Skip to content

chore(deps): bump axios from 1.15.2 to 1.16.1 in /docs#10960

Merged
jasonsaayman merged 1 commit into
v1.xfrom
dependabot/npm_and_yarn/docs/axios-1.16.1
May 30, 2026
Merged

chore(deps): bump axios from 1.15.2 to 1.16.1 in /docs#10960
jasonsaayman merged 1 commit into
v1.xfrom
dependabot/npm_and_yarn/docs/axios-1.16.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 29, 2026

Copy link
Copy Markdown
Contributor

Bumps axios from 1.15.2 to 1.16.1.

Release notes

Sourced from axios's releases.

v1.16.1 — May 13, 2026

This release ships a defence-in-depth fix for prototype pollution in formDataToJSON, hardens proxy and CI workflows, restores Webpack 4 compatibility for the fetch adapter, and includes several small bug fixes and maintenance improvements.

🔒 Security Fixes

  • Prototype Pollution Defence-in-Depth: Hardened formDataToJSON against already-polluted Object.prototype by walking own properties only, so attacker-controlled keys inherited from a poisoned prototype cannot propagate through deserialization. (#7413)
  • Proxy Cleartext Leak: Fixed an issue where HTTPS request data could be transmitted in cleartext to an HTTP proxy under certain configurations. (#10858)
  • CI Cache Removal: Removed all GitHub Actions caches as a defence-in-depth measure against cache poisoning vectors in the build pipeline. (#10882)

🐛 Bug Fixes

  • Data URI Parsing: Updated the fromDataURI regex to match RFC 2397 more strictly, fixing edge cases in data: URL handling. (#10829)
  • Unicode Headers: Preserved Unicode header values when running through request interceptors, so non-ASCII header content is no longer corrupted before dispatch. (#10850)
  • XHR Upload Progress: Guarded against malformed ProgressEvent payloads emitted by some environments during XHR upload, preventing crashes when loaded / total are missing or invalid. (#10868)
  • Webpack 4 Fetch Adapter: Fixed an "unexpected token" error caused by syntax in the fetch adapter that Webpack 4 could not parse, restoring compatibility for legacy bundler users. (#10864)
  • Type Definitions: Made parseReviver context.source optional in the type definitions to align with the ES2023 specification. (#10837)
  • URL Object Support Reverted: Reverted the change that allowed passing a URL object as config.url (originally #10866) due to regressions; this support will be reintroduced in a later release once the underlying issues are addressed. (#10874)

🔧 Maintenance & Chores

  • Cycle Detection Refactor: Replaced the array-based cycle tracker in toJSONObject with a WeakSet, improving performance and memory behaviour on large nested structures. (#10832)
  • composeSignals Cleanup: Refactored composeSignals to use a clearer early-return structure, simplifying the cancellation/abort composition path. (#10844)
  • AI Readiness & Repo Docs: Added AGENTS.md and related contributor-guide updates for both human and AI agents, plus post-release documentation improvements. (#10835, #10841)
  • Docs Improvements: Clarified the GET request example, fixed the interceptor eject example to reference the correct instance, and corrected the Buzzoid sponsor description in the README. (#10836, #10853, #10856)
  • Sponsorship Tooling: Fixed empty sponsor arrays in the sponsor processing script, added the ability to inject additional sponsors, updated the sponsorship link, and added a Twicsy advertisement entry. (#10843, #10859, #10869)
  • Dependencies: Bumped @commitlint/cli from 20.5.0 to 20.5.2. (#10846)

🌟 New Contributors

We are thrilled to welcome our new contributors. Thank you for helping improve axios:

Full Changelog

v1.16.0 — May 2, 2026

This release adds support for the QUERY HTTP method and a new ECONNREFUSED error constant, lands a substantial wave of HTTP, fetch, and XHR adapter bug fixes around redirects, aborts, headers, and timeouts, and welcomes 23 new contributors.

⚠️ Notable Changes

A handful of fixes in this release are either security-adjacent or change observable behaviour. Please review before upgrading:

... (truncated)

Changelog

Sourced from axios's changelog.

v1.16.1 — May 13, 2026

This release ships a defence-in-depth fix for prototype pollution in formDataToJSON, hardens proxy and CI workflows, restores Webpack 4 compatibility for the fetch adapter, and includes several small bug fixes and maintenance improvements.

🔒 Security Fixes

  • Prototype Pollution Defence-in-Depth: Hardened formDataToJSON against already-polluted Object.prototype by walking own properties only, so attacker-controlled keys inherited from a poisoned prototype cannot propagate through deserialization. (#7413)
  • Proxy Cleartext Leak: Fixed an issue where HTTPS request data could be transmitted in cleartext to an HTTP proxy under certain configurations. (#10858)
  • CI Cache Removal: Removed all GitHub Actions caches as a defence-in-depth measure against cache poisoning vectors in the build pipeline. (#10882)

🐛 Bug Fixes

  • Data URI Parsing: Updated the fromDataURI regex to match RFC 2397 more strictly, fixing edge cases in data: URL handling. (#10829)
  • Unicode Headers: Preserved Unicode header values when running through request interceptors, so non-ASCII header content is no longer corrupted before dispatch. (#10850)
  • XHR Upload Progress: Guarded against malformed ProgressEvent payloads emitted by some environments during XHR upload, preventing crashes when loaded / total are missing or invalid. (#10868)
  • Webpack 4 Fetch Adapter: Fixed an "unexpected token" error caused by syntax in the fetch adapter that Webpack 4 could not parse, restoring compatibility for legacy bundler users. (#10864)
  • Type Definitions: Made parseReviver context.source optional in the type definitions to align with the ES2023 specification. (#10837)
  • URL Object Support Reverted: Reverted the change that allowed passing a URL object as config.url (originally #10866) due to regressions; this support will be reintroduced in a later release once the underlying issues are addressed. (#10874)

🔧 Maintenance & Chores

  • Cycle Detection Refactor: Replaced the array-based cycle tracker in toJSONObject with a WeakSet, improving performance and memory behaviour on large nested structures. (#10832)
  • composeSignals Cleanup: Refactored composeSignals to use a clearer early-return structure, simplifying the cancellation/abort composition path. (#10844)
  • AI Readiness & Repo Docs: Added AGENTS.md and related contributor-guide updates for both human and AI agents, plus post-release documentation improvements. (#10835, #10841)
  • Docs Improvements: Clarified the GET request example, fixed the interceptor eject example to reference the correct instance, and corrected the Buzzoid sponsor description in the README. (#10836, #10853, #10856)
  • Sponsorship Tooling: Fixed empty sponsor arrays in the sponsor processing script, added the ability to inject additional sponsors, updated the sponsorship link, and added a Twicsy advertisement entry. (#10843, #10859, #10869)
  • Dependencies: Bumped @commitlint/cli from 20.5.0 to 20.5.2. (#10846)

🌟 New Contributors

We are thrilled to welcome our new contributors. Thank you for helping improve axios:

Full Changelog

v1.16.0 — May 2, 2026

This release adds support for the QUERY HTTP method and a new ECONNREFUSED error constant, lands a substantial wave of HTTP, fetch, and XHR adapter bug fixes around redirects, aborts, headers, and timeouts, and welcomes 23 new contributors.

⚠️ Notable Changes

A handful of fixes in this release are either security-adjacent or change observable behaviour. Please review before upgrading:

... (truncated)

Commits
  • 1337d6b chore(release): prepare release 1.16.1 (#10877)
  • 858a790 fix: remove all caches (#10882)
  • 34adfd9 revert: "fix: support URL object as config.url input (#10866)" (#10874)
  • 847d89b fix: support URL object as config.url input (#10866)
  • 4094886 fix(progress): guard malformed XHR upload events (#10868)
  • 44f0c5b chore: change sponsorship link and add Twicsy advertisement (#10869)
  • 64e1095 chore: update PR and issue template to use h2 (#10865)
  • 3e6b4e1 fix: error unexpected token in fetch JS compatibility issue with Webpack 4 (#...
  • c4453ba fix: add the ability to add additional sponsors to the process sponsors scrip...
  • caa00a9 fix: https data in cleartext to proxy (#10858)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

@socket-security

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatednpm/​axios@​1.15.2 ⏵ 1.16.185 -4100 +2410094100

View full report

@jasonsaayman
jasonsaayman merged commit 030e722 into v1.x May 30, 2026
25 checks passed
@jasonsaayman
jasonsaayman deleted the dependabot/npm_and_yarn/docs/axios-1.16.1 branch May 30, 2026 10:30
radovanjorgic pushed a commit to devrev/adaas-sdk that referenced this pull request Jul 2, 2026
https://app.devrev.ai/devrev/issue/ASCPT-41


![snyk-top-banner](https://res.cloudinary.com/snyk/image/upload/r-d/scm-platform/snyk-pull-requests/pr-banner-default.svg)


<h3>Snyk has created this PR to upgrade axios from 1.16.1 to
1.17.0.</h3>

:information_source: Keep your dependencies up-to-date. This makes it
easier to fix existing vulnerabilities and to more quickly identify and
fix newly disclosed vulnerabilities when they affect your project.

<hr/>


- The recommended version is **1 version** ahead of your current
version.

- The recommended version was released **22 days ago**.



<details>
<summary><b>Release notes</b></summary>
<br/>
  <details>
    <summary>Package name: <b>axios</b></summary>
    <ul>
      <li>
<b>1.17.0</b> - <a
href="https://redirect.github.com/axios/axios/releases/tag/v1.17.0">2026-06-03</a></br><h2>v1.17.0
— June 1, 2026</h2>
<p>This release adds Node HTTP zstd decompression, hardens config and
release workflows, and fixes authentication, header, proxy, and
type-handling regressions.</p>
<h2>🔒 Security Fixes</h2>
<ul>
<li><strong>Config Hardening:</strong> Guarded <code>socketPath</code>,
<code>params</code>, and <code>paramsSerializer</code> reads with
own-property checks to prevent inherited prototype values from affecting
request behavior, including SSRF-sensitive paths. (<strong><a
class="issue-link js-issue-link" data-error-text="Failed to load title"
data-id="4463370380" data-permission-text="Title is private"
data-url="axios/axios#10901"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10901/hovercard"
href="https://redirect.github.com/axios/axios/pull/10901">#10901</a></strong>,
<strong><a class="issue-link js-issue-link" data-error-text="Failed to
load title" data-id="4490479466" data-permission-text="Title is private"
data-url="axios/axios#10922"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10922/hovercard"
href="https://redirect.github.com/axios/axios/pull/10922">#10922</a></strong>)</li>
<li><strong>Release Publishing:</strong> Switched the publish workflow
to npm staged publishing for safer, auditable package releases with
provenance. (<strong><a class="issue-link js-issue-link"
data-error-text="Failed to load title" data-id="4496414139"
data-permission-text="Title is private"
data-url="axios/axios#10926"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10926/hovercard"
href="https://redirect.github.com/axios/axios/pull/10926">#10926</a></strong>)</li>
</ul>
<h2>🚀 New Features</h2>
<ul>
<li><strong>HTTP Compression:</strong> Added Node HTTP adapter support
for zstd response decompression, with
<code>transitional.advertiseZstdAcceptEncoding</code> controlling
whether <code>zstd</code> is advertised in <code>Accept-Encoding</code>.
(<strong><a class="issue-link js-issue-link" data-error-text="Failed to
load title" data-id="2873194565" data-permission-text="Title is private"
data-url="axios/axios#6792"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/6792/hovercard"
href="https://redirect.github.com/axios/axios/pull/6792">#6792</a></strong>,
<strong><a class="issue-link js-issue-link" data-error-text="Failed to
load title" data-id="4488098721" data-permission-text="Title is private"
data-url="axios/axios#10920"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10920/hovercard"
href="https://redirect.github.com/axios/axios/pull/10920">#10920</a></strong>)</li>
</ul>
<h2>🐛 Bug Fixes</h2>
<ul>
<li><strong>Authentication Handling:</strong> Restored Basic auth on
same-origin Node redirects while continuing to strip credentials
cross-origin, and aligned the fetch adapter with HTTP adapter behavior
for URL-embedded Basic auth. (<strong><a class="issue-link
js-issue-link" data-error-text="Failed to load title"
data-id="4497340497" data-permission-text="Title is private"
data-url="axios/axios#10929"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10929/hovercard"
href="https://redirect.github.com/axios/axios/pull/10929">#10929</a></strong>,
<strong><a class="issue-link js-issue-link" data-error-text="Failed to
load title" data-id="4452495512" data-permission-text="Title is private"
data-url="axios/axios#10896"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10896/hovercard"
href="https://redirect.github.com/axios/axios/pull/10896">#10896</a></strong>)</li>
<li><strong>Proxy TLS:</strong> Preserved user <code>httpsAgent</code>
TLS options when tunneling HTTPS requests through HTTP CONNECT proxies.
(<strong><a class="issue-link js-issue-link" data-error-text="Failed to
load title" data-id="4542876807" data-permission-text="Title is private"
data-url="axios/axios#10957"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10957/hovercard"
href="https://redirect.github.com/axios/axios/pull/10957">#10957</a></strong>)</li>
<li><strong>React Native FormData:</strong> Cleared default
<code>Content-Type</code> for React Native <code>FormData</code> so
multipart boundaries can be generated correctly. (<strong><a
class="issue-link js-issue-link" data-error-text="Failed to load title"
data-id="4460351681" data-permission-text="Title is private"
data-url="axios/axios#10898"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10898/hovercard"
href="https://redirect.github.com/axios/axios/pull/10898">#10898</a></strong>)</li>
<li><strong>Headers:</strong> Silently skipped empty or whitespace-only
header names instead of throwing, matching parsed-header behavior and
avoiding React Native response crashes. (<strong><a class="issue-link
js-issue-link" data-error-text="Failed to load title"
data-id="4414924447" data-permission-text="Title is private"
data-url="axios/axios#10875"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10875/hovercard"
href="https://redirect.github.com/axios/axios/pull/10875">#10875</a></strong>)</li>
<li><strong>Request Data Merging:</strong> Preserved enumerable symbol
keys when cloning plain request data through axios merge logic.
(<strong><a class="issue-link js-issue-link" data-error-text="Failed to
load title" data-id="4340876537" data-permission-text="Title is private"
data-url="axios/axios#10812"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10812/hovercard"
href="https://redirect.github.com/axios/axios/pull/10812">#10812</a></strong>)</li>
<li><strong>Bundler Compatibility:</strong> Converted
<code>resolveConfig</code> from an arrow default export to a named
function export to avoid webpack and Babel transform interop failures.
(<strong><a class="issue-link js-issue-link" data-error-text="Failed to
load title" data-id="4444501376" data-permission-text="Title is private"
data-url="axios/axios#10891"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10891/hovercard"
href="https://redirect.github.com/axios/axios/pull/10891">#10891</a></strong>)</li>
<li><strong>Types:</strong> Corrected <code>AxiosHeaders.toJSON()</code>
return types and updated CommonJS <code>isCancel</code> typings to
narrow to <code>CanceledError&lt;T&gt;</code>. (<strong><a
class="issue-link js-issue-link" data-error-text="Failed to load title"
data-id="4541388760" data-permission-text="Title is private"
data-url="axios/axios#10956"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10956/hovercard"
href="https://redirect.github.com/axios/axios/pull/10956">#10956</a></strong>,
<strong><a class="issue-link js-issue-link" data-error-text="Failed to
load title" data-id="4534902166" data-permission-text="Title is private"
data-url="axios/axios#10952"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10952/hovercard"
href="https://redirect.github.com/axios/axios/pull/10952">#10952</a></strong>)</li>
<li><strong>Build Tooling:</strong> Avoided emitting a null
<code>Authorization</code> header from the GitHub build helper when
<code>GITHUB_TOKEN</code> is unset. (<strong><a class="issue-link
js-issue-link" data-error-text="Failed to load title"
data-id="4497546091" data-permission-text="Title is private"
data-url="axios/axios#10931"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10931/hovercard"
href="https://redirect.github.com/axios/axios/pull/10931">#10931</a></strong>)</li>
</ul>
<h2>🔧 Maintenance &amp; Chores</h2>
<ul>
<li><strong>HTTP/2 Internals:</strong> Extracted
<code>Http2Sessions</code> into its own helper module and added direct
unit coverage for session pooling, timeout, and cleanup behavior.
(<strong><a class="issue-link js-issue-link" data-error-text="Failed to
load title" data-id="4395016914" data-permission-text="Title is private"
data-url="axios/axios#10861"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10861/hovercard"
href="https://redirect.github.com/axios/axios/pull/10861">#10861</a></strong>)</li>
<li><strong>Package Publishing:</strong> Reduced published package size
by switching to a <code>files</code> allowlist and dropping unneeded
unminified bundle source maps. (<strong><a class="issue-link
js-issue-link" data-error-text="Failed to load title"
data-id="4506840788" data-permission-text="Title is private"
data-url="axios/axios#10939"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10939/hovercard"
href="https://redirect.github.com/axios/axios/pull/10939">#10939</a></strong>)</li>
<li><strong>CI and Release Automation:</strong> Added bundle-size
reporting, moved reports to the job summary, fixed bundle-size
comparison coverage, added Node 26 to the matrix, pinned npm for staged
publishing, and prepared the 1.17.0 release. (<strong><a
class="issue-link js-issue-link" data-error-text="Failed to load title"
data-id="4471484133" data-permission-text="Title is private"
data-url="axios/axios#10907"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10907/hovercard"
href="https://redirect.github.com/axios/axios/pull/10907">#10907</a></strong>,
<strong><a class="issue-link js-issue-link" data-error-text="Failed to
load title" data-id="4477353252" data-permission-text="Title is private"
data-url="axios/axios#10911"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10911/hovercard"
href="https://redirect.github.com/axios/axios/pull/10911">#10911</a></strong>,
<strong><a class="issue-link js-issue-link" data-error-text="Failed to
load title" data-id="4479841599" data-permission-text="Title is private"
data-url="axios/axios#10916"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10916/hovercard"
href="https://redirect.github.com/axios/axios/pull/10916">#10916</a></strong>,
<strong><a class="issue-link js-issue-link" data-error-text="Failed to
load title" data-id="4496500463" data-permission-text="Title is private"
data-url="axios/axios#10927"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10927/hovercard"
href="https://redirect.github.com/axios/axios/pull/10927">#10927</a></strong>,
<strong><a class="issue-link js-issue-link" data-error-text="Failed to
load title" data-id="4506636815" data-permission-text="Title is private"
data-url="axios/axios#10935"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10935/hovercard"
href="https://redirect.github.com/axios/axios/pull/10935">#10935</a></strong>,
<strong><a class="issue-link js-issue-link" data-error-text="Failed to
load title" data-id="4564803325" data-permission-text="Title is private"
data-url="axios/axios#10983"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10983/hovercard"
href="https://redirect.github.com/axios/axios/pull/10983">#10983</a></strong>)</li>
<li><strong>Developer Workflow:</strong> Added a dev container and
iterated on OpenSpec workflow files before removing them from the
release branch. (<strong><a class="issue-link js-issue-link"
data-error-text="Failed to load title" data-id="4496362243"
data-permission-text="Title is private"
data-url="axios/axios#10925"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10925/hovercard"
href="https://redirect.github.com/axios/axios/pull/10925">#10925</a></strong>,
<strong><a class="issue-link js-issue-link" data-error-text="Failed to
load title" data-id="4479754974" data-permission-text="Title is private"
data-url="axios/axios#10914"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10914/hovercard"
href="https://redirect.github.com/axios/axios/pull/10914">#10914</a></strong>,
<strong><a class="issue-link js-issue-link" data-error-text="Failed to
load title" data-id="4542923609" data-permission-text="Title is private"
data-url="axios/axios#10958"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10958/hovercard"
href="https://redirect.github.com/axios/axios/pull/10958">#10958</a></strong>)</li>
<li><strong>Documentation and Policy:</strong> Updated disclosure,
contributor, collaboration, threat-model, advanced docs, README badges,
release notes, moderator configuration, and project metadata.
(<strong><a class="issue-link js-issue-link" data-error-text="Failed to
load title" data-id="4439857559" data-permission-text="Title is private"
data-url="axios/axios#10890"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10890/hovercard"
href="https://redirect.github.com/axios/axios/pull/10890">#10890</a></strong>,
<strong><a class="issue-link js-issue-link" data-error-text="Failed to
load title" data-id="4439812615" data-permission-text="Title is private"
data-url="axios/axios#10889"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10889/hovercard"
href="https://redirect.github.com/axios/axios/pull/10889">#10889</a></strong>,
<strong><a class="issue-link js-issue-link" data-error-text="Failed to
load title" data-id="4488493808" data-permission-text="Title is private"
data-url="axios/axios#10921"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10921/hovercard"
href="https://redirect.github.com/axios/axios/pull/10921">#10921</a></strong>,
<strong><a class="issue-link js-issue-link" data-error-text="Failed to
load title" data-id="4521919780" data-permission-text="Title is private"
data-url="axios/axios#10945"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10945/hovercard"
href="https://redirect.github.com/axios/axios/pull/10945">#10945</a></strong>,
<strong><a class="issue-link js-issue-link" data-error-text="Failed to
load title" data-id="4471392208" data-permission-text="Title is private"
data-url="axios/axios#10905"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10905/hovercard"
href="https://redirect.github.com/axios/axios/pull/10905">#10905</a></strong>,
<strong><a class="issue-link js-issue-link" data-error-text="Failed to
load title" data-id="4504485021" data-permission-text="Title is private"
data-url="axios/axios#10933"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10933/hovercard"
href="https://redirect.github.com/axios/axios/pull/10933">#10933</a></strong>,
<strong><a class="issue-link js-issue-link" data-error-text="Failed to
load title" data-id="4479794362" data-permission-text="Title is private"
data-url="axios/axios#10915"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10915/hovercard"
href="https://redirect.github.com/axios/axios/pull/10915">#10915</a></strong>,
<strong><a class="issue-link js-issue-link" data-error-text="Failed to
load title" data-id="4439585604" data-permission-text="Title is private"
data-url="axios/axios#10887"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10887/hovercard"
href="https://redirect.github.com/axios/axios/pull/10887">#10887</a></strong>,
<strong><a class="issue-link js-issue-link" data-error-text="Failed to
load title" data-id="4539242124" data-permission-text="Title is private"
data-url="axios/axios#10955"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10955/hovercard"
href="https://redirect.github.com/axios/axios/pull/10955">#10955</a></strong>)</li>
<li><strong>Dependencies:</strong> Bumped Babel tooling, Commitlint,
ESLint, Rollup, Globals, Vitest, Playwright, <code>fs-extra</code>,
<code>qs</code>, docs dependencies, and GitHub Actions dependencies
including <code>actions/dependency-review-action</code> and
<code>zizmorcore/zizmor-action</code>. (<strong><a class="issue-link
js-issue-link" data-error-text="Failed to load title"
data-id="4413298372" data-permission-text="Title is private"
data-url="axios/axios#10871"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10871/hovercard"
href="https://redirect.github.com/axios/axios/pull/10871">#10871</a></strong>,
<strong><a class="issue-link js-issue-link" data-error-text="Failed to
load title" data-id="4430775028" data-permission-text="Title is private"
data-url="axios/axios#10879"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10879/hovercard"
href="https://redirect.github.com/axios/axios/pull/10879">#10879</a></strong>,
<strong><a class="issue-link js-issue-link" data-error-text="Failed to
load title" data-id="4481451976" data-permission-text="Title is private"
data-url="axios/axios#10918"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10918/hovercard"
href="https://redirect.github.com/axios/axios/pull/10918">#10918</a></strong>,
<strong><a class="issue-link js-issue-link" data-error-text="Failed to
load title" data-id="4481452562" data-permission-text="Title is private"
data-url="axios/axios#10919"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10919/hovercard"
href="https://redirect.github.com/axios/axios/pull/10919">#10919</a></strong>,
<strong><a class="issue-link js-issue-link" data-error-text="Failed to
load title" data-id="4504986865" data-permission-text="Title is private"
data-url="axios/axios#10934"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10934/hovercard"
href="https://redirect.github.com/axios/axios/pull/10934">#10934</a></strong>,
<strong><a class="issue-link js-issue-link" data-error-text="Failed to
load title" data-id="4526297030" data-permission-text="Title is private"
data-url="axios/axios#10947"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10947/hovercard"
href="https://redirect.github.com/axios/axios/pull/10947">#10947</a></strong>,
<strong><a class="issue-link js-issue-link" data-error-text="Failed to
load title" data-id="4537480721" data-permission-text="Title is private"
data-url="axios/axios#10954"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10954/hovercard"
href="https://redirect.github.com/axios/axios/pull/10954">#10954</a></strong>,
<strong><a class="issue-link js-issue-link" data-error-text="Failed to
load title" data-id="4549771364" data-permission-text="Title is private"
data-url="axios/axios#10960"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10960/hovercard"
href="https://redirect.github.com/axios/axios/pull/10960">#10960</a></strong>)</li>
</ul>
<h2>🌟 New Contributors</h2>
<p>We are thrilled to welcome our new contributors. Thank you for
helping improve axios:</p>
<ul>
<li><strong><a class="user-mention notranslate"
data-hovercard-type="user"
data-hovercard-url="/users/BasixKOR/hovercard"
data-octo-click="hovercard-link-click"
data-octo-dimensions="link_type:self"
href="https://redirect.github.com/BasixKOR">@ BasixKOR</a></strong>
(<strong><a class="issue-link js-issue-link" data-error-text="Failed to
load title" data-id="2873194565" data-permission-text="Title is private"
data-url="axios/axios#6792"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/6792/hovercard"
href="https://redirect.github.com/axios/axios/pull/6792">#6792</a></strong>)</li>
<li><strong><a class="user-mention notranslate"
data-hovercard-type="user"
data-hovercard-url="/users/carladams1299-lab/hovercard"
data-octo-click="hovercard-link-click"
data-octo-dimensions="link_type:self"
href="https://redirect.github.com/carladams1299-lab">@
carladams1299-lab</a></strong> (<strong><a class="issue-link
js-issue-link" data-error-text="Failed to load title"
data-id="4395016914" data-permission-text="Title is private"
data-url="axios/axios#10861"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10861/hovercard"
href="https://redirect.github.com/axios/axios/pull/10861">#10861</a></strong>)</li>
<li><strong><a class="user-mention notranslate"
data-hovercard-type="user"
data-hovercard-url="/users/LaplaceYoung/hovercard"
data-octo-click="hovercard-link-click"
data-octo-dimensions="link_type:self"
href="https://redirect.github.com/LaplaceYoung">@
LaplaceYoung</a></strong> (<strong><a class="issue-link js-issue-link"
data-error-text="Failed to load title" data-id="4340876537"
data-permission-text="Title is private"
data-url="axios/axios#10812"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10812/hovercard"
href="https://redirect.github.com/axios/axios/pull/10812">#10812</a></strong>)</li>
<li><strong><a class="user-mention notranslate"
data-hovercard-type="user"
data-hovercard-url="/users/JamieMagee/hovercard"
data-octo-click="hovercard-link-click"
data-octo-dimensions="link_type:self"
href="https://redirect.github.com/JamieMagee">@ JamieMagee</a></strong>
(<strong><a class="issue-link js-issue-link" data-error-text="Failed to
load title" data-id="4506840788" data-permission-text="Title is private"
data-url="axios/axios#10939"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10939/hovercard"
href="https://redirect.github.com/axios/axios/pull/10939">#10939</a></strong>)</li>
<li><strong><a class="user-mention notranslate"
data-hovercard-type="user"
data-hovercard-url="/users/RonGamzu/hovercard"
data-octo-click="hovercard-link-click"
data-octo-dimensions="link_type:self"
href="https://redirect.github.com/RonGamzu">@ RonGamzu</a></strong>
(<strong><a class="issue-link js-issue-link" data-error-text="Failed to
load title" data-id="4471392208" data-permission-text="Title is private"
data-url="axios/axios#10905"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10905/hovercard"
href="https://redirect.github.com/axios/axios/pull/10905">#10905</a></strong>)</li>
<li><strong><a class="user-mention notranslate"
data-hovercard-type="user"
data-hovercard-url="/users/sapirbaruch/hovercard"
data-octo-click="hovercard-link-click"
data-octo-dimensions="link_type:self"
href="https://redirect.github.com/sapirbaruch">@
sapirbaruch</a></strong> (<strong><a class="issue-link js-issue-link"
data-error-text="Failed to load title" data-id="4444501376"
data-permission-text="Title is private"
data-url="axios/axios#10891"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10891/hovercard"
href="https://redirect.github.com/axios/axios/pull/10891">#10891</a></strong>)</li>
<li><strong><a class="user-mention notranslate"
data-hovercard-type="user"
data-hovercard-url="/users/nezukoagent/hovercard"
data-octo-click="hovercard-link-click"
data-octo-dimensions="link_type:self"
href="https://redirect.github.com/nezukoagent">@
nezukoagent</a></strong> (<strong><a class="issue-link js-issue-link"
data-error-text="Failed to load title" data-id="4463370380"
data-permission-text="Title is private"
data-url="axios/axios#10901"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10901/hovercard"
href="https://redirect.github.com/axios/axios/pull/10901">#10901</a></strong>)</li>
<li><strong><a class="user-mention notranslate"
data-hovercard-type="user"
data-hovercard-url="/users/devareddy05/hovercard"
data-octo-click="hovercard-link-click"
data-octo-dimensions="link_type:self"
href="https://redirect.github.com/devareddy05">@
devareddy05</a></strong> (<strong><a class="issue-link js-issue-link"
data-error-text="Failed to load title" data-id="4497340497"
data-permission-text="Title is private"
data-url="axios/axios#10929"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10929/hovercard"
href="https://redirect.github.com/axios/axios/pull/10929">#10929</a></strong>)</li>
<li><strong><a class="user-mention notranslate"
data-hovercard-type="user"
data-hovercard-url="/users/Mohammad-Faiz-Cloud-Engineer/hovercard"
data-octo-click="hovercard-link-click"
data-octo-dimensions="link_type:self"
href="https://redirect.github.com/Mohammad-Faiz-Cloud-Engineer">@
Mohammad-Faiz-Cloud-Engineer</a></strong> (<strong><a class="issue-link
js-issue-link" data-error-text="Failed to load title"
data-id="4490479466" data-permission-text="Title is private"
data-url="axios/axios#10922"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10922/hovercard"
href="https://redirect.github.com/axios/axios/pull/10922">#10922</a></strong>)</li>
<li><strong><a class="user-mention notranslate"
data-hovercard-type="user"
data-hovercard-url="/users/azandabot/hovercard"
data-octo-click="hovercard-link-click"
data-octo-dimensions="link_type:self"
href="https://redirect.github.com/azandabot">@ azandabot</a></strong>
(<strong><a class="issue-link js-issue-link" data-error-text="Failed to
load title" data-id="4497546091" data-permission-text="Title is private"
data-url="axios/axios#10931"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10931/hovercard"
href="https://redirect.github.com/axios/axios/pull/10931">#10931</a></strong>)</li>
<li><strong><a class="user-mention notranslate"
data-hovercard-type="user" data-hovercard-url="/users/niksy/hovercard"
data-octo-click="hovercard-link-click"
data-octo-dimensions="link_type:self"
href="https://redirect.github.com/niksy">@ niksy</a></strong>
(<strong><a class="issue-link js-issue-link" data-error-text="Failed to
load title" data-id="4452495512" data-permission-text="Title is private"
data-url="axios/axios#10896"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10896/hovercard"
href="https://redirect.github.com/axios/axios/pull/10896">#10896</a></strong>)</li>
</ul>
<p><a
href="https://redirect.github.com/axios/axios/compare/v1.16.1...v1.17.0">Full
Changelog</a></p>
      </li>
      <li>
<b>1.16.1</b> - <a
href="https://redirect.github.com/axios/axios/releases/tag/v1.16.1">2026-05-13</a></br><h2>v1.16.1
— May 13, 2026</h2>
<p>This release ships a defence-in-depth fix for prototype pollution in
<code>formDataToJSON</code>, hardens proxy and CI workflows, restores
Webpack 4 compatibility for the fetch adapter, and includes several
small bug fixes and maintenance improvements.</p>
<h2>🔒 Security Fixes</h2>
<ul>
<li><strong>Prototype Pollution Defence-in-Depth:</strong> Hardened
<code>formDataToJSON</code> against already-polluted
<code>Object.prototype</code> by walking own properties only, so
attacker-controlled keys inherited from a poisoned prototype cannot
propagate through deserialization. (<strong><a class="issue-link
js-issue-link" data-error-text="Failed to load title"
data-id="3959581677" data-permission-text="Title is private"
data-url="axios/axios#7413"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/7413/hovercard"
href="https://redirect.github.com/axios/axios/pull/7413">#7413</a></strong>)</li>
<li><strong>Proxy Cleartext Leak:</strong> Fixed an issue where HTTPS
request data could be transmitted in cleartext to an HTTP proxy under
certain configurations. (<strong><a class="issue-link js-issue-link"
data-error-text="Failed to load title" data-id="4392783718"
data-permission-text="Title is private"
data-url="axios/axios#10858"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10858/hovercard"
href="https://redirect.github.com/axios/axios/pull/10858">#10858</a></strong>)</li>
<li><strong>CI Cache Removal:</strong> Removed all GitHub Actions caches
as a defence-in-depth measure against cache poisoning vectors in the
build pipeline. (<strong><a class="issue-link js-issue-link"
data-error-text="Failed to load title" data-id="4431484006"
data-permission-text="Title is private"
data-url="axios/axios#10882"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10882/hovercard"
href="https://redirect.github.com/axios/axios/pull/10882">#10882</a></strong>)</li>
</ul>
<h2>🐛 Bug Fixes</h2>
<ul>
<li><strong>Data URI Parsing:</strong> Updated the
<code>fromDataURI</code> regex to match RFC 2397 more strictly, fixing
edge cases in <code>data:</code> URL handling. (<strong><a
class="issue-link js-issue-link" data-error-text="Failed to load title"
data-id="4356424237" data-permission-text="Title is private"
data-url="axios/axios#10829"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10829/hovercard"
href="https://redirect.github.com/axios/axios/pull/10829">#10829</a></strong>)</li>
<li><strong>Unicode Headers:</strong> Preserved Unicode header values
when running through request interceptors, so non-ASCII header content
is no longer corrupted before dispatch. (<strong><a class="issue-link
js-issue-link" data-error-text="Failed to load title"
data-id="4388506485" data-permission-text="Title is private"
data-url="axios/axios#10850"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10850/hovercard"
href="https://redirect.github.com/axios/axios/pull/10850">#10850</a></strong>)</li>
<li><strong>XHR Upload Progress:</strong> Guarded against malformed
<code>ProgressEvent</code> payloads emitted by some environments during
XHR upload, preventing crashes when <code>loaded</code> /
<code>total</code> are missing or invalid. (<strong><a class="issue-link
js-issue-link" data-error-text="Failed to load title"
data-id="4409815240" data-permission-text="Title is private"
data-url="axios/axios#10868"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10868/hovercard"
href="https://redirect.github.com/axios/axios/pull/10868">#10868</a></strong>)</li>
<li><strong>Webpack 4 Fetch Adapter:</strong> Fixed an "unexpected
token" error caused by syntax in the fetch adapter that Webpack 4 could
not parse, restoring compatibility for legacy bundler users. (<strong><a
class="issue-link js-issue-link" data-error-text="Failed to load title"
data-id="4400660060" data-permission-text="Title is private"
data-url="axios/axios#10864"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10864/hovercard"
href="https://redirect.github.com/axios/axios/pull/10864">#10864</a></strong>)</li>
<li><strong>Type Definitions:</strong> Made <code>parseReviver</code>
<code>context.source</code> optional in the type definitions to align
with the ES2023 specification. (<strong><a class="issue-link
js-issue-link" data-error-text="Failed to load title"
data-id="4370232960" data-permission-text="Title is private"
data-url="axios/axios#10837"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10837/hovercard"
href="https://redirect.github.com/axios/axios/pull/10837">#10837</a></strong>)</li>
<li><strong>URL Object Support Reverted:</strong> Reverted the change
that allowed passing a <code>URL</code> object as
<code>config.url</code> (originally <strong><a class="issue-link
js-issue-link" data-error-text="Failed to load title"
data-id="4403806527" data-permission-text="Title is private"
data-url="axios/axios#10866"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10866/hovercard"
href="https://redirect.github.com/axios/axios/pull/10866">#10866</a></strong>)
due to regressions; this support will be reintroduced in a later release
once the underlying issues are addressed. (<strong><a class="issue-link
js-issue-link" data-error-text="Failed to load title"
data-id="4414921751" data-permission-text="Title is private"
data-url="axios/axios#10874"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10874/hovercard"
href="https://redirect.github.com/axios/axios/pull/10874">#10874</a></strong>)</li>
</ul>
<h2>🔧 Maintenance &amp; Chores</h2>
<ul>
<li><strong>Cycle Detection Refactor:</strong> Replaced the array-based
cycle tracker in <code>toJSONObject</code> with a <code>WeakSet</code>,
improving performance and memory behaviour on large nested structures.
(<strong><a class="issue-link js-issue-link" data-error-text="Failed to
load title" data-id="4361368446" data-permission-text="Title is private"
data-url="axios/axios#10832"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10832/hovercard"
href="https://redirect.github.com/axios/axios/pull/10832">#10832</a></strong>)</li>
<li><strong>composeSignals Cleanup:</strong> Refactored
<code>composeSignals</code> to use a clearer early-return structure,
simplifying the cancellation/abort composition path. (<strong><a
class="issue-link js-issue-link" data-error-text="Failed to load title"
data-id="4380190238" data-permission-text="Title is private"
data-url="axios/axios#10844"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10844/hovercard"
href="https://redirect.github.com/axios/axios/pull/10844">#10844</a></strong>)</li>
<li><strong>AI Readiness &amp; Repo Docs:</strong> Added
<code>AGENTS.md</code> and related contributor-guide updates for both
human and AI agents, plus post-release documentation improvements.
(<strong><a class="issue-link js-issue-link" data-error-text="Failed to
load title" data-id="4369274702" data-permission-text="Title is private"
data-url="axios/axios#10835"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10835/hovercard"
href="https://redirect.github.com/axios/axios/pull/10835">#10835</a></strong>,
<strong><a class="issue-link js-issue-link" data-error-text="Failed to
load title" data-id="4378451451" data-permission-text="Title is private"
data-url="axios/axios#10841"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10841/hovercard"
href="https://redirect.github.com/axios/axios/pull/10841">#10841</a></strong>)</li>
<li><strong>Docs Improvements:</strong> Clarified the GET request
example, fixed the interceptor <code>eject</code> example to reference
the correct instance, and corrected the Buzzoid sponsor description in
the README. (<strong><a class="issue-link js-issue-link"
data-error-text="Failed to load title" data-id="4369287222"
data-permission-text="Title is private"
data-url="axios/axios#10836"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10836/hovercard"
href="https://redirect.github.com/axios/axios/pull/10836">#10836</a></strong>,
<strong><a class="issue-link js-issue-link" data-error-text="Failed to
load title" data-id="4390162698" data-permission-text="Title is private"
data-url="axios/axios#10853"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10853/hovercard"
href="https://redirect.github.com/axios/axios/pull/10853">#10853</a></strong>,
<strong><a class="issue-link js-issue-link" data-error-text="Failed to
load title" data-id="4392363280" data-permission-text="Title is private"
data-url="axios/axios#10856"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10856/hovercard"
href="https://redirect.github.com/axios/axios/pull/10856">#10856</a></strong>)</li>
<li><strong>Sponsorship Tooling:</strong> Fixed empty sponsor arrays in
the sponsor processing script, added the ability to inject additional
sponsors, updated the sponsorship link, and added a Twicsy advertisement
entry. (<strong><a class="issue-link js-issue-link"
data-error-text="Failed to load title" data-id="4378946632"
data-permission-text="Title is private"
data-url="axios/axios#10843"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10843/hovercard"
href="https://redirect.github.com/axios/axios/pull/10843">#10843</a></strong>,
<strong><a class="issue-link js-issue-link" data-error-text="Failed to
load title" data-id="4393416912" data-permission-text="Title is private"
data-url="axios/axios#10859"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10859/hovercard"
href="https://redirect.github.com/axios/axios/pull/10859">#10859</a></strong>,
<strong><a class="issue-link js-issue-link" data-error-text="Failed to
load title" data-id="4412918174" data-permission-text="Title is private"
data-url="axios/axios#10869"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10869/hovercard"
href="https://redirect.github.com/axios/axios/pull/10869">#10869</a></strong>)</li>
<li><strong>Dependencies:</strong> Bumped <code>@ commitlint/cli</code>
from 20.5.0 to 20.5.2. (<strong><a class="issue-link js-issue-link"
data-error-text="Failed to load title" data-id="4383276255"
data-permission-text="Title is private"
data-url="axios/axios#10846"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10846/hovercard"
href="https://redirect.github.com/axios/axios/pull/10846">#10846</a></strong>)</li>
</ul>
<h2>🌟 New Contributors</h2>
<p>We are thrilled to welcome our new contributors. Thank you for
helping improve axios:</p>
<ul>
<li><strong><a class="user-mention notranslate"
data-hovercard-type="user"
data-hovercard-url="/users/hpinmetaverse/hovercard"
data-octo-click="hovercard-link-click"
data-octo-dimensions="link_type:self"
href="https://redirect.github.com/hpinmetaverse">@
hpinmetaverse</a></strong> (<strong><a class="issue-link js-issue-link"
data-error-text="Failed to load title" data-id="4369287222"
data-permission-text="Title is private"
data-url="axios/axios#10836"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10836/hovercard"
href="https://redirect.github.com/axios/axios/pull/10836">#10836</a></strong>)</li>
<li><strong><a class="user-mention notranslate"
data-hovercard-type="user"
data-hovercard-url="/users/tommyhgunz14/hovercard"
data-octo-click="hovercard-link-click"
data-octo-dimensions="link_type:self"
href="https://redirect.github.com/tommyhgunz14">@
tommyhgunz14</a></strong> (<strong><a class="issue-link js-issue-link"
data-error-text="Failed to load title" data-id="3959581677"
data-permission-text="Title is private"
data-url="axios/axios#7413"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/7413/hovercard"
href="https://redirect.github.com/axios/axios/pull/7413">#7413</a></strong>)</li>
<li><strong><a class="user-mention notranslate"
data-hovercard-type="user" data-hovercard-url="/users/abhu85/hovercard"
data-octo-click="hovercard-link-click"
data-octo-dimensions="link_type:self"
href="https://redirect.github.com/abhu85">@ abhu85</a></strong>
(<strong><a class="issue-link js-issue-link" data-error-text="Failed to
load title" data-id="4356424237" data-permission-text="Title is private"
data-url="axios/axios#10829"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10829/hovercard"
href="https://redirect.github.com/axios/axios/pull/10829">#10829</a></strong>)</li>
<li><strong><a class="user-mention notranslate"
data-hovercard-type="user"
data-hovercard-url="/users/divyanshuraj1095/hovercard"
data-octo-click="hovercard-link-click"
data-octo-dimensions="link_type:self"
href="https://redirect.github.com/divyanshuraj1095">@
divyanshuraj1095</a></strong> (<strong><a class="issue-link
js-issue-link" data-error-text="Failed to load title"
data-id="4390162698" data-permission-text="Title is private"
data-url="axios/axios#10853"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10853/hovercard"
href="https://redirect.github.com/axios/axios/pull/10853">#10853</a></strong>)</li>
<li><strong><a class="user-mention notranslate"
data-hovercard-type="user"
data-hovercard-url="/users/sagodi97/hovercard"
data-octo-click="hovercard-link-click"
data-octo-dimensions="link_type:self"
href="https://redirect.github.com/sagodi97">@ sagodi97</a></strong>
(<strong><a class="issue-link js-issue-link" data-error-text="Failed to
load title" data-id="4392363280" data-permission-text="Title is private"
data-url="axios/axios#10856"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10856/hovercard"
href="https://redirect.github.com/axios/axios/pull/10856">#10856</a></strong>)</li>
<li><strong><a class="user-mention notranslate"
data-hovercard-type="user" data-hovercard-url="/users/rkdfx/hovercard"
data-octo-click="hovercard-link-click"
data-octo-dimensions="link_type:self"
href="https://redirect.github.com/rkdfx">@ rkdfx</a></strong>
(<strong><a class="issue-link js-issue-link" data-error-text="Failed to
load title" data-id="4409815240" data-permission-text="Title is private"
data-url="axios/axios#10868"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10868/hovercard"
href="https://redirect.github.com/axios/axios/pull/10868">#10868</a></strong>)</li>
<li><strong><a class="user-mention notranslate"
data-hovercard-type="user"
data-hovercard-url="/users/Liuwei1125/hovercard"
data-octo-click="hovercard-link-click"
data-octo-dimensions="link_type:self"
href="https://redirect.github.com/Liuwei1125">@ Liuwei1125</a></strong>
(<strong><a class="issue-link js-issue-link" data-error-text="Failed to
load title" data-id="4403806527" data-permission-text="Title is private"
data-url="axios/axios#10866"
data-hovercard-type="pull_request"
data-hovercard-url="/axios/axios/pull/10866/hovercard"
href="https://redirect.github.com/axios/axios/pull/10866">#10866</a></strong>)</li>
</ul>
<p><a
href="https://redirect.github.com/axios/axios/compare/v1.16.0...v1.16.1">Full
Changelog</a></p>
      </li>
    </ul>
from <a href="https://redirect.github.com/axios/axios/releases">axios
GitHub release notes</a>
  </details>
</details>

---

> [!IMPORTANT]
>
> - Check the changes in this PR to ensure they won't cause issues with
your project.
> - This PR was automatically created by Snyk using the credentials of a
real user.

---

**Note:** _You are seeing this because you or someone else with access
to this repository has authorized Snyk to open upgrade PRs._

**For more information:** <img
src="https://api.segment.io/v1/pixel/track?data=eyJ3cml0ZUtleSI6InJyWmxZcEdHY2RyTHZsb0lYd0dUcVg4WkFRTnNCOUEwIiwiYW5vbnltb3VzSWQiOiJiZjMyYzAwMC1iZGM2LTQyMzktYjg1Mi0wMzRhOGNhYTIzZDUiLCJldmVudCI6IlBSIHZpZXdlZCIsInByb3BlcnRpZXMiOnsicHJJZCI6ImJmMzJjMDAwLWJkYzYtNDIzOS1iODUyLTAzNGE4Y2FhMjNkNSJ9fQ=="
width="0" height="0"/>

> - 🧐 [View latest project
report](https://app.snyk.io/org/devrev/project/58ce53c3-7bbd-4cc5-bc81-52dc7ce644c2?utm_source&#x3D;github&amp;utm_medium&#x3D;referral&amp;page&#x3D;upgrade-pr)
> - 📜 [Customise PR
templates](https://docs.snyk.io/scan-using-snyk/pull-requests/snyk-fix-pull-or-merge-requests/customize-pr-templates?utm_source=&utm_content=fix-pr-template)
> - 🛠 [Adjust upgrade PR
settings](https://app.snyk.io/org/devrev/project/58ce53c3-7bbd-4cc5-bc81-52dc7ce644c2/settings/integration?utm_source&#x3D;github&amp;utm_medium&#x3D;referral&amp;page&#x3D;upgrade-pr)
> - 🔕 [Ignore this dependency or unsubscribe from future upgrade
PRs](https://app.snyk.io/org/devrev/project/58ce53c3-7bbd-4cc5-bc81-52dc7ce644c2/settings/integration?pkg&#x3D;axios&amp;utm_source&#x3D;github&amp;utm_medium&#x3D;referral&amp;page&#x3D;upgrade-pr#auto-dep-upgrades)

[//]: #
'snyk:metadata:{"breakingChangeRiskLevel":null,"FF_showPullRequestBreakingChanges":false,"FF_showPullRequestBreakingChangesWebSearch":false,"customTemplate":{"variablesUsed":[],"fieldsUsed":[]},"dependencies":[{"name":"axios","from":"1.16.1","to":"1.17.0"}],"env":"prod","hasFixes":false,"isBreakingChange":false,"isMajorUpgrade":false,"issuesToFix":[],"prId":"bf32c000-bdc6-4239-b852-034a8caa23d5","prPublicId":"bf32c000-bdc6-4239-b852-034a8caa23d5","packageManager":"npm","priorityScoreList":[],"projectPublicId":"58ce53c3-7bbd-4cc5-bc81-52dc7ce644c2","projectUrl":"https://app.snyk.io/org/devrev/project/58ce53c3-7bbd-4cc5-bc81-52dc7ce644c2?utm_source=github&utm_medium=referral&page=upgrade-pr","prType":"upgrade","templateFieldSources":{"branchName":"default","commitMessage":"default","description":"default","title":"default"},"templateVariants":[],"type":"auto","upgrade":[],"upgradeInfo":{"versionsDiff":1,"publishedDate":"2026-06-03T06:58:28.145Z"},"vulns":[]}'

Co-authored-by: snyk-bot <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant