Skip to content

Update axios overrides to 1.8.2#5876

Merged
lukastaegert merged 4 commits intorollup:masterfrom
vadym-khodak:patch-1
Mar 17, 2025
Merged

Update axios overrides to 1.8.2#5876
lukastaegert merged 4 commits intorollup:masterfrom
vadym-khodak:patch-1

Conversation

@vadym-khodak
Copy link
Contributor

@vadym-khodak vadym-khodak commented Mar 12, 2025

This PR contains:

  • bugfix
  • feature
  • refactor
  • documentation
  • other (fix security vulnerability)

Are tests included?

  • yes (bugfixes and features will not be merged without tests)
  • no

Breaking Changes?

  • yes (breaking changes will not be merged unless absolutely necessary)
  • no

List any relevant issue numbers:

Description

There is a security vulnerability in axios version 1.8.1 CVE-2025-27152 which is fixed in axios version 1.8.2

@vercel
Copy link

vercel bot commented Mar 12, 2025 •
edited
Loading

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name Status Preview Comments Updated (UTC)
rollup ✅ Ready (Inspect) Visit Preview 💬 Add feedback Mar 14, 2025 0:17am

lukastaegert
lukastaegert reviewed Mar 13, 2025
View reviewed changes
Copy link
Member

@lukastaegert lukastaegert left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks! Can you please run npm install to update the lock file?

@vadym-khodak
Copy link
Contributor Author

vadym-khodak commented Mar 14, 2025

Thanks! Can you please run npm install to update the lock file?

It looks like these changes are unnecessary because someone has already updated package-lock.json file.
There will be the newest axios version 1.8.3 in the next release of rollup. that will fix the security vulnerability.

@lukastaegert lukastaegert enabled auto-merge March 17, 2025 05:59
@codecov
Copy link

codecov bot commented Mar 17, 2025 •
edited
Loading

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 98.54%. Comparing base (7710d69) to head (f00a621).
Report is 4 commits behind head on master.

Additional details and impacted files 
@@           Coverage Diff           @@
##           master    #5876   +/-   ##
=======================================
  Coverage   98.54%   98.54%           
=======================================
  Files         269      269           
  Lines        8550     8550           
  Branches     1467     1467           
=======================================
  Hits         8426     8426           
  Misses         92       92           
  Partials       32       32

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@lukastaegert lukastaegert added this pull request to the merge queue Mar 17, 2025
Merged via the queue into rollup:master with commit f687af5 Mar 17, 2025
40 checks passed
@github-actions
Copy link

github-actions bot commented Mar 17, 2025

This PR has been released as part of rollup@4.36.0. You can test it via npm install rollup.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@lukastaegert lukastaegert lukastaegert approved these changes

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@vadym-khodak @lukastaegert