Skip to content

fix(TU-2535): secure dependencies, update axios #108

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 2 commits into from
Nov 15, 2023
Merged

Conversation

Thr44
Copy link
Contributor

@Thr44 Thr44 commented Nov 15, 2023

In order to get 100% on secure dependencies we need to update axios, as it has a high severity vulnerability:

https://app.snyk.io/org/developer-relations-hax/project/0a05a01a-e24b-4b7b-af6e-509cbd9088c2

to do so, I also had to bump jest

@Thr44 Thr44 requested a review from a team November 15, 2023 09:59
@Thr44 Thr44 force-pushed the fix/TU-2535/update-axios branch from 5c652a0 to cc686b5 Compare November 15, 2023 10:16
@@ -21,7 +21,7 @@ test('request pass correct headers', async () => {
},
})
expect(axios.history.get[0].url).toBe(`${API_BASE_URL}/forms`)
expect(axios.history.get[0].headers).toEqual({
expect({ ...axios.history.get[0].headers }).toEqual({
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

test was complaining because object is not a AxiosHeader

@Thr44 Thr44 merged commit 1fed3be into main Nov 15, 2023
@Thr44 Thr44 deleted the fix/TU-2535/update-axios branch November 15, 2023 16:31
@typeform-ops-gha
Copy link

🎉 This PR is included in version 1.15.2 🎉

The release is available on:

Your semantic-release bot 📦🚀

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants