Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 15, 2023

Bumps axios from 1.5.1 to 1.6.2.

Release notes

Sourced from axios's releases.

Release v1.6.2

Release notes:

Features

  • withXSRFToken: added withXSRFToken option as a workaround to achieve the old withCredentials behavior; (#6046) (cff9967)

PRs

  • feat(withXSRFToken): added withXSRFToken option as a workaround to achieve the old `withCredentials` behavior; ( #6046 )

📢 This PR added 'withXSRFToken' option as a replacement for old withCredentials behaviour. 
You should now use withXSRFToken along with withCredential to get the old behavior.
This functionality is considered as a fix.

Contributors to this release

Release v1.6.1

Release notes:

Bug Fixes

  • formdata: fixed content-type header normalization for non-standard browser environments; (#6056) (dd465ab)
  • platform: fixed emulated browser detection in node.js environment; (#6055) (3dc8369)

Contributors to this release

Release v1.6.0

Release notes:

Bug Fixes

PRs

  • CVE 2023 45857 ( #6028 )

⚠️ Critical vulnerability fix. See https://security.snyk.io/vuln/SNYK-JS-AXIOS-6032459

Contributors to this release

... (truncated)

Changelog

Sourced from axios's changelog.

1.6.2 (2023-11-14)

Features

  • withXSRFToken: added withXSRFToken option as a workaround to achieve the old withCredentials behavior; (#6046) (cff9967)

PRs

  • feat(withXSRFToken): added withXSRFToken option as a workaround to achieve the old `withCredentials` behavior; ( #6046 )

📢 This PR added 'withXSRFToken' option as a replacement for old withCredentials behaviour. 
You should now use withXSRFToken along with withCredential to get the old behavior.
This functionality is considered as a fix.

Contributors to this release

1.6.1 (2023-11-08)

Bug Fixes

  • formdata: fixed content-type header normalization for non-standard browser environments; (#6056) (dd465ab)
  • platform: fixed emulated browser detection in node.js environment; (#6055) (3dc8369)

Contributors to this release

PRs

  • feat(withXSRFToken): added withXSRFToken option as a workaround to achieve the old `withCredentials` behavior; ( #6046 )

📢 This PR added 'withXSRFToken' option as a replacement for old withCredentials behaviour. 
You should now use withXSRFToken along with withCredential to get the old behavior.
This functionality is considered as a fix.

1.6.0 (2023-10-26)

Bug Fixes

... (truncated)

Commits
  • b3be365 chore(release): v1.6.2 (#6082)
  • 8739acb chore(ci): removed redundant release action; (#6081)
  • bfa9c30 chore(docs): fix outdated grunt to npm scripts (#6073)
  • a2b0fb3 chore(docs): update README.md (#6048)
  • b12a608 chore(ci): removed paths-ignore filter; (#6080)
  • 0c9d886 chore(ci): reworked ignoring files logic; (#6079)
  • 30873ee chore(ci): add paths-ignore config to testing action; (#6078)
  • cff9967 feat(withXSRFToken): added withXSRFToken option as a workaround to achieve th...
  • 7009715 chore(ci): fixed release notification action; (#6064)
  • 7144f10 chore(ci): fixed release notification action; (#6063)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot requested review from a team and gavinmatt as code owners November 15, 2023 03:34
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Nov 15, 2023
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/axios-1.6.2 branch from 64f64f1 to 5048a3c Compare November 20, 2023 21:46
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/axios-1.6.2 branch 3 times, most recently from 9819c31 to 99be9b3 Compare December 4, 2023 17:26
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/axios-1.6.2 branch from 99be9b3 to 45e8122 Compare December 4, 2023 17:29
@contentful-automation contentful-automation bot added this pull request to the merge queue Dec 4, 2023
Merged via the queue into main with commit 1b4c36a Dec 4, 2023
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/axios-1.6.2 branch December 4, 2023 17:33
@github-actions github-actions bot mentioned this pull request Dec 4, 2023
github-merge-queue bot pushed a commit that referenced this pull request Dec 4, 2023
🤖 I have created a release *beep* *boop*
---


<details><summary>bynder-assets: 1.0.1</summary>

##
[1.0.1](bynder-assets-v1.0.0...bynder-assets-v1.0.1)
(2023-12-04)


### Bug Fixes

* **deps:** bump @contentful/dam-app-base from 2.1.1 to 2.1.8
([#493](#493))
([97f2373](97f2373))
</details>

<details><summary>ceros-contentful-app: 1.0.1</summary>

##
[1.0.1](ceros-contentful-app-v1.0.0...ceros-contentful-app-v1.0.1)
(2023-12-04)


### Bug Fixes

* **deps:** bump @contentful/f36-components from 4.45.0 to 4.54.5
([#527](#527))
([9c4f2ba](9c4f2ba))
</details>

<details><summary>cloudinary-assets-legacy: 1.0.1</summary>

##
[1.0.1](cloudinary-assets-legacy-v1.0.0...cloudinary-assets-legacy-v1.0.1)
(2023-12-04)


### Bug Fixes

* **deps:** bump @contentful/dam-app-base from 2.1.1 to 2.1.8
([#493](#493))
([97f2373](97f2373))
</details>

<details><summary>cloudinary-assets: 1.0.1</summary>

##
[1.0.1](cloudinary-assets-v1.0.0...cloudinary-assets-v1.0.1)
(2023-12-04)


### Bug Fixes

* **deps:** bump @contentful/f36-components from 4.45.0 to 4.54.5
([#527](#527))
([9c4f2ba](9c4f2ba))
* **deps:** bump @dnd-kit/utilities from 3.2.1 to 3.2.2
([#526](#526))
([1f29887](1f29887))
</details>

<details><summary>thrillworks-flex-fields-app: 1.0.3</summary>

##
[1.0.3](thrillworks-flex-fields-app-v1.0.2...thrillworks-flex-fields-app-v1.0.3)
(2023-12-04)


### Bug Fixes

* **deps:** bump @contentful/f36-components from 4.45.0 to 4.54.5
([#527](#527))
([9c4f2ba](9c4f2ba))
</details>

<details><summary>image-hotspot-creator: 1.0.3</summary>

##
[1.0.3](image-hotspot-creator-v1.0.2...image-hotspot-creator-v1.0.3)
(2023-12-04)


### Bug Fixes

* **deps:** bump @contentful/f36-components from 4.45.0 to 4.54.5
([#527](#527))
([9c4f2ba](9c4f2ba))
* **deps:** bump axios from 1.5.1 to 1.6.2
([#459](#459))
([1b4c36a](1b4c36a))
* **deps:** bump contentful-management from 10.38.4 to 10.46.4
([#524](#524))
([dbe9418](dbe9418))
</details>

<details><summary>shopify-sku: 1.0.1</summary>

##
[1.0.1](shopify-sku-v1.0.0...shopify-sku-v1.0.1)
(2023-12-04)


### Bug Fixes

* **deps:** bump @contentful/ecommerce-app-base from 3.3.22 to 3.4.5
([#514](#514))
([c535827](c535827))
* **deps:** bump @contentful/ecommerce-app-base from 3.4.5 to 3.4.6
([#528](#528))
([8fe8b43](8fe8b43))
* **deps:** bump @contentful/f36-components from 4.45.0 to 4.54.5
([#527](#527))
([9c4f2ba](9c4f2ba))
</details>

<details><summary>surfer-contentful-app: 1.0.1</summary>

##
[1.0.1](surfer-contentful-app-v1.0.0...surfer-contentful-app-v1.0.1)
(2023-12-04)


### Bug Fixes

* **deps:** bump @contentful/f36-components from 4.45.0 to 4.54.5
([#527](#527))
([9c4f2ba](9c4f2ba))
* **deps:** bump @contentful/f36-multiselect from 4.20.13 to 4.21.0
([#523](#523))
([440e4e1](440e4e1))
</details>

<details><summary>uploadcare-contentful-app: 1.0.1</summary>

##
[1.0.1](uploadcare-contentful-app-v1.0.0...uploadcare-contentful-app-v1.0.1)
(2023-12-04)


### Bug Fixes

* **deps:** bump @contentful/f36-components from 4.45.0 to 4.54.5
([#527](#527))
([9c4f2ba](9c4f2ba))
* **deps:** bump @dnd-kit/utilities from 3.2.1 to 3.2.2
([#526](#526))
([1f29887](1f29887))
* **deps:** bump @uploadcare/upload-client from 6.6.1 to 6.11.0
([#508](#508))
([74342d9](74342d9))
</details>

<details><summary>voucherify-contentful-app: 1.0.1</summary>

##
[1.0.1](voucherify-contentful-app-v1.0.0...voucherify-contentful-app-v1.0.1)
(2023-12-04)


### Bug Fixes

* **deps:** bump @contentful/f36-components from 4.45.0 to 4.54.5
([#527](#527))
([9c4f2ba](9c4f2ba))
* **deps:** bump axios from 1.5.1 to 1.6.2
([#459](#459))
([1b4c36a](1b4c36a))
* **deps:** bump react-router-dom from 6.16.0 to 6.20.1
([#513](#513))
([b043342](b043342))
</details>

---
This PR was generated with [Release
Please](https://github.com/googleapis/release-please). See
[documentation](https://github.com/googleapis/release-please#release-please).

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants