Skip to content

Commit e7a1534

Browse files
Fix vulnerabilities coming from axios and form-data packages (#49)
## Summary <!-- Provide a brief description of the story behind this PR, as if explaining to a non-technical person. Or to an LLM so it can learn from it for future (autonomous) code improvements. Feel free to point to a deeper design doc, if applicable. --> This PR fixes one critical vulnerability coming from axios through form-data package. It was fixed by updating both packages. Also major and premajor options were removed from release.yaml. ## Connected Issues <!-- Have you cared to connect this PR to a work item in DevRev, so that we can understand future routing and attribution? --> - https://app.devrev.ai/devrev/works/ISS-194849
1 parent 74a75cb commit e7a1534

File tree

3 files changed

+87
-87
lines changed

3 files changed

+87
-87
lines changed

.github/workflows/release.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -10,7 +10,7 @@ on:
1010
description: 'Release type'
1111
type: choice
1212
required: true
13-
options: [patch, minor, major, prepatch, preminor, premajor, prerelease]
13+
options: [patch, minor, prepatch, preminor, prerelease]
1414
dry-run:
1515
description: 'Dry Run - skip commit and publish'
1616
type: boolean

package-lock.json

Lines changed: 84 additions & 84 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

package.json

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -38,9 +38,9 @@
3838
},
3939
"dependencies": {
4040
"@devrev/typescript-sdk": "^1.1.59",
41-
"axios": "^1.9.0",
41+
"axios": "^1.11.0",
4242
"axios-retry": "^4.5.0",
43-
"form-data": "^4.0.1",
43+
"form-data": "^4.0.4",
4444
"js-jsonl": "^1.1.1",
4545
"ts-node": "^10.9.2",
4646
"typescript": "^5.3.3",

0 commit comments

Comments
 (0)