also looking at this
chore(deps): update all non-major dependencies
#664This PR contains the following updates:
| Package | Change | Age | Adoption | Passing | Confidence | Type | Update |
|---|---|---|---|---|---|---|---|
| @types/bun (source) | ^1.3.6 → ^1.3.8 | devDependencies | patch | ||||
| axios (source) | ^1.13.2 → ^1.13.5 | dependencies | patch | ||||
| stacksjs/action-releaser | v1.2.6 → v1.2.8 | action | patch | ||||
| vue (source) | ^3.5.27 → ^3.5.28 | dependencies | patch |
Release Notes
axios/axios (axios)
v1.13.5
Release 1.13.5
Highlights
- Security: Fixed a potential Denial of Service issue involving the
__proto__key inmergeConfig. (PR #7369) - Bug fix: Resolved an issue where
AxiosErrorcould be missing thestatusfield on and after v1.13.3. (PR #7368)
Changes
Security
- Fix Denial of Service via
__proto__key inmergeConfig. (PR #7369)
Fixes
Features / Improvements
- Add input validation to
isAbsoluteURL. (PR #7326) - Refactor: bump minor package versions. (PR #7356)
Documentation
- Clarify object-check comment. (PR #7323)
- Fix deprecated
Bufferconstructor usage and README formatting. (PR #7371)
CI / Maintenance
- Chore: fix issues with YAML. (PR #7355)
- CI: update workflow YAMLs. (PR #7372)
- CI: fix run condition. (PR #7373)
- Dev deps: bump
karma-sourcemap-loaderfrom 0.3.8 to 0.4.0. (PR #7360) - Chore(release): prepare release 1.13.5. (PR #7379)
New Contributors
- @sachin11063 (first contribution — PR #7323)
- @asmitha-16 (first contribution — PR #7326)
Full Changelog: https://github.com/axios/axios/compare/v1.13.4...v1.13.5
v1.13.4
Overview
The release addresses issues discovered in v1.13.3 and includes significant CI/CD improvements.
Full Changelog: v1.13.3...v1.13.4
What's New in v1.13.4
Bug Fixes
- fix: issues with version 1.13.3 (#7352) (ee90dfc)
- Fixed issues discovered in v1.13.3 release
- Cleaned up interceptor test files
- Improved workflow configurations
Infrastructure & CI/CD
refactor: ci and build (#7340) (8ff6c19)
- Major refactoring of CI/CD workflows
- Consolidated workflow files for better maintainability
- Added mise configuration for the development environment
- Improved sponsor block update automation
- Enhanced issue and PR templates
- Added automatic release notes generation
- Implemented workflow cancellation for concurrent runs
chore: codegen and some updates to workflows (76cf77b)
- Code generation improvements
- Workflow optimisations
Migration Notes
Breaking Changes
None in this release.
Deprecations
None in this release.
Contributors
Thank you to all contributors who made this release possible! Special thanks to:
- jasonsaayman - Release management and CI/CD improvements
v1.13.3
Bug Fixes
- http2: Use port 443 for HTTPS connections by default. (#7256) (d7e6065)
- interceptor: handle the error in the same interceptor (#6269) (5945e40)
- main field in package.json should correspond to cjs artifacts (#5756) (7373fbf)
- package.json: add 'bun' package.json 'exports' condition. Load the Node.js build in Bun instead of the browser build (#5754) (b89217e)
- silentJSONParsing=false should throw on invalid JSON (#7253) (#7257) (7d19335)
- turn AxiosError into a native error (#5394) (#5558) (1c6a86d)
- types: add handlers to AxiosInterceptorManager interface (#5551) (8d1271b)
- types: restore AxiosError.cause type from unknown to Error (#7327) (d8233d9)
- unclear error message is thrown when specifying an empty proxy authorization (#6314) (6ef867e)
Features
- add
undefinedas a value in AxiosRequestConfig (#5560) (095033c) - add automatic minor and patch upgrades to dependabot (#6053) (65a7584)
- add Node.js coverage script using c8 (closes #7289) (#7294) (ec9d94e)
- added copilot instructions (3f83143)
- compatibility with frozen prototypes (#6265) (860e033)
- enhance pipeFileToResponse with error handling (#7169) (88d7884)
- types: Intellisense for string literals in a widened union (#6134) (f73474d), closes /github.com/microsoft/TypeScript/issues/33471#issuecomment-1376364329
Reverts
- Revert "fix: silentJSONParsing=false should throw on invalid JSON (#7253) (#7…" (#7298) (a4230f5), closes #7253 #7 #7298
- deps: bump peter-evans/create-pull-request from 7 to 8 in the github-actions group (#7334) (2d6ad5e)
Contributors to this release
Ashvin Tiwari
Nikunj Mochi
Anchal Singh
jasonsaayman
Julian Dax
Akash Dhar Dubey
Madhumita
Tackoil
Justin Dhillon
Rudransh
WuMingDao
codenomnom
Nandan Acharya
Eric Dubé
Tibor Pilz
Gabriel Quaresma
Turadg Aleahmad
JohnTitor
rohit miryala
Wilson Mun
techcodie
Ved Vadnere
svihpinc
SANDESH LENDVE
Lubos
Jarred Sumner
Adam Hines
Subhan Kumar Rai
Joseph Frazier
KT0803
Albie
Jake Hayes
vuejs/core (vue)
v3.5.28
Bug Fixes
- transition: avoid unexpected
cancelledparameter in transitiondonecallback (#14391) (6798853) - compiler-sfc: add resolution trying for
.mts/.ctsfiles (#14402) (c09d41f), closes vuejs/router#2611 - compiler-sfc: no params were generated when using withDefaults (#12823) (b0a1f05), closes #12822
- reactivity: add
__v_skipflag toEffectScopeto prevent reactive conversion (#14359) (48b7552), closes #14357 - runtime-core: avoid retaining el on cached text vnodes during static traversal (#14419) (4ace79a), closes #14134
- runtime-core: prevent child component updates when style remains unchanged (#12825) (57866b5), closes #12826
- runtime-core: properly handle async component update before resolve (#11619) (e71c26c), closes #11617
- runtime-dom: handle null/undefined handler in withModifiers (#14362) (261de54), closes #14361
- teleport: properly handling disabled teleport target anchor (#14417) (d7bcd85), closes #14412
- transition-group: correct move translation under scale via element rect (#14360) (0243a79), closes #14356
- useTemplateRef: don't update setup ref for useTemplateRef key (#12756) (fc40ca0), closes #12749
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
- If you want to rebase/retry this PR, check this box
This PR was generated by Mend Renovate. View the repository job log.
4 changed files on the files tab, with 0 review threads.