bump axios to v1.7.4 to close CVE-2024-39338 (#164)

mittwald · Aug 14, 2024 · 79adecc · 79adecc
1 parent 1b01d63
commit 79adecc
Show file tree

Hide file tree

Showing 3 changed files with 24 additions and 3 deletions.
diff --git a/.pnp.cjs b/.pnp.cjs
diff --git a/packages/generator/package.json b/packages/generator/package.json
@@ -37,7 +37,7 @@
     "@types/prettier": "^3.0.0",
     "@types/verror": "^1.10.10",
     "@types/yieldable-json": "^2.0.2",
-    "axios": "^1.7.3",
+    "axios": "^1.7.4",
     "camelcase": "^8.0.0",
     "clone-deep": "^4.0.1",
     "dot-prop": "^8.0.2",

diff --git a/yarn.lock b/yarn.lock
@@ -1447,7 +1447,7 @@ __metadata:
     "@types/yieldable-json": "npm:^2.0.2"
     "@typescript-eslint/eslint-plugin": "npm:^7.18.0"
     "@typescript-eslint/parser": "npm:^7.18.0"
-    axios: "npm:^1.7.3"
+    axios: "npm:^1.7.4"
     camelcase: "npm:^8.0.0"
     clone-deep: "npm:^4.0.1"
     dot-prop: "npm:^8.0.2"
@@ -3535,6 +3535,17 @@ __metadata:
   languageName: node
   linkType: hard
 
+"axios@npm:^1.7.4":
+  version: 1.7.4
+  resolution: "axios@npm:1.7.4"
+  dependencies:
+    follow-redirects: "npm:^1.15.6"
+    form-data: "npm:^4.0.0"
+    proxy-from-env: "npm:^1.1.0"
+  checksum: 10/7a1429be1e3d0c2e1b96d4bba4d113efbfabc7c724bed107beb535c782c7bea447ff634886b0c7c43395a264d085450d009eb1154b5f38a8bae49d469fdcbc61
+  languageName: node
+  linkType: hard
+
 "babel-jest@npm:^29.7.0":
   version: 29.7.0
   resolution: "babel-jest@npm:29.7.0"