Sourced from axios's releases.
Release v1.7.4
Release notes:
Bug Fixes
- sec: CVE-2024-39338 (#6539) (#6543) (6b6b605)
- sec: disregard protocol-relative URL to remediate SSRF (#6539) (07a661a)
Contributors to this release
Release v1.7.3
Release notes:
Bug Fixes
- adapter: fix progress event emitting; (#6518) (e3c76fc)
- fetch: fix withCredentials request config (#6505) (85d4d0e)
- xhr: return original config on errors from XHR adapter (#6515) (8966ee7)
Contributors to this release
Release v1.7.2
Release notes:
Bug Fixes
Contributors to this release
Release v1.7.1
Release notes:
Bug Fixes
- fetch: fixed ReferenceError issue when TextEncoder is not available in the environment; (#6410) (733f15f)
Contributors to this release
Release v1.7.0
Release notes:
Features
... (truncated)
Sourced from axios's changelog.
1.7.4 (2024-08-13)
Bug Fixes
- sec: CVE-2024-39338 (#6539) (#6543) (6b6b605)
- sec: disregard protocol-relative URL to remediate SSRF (#6539) (07a661a)
Contributors to this release
1.7.3 (2024-08-01)
Bug Fixes
- adapter: fix progress event emitting; (#6518) (e3c76fc)
- fetch: fix withCredentials request config (#6505) (85d4d0e)
- xhr: return original config on errors from XHR adapter (#6515) (8966ee7)
Contributors to this release
1.7.2 (2024-05-21)
Bug Fixes
Contributors to this release
1.7.1 (2024-05-20)
Bug Fixes
- fetch: fixed ReferenceError issue when TextEncoder is not available in the environment; (#6410) (733f15f)
Contributors to this release
... (truncated)
abd24a7
chore(release): v1.7.4 (#6544)6b6b605
fix(sec): CVE-2024-39338 (#6539)
(#6543)07a661a
fix(sec): disregard protocol-relative URL to remediate SSRF (#6539)c6cce43
chore(release): v1.7.3 (#6521)e3c76fc
fix(adapter): fix progress event emitting; (#6518)85d4d0e
fix(fetch): fix withCredentials request config (#6505)92cd8ed
chore(github): update ISSUE_TEMPLATE.md (#6519)8966ee7
fix(xhr): return original config on errors from XHR adapter (#6515)0e4f9fa
chore(release): v1.7.2 (#6414)4f79aef
fix(fetch): enhance fetch API detection; (#6413)Sourced from wait-on's releases.
v8.0.0 - breaking change for http unix socket use
Updated for security vulnerabilities with axios@1.7.4 and braces.
Breaking change in using latest axios with a unix socket URL
As part of the axios update, the syntax for using a socket with an http URL in axios has changed so you must specify the protocol and server
For example:
http://unix:SOCKETPATH:http://server/foo/barinstead of just using only the path (no protocol and no server)
http://unix:SOCKETPATH:/foo/barDue to this change, I have updated my tests, docs, bumped the major version.
v7.2.0
Update axios from 0.27.2 to latest 1.6.1 which fixes security vulnerability CVE-2023-45857.
Thanks
@AndrewMaxfor the PR #147 and also for those that confirmed it.v7.1.0
Update dependencies.
Add ability to specify timeout, httpTimeout, and tcpTimeout with a unit (ms, m, s, h), defaults to ms if not specified. Thanks
@ntkoopmanv7.0.1
Removed unnecessary eslint-plugin-standard. It was no longer needed since already included in another package.
v7.0.0
Updated dependencies:
- minimist
- eslint
- minimatch
- axios
- mocha
- rxjs
The update to latest mocha removed support for Node.js below 12.
0b193cf
8.0.0e039e25
Merge pull request #162
from jeffbski/update-deps-2024-08-19672fd83
update axios@1.7.4 and other minora10322f
7.2.0fc27d1b
Merge branch 'AndrewMax-amaks/fix/axios-1.6.0'a71be27
chore: bump Axios to 1.6.169092f4
fix: update axios to 1.6.0 to fix CVE-2023-45857aefc49e
7.1.00ec371e
update semver96b0e33
Merge pull request #144
from jeffbski/update-deps-2023-11-02