From 1ebd7369aaf3a6d504deead6fff697aa960eea9c Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 11 Mar 2025 03:08:32 +0000 Subject: [PATCH] build(deps): bump axios from 1.8.1 to 1.8.2 to address CVE-2025-27152 (#407) --- package-lock.json | 8 ++++---- package.json | 2 +- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/package-lock.json b/package-lock.json index d9f83fc..183d83e 100644 --- a/package-lock.json +++ b/package-lock.json @@ -12,7 +12,7 @@ "@actions/core": "^1.11.1", "@actions/github": "^6.0.0", "@slack/web-api": "^7.8.0", - "axios": "^1.8.1", + "axios": "^1.8.2", "axios-retry": "^4.5.0", "flat": "^6.0.1", "https-proxy-agent": "^7.0.6", @@ -852,9 +852,9 @@ "integrity": "sha512-Oei9OH4tRh0YqU3GxhX79dM/mwVgvbZJaSNaRk+bshkj0S5cfHcgYakreBjrHwatXKbz+IoIdYLxrKim2MjW0Q==" }, "node_modules/axios": { - "version": "1.8.1", - "resolved": "https://registry.npmjs.org/axios/-/axios-1.8.1.tgz", - "integrity": "sha512-NN+fvwH/kV01dYUQ3PTOZns4LWtWhOFCAhQ/pHb88WQ1hNe5V/dvFwc4VJcDL11LT9xSX0QtsR8sWUuyOuOq7g==", + "version": "1.8.2", + "resolved": "https://registry.npmjs.org/axios/-/axios-1.8.2.tgz", + "integrity": "sha512-ls4GYBm5aig9vWx8AWDSGLpnpDQRtWAfrjU+EuytuODrFBkqesN2RkOQCBzrA1RQNHw1SmRMSDDDSwzNAYQ6Rg==", "license": "MIT", "dependencies": { "follow-redirects": "^1.15.6", diff --git a/package.json b/package.json index 29a60b3..e352134 100644 --- a/package.json +++ b/package.json @@ -36,7 +36,7 @@ "@actions/core": "^1.11.1", "@actions/github": "^6.0.0", "@slack/web-api": "^7.8.0", - "axios": "^1.8.1", + "axios": "^1.8.2", "axios-retry": "^4.5.0", "flat": "^6.0.1", "https-proxy-agent": "^7.0.6",