Merge pull request #6625 from BitGo/WP-5361/update-axios-versions

fix(root): bump axios version for form-data vuln

Author: mohammadalfaiyazbitgo

modules/sdk-coin-atom/package.json

@@ -53,7 +53,7 @@
     "@bitgo/sdk-api": "^1.65.4",
     "@bitgo/sdk-test": "^9.0.0",
     "@types/lodash": "^4.14.183",
-    "axios": "^1.3.4"
+    "axios": "^1.11.0"
   },
   "gitHead": "18e460ddf02de2dbf13c2aa243478188fb539f0c"
 }

modules/sdk-coin-celo/package.json

@@ -58,5 +58,8 @@
     "@bitgo/sdk-api": "^1.65.4",
     "@bitgo/sdk-test": "^9.0.0"
   },
+  "resolutions": {
+    "form-data": "^4.0.4"
+  },
   "gitHead": "18e460ddf02de2dbf13c2aa243478188fb539f0c"
 }

modules/sdk-coin-sui/package.json

@@ -56,7 +56,7 @@
     "@bitgo/sdk-api": "^1.65.4",
     "@bitgo/sdk-test": "^9.0.0",
     "@types/lodash": "^4.14.183",
-    "axios": "^1.4.0",
+    "axios": "^1.11.0",
     "debug": "^4.3.4"
   },
   "gitHead": "18e460ddf02de2dbf13c2aa243478188fb539f0c"

modules/utxo-lib/package.json

@@ -67,7 +67,7 @@
   "devDependencies": {
     "@types/fs-extra": "^9.0.12",
     "@types/node": "^22.15.29",
-    "axios": "^1.6.0",
+    "axios": "^1.11.0",
     "debug": "^3.1.0",
     "fs-extra": "^9.1.0"
   },

package.json

@@ -84,12 +84,12 @@
     "web3-utils": "4.2.1",
     "@polkadot/api": "14.1.1",
     "elliptic": "^6.6.1",
-    "axios": "^1.8.2",
+    "axios": "^1.11.0",
     "canvg": "4.0.3",
     "**/stellar-sdk/**/bignumber.js": "4.1.0",
     "**/stellar-base/**/bignumber.js": "4.1.0",
     "bignumber.js": "9.1.2",
-    "form-data": "4.0.4",
+    "form-data": "^4.0.4",
     "**/avalanche/**/ws": "8.18.3",
     "**/ethers/**/ws": "7.5.10",
     "**/swarm-js/**/ws": "5.2.4"
@@ -132,7 +132,7 @@
     "test:prepare-release": "mocha --require ts-node/register ./scripts/tests/prepareRelease/prepare-release-main.test.ts"
   },
   "dependencies": {
-    "axios": "^1.8.2",
+    "axios": "^1.11.0",
     "terser": "^5.14.2",
     "tmp": "^0.2.3"
   },

yarn.lock

@@ -7321,13 +7321,13 @@ aws4@^1.8.0:
   resolved "https://registry.npmjs.org/aws4/-/aws4-1.13.2.tgz#0aa167216965ac9474ccfa83892cfb6b3e1e52ef"
   integrity sha512-lHe62zvbTB5eEABUVi/AwVh0ZKY9rMMDhmm+eeyuuUQbQ3+J+fONVQOZyj+DdrvD4BY33uYniyRJ4UJIaSKAfw==
 
-[email protected], [email protected], [email protected], axios@^0.21.2, axios@^0.26.1, axios@^1.0.0, axios@^1.3.1, axios@^1.3.4, axios@^1.4.0, axios@^1.6.0, axios@^1.8.2:
-  version "1.8.4"
-  resolved "https://registry.npmjs.org/axios/-/axios-1.8.4.tgz#78990bb4bc63d2cae072952d374835950a82f447"
-  integrity sha512-eBSYY4Y68NNlHbHBMdeDmKNtDgXWhQsJcGqzO3iLUM0GraQFSS9cVgPX5I9b3lbdFKyYoAEGAZF1DwhTaljNAw==
+[email protected], [email protected], [email protected], axios@^0.21.2, axios@^0.26.1, axios@^1.0.0, axios@^1.11.0, axios@^1.3.1:
+  version "1.11.0"
+  resolved "https://registry.npmjs.org/axios/-/axios-1.11.0.tgz#c2ec219e35e414c025b2095e8b8280278478fdb6"
+  integrity sha512-1Lx3WLFQWm3ooKDYZD1eXmoGO9fxYQjrycfHFC8P0sCfQVXyROp0p9PFWBehewBOdCwHc+f/b8I0fMto5eSfwA==
   dependencies:
     follow-redirects "^1.15.6"
-    form-data "^4.0.0"
+    form-data "^4.0.4"
     proxy-from-env "^1.1.0"
 
 b64-lite@^1.3.1, b64-lite@^1.4.0: