[Snyk] Security upgrade axios from 1.6.0 to 1.6.3 (#866)

* fix: modules/forms/package.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-AXIOS-6124857 * chore: yarn.lock update --------- Co-authored-by: snyk-bot <[email protected]>
ConduitPlatform · Jan 3, 2024 · 2aa9f7e · 2aa9f7e
1 parent e5e5a04
commit 2aa9f7e
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 1 deletion.
diff --git a/modules/forms/package.json b/modules/forms/package.json
@@ -29,7 +29,7 @@
     "@conduitplatform/module-tools": "*",
     "@grpc/grpc-js": "^1.9.7",
     "@grpc/proto-loader": "^0.7.6",
-    "axios": "^1.6.0",
+    "axios": "^1.6.3",
     "convict": "^6.2.4",
     "escape-string-regexp": "^4.0.0",
     "lodash": "^4.17.21"

diff --git a/yarn.lock b/yarn.lock
@@ -4365,6 +4365,15 @@ axios@^1.6.0:
     form-data "^4.0.0"
     proxy-from-env "^1.1.0"
 
+axios@^1.6.3:
+  version "1.6.3"
+  resolved "https://registry.yarnpkg.com/axios/-/axios-1.6.3.tgz#7f50f23b3aa246eff43c54834272346c396613f4"
+  integrity sha512-fWyNdeawGam70jXSVlKl+SUNVcL6j6W79CuSIPfi6HnDUmSCH6gyUys/HrqHeA/wU0Az41rRgean494d0Jb+ww==
+  dependencies:
+    follow-redirects "^1.15.0"
+    form-data "^4.0.0"
+    proxy-from-env "^1.1.0"
+
 babel-jest@^29.7.0:
   version "29.7.0"
   resolved "https://registry.yarnpkg.com/babel-jest/-/babel-jest-29.7.0.tgz#f4369919225b684c56085998ac63dbd05be020d5"