Skip to content

Commit 2518b47

Browse files
chore(deps): update dependency axios and glob (#1987)
This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [axios](https://axios-http.com) ([source](https://redirect.github.com/axios/axios)) | [`1.12.2` → `1.13.5`](https://renovatebot.com/diffs/npm/axios/1.12.2/1.13.5) | ![age](https://developer.mend.io/api/mc/badges/age/npm/axios/1.13.5?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/axios/1.12.2/1.13.5?slim=true) | ### GitHub Vulnerability Alerts #### [CVE-2026-25639](https://redirect.github.com/axios/axios/security/advisories/GHSA-43fc-jf86-j433) # Denial of Service via **proto** Key in mergeConfig ### Summary The `mergeConfig` function in axios crashes with a TypeError when processing configuration objects containing `__proto__` as an own property. An attacker can trigger this by providing a malicious configuration object created via `JSON.parse()`, causing complete denial of service. ### Details The vulnerability exists in `lib/core/mergeConfig.js` at lines 98-101: ```javascript utils.forEach(Object.keys({ ...config1, ...config2 }), function computeConfigValue(prop) { const merge = mergeMap[prop] || mergeDeepProperties; const configValue = merge(config1[prop], config2[prop], prop); (utils.isUndefined(configValue) && merge !== mergeDirectKeys) || (config[prop] = configValue); }); ``` When `prop` is `'__proto__'`: 1. `JSON.parse('{"__proto__": {...}}')` creates an object with `__proto__` as an own enumerable property 2. `Object.keys()` includes `'__proto__'` in the iteration 3. `mergeMap['__proto__']` performs prototype chain lookup, returning `Object.prototype` (truthy object) 4. The expression `mergeMap[prop] || mergeDeepProperties` evaluates to `Object.prototype` 5. `Object.prototype(...)` throws `TypeError: merge is not a function` The `mergeConfig` function is called by: - `Axios._request()` at `lib/core/Axios.js:75` - `Axios.getUri()` at `lib/core/Axios.js:201` - All HTTP method shortcuts (`get`, `post`, etc.) at `lib/core/Axios.js:211,224` ### PoC ```javascript import axios from "axios"; const maliciousConfig = JSON.parse('{"__proto__": {"x": 1}}'); await axios.get("https://httpbin.org/get", maliciousConfig); ``` **Reproduction steps:** 1. Clone axios repository or `npm install axios` 2. Create file `poc.mjs` with the code above 3. Run: `node poc.mjs` 4. Observe the TypeError crash **Verified output (axios 1.13.4):** ``` TypeError: merge is not a function at computeConfigValue (lib/core/mergeConfig.js:100:25) at Object.forEach (lib/utils.js:280:10) at mergeConfig (lib/core/mergeConfig.js:98:9) ``` **Control tests performed:** | Test | Config | Result | |------|--------|--------| | Normal config | `{"timeout": 5000}` | SUCCESS | | Malicious config | `JSON.parse('{"__proto__": {"x": 1}}')` | **CRASH** | | Nested object | `{"headers": {"X-Test": "value"}}` | SUCCESS | **Attack scenario:** An application that accepts user input, parses it with `JSON.parse()`, and passes it to axios configuration will crash when receiving the payload `{"__proto__": {"x": 1}}`. ### Impact **Denial of Service** - Any application using axios that processes user-controlled JSON and passes it to axios configuration methods is vulnerable. The application will crash when processing the malicious payload. Affected environments: - Node.js servers using axios for HTTP requests - Any backend that passes parsed JSON to axios configuration This is NOT prototype pollution - the application crashes before any assignment occurs. --- ### Release Notes <details> <summary>axios/axios (axios)</summary> ### [`v1.13.5`](https://redirect.github.com/axios/axios/releases/tag/v1.13.5) [Compare Source](https://redirect.github.com/axios/axios/compare/v1.13.4...v1.13.5) #### Release 1.13.5 ##### Highlights - **Security:** Fixed a potential **Denial of Service** issue involving the `__proto__` key in `mergeConfig`. (PR [#&#8203;7369](https://redirect.github.com/axios/axios/pull/7369)) - **Bug fix:** Resolved an issue where `AxiosError` could be missing the `status` field on and after **v1.13.3**. (PR [#&#8203;7368](https://redirect.github.com/axios/axios/pull/7368)) ##### Changes ##### Security - Fix Denial of Service via `__proto__` key in `mergeConfig`. (PR [#&#8203;7369](https://redirect.github.com/axios/axios/pull/7369)) ##### Fixes - Fix/5657. (PR [#&#8203;7313](https://redirect.github.com/axios/axios/pull/7313)) - Ensure `status` is present in `AxiosError` on and after v1.13.3. (PR [#&#8203;7368](https://redirect.github.com/axios/axios/pull/7368)) ##### Features / Improvements - Add input validation to `isAbsoluteURL`. (PR [#&#8203;7326](https://redirect.github.com/axios/axios/pull/7326)) - Refactor: bump minor package versions. (PR [#&#8203;7356](https://redirect.github.com/axios/axios/pull/7356)) ##### Documentation - Clarify object-check comment. (PR [#&#8203;7323](https://redirect.github.com/axios/axios/pull/7323)) - Fix deprecated `Buffer` constructor usage and README formatting. (PR [#&#8203;7371](https://redirect.github.com/axios/axios/pull/7371)) ##### CI / Maintenance - Chore: fix issues with YAML. (PR [#&#8203;7355](https://redirect.github.com/axios/axios/pull/7355)) - CI: update workflow YAMLs. (PR [#&#8203;7372](https://redirect.github.com/axios/axios/pull/7372)) - CI: fix run condition. (PR [#&#8203;7373](https://redirect.github.com/axios/axios/pull/7373)) - Dev deps: bump `karma-sourcemap-loader` from 0.3.8 to 0.4.0. (PR [#&#8203;7360](https://redirect.github.com/axios/axios/pull/7360)) - Chore(release): prepare release 1.13.5. (PR [#&#8203;7379](https://redirect.github.com/axios/axios/pull/7379)) ##### New Contributors - [@&#8203;sachin11063](https://redirect.github.com/sachin11063) (first contribution — PR [#&#8203;7323](https://redirect.github.com/axios/axios/pull/7323)) - [@&#8203;asmitha-16](https://redirect.github.com/asmitha-16) (first contribution — PR [#&#8203;7326](https://redirect.github.com/axios/axios/pull/7326)) **Full Changelog:** <axios/axios@v1.13.4...v1.13.5> ### [`v1.13.4`](https://redirect.github.com/axios/axios/releases/tag/v1.13.4) [Compare Source](https://redirect.github.com/axios/axios/compare/v1.13.3...v1.13.4) #### Overview The release addresses issues discovered in v1.13.3 and includes significant CI/CD improvements. **Full Changelog**: [v1.13.3...v1.13.4](https://redirect.github.com/axios/axios/compare/v1.13.3...v1.13.4) #### What's New in v1.13.4 ##### Bug Fixes - **fix: issues with version 1.13.3** ([#&#8203;7352](https://redirect.github.com/axios/axios/issues/7352)) ([ee90dfc](https://redirect.github.com/axios/axios/commit/ee90dfc28abffbb61e24974b2bd3139a4a40ac76)) - Fixed issues discovered in v1.13.3 release - Cleaned up interceptor test files - Improved workflow configurations ##### Infrastructure & CI/CD - **refactor: ci and build** ([#&#8203;7340](https://redirect.github.com/axios/axios/issues/7340)) ([8ff6c19](https://redirect.github.com/axios/axios/commit/8ff6c19e2d764e8706e6a32b9f17a230dfe96e0c)) - Major refactoring of CI/CD workflows - Consolidated workflow files for better maintainability - Added mise configuration for the development environment - Improved sponsor block update automation - Enhanced issue and PR templates - Added automatic release notes generation - Implemented workflow cancellation for concurrent runs - **chore: codegen and some updates to workflows** ([76cf77b](https://redirect.github.com/axios/axios/commit/76cf77b)) - Code generation improvements - Workflow optimisations #### Migration Notes ##### Breaking Changes None in this release. ##### Deprecations None in this release. #### Contributors Thank you to all contributors who made this release possible! Special thanks to: - [jasonsaayman](https://redirect.github.com/jasonsaayman) - Release management and CI/CD improvements ### [`v1.13.3`](https://redirect.github.com/axios/axios/blob/HEAD/CHANGELOG.md#1133-2026-01-20) [Compare Source](https://redirect.github.com/axios/axios/compare/v1.13.2...v1.13.3) ##### Bug Fixes - **http2:** Use port 443 for HTTPS connections by default. ([#&#8203;7256](https://redirect.github.com/axios/axios/issues/7256)) ([d7e6065](https://redirect.github.com/axios/axios/commit/d7e60653460480ffacecf85383012ca1baa6263e)) - **interceptor:** handle the error in the same interceptor ([#&#8203;6269](https://redirect.github.com/axios/axios/issues/6269)) ([5945e40](https://redirect.github.com/axios/axios/commit/5945e40bb171d4ac4fc195df276cf952244f0f89)) - main field in package.json should correspond to cjs artifacts ([#&#8203;5756](https://redirect.github.com/axios/axios/issues/5756)) ([7373fbf](https://redirect.github.com/axios/axios/commit/7373fbff24cd92ce650d99ff6f7fe08c2e2a0a04)) - **package.json:** add 'bun' package.json 'exports' condition. Load the Node.js build in Bun instead of the browser build ([#&#8203;5754](https://redirect.github.com/axios/axios/issues/5754)) ([b89217e](https://redirect.github.com/axios/axios/commit/b89217e3e91de17a3d55e2b8f39ceb0e9d8aeda8)) - silentJSONParsing=false should throw on invalid JSON ([#&#8203;7253](https://redirect.github.com/axios/axios/issues/7253)) ([#&#8203;7257](https://redirect.github.com/axios/axios/issues/7257)) ([7d19335](https://redirect.github.com/axios/axios/commit/7d19335e43d6754a1a9a66e424f7f7da259895bf)) - turn AxiosError into a native error ([#&#8203;5394](https://redirect.github.com/axios/axios/issues/5394)) ([#&#8203;5558](https://redirect.github.com/axios/axios/issues/5558)) ([1c6a86d](https://redirect.github.com/axios/axios/commit/1c6a86dd2c0623ee1af043a8491dbc96d40e883b)) - **types:** add handlers to AxiosInterceptorManager interface ([#&#8203;5551](https://redirect.github.com/axios/axios/issues/5551)) ([8d1271b](https://redirect.github.com/axios/axios/commit/8d1271b49fc226ed7defd07cd577bd69a55bb13a)) - **types:** restore AxiosError.cause type from unknown to Error ([#&#8203;7327](https://redirect.github.com/axios/axios/issues/7327)) ([d8233d9](https://redirect.github.com/axios/axios/commit/d8233d9e8e9a64bfba9bbe01d475ba417510b82b)) - unclear error message is thrown when specifying an empty proxy authorization ([#&#8203;6314](https://redirect.github.com/axios/axios/issues/6314)) ([6ef867e](https://redirect.github.com/axios/axios/commit/6ef867e684adf7fb2343e3b29a79078a3c76dc29)) ##### Features - add `undefined` as a value in AxiosRequestConfig ([#&#8203;5560](https://redirect.github.com/axios/axios/issues/5560)) ([095033c](https://redirect.github.com/axios/axios/commit/095033c626895ecdcda2288050b63dcf948db3bd)) - add automatic minor and patch upgrades to dependabot ([#&#8203;6053](https://redirect.github.com/axios/axios/issues/6053)) ([65a7584](https://redirect.github.com/axios/axios/commit/65a7584eda6164980ddb8cf5372f0afa2a04c1ed)) - add Node.js coverage script using c8 (closes [#&#8203;7289](https://redirect.github.com/axios/axios/issues/7289)) ([#&#8203;7294](https://redirect.github.com/axios/axios/issues/7294)) ([ec9d94e](https://redirect.github.com/axios/axios/commit/ec9d94e9f88da13e9219acadf65061fb38ce080a)) - added copilot instructions ([3f83143](https://redirect.github.com/axios/axios/commit/3f83143bfe617eec17f9d7dcf8bafafeeae74c26)) - compatibility with frozen prototypes ([#&#8203;6265](https://redirect.github.com/axios/axios/issues/6265)) ([860e033](https://redirect.github.com/axios/axios/commit/860e03396a536e9b926dacb6570732489c9d7012)) - enhance pipeFileToResponse with error handling ([#&#8203;7169](https://redirect.github.com/axios/axios/issues/7169)) ([88d7884](https://redirect.github.com/axios/axios/commit/88d78842541610692a04282233933d078a8a2552)) - **types:** Intellisense for string literals in a widened union ([#&#8203;6134](https://redirect.github.com/axios/axios/issues/6134)) ([f73474d](https://redirect.github.com/axios/axios/commit/f73474d02c5aa957b2daeecee65508557fd3c6e5)), closes [/github.com/microsoft/TypeScript/issues/33471#issuecomment-1376364329](https://redirect.github.com//github.com/microsoft/TypeScript/issues/33471/issues/issuecomment-1376364329) ##### Reverts - Revert "fix: silentJSONParsing=false should throw on invalid JSON ([#&#8203;7253](https://redirect.github.com/axios/axios/issues/7253)) ([#&#8203;7](https://redirect.github.com/axios/axios/issues/7)…" ([#&#8203;7298](https://redirect.github.com/axios/axios/issues/7298)) ([a4230f5](https://redirect.github.com/axios/axios/commit/a4230f5581b3f58b6ff531b6dbac377a4fd7942a)), closes [#&#8203;7253](https://redirect.github.com/axios/axios/issues/7253) [#&#8203;7](https://redirect.github.com/axios/axios/issues/7) [#&#8203;7298](https://redirect.github.com/axios/axios/issues/7298) - **deps:** bump peter-evans/create-pull-request from 7 to 8 in the github-actions group ([#&#8203;7334](https://redirect.github.com/axios/axios/issues/7334)) ([2d6ad5e](https://redirect.github.com/axios/axios/commit/2d6ad5e48bd29b0b2b5e7e95fb473df98301543a)) ##### Contributors to this release - <img src="https://avatars.githubusercontent.com/u/175160345?v&#x3D;4&amp;s&#x3D;18" alt="avatar" width="18"/> [Ashvin Tiwari](https://redirect.github.com/ashvin2005 "+1752/-4 (#&#8203;7218 #&#8203;7218 )") - <img src="https://avatars.githubusercontent.com/u/71729144?v&#x3D;4&amp;s&#x3D;18" alt="avatar" width="18"/> [Nikunj Mochi](https://redirect.github.com/mochinikunj "+940/-12 (#&#8203;7294 #&#8203;7294 )") - <img src="https://avatars.githubusercontent.com/u/128113546?v&#x3D;4&amp;s&#x3D;18" alt="avatar" width="18"/> [Anchal Singh](https://redirect.github.com/imanchalsingh "+544/-102 (#&#8203;7169 #&#8203;7185 )") - <img src="https://avatars.githubusercontent.com/u/4814473?v&#x3D;4&amp;s&#x3D;18" alt="avatar" width="18"/> [jasonsaayman](https://redirect.github.com/jasonsaayman "+317/-73 (#&#8203;7334 #&#8203;7298 )") - <img src="https://avatars.githubusercontent.com/u/377911?v&#x3D;4&amp;s&#x3D;18" alt="avatar" width="18"/> [Julian Dax](https://redirect.github.com/brodo "+99/-120 (#&#8203;5558 )") - <img src="https://avatars.githubusercontent.com/u/184285082?v&#x3D;4&amp;s&#x3D;18" alt="avatar" width="18"/> [Akash Dhar Dubey](https://redirect.github.com/AKASHDHARDUBEY "+167/-0 (#&#8203;7287 #&#8203;7288 )") - <img src="https://avatars.githubusercontent.com/u/145687605?v&#x3D;4&amp;s&#x3D;18" alt="avatar" width="18"/> [Madhumita](https://redirect.github.com/madhumitaaa "+20/-68 (#&#8203;7198 )") - <img src="https://avatars.githubusercontent.com/u/24915252?v&#x3D;4&amp;s&#x3D;18" alt="avatar" width="18"/> [Tackoil](https://redirect.github.com/Tackoil "+80/-2 (#&#8203;6269 )") - <img src="https://avatars.githubusercontent.com/u/145078271?v&#x3D;4&amp;s&#x3D;18" alt="avatar" width="18"/> [Justin Dhillon](https://redirect.github.com/justindhillon "+41/-41 (#&#8203;6324 #&#8203;6315 )") - <img src="https://avatars.githubusercontent.com/u/184138832?v&#x3D;4&amp;s&#x3D;18" alt="avatar" width="18"/> [Rudransh](https://redirect.github.com/Rudrxxx "+71/-2 (#&#8203;7257 )") - <img src="https://avatars.githubusercontent.com/u/146366930?v&#x3D;4&amp;s&#x3D;18" alt="avatar" width="18"/> [WuMingDao](https://redirect.github.com/WuMingDao "+36/-36 (#&#8203;7215 )") - <img src="https://avatars.githubusercontent.com/u/46827243?v&#x3D;4&amp;s&#x3D;18" alt="avatar" width="18"/> [codenomnom](https://redirect.github.com/codenomnom "+70/-0 (#&#8203;7201 #&#8203;7201 )") - <img src="https://avatars.githubusercontent.com/u/189698992?v&#x3D;4&amp;s&#x3D;18" alt="avatar" width="18"/> [Nandan Acharya](https://redirect.github.com/Nandann018-ux "+60/-10 (#&#8203;7272 )") - <img src="https://avatars.githubusercontent.com/u/7225168?v&#x3D;4&amp;s&#x3D;18" alt="avatar" width="18"/> [Eric Dubé](https://redirect.github.com/KernelDeimos "+22/-40 (#&#8203;7042 )") - <img src="https://avatars.githubusercontent.com/u/915045?v&#x3D;4&amp;s&#x3D;18" alt="avatar" width="18"/> [Tibor Pilz](https://redirect.github.com/tiborpilz "+40/-4 (#&#8203;5551 )") - <img src="https://avatars.githubusercontent.com/u/23138717?v&#x3D;4&amp;s&#x3D;18" alt="avatar" width="18"/> [Gabriel Quaresma](https://redirect.github.com/joaoGabriel55 "+31/-4 (#&#8203;6314 )") - <img src="https://avatars.githubusercontent.com/u/21505?v&#x3D;4&amp;s&#x3D;18" alt="avatar" width="18"/> [Turadg Aleahmad](https://redirect.github.com/turadg "+23/-6 (#&#8203;6265 )") - <img src="https://avatars.githubusercontent.com/u/4273631?v&#x3D;4&amp;s&#x3D;18" alt="avatar" width="18"/> [JohnTitor](https://redirect.github.com/kiritosan "+14/-14 (#&#8203;6155 )") - <img src="https://avatars.githubusercontent.com/u/39668736?v&#x3D;4&amp;s&#x3D;18" alt="avatar" width="18"/> [rohit miryala](https://redirect.github.com/rohitmiryala "+22/-0 (#&#8203;7250 )") - <img src="https://avatars.githubusercontent.com/u/30316250?v&#x3D;4&amp;s&#x3D;18" alt="avatar" width="18"/> [Wilson Mun](https://redirect.github.com/wmundev "+20/-0 (#&#8203;6053 )") - <img src="https://avatars.githubusercontent.com/u/184506226?v&#x3D;4&amp;s&#x3D;18" alt="avatar" width="18"/> [techcodie](https://redirect.github.com/techcodie "+7/-7 (#&#8203;7236 )") - <img src="https://avatars.githubusercontent.com/u/187598667?v&#x3D;4&amp;s&#x3D;18" alt="avatar" width="18"/> [Ved Vadnere](https://redirect.github.com/Archis009 "+5/-6 (#&#8203;7283 )") - <img src="https://avatars.githubusercontent.com/u/115612815?v&#x3D;4&amp;s&#x3D;18" alt="avatar" width="18"/> [svihpinc](https://redirect.github.com/svihpinc "+5/-3 (#&#8203;6134 )") - <img src="https://avatars.githubusercontent.com/u/123884782?v&#x3D;4&amp;s&#x3D;18" alt="avatar" width="18"/> [SANDESH LENDVE](https://redirect.github.com/mrsandy1965 "+3/-3 (#&#8203;7246 )") - <img src="https://avatars.githubusercontent.com/u/12529395?v&#x3D;4&amp;s&#x3D;18" alt="avatar" width="18"/> [Lubos](https://redirect.github.com/mrlubos "+5/-1 (#&#8203;7312 )") - <img src="https://avatars.githubusercontent.com/u/709451?v&#x3D;4&amp;s&#x3D;18" alt="avatar" width="18"/> [Jarred Sumner](https://redirect.github.com/Jarred-Sumner "+5/-1 (#&#8203;5754 )") - <img src="https://avatars.githubusercontent.com/u/17907922?v&#x3D;4&amp;s&#x3D;18" alt="avatar" width="18"/> [Adam Hines](https://redirect.github.com/thebanjomatic "+2/-1 (#&#8203;5756 )") - <img src="https://avatars.githubusercontent.com/u/177472603?v&#x3D;4&amp;s&#x3D;18" alt="avatar" width="18"/> [Subhan Kumar Rai](https://redirect.github.com/Subhan030 "+2/-1 (#&#8203;7256 )") - <img src="https://avatars.githubusercontent.com/u/6473925?v&#x3D;4&amp;s&#x3D;18" alt="avatar" width="18"/> [Joseph Frazier](https://redirect.github.com/josephfrazier "+1/-1 (#&#8203;7311 )") - <img src="https://avatars.githubusercontent.com/u/184906930?v&#x3D;4&amp;s&#x3D;18" alt="avatar" width="18"/> [KT0803](https://redirect.github.com/KT0803 "+0/-2 (#&#8203;7229 )") - <img src="https://avatars.githubusercontent.com/u/6703955?v&#x3D;4&amp;s&#x3D;18" alt="avatar" width="18"/> [Albie](https://redirect.github.com/AlbertoSadoc "+1/-1 (#&#8203;5560 )") - <img src="https://avatars.githubusercontent.com/u/9452325?v&#x3D;4&amp;s&#x3D;18" alt="avatar" width="18"/> [Jake Hayes](https://redirect.github.com/thejayhaykid "+1/-0 (#&#8203;5999 )") ### [`v1.13.2`](https://redirect.github.com/axios/axios/blob/HEAD/CHANGELOG.md#1132-2025-11-04) [Compare Source](https://redirect.github.com/axios/axios/compare/v1.13.1...v1.13.2) ##### Bug Fixes - **http:** fix 'socket hang up' bug for keep-alive requests when using timeouts; ([#&#8203;7206](https://redirect.github.com/axios/axios/issues/7206)) ([8d37233](https://redirect.github.com/axios/axios/commit/8d372335f5c50ecd01e8615f2468a9eb19703117)) - **http:** use default export for http2 module to support stubs; ([#&#8203;7196](https://redirect.github.com/axios/axios/issues/7196)) ([0588880](https://redirect.github.com/axios/axios/commit/0588880ac7ddba7594ef179930493884b7e90bf5)) ##### Performance Improvements - **http:** fix early loop exit; ([#&#8203;7202](https://redirect.github.com/axios/axios/issues/7202)) ([12c314b](https://redirect.github.com/axios/axios/commit/12c314b603e7852a157e93e47edb626a471ba6c5)) ##### Contributors to this release - <img src="https://avatars.githubusercontent.com/u/12586868?v&#x3D;4&amp;s&#x3D;18" alt="avatar" width="18"/> [Dmitriy Mozgovoy](https://redirect.github.com/DigitalBrainJS "+28/-9 (#&#8203;7206 #&#8203;7202 )") - <img src="https://avatars.githubusercontent.com/u/1174718?v&#x3D;4&amp;s&#x3D;18" alt="avatar" width="18"/> [Kasper Isager Dalsgarð](https://redirect.github.com/kasperisager "+9/-9 (#&#8203;7196 )") ### [`v1.13.1`](https://redirect.github.com/axios/axios/blob/HEAD/CHANGELOG.md#1131-2025-10-28) [Compare Source](https://redirect.github.com/axios/axios/compare/v1.13.0...v1.13.1) ##### Bug Fixes - **http:** fixed a regression that caused the data stream to be interrupted for responses with non-OK HTTP statuses; ([#&#8203;7193](https://redirect.github.com/axios/axios/issues/7193)) ([bcd5581](https://redirect.github.com/axios/axios/commit/bcd5581d208cd372055afdcb2fd10b68ca40613c)) ##### Contributors to this release - <img src="https://avatars.githubusercontent.com/u/128113546?v&#x3D;4&amp;s&#x3D;18" alt="avatar" width="18"/> [Anchal Singh](https://redirect.github.com/imanchalsingh "+220/-111 (#&#8203;7173 )") - <img src="https://avatars.githubusercontent.com/u/12586868?v&#x3D;4&amp;s&#x3D;18" alt="avatar" width="18"/> [Dmitriy Mozgovoy](https://redirect.github.com/DigitalBrainJS "+18/-1 (#&#8203;7193 )") ### [`v1.13.0`](https://redirect.github.com/axios/axios/blob/HEAD/CHANGELOG.md#1130-2025-10-27) [Compare Source](https://redirect.github.com/axios/axios/compare/v1.12.2...v1.13.0) ##### Bug Fixes - **fetch:** prevent TypeError when config.env is undefined ([#&#8203;7155](https://redirect.github.com/axios/axios/issues/7155)) ([015faec](https://redirect.github.com/axios/axios/commit/015faeca9f26db76f9562760f04bb9f8229f4db1)) - resolve issue [#&#8203;7131](https://redirect.github.com/axios/axios/issues/7131) (added spacing in mergeConfig.js) ([#&#8203;7133](https://redirect.github.com/axios/axios/issues/7133)) ([9b9ec98](https://redirect.github.com/axios/axios/commit/9b9ec98548d93e9f2204deea10a5f1528bf3ce62)) ##### Features - **http:** add HTTP2 support; ([#&#8203;7150](https://redirect.github.com/axios/axios/issues/7150)) ([d676df7](https://redirect.github.com/axios/axios/commit/d676df772244726533ca320f42e967f5af056bac)) ##### Contributors to this release - <img src="https://avatars.githubusercontent.com/u/12586868?v&#x3D;4&amp;s&#x3D;18" alt="avatar" width="18"/> [Dmitriy Mozgovoy](https://redirect.github.com/DigitalBrainJS "+794/-180 (#&#8203;7186 #&#8203;7150 #&#8203;7039 )") - <img src="https://avatars.githubusercontent.com/u/189505037?v&#x3D;4&amp;s&#x3D;18" alt="avatar" width="18"/> [Noritaka Kobayashi](https://redirect.github.com/noritaka1166 "+24/-509 (#&#8203;7032 )") - <img src="https://avatars.githubusercontent.com/u/195581631?v&#x3D;4&amp;s&#x3D;18" alt="avatar" width="18"/> [Aviraj2929](https://redirect.github.com/Aviraj2929 "+211/-93 (#&#8203;7136 #&#8203;7135 #&#8203;7134 #&#8203;7112 )") - <img src="https://avatars.githubusercontent.com/u/181717941?v&#x3D;4&amp;s&#x3D;18" alt="avatar" width="18"/> [prasoon patel](https://redirect.github.com/Prasoon52 "+167/-6 (#&#8203;7099 )") - <img src="https://avatars.githubusercontent.com/u/141911040?v&#x3D;4&amp;s&#x3D;18" alt="avatar" width="18"/> [Samyak Dandge](https://redirect.github.com/Samy-in "+134/-0 (#&#8203;7171 )") - <img src="https://avatars.githubusercontent.com/u/128113546?v&#x3D;4&amp;s&#x3D;18" alt="avatar" width="18"/> [Anchal Singh](https://redirect.github.com/imanchalsingh "+53/-56 (#&#8203;7170 )") - <img src="https://avatars.githubusercontent.com/u/146073621?v&#x3D;4&amp;s&#x3D;18" alt="avatar" width="18"/> [Rahul Kumar](https://redirect.github.com/jaiyankargupta "+28/-28 (#&#8203;7073 )") - <img src="https://avatars.githubusercontent.com/u/148716794?v&#x3D;4&amp;s&#x3D;18" alt="avatar" width="18"/> [Amit Verma](https://redirect.github.com/Amitverma0509 "+24/-13 (#&#8203;7129 )") - <img src="https://avatars.githubusercontent.com/u/141427581?v&#x3D;4&amp;s&#x3D;18" alt="avatar" width="18"/> [Abhishek3880](https://redirect.github.com/abhishekmaniy "+23/-4 (#&#8203;7119 #&#8203;7117 #&#8203;7116 #&#8203;7115 )") - <img src="https://avatars.githubusercontent.com/u/91522146?v&#x3D;4&amp;s&#x3D;18" alt="avatar" width="18"/> [Dhvani Maktuporia](https://redirect.github.com/Dhvani365 "+14/-5 (#&#8203;7175 )") - <img src="https://avatars.githubusercontent.com/u/41838423?v&#x3D;4&amp;s&#x3D;18" alt="avatar" width="18"/> [Usama Ayoub](https://redirect.github.com/sam3690 "+4/-4 (#&#8203;7133 )") - <img src="https://avatars.githubusercontent.com/u/79366821?v&#x3D;4&amp;s&#x3D;18" alt="avatar" width="18"/> [ikuy1203](https://redirect.github.com/ikuy1203 "+3/-3 (#&#8203;7166 )") - <img src="https://avatars.githubusercontent.com/u/74639234?v&#x3D;4&amp;s&#x3D;18" alt="avatar" width="18"/> [Nikhil Simon Toppo](https://redirect.github.com/Kirito-Excalibur "+1/-1 (#&#8203;7172 )") - <img src="https://avatars.githubusercontent.com/u/200562195?v&#x3D;4&amp;s&#x3D;18" alt="avatar" width="18"/> [Jane Wangari](https://redirect.github.com/Wangarijane "+1/-1 (#&#8203;7155 )") - <img src="https://avatars.githubusercontent.com/u/78318848?v&#x3D;4&amp;s&#x3D;18" alt="avatar" width="18"/> [Supakorn Ieamgomol](https://redirect.github.com/Supakornn "+1/-1 (#&#8203;7065 )") - <img src="https://avatars.githubusercontent.com/u/134518?v&#x3D;4&amp;s&#x3D;18" alt="avatar" width="18"/> [Kian-Meng Ang](https://redirect.github.com/kianmeng "+1/-1 (#&#8203;7046 )") - <img src="https://avatars.githubusercontent.com/u/13148112?v&#x3D;4&amp;s&#x3D;18" alt="avatar" width="18"/> [UTSUMI Keiji](https://redirect.github.com/k-utsumi "+1/-1 (#&#8203;7037 )") #### [1.12.2](https://redirect.github.com/axios/axios/compare/v1.12.1...v1.12.2) (2025-09-14) ##### Bug Fixes - **fetch:** use current global fetch instead of cached one when env fetch is not specified to keep MSW support; ([#&#8203;7030](https://redirect.github.com/axios/axios/issues/7030)) ([cf78825](https://redirect.github.com/axios/axios/commit/cf78825e1229b60d1629ad0bbc8a752ff43c3f53)) ##### Contributors to this release - <img src="https://avatars.githubusercontent.com/u/12586868?v&#x3D;4&amp;s&#x3D;18" alt="avatar" width="18"/> [Dmitriy Mozgovoy](https://redirect.github.com/DigitalBrainJS "+247/-16 (#&#8203;7030 #&#8203;7022 #&#8203;7024 )") - <img src="https://avatars.githubusercontent.com/u/189505037?v&#x3D;4&amp;s&#x3D;18" alt="avatar" width="18"/> [Noritaka Kobayashi](https://redirect.github.com/noritaka1166 "+2/-6 (#&#8203;7028 #&#8203;7029 )") #### [1.12.1](https://redirect.github.com/axios/axios/compare/v1.12.0...v1.12.1) (2025-09-12) ##### Bug Fixes - **types:** fixed env config types; ([#&#8203;7020](https://redirect.github.com/axios/axios/issues/7020)) ([b5f26b7](https://redirect.github.com/axios/axios/commit/b5f26b75bdd9afa95016fb67d0cab15fc74cbf05)) ##### Contributors to this release - <img src="https://avatars.githubusercontent.com/u/12586868?v&#x3D;4&amp;s&#x3D;18" alt="avatar" width="18"/> [Dmitriy Mozgovoy](https://redirect.github.com/DigitalBrainJS "+10/-4 (#&#8203;7020 )") </details> --- ### Configuration 📅 **Schedule**: Branch creation - "" (UTC), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/splunk/addonfactory-ucc-generator). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi45Ny4wIiwidXBkYXRlZEluVmVyIjoiNDMuMjIuMCIsInRhcmdldEJyYW5jaCI6ImRldmVsb3AiLCJsYWJlbHMiOltdfQ==--> --------- Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: kkedziak-splunk <kkedziak@splunk.com>
1 parent b2d5c44 commit 2518b47

File tree

2 files changed

+55
-68
lines changed

2 files changed

+55
-68
lines changed

ui/package.json

Lines changed: 1 addition & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -51,7 +51,7 @@
5151
"@testing-library/react": "^15.0.6",
5252
"@vitejs/plugin-react": "^4.7.0",
5353
"@vitest/coverage-istanbul": "^3.2.4",
54-
"glob": "^11.1.0",
54+
"glob": "^13.0.6",
5555
"immutability-helper": "^3.1.1",
5656
"js-yaml": "^4.1.1",
5757
"lodash": "^4.17.21",
@@ -92,7 +92,6 @@
9292
"@testing-library/jest-dom": "^6.6.3",
9393
"@testing-library/react": "^15.0.6",
9494
"@testing-library/user-event": "^14.6.1",
95-
"@types/glob": "^9.0.0",
9695
"@types/jest-image-snapshot": "^6.4.0",
9796
"@types/js-yaml": "^4.0.9",
9897
"@types/lodash": "^4.17.20",

ui/yarn.lock

Lines changed: 54 additions & 66 deletions
Original file line numberDiff line numberDiff line change
@@ -3944,13 +3944,6 @@
39443944
resolved "https://registry.npmjs.org/@types/geojson/-/geojson-7946.0.16.tgz"
39453945
integrity sha512-6C8nqWur3j98U6+lXDfTUWIfgvZU+EumvpHKcYjujKH7woYyLj2sUmff0tRhrqM7BohUw7Pz3ZB1jj2gW9Fvmg==
39463946

3947-
"@types/glob@^9.0.0":
3948-
version "9.0.0"
3949-
resolved "https://registry.npmjs.org/@types/glob/-/glob-9.0.0.tgz"
3950-
integrity sha512-00UxlRaIUvYm4R4W9WYkN8/J+kV8fmOQ7okeH6YFtGWFMt3odD45tpG5yA5wnL7HE6lLgjaTW5n14ju2hl2NNA==
3951-
dependencies:
3952-
glob "*"
3953-
39543947
"@types/graceful-fs@^4.1.3":
39553948
version "4.1.9"
39563949
resolved "https://registry.npmjs.org/@types/graceful-fs/-/graceful-fs-4.1.9.tgz"
@@ -5012,7 +5005,7 @@ async-function@^1.0.0:
50125005

50135006
asynckit@^0.4.0:
50145007
version "0.4.0"
5015-
resolved "https://registry.npmjs.org/asynckit/-/asynckit-0.4.0.tgz"
5008+
resolved "https://registry.npmjs.org/asynckit/-/asynckit-0.4.0.tgz#c79ed97f7f34cb8f2ba1bc9790bcc366474b4b79"
50165009
integrity sha512-Oei9OH4tRh0YqU3GxhX79dM/mwVgvbZJaSNaRk+bshkj0S5cfHcgYakreBjrHwatXKbz+IoIdYLxrKim2MjW0Q==
50175010

50185011
available-typed-arrays@^1.0.7:
@@ -5028,12 +5021,12 @@ axe-core@^4.10.0, axe-core@^4.2.0:
50285021
integrity sha512-Xm7bpRXnDSX2YE2YFfBk2FnF0ep6tmG7xPh8iHee8MIcrgq762Nkce856dYtJYLkuIoYZvGfTs/PbZhideTcEg==
50295022

50305023
axios@^1.12.0, axios@^1.6.1:
5031-
version "1.12.2"
5032-
resolved "https://registry.npmjs.org/axios/-/axios-1.12.2.tgz#6c307390136cf7a2278d09cec63b136dfc6e6da7"
5033-
integrity sha512-vMJzPewAlRyOgxV2dU0Cuz2O8zzzx9VYtbJOaBgXFeLc4IV/Eg50n4LowmehOOR61S8ZMpc2K5Sa7g6A4jfkUw==
5024+
version "1.13.6"
5025+
resolved "https://registry.npmjs.org/axios/-/axios-1.13.6.tgz#c3f92da917dc209a15dd29936d20d5089b6b6c98"
5026+
integrity sha512-ChTCHMouEe2kn713WHbQGcuYrr6fXTBiu460OTwWrWob16g1bXn4vtz07Ope7ewMozJAnEquLk5lWQWtBig9DQ==
50345027
dependencies:
5035-
follow-redirects "^1.15.6"
5036-
form-data "^4.0.4"
5028+
follow-redirects "^1.15.11"
5029+
form-data "^4.0.5"
50375030
proxy-from-env "^1.1.0"
50385031

50395032
axobject-query@^4.1.0:
@@ -5228,6 +5221,11 @@ balanced-match@^2.0.0:
52285221
resolved "https://registry.npmjs.org/balanced-match/-/balanced-match-2.0.0.tgz"
52295222
integrity sha512-1ugUSr8BHXRnK23KfuYS+gVMC3LB8QGH9W1iGtDPsNWoQbgtXSExkBu2aDR4epiGWZOjZsj6lDl/N/AqqTC3UA==
52305223

5224+
balanced-match@^4.0.2:
5225+
version "4.0.4"
5226+
resolved "https://registry.npmjs.org/balanced-match/-/balanced-match-4.0.4.tgz#bfb10662feed8196a2c62e7c68e17720c274179a"
5227+
integrity sha512-BLrgEcRTwX2o6gGxGOCNyMvGSp35YofuYzw9h1IMTRmKqttAZZVU67bdb9Pr2vUHA8+j3i2tJfjO6C6+4myGTA==
5228+
52315229
base64-arraybuffer@^1.0.2:
52325230
version "1.0.2"
52335231
resolved "https://registry.npmjs.org/base64-arraybuffer/-/base64-arraybuffer-1.0.2.tgz#1c37589a7c4b0746e34bd1feb951da2df01c1bdc"
@@ -5290,6 +5288,13 @@ brace-expansion@^2.0.1:
52905288
dependencies:
52915289
balanced-match "^1.0.0"
52925290

5291+
brace-expansion@^5.0.2:
5292+
version "5.0.4"
5293+
resolved "https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.4.tgz#614daaecd0a688f660bbbc909a8748c3d80d4336"
5294+
integrity sha512-h+DEnpVvxmfVefa4jFbCf5HdH5YMDXRsmKflpf1pILZWRFlTbJpxeU55nJl4Smt5HQaGzg1o6RHFPJaOqnmBDg==
5295+
dependencies:
5296+
balanced-match "^4.0.2"
5297+
52935298
braces@^3.0.3:
52945299
version "3.0.3"
52955300
resolved "https://registry.npmjs.org/braces/-/braces-3.0.3.tgz"
@@ -5722,7 +5727,7 @@ colord@^2.9.3:
57225727

57235728
combined-stream@^1.0.8:
57245729
version "1.0.8"
5725-
resolved "https://registry.npmjs.org/combined-stream/-/combined-stream-1.0.8.tgz"
5730+
resolved "https://registry.npmjs.org/combined-stream/-/combined-stream-1.0.8.tgz#c3d45a8b34fd730631a110a8a2520682b31d5a7f"
57265731
integrity sha512-FQN4MRfuJeHf7cBbBMJFXhKSDq+2kAArBlmRBvcvFE5BB1HZKXtSFASDhdlz9zOYwxh8lDdnvmMOe/+5cdoEdg==
57275732
dependencies:
57285733
delayed-stream "~1.0.0"
@@ -6384,7 +6389,7 @@ del@^6.1.1:
63846389

63856390
delayed-stream@~1.0.0:
63866391
version "1.0.0"
6387-
resolved "https://registry.npmjs.org/delayed-stream/-/delayed-stream-1.0.0.tgz"
6392+
resolved "https://registry.npmjs.org/delayed-stream/-/delayed-stream-1.0.0.tgz#df3ae199acadfb7d440aaae0b29e2272b24ec619"
63886393
integrity sha512-ZySD7Nf91aLB0RxL4KGrKHBXl7Eds1DAmEdcoVawXnLD7SDhpNgtuII2aAkg7a7QS41jxPSZ17p4VdGnMHk3MQ==
63896394

63906395
dependency-graph@^0.11.0:
@@ -6724,7 +6729,7 @@ es-object-atoms@^1.0.0, es-object-atoms@^1.1.1:
67246729

67256730
es-set-tostringtag@^2.0.3, es-set-tostringtag@^2.1.0:
67266731
version "2.1.0"
6727-
resolved "https://registry.npmjs.org/es-set-tostringtag/-/es-set-tostringtag-2.1.0.tgz"
6732+
resolved "https://registry.npmjs.org/es-set-tostringtag/-/es-set-tostringtag-2.1.0.tgz#f31dbbe0c183b00a6d26eb6325c810c0fd18bd4d"
67286733
integrity sha512-j6vWzfrGVfyXxge+O0x5sh6cvxAog0a/4Rdd2K36zCMV5eJ+/+tOAngRO8cODMNWbVRdVlmGZQL2YS3yR8bIUA==
67296734
dependencies:
67306735
es-errors "^1.3.0"
@@ -7392,9 +7397,9 @@ flatted@^3.2.9:
73927397
resolved "https://registry.npmjs.org/flatted/-/flatted-3.3.3.tgz"
73937398
integrity sha512-GX+ysw4PBCz0PzosHDepZGANEuFCMLrnRTiEy9McGjmkCQYwRq4A/X786G/fjM/+OjsWSU1ZrY5qyARZmO/uwg==
73947399

7395-
follow-redirects@^1.0.0, follow-redirects@^1.15.6:
7400+
follow-redirects@^1.0.0, follow-redirects@^1.15.11:
73967401
version "1.15.11"
7397-
resolved "https://registry.npmjs.org/follow-redirects/-/follow-redirects-1.15.11.tgz"
7402+
resolved "https://registry.npmjs.org/follow-redirects/-/follow-redirects-1.15.11.tgz#777d73d72a92f8ec4d2e410eb47352a56b8e8340"
73987403
integrity sha512-deG2P0JfjrTxl50XGCDyfI97ZGVCxIpfKYmfyrQ54n5FO/0gfIES8C/Psl6kWVDolizcaaxZJnTS0QSMxvnsBQ==
73997404

74007405
for-each@^0.3.3, for-each@^0.3.5:
@@ -7412,18 +7417,18 @@ foreground-child@^2.0.0:
74127417
cross-spawn "^7.0.0"
74137418
signal-exit "^3.0.2"
74147419

7415-
foreground-child@^3.1.0, foreground-child@^3.3.1:
7420+
foreground-child@^3.1.0:
74167421
version "3.3.1"
74177422
resolved "https://registry.npmjs.org/foreground-child/-/foreground-child-3.3.1.tgz"
74187423
integrity sha512-gIXjKqtFuWEgzFRJA9WCQeSJLZDjgJUOMCMzxtvFq/37KojM1BFGufqsCy0r4qSQmYLsZYMeyRqzIWOMup03sw==
74197424
dependencies:
74207425
cross-spawn "^7.0.6"
74217426
signal-exit "^4.0.1"
74227427

7423-
form-data@^4.0.4:
7424-
version "4.0.4"
7425-
resolved "https://registry.npmjs.org/form-data/-/form-data-4.0.4.tgz"
7426-
integrity sha512-KrGhL9Q4zjj0kiUt5OO4Mr/A/jlI2jDYs5eHBpYHPcBEVSiipAvn2Ko2HnPe20rmcuuvMHNdZFp+4IlGTMF0Ow==
7428+
form-data@^4.0.5:
7429+
version "4.0.5"
7430+
resolved "https://registry.npmjs.org/form-data/-/form-data-4.0.5.tgz#b49e48858045ff4cbf6b03e1805cebcad3679053"
7431+
integrity sha512-8RipRLol37bNs2bhoV67fiTEvdTrbMUYcFTiy3+wuuOnUog2QBHCZWXDRijWQfAkhBj2Uf5UnVaiWwA5vdd82w==
74277432
dependencies:
74287433
asynckit "^0.4.0"
74297434
combined-stream "^1.0.8"
@@ -7509,7 +7514,7 @@ get-caller-file@^2.0.1, get-caller-file@^2.0.5:
75097514

75107515
get-intrinsic@^1.2.4, get-intrinsic@^1.2.5, get-intrinsic@^1.2.6, get-intrinsic@^1.2.7, get-intrinsic@^1.3.0:
75117516
version "1.3.0"
7512-
resolved "https://registry.npmjs.org/get-intrinsic/-/get-intrinsic-1.3.0.tgz"
7517+
resolved "https://registry.npmjs.org/get-intrinsic/-/get-intrinsic-1.3.0.tgz#743f0e3b6964a93a5491ed1bffaae054d7f98d01"
75137518
integrity sha512-9fSjSaos/fRIVIp+xSJlE6lfwhES7LNtKaCBIamHsjr2na1BiABJPo0mOjjz8GJDURarmCPGqaiVg5mfjb98CQ==
75147519
dependencies:
75157520
call-bind-apply-helpers "^1.0.2"
@@ -7574,18 +7579,6 @@ glob-parent@^5.1.2, glob-parent@^6.0.2:
75747579
dependencies:
75757580
is-glob "^4.0.1"
75767581

7577-
glob@*:
7578-
version "11.0.3"
7579-
resolved "https://registry.npmjs.org/glob/-/glob-11.0.3.tgz"
7580-
integrity sha512-2Nim7dha1KVkaiF4q6Dj+ngPPMdfvLJEOpZk/jKiUAkqKebpGAWQXAq9z1xu9HKu5lWfqw/FASuccEjyznjPaA==
7581-
dependencies:
7582-
foreground-child "^3.3.1"
7583-
jackspeak "^4.1.1"
7584-
minimatch "^10.0.3"
7585-
minipass "^7.1.2"
7586-
package-json-from-dist "^1.0.0"
7587-
path-scurry "^2.0.0"
7588-
75897582
glob@^10.0.0, glob@^10.3.10:
75907583
version "10.4.5"
75917584
resolved "https://registry.npmjs.org/glob/-/glob-10.4.5.tgz"
@@ -7610,17 +7603,14 @@ glob@^10.4.1:
76107603
package-json-from-dist "^1.0.0"
76117604
path-scurry "^1.11.1"
76127605

7613-
glob@^11.1.0:
7614-
version "11.1.0"
7615-
resolved "https://registry.npmjs.org/glob/-/glob-11.1.0.tgz#4f826576e4eb99c7dad383793d2f9f08f67e50a6"
7616-
integrity sha512-vuNwKSaKiqm7g0THUBu2x7ckSs3XJLXE+2ssL7/MfTGPLLcrJQ/4Uq1CjPTtO5cCIiRxqvN6Twy1qOwhL0Xjcw==
7606+
glob@^13.0.6:
7607+
version "13.0.6"
7608+
resolved "https://registry.npmjs.org/glob/-/glob-13.0.6.tgz#078666566a425147ccacfbd2e332deb66a2be71d"
7609+
integrity sha512-Wjlyrolmm8uDpm/ogGyXZXb1Z+Ca2B8NbJwqBVg0axK9GbBeoS7yGV6vjXnYdGm6X53iehEuxxbyiKp8QmN4Vw==
76177610
dependencies:
7618-
foreground-child "^3.3.1"
7619-
jackspeak "^4.1.1"
7620-
minimatch "^10.1.1"
7621-
minipass "^7.1.2"
7622-
package-json-from-dist "^1.0.0"
7623-
path-scurry "^2.0.0"
7611+
minimatch "^10.2.2"
7612+
minipass "^7.1.3"
7613+
path-scurry "^2.0.2"
76247614

76257615
glob@^7.1.3, glob@^7.1.4, glob@^7.1.6:
76267616
version "7.2.3"
@@ -8571,13 +8561,6 @@ jackspeak@^3.1.2:
85718561
optionalDependencies:
85728562
"@pkgjs/parseargs" "^0.11.0"
85738563

8574-
jackspeak@^4.1.1:
8575-
version "4.1.1"
8576-
resolved "https://registry.npmjs.org/jackspeak/-/jackspeak-4.1.1.tgz"
8577-
integrity sha512-zptv57P3GpL+O0I7VdMJNBZCu+BPHVQUk55Ft8/QCJjTVxrnJHuVuX/0Bl2A6/+2oyR/ZMEuFKwmzqqZ/U5nPQ==
8578-
dependencies:
8579-
"@isaacs/cliui" "^8.0.2"
8580-
85818564
jest-changed-files@30.0.5:
85828565
version "30.0.5"
85838566
resolved "https://registry.npmjs.org/jest-changed-files/-/jest-changed-files-30.0.5.tgz"
@@ -10297,12 +10280,12 @@ miller-rabin@^4.0.0:
1029710280

1029810281
mime-db@1.52.0:
1029910282
version "1.52.0"
10300-
resolved "https://registry.npmjs.org/mime-db/-/mime-db-1.52.0.tgz"
10283+
resolved "https://registry.npmjs.org/mime-db/-/mime-db-1.52.0.tgz#bbabcdc02859f4987301c856e3387ce5ec43bf70"
1030110284
integrity sha512-sPU4uV7dYlvtWJxwwxHD0PuihVNiE7TyAbQ5SWxDCB9mUYvOgroQOwYQQOKPJ8CIbE+1ETVlOoK1UC2nU3gYvg==
1030210285

1030310286
mime-types@^2.1.12:
1030410287
version "2.1.35"
10305-
resolved "https://registry.npmjs.org/mime-types/-/mime-types-2.1.35.tgz"
10288+
resolved "https://registry.npmjs.org/mime-types/-/mime-types-2.1.35.tgz#381a871b62a734450660ae3deee44813f70d959a"
1030610289
integrity sha512-ZDY+bPm5zTTF+YpCrAU9nK0UgICYPT0QtT1NZWFv4s++TNkcgVaT0g6+4R2uI4MjQjzysHB1zxuWL50hzaeXiw==
1030710290
dependencies:
1030810291
mime-db "1.52.0"
@@ -10327,7 +10310,7 @@ minimalistic-crypto-utils@^1.0.1:
1032710310
resolved "https://registry.npmjs.org/minimalistic-crypto-utils/-/minimalistic-crypto-utils-1.0.1.tgz"
1032810311
integrity sha512-JIYlbt6g8i5jKfJ3xz7rF0LXmv2TkDxBLUkiBeZ7bAx4GnnNMr8xFpGnOxn6GhTEHx3SjRrZEoU+j04prX1ktg==
1032910312

10330-
minimatch@10.0.3, minimatch@^10.0.3:
10313+
minimatch@10.0.3:
1033110314
version "10.0.3"
1033210315
resolved "https://registry.npmjs.org/minimatch/-/minimatch-10.0.3.tgz"
1033310316
integrity sha512-IPZ167aShDZZUMdRk66cyQAW3qr0WzbHkPdMYa8bzZhlHhO3jALbKdxcaak7W9FfT2rZNpQuUu4Od7ILEpXSaw==
@@ -10341,12 +10324,12 @@ minimatch@9.0.3:
1034110324
dependencies:
1034210325
brace-expansion "^2.0.1"
1034310326

10344-
minimatch@^10.1.1:
10345-
version "10.1.1"
10346-
resolved "https://registry.npmjs.org/minimatch/-/minimatch-10.1.1.tgz#e6e61b9b0c1dcab116b5a7d1458e8b6ae9e73a55"
10347-
integrity sha512-enIvLvRAFZYXJzkCYG5RKmPfrFArdLv+R+lbQ53BmIMLIry74bjKzX6iHAm8WYamJkhSSEabrWN5D97XnKObjQ==
10327+
minimatch@^10.2.2:
10328+
version "10.2.4"
10329+
resolved "https://registry.npmjs.org/minimatch/-/minimatch-10.2.4.tgz#465b3accbd0218b8281f5301e27cedc697f96fde"
10330+
integrity sha512-oRjTw/97aTBN0RHbYCdtF1MQfvusSIBQM0IZEgzl6426+8jSC0nF1a/GmnVLpfB9yyr6g6FTqWqiZVbxrtaCIg==
1034810331
dependencies:
10349-
"@isaacs/brace-expansion" "^5.0.0"
10332+
brace-expansion "^5.0.2"
1035010333

1035110334
minimatch@^3.0.4, minimatch@^3.0.5, minimatch@^3.1.1, minimatch@^3.1.2:
1035210335
version "3.1.2"
@@ -10393,6 +10376,11 @@ minipass@^4.2.4:
1039310376
resolved "https://registry.npmjs.org/minipass/-/minipass-7.1.2.tgz"
1039410377
integrity sha512-qOOzS1cBTWYF4BH8fVePDBOO9iptMnGUEZwNc/cMWnTV2nVLZ7VoNWEPHkYczZA0pdoA7dl6e7FL659nX9S2aw==
1039510378

10379+
minipass@^7.1.3:
10380+
version "7.1.3"
10381+
resolved "https://registry.npmjs.org/minipass/-/minipass-7.1.3.tgz#79389b4eb1bb2d003a9bba87d492f2bd37bdc65b"
10382+
integrity sha512-tEBHqDnIoM/1rXME1zgka9g6Q2lcoCkxHLuc7ODJ5BxbP5d4c2Z5cGgtXAku59200Cx7diuHTOYfSBD8n6mm8A==
10383+
1039610384
mkdirp@^1.0.4:
1039710385
version "1.0.4"
1039810386
resolved "https://registry.npmjs.org/mkdirp/-/mkdirp-1.0.4.tgz"
@@ -10995,10 +10983,10 @@ path-scurry@^1.11.1, path-scurry@^1.6.1:
1099510983
lru-cache "^10.2.0"
1099610984
minipass "^5.0.0 || ^6.0.2 || ^7.0.0"
1099710985

10998-
path-scurry@^2.0.0:
10999-
version "2.0.0"
11000-
resolved "https://registry.npmjs.org/path-scurry/-/path-scurry-2.0.0.tgz"
11001-
integrity sha512-ypGJsmGtdXUOeM5u93TyeIEfEhM6s+ljAhrk5vAvSx8uyY/02OvrZnA0YNGUrPXfpJMgI1ODd3nwz8Npx4O4cg==
10986+
path-scurry@^2.0.2:
10987+
version "2.0.2"
10988+
resolved "https://registry.npmjs.org/path-scurry/-/path-scurry-2.0.2.tgz#6be0d0ee02a10d9e0de7a98bae65e182c9061f85"
10989+
integrity sha512-3O/iVVsJAPsOnpwWIeD+d6z/7PmqApyQePUtCndjatj/9I5LylHvt5qluFaBT3I5h3r1ejfR056c+FCv+NnNXg==
1100210990
dependencies:
1100310991
lru-cache "^11.0.0"
1100410992
minipass "^7.1.2"
@@ -11330,7 +11318,7 @@ protocol-buffers-schema@^3.3.1:
1133011318

1133111319
proxy-from-env@^1.1.0:
1133211320
version "1.1.0"
11333-
resolved "https://registry.npmjs.org/proxy-from-env/-/proxy-from-env-1.1.0.tgz"
11321+
resolved "https://registry.npmjs.org/proxy-from-env/-/proxy-from-env-1.1.0.tgz#e102f16ca355424865755d2c9e8ea4f24d58c3e2"
1133411322
integrity sha512-D+zkORCbA9f1tdWRK0RaCR3GPv50cMxcrz4X8k5LTSUD1Dkw47mKJEZQNunItRTkWwgtaUSo1RVFRIG9ZXiFYg==
1133511323

1133611324
public-encrypt@^4.0.3:

0 commit comments

Comments
 (0)