<strong><a class="issue-link
js-issue-link" data-error-text="Failed to load title"
data-id="3959581677" data-permission-text="Title is private"
data-url="axios/axios#7413"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/7413/hovercard"
href="https://redirect.github.com/axios/axios/pull/7413">#7413</a></strong>)</li>
<li><strong>Proxy Cleartext Leak:</strong> Fixed an issue where HTTPS
request data could be transmitted in cleartext to an HTTP proxy under
certain configurations. (<strong><a class="issue-link js-issue-link"
data-error-text="Failed to load title" data-id="4392783718"
data-permission-text="Title is private"
data-url="axios/axios#10858"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10858/hovercard"
href="https://redirect.github.com/axios/axios/pull/10858">#10858</a></strong>)</li>
<li><strong>CI Cache Removal:</strong> Removed all GitHub Actions caches
as a defence-in-depth measure against cache poisoning vectors in the
build pipeline. (<strong><a class="issue-link js-issue-link"
data-error-text="Failed to load title" data-id="4431484006"
data-permission-text="Title is private"
data-url="axios/axios#10882"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10882/hovercard"
href="https://redirect.github.com/axios/axios/pull/10882">#10882</a></strong>)</li>
</ul>
<h2>🐛 Bug Fixes</h2>
<ul>
<li><strong>Data URI Parsing:</strong> Updated the
<code>fromDataURI</code> regex to match RFC 2397 more strictly, fixing
edge cases in <code>data:</code> URL handling. (<strong><a
class="issue-link js-issue-link" data-error-text="Failed to load title"
data-id="4356424237" data-permission-text="Title is private"
data-url="axios/axios#10829"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10829/hovercard"
href="https://redirect.github.com/axios/axios/pull/10829">#10829</a></strong>)</li>
<li><strong>Unicode Headers:</strong> Preserved Unicode header values
when running through request interceptors, so non-ASCII header content
is no longer corrupted before dispatch. (<strong><a class="issue-link
js-issue-link" data-error-text="Failed to load title"
data-id="4388506485" data-permission-text="Title is private"
data-url="axios/axios#10850"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10850/hovercard"
href="https://redirect.github.com/axios/axios/pull/10850">#10850</a></strong>)</li>
<li><strong>XHR Upload Progress:</strong> Guarded against malformed
<code>ProgressEvent</code> payloads emitted by some environments during
XHR upload, preventing crashes when <code>loaded</code> /
<code>total</code> are missing or invalid. (<strong><a class="issue-link
js-issue-link" data-error-text="Failed to load title"
data-id="4409815240" data-permission-text="Title is private"
data-url="axios/axios#10868"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10868/hovercard"
href="https://redirect.github.com/axios/axios/pull/10868">#10868</a></strong>)</li>
<li><strong>Webpack 4 Fetch Adapter:</strong> Fixed an "unexpected
token" error caused by syntax in the fetch adapter that Webpack 4 could
not parse, restoring compatibility for legacy bundler users. (<strong><a
class="issue-link js-issue-link" data-error-text="Failed to load title"
data-id="4400660060" data-permission-text="Title is private"
data-url="axios/axios#10864"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10864/hovercard"
href="https://redirect.github.com/axios/axios/pull/10864">#10864</a></strong>)</li>
<li><strong>Type Definitions:</strong> Made <code>parseReviver</code>
<code>context.source</code> optional in the type definitions to align
with the ES2023 specification. (<strong><a class="issue-link
js-issue-link" data-error-text="Failed to load title"
data-id="4370232960" data-permission-text="Title is private"
data-url="axios/axios#10837"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10837/hovercard"
href="https://redirect.github.com/axios/axios/pull/10837">#10837</a></strong>)</li>
<li><strong>URL Object Support Reverted:</strong> Reverted the change
that allowed passing a <code>URL</code> object as
<code>config.url</code> (originally <strong><a class="issue-link
js-issue-link" data-error-text="Failed to load title"
data-id="4403806527" data-permission-text="Title is private"
data-url="axios/axios#10866"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10866/hovercard"
href="https://redirect.github.com/axios/axios/pull/10866">#10866</a></strong>)
due to regressions; this support will be reintroduced in a later release
once the underlying issues are addressed. (<strong><a class="issue-link
js-issue-link" data-error-text="Failed to load title"
data-id="4414921751" data-permission-text="Title is private"
data-url="axios/axios#10874"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10874/hovercard"
href="https://redirect.github.com/axios/axios/pull/10874">#10874</a></strong>)</li>
</ul>
<h2>🔧 Maintenance &amp; Chores</h2>
<ul>
<li><strong>Cycle Detection Refactor:</strong> Replaced the array-based
cycle tracker in <code>toJSONObject</code> with a <code>WeakSet</code>,
improving performance and memory behaviour on large nested structures.
(<strong><a class="issue-link js-issue-link" data-error-text="Failed to
load title" data-id="4361368446" data-permission-text="Title is private"
data-url="axios/axios#10832"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10832/hovercard"
href="https://redirect.github.com/axios/axios/pull/10832">#10832</a></strong>)</li>
<li><strong>composeSignals Cleanup:</strong> Refactored
<code>composeSignals</code> to use a clearer early-return structure,
simplifying the cancellation/abort composition path. (<strong><a
class="issue-link js-issue-link" data-error-text="Failed to load title"
data-id="4380190238" data-permission-text="Title is private"
data-url="axios/axios#10844"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10844/hovercard"
href="https://redirect.github.com/axios/axios/pull/10844">#10844</a></strong>)</li>
<li><strong>AI Readiness &amp; Repo Docs:</strong> Added
<code>AGENTS.md</code> and related contributor-guide updates for both
human and AI agents, plus post-release documentation improvements.
(<strong><a class="issue-link js-issue-link" data-error-text="Failed to
load title" data-id="4369274702" data-permission-text="Title is private"
data-url="axios/axios#10835"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10835/hovercard"
href="https://redirect.github.com/axios/axios/pull/10835">#10835</a></strong>,
<strong><a class="issue-link js-issue-link" data-error-text="Failed to
load title" data-id="4378451451" data-permission-text="Title is private"
data-url="axios/axios#10841"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10841/hovercard"
href="https://redirect.github.com/axios/axios/pull/10841">#10841</a></strong>)</li>
<li><strong>Docs Improvements:</strong> Clarified the GET request
example, fixed the interceptor <code>eject</code> example to reference
the correct instance, and corrected the Buzzoid sponsor description in
the README. (<strong><a class="issue-link js-issue-link"
data-error-text="Failed to load title" data-id="4369287222"
data-permission-text="Title is private"
data-url="axios/axios#10836"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10836/hovercard"
href="https://redirect.github.com/axios/axios/pull/10836">#10836</a></strong>,
<strong><a class="issue-link js-issue-link" data-error-text="Failed to
load title" data-id="4390162698" data-permission-text="Title is private"
data-url="axios/axios#10853"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10853/hovercard"
href="https://redirect.github.com/axios/axios/pull/10853">#10853</a></strong>,
<strong><a class="issue-link js-issue-link" data-error-text="Failed to
load title" data-id="4392363280" data-permission-text="Title is private"
data-url="axios/axios#10856"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10856/hovercard"
href="https://redirect.github.com/axios/axios/pull/10856">#10856</a></strong>)</li>
<li><strong>Sponsorship Tooling:</strong> Fixed empty sponsor arrays in
the sponsor processing script, added the ability to inject additional
sponsors, updated the sponsorship link, and added a Twicsy advertisement
entry. (<strong><a class="issue-link js-issue-link"
data-error-text="Failed to load title" data-id="4378946632"
data-permission-text="Title is private"
data-url="axios/axios#10843"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10843/hovercard"
href="https://redirect.github.com/axios/axios/pull/10843">#10843</a></strong>,
<strong><a class="issue-link js-issue-link" data-error-text="Failed to
load title" data-id="4393416912" data-permission-text="Title is private"
data-url="axios/axios#10859"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10859/hovercard"
href="https://redirect.github.com/axios/axios/pull/10859">#10859</a></strong>,
<strong><a class="issue-link js-issue-link" data-error-text="Failed to
load title" data-id="4412918174" data-permission-text="Title is private"
data-url="axios/axios#10869"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10869/hovercard"
href="https://redirect.github.com/axios/axios/pull/10869">#10869</a></strong>)</li>
<li><strong>Dependencies:</strong> Bumped <code>@ commitlint/cli</code>
from 20.5.0 to 20.5.2. (<strong><a class="issue-link js-issue-link"
data-error-text="Failed to load title" data-id="4383276255"
data-permission-text="Title is private"
data-url="axios/axios#10846"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10846/hovercard"
href="https://redirect.github.com/axios/axios/pull/10846">#10846</a></strong>)</li>
</ul>
<h2>🌟 New Contributors</h2>
<p>We are thrilled to welcome our new contributors. Thank you for
helping improve axios:</p>
<ul>
<li><strong><a class="user-mention notranslate"
data-hovercard-type="user"
data-hovercard-url="/users/hpinmetaverse/hovercard"
data-octo-click="hovercard-link-click"
data-octo-dimensions="link_type:self"
href="https://redirect.github.com/hpinmetaverse">@
hpinmetaverse</a></strong> (<strong><a class="issue-link js-issue-link"
data-error-text="Failed to load title" data-id="4369287222"
data-permission-text="Title is private"
data-url="axios/axios#10836"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10836/hovercard"
href="https://redirect.github.com/axios/axios/pull/10836">#10836</a></strong>)</li>
<li><strong><a class="user-mention notranslate"
data-hovercard-type="user"
data-hovercard-url="/users/tommyhgunz14/hovercard"
data-octo-click="hovercard-link-click"
data-octo-dimensions="link_type:self"
href="https://redirect.github.com/tommyhgunz14">@
tommyhgunz14</a></strong> (<strong><a class="issue-link js-issue-link"
data-error-text="Failed to load title" data-id="3959581677"
data-permission-text="Title is private"
data-url="axios/axios#7413"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/7413/hovercard"
href="https://redirect.github.com/axios/axios/pull/7413">#7413</a></strong>)</li>
<li><strong><a class="user-mention notranslate"
data-hovercard-type="user" data-hovercard-url="/users/abhu85/hovercard"
data-octo-click="hovercard-link-click"
data-octo-dimensions="link_type:self"
href="https://redirect.github.com/abhu85">@ abhu85</a></strong>
(<strong><a class="issue-link js-issue-link" data-error-text="Failed to
load title" data-id="4356424237" data-permission-text="Title is private"
data-url="axios/axios#10829"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10829/hovercard"
href="https://redirect.github.com/axios/axios/pull/10829">#10829</a></strong>)</li>
<li><strong><a class="user-mention notranslate"
data-hovercard-type="user"
data-hovercard-url="/users/divyanshuraj1095/hovercard"
data-octo-click="hovercard-link-click"
data-octo-dimensions="link_type:self"
href="https://redirect.github.com/divyanshuraj1095">@
divyanshuraj1095</a></strong> (<strong><a class="issue-link
js-issue-link" data-error-text="Failed to load title"
data-id="4390162698" data-permission-text="Title is private"
data-url="axios/axios#10853"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10853/hovercard"
href="https://redirect.github.com/axios/axios/pull/10853">#10853</a></strong>)</li>
<li><strong><a class="user-mention notranslate"
data-hovercard-type="user"
data-hovercard-url="/users/sagodi97/hovercard"
data-octo-click="hovercard-link-click"
data-octo-dimensions="link_type:self"
href="https://redirect.github.com/sagodi97">@ sagodi97</a></strong>
(<strong><a class="issue-link js-issue-link" data-error-text="Failed to
load title" data-id="4392363280" data-permission-text="Title is private"
data-url="axios/axios#10856"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10856/hovercard"
href="https://redirect.github.com/axios/axios/pull/10856">#10856</a></strong>)</li>
<li><strong><a class="user-mention notranslate"
data-hovercard-type="user" data-hovercard-url="/users/rkdfx/hovercard"
data-octo-click="hovercard-link-click"
data-octo-dimensions="link_type:self"
href="https://redirect.github.com/rkdfx">@ rkdfx</a></strong>
(<strong><a class="issue-link js-issue-link" data-error-text="Failed to
load title" data-id="4409815240" data-permission-text="Title is private"
data-url="axios/axios#10868"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10868/hovercard"
href="https://redirect.github.com/axios/axios/pull/10868">#10868</a></strong>)</li>
<li><strong><a class="user-mention notranslate"
data-hovercard-type="user"
data-hovercard-url="/users/Liuwei1125/hovercard"
data-octo-click="hovercard-link-click"
data-octo-dimensions="link_type:self"
href="https://redirect.github.com/Liuwei1125">@ Liuwei1125</a></strong>
(<strong><a class="issue-link js-issue-link" data-error-text="Failed to
load title" data-id="4403806527" data-permission-text="Title is private"
data-url="axios/axios#10866"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10866/hovercard"
href="https://redirect.github.com/axios/axios/pull/10866">#10866</a></strong>)</li>
</ul>
<p><a
href="https://redirect.github.com/axios/axios/compare/v1.16.0...v1.16.1">Full
Changelog</a></p>
      </li>
    </ul>
from <a href="https://redirect.github.com/axios/axios/releases">axios
GitHub release notes</a>
  </details>
</details>

---

> [!IMPORTANT]
>
> - Check the changes in this PR to ensure they won't cause issues with
your project.
> - This PR was automatically created by Snyk using the credentials of a
real user.

---

**Note:** _You are seeing this because you or someone else with access
to this repository has authorized Snyk to open upgrade PRs._

**For more information:** <img
src="https://api.segment.io/v1/pixel/track?data=eyJ3cml0ZUtleSI6InJyWmxZcEdHY2RyTHZsb0lYd0dUcVg4WkFRTnNCOUEwIiwiYW5vbnltb3VzSWQiOiJiZjMyYzAwMC1iZGM2LTQyMzktYjg1Mi0wMzRhOGNhYTIzZDUiLCJldmVudCI6IlBSIHZpZXdlZCIsInByb3BlcnRpZXMiOnsicHJJZCI6ImJmMzJjMDAwLWJkYzYtNDIzOS1iODUyLTAzNGE4Y2FhMjNkNSJ9fQ=="
width="0" height="0"/>

> - 🧐 [View latest project
report](https://app.snyk.io/org/devrev/project/58ce53c3-7bbd-4cc5-bc81-52dc7ce644c2?utm_source&#x3D;github&amp;utm_medium&#x3D;referral&amp;page&#x3D;upgrade-pr)
> - 📜 [Customise PR
templates](https://docs.snyk.io/scan-using-snyk/pull-requests/snyk-fix-pull-or-merge-requests/customize-pr-templates?utm_source=&utm_content=fix-pr-template)
> - 🛠 [Adjust upgrade PR
settings](https://app.snyk.io/org/devrev/project/58ce53c3-7bbd-4cc5-bc81-52dc7ce644c2/settings/integration?utm_source&#x3D;github&amp;utm_medium&#x3D;referral&amp;page&#x3D;upgrade-pr)
> - 🔕 [Ignore this dependency or unsubscribe from future upgrade
PRs](https://app.snyk.io/org/devrev/project/58ce53c3-7bbd-4cc5-bc81-52dc7ce644c2/settings/integration?pkg&#x3D;axios&amp;utm_source&#x3D;github&amp;utm_medium&#x3D;referral&amp;page&#x3D;upgrade-pr#auto-dep-upgrades)

[//]: #
'snyk:metadata:{"breakingChangeRiskLevel":null,"FF_showPullRequestBreakingChanges":false,"FF_showPullRequestBreakingChangesWebSearch":false,"customTemplate":{"variablesUsed":[],"fieldsUsed":[]},"dependencies":[{"name":"axios","from":"1.16.1","to":"1.17.0"}],"env":"prod","hasFixes":false,"isBreakingChange":false,"isMajorUpgrade":false,"issuesToFix":[],"prId":"bf32c000-bdc6-4239-b852-034a8caa23d5","prPublicId":"bf32c000-bdc6-4239-b852-034a8caa23d5","packageManager":"npm","priorityScoreList":[],"projectPublicId":"58ce53c3-7bbd-4cc5-bc81-52dc7ce644c2","projectUrl":"https://app.snyk.io/org/devrev/project/58ce53c3-7bbd-4cc5-bc81-52dc7ce644c2?utm_source=github&utm_medium=referral&page=upgrade-pr","prType":"upgrade","templateFieldSources":{"branchName":"default","commitMessage":"default","description":"default","title":"default"},"templateVariants":[],"type":"auto","upgrade":[],"upgradeInfo":{"versionsDiff":1,"publishedDate":"2026-06-03T06:58:28.145Z"},"vulns":[]}'

Co-authored-by: snyk-bot <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant