Skip to content

chore(deps): bump axios and start-server-and-test in /client/app/components/TurniloComponent - #660

Closed
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/npm_and_yarn/client/app/components/TurniloComponent/multi-bfe3adf0f8
Closed

dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/npm_and_yarn/client/app/components/TurniloComponent/multi-bfe3adf0f8

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Feb 10, 2026

Copy link
Copy Markdown
Contributor

Bumps axios and start-server-and-test. These dependencies needed to be updated together.
Updates axios from 0.21.2 to 1.13.5

Release notes

Sourced from axios's releases.

v1.13.5

Release 1.13.5

Highlights

  • Security: Fixed a potential Denial of Service issue involving the __proto__ key in mergeConfig. (PR #7369)
  • Bug fix: Resolved an issue where AxiosError could be missing the status field on and after v1.13.3. (PR #7368)

Changes

Security

  • Fix Denial of Service via __proto__ key in mergeConfig. (PR #7369)

Fixes

  • Fix/5657. (PR #7313)
  • Ensure status is present in AxiosError on and after v1.13.3. (PR #7368)

Features / Improvements

  • Add input validation to isAbsoluteURL. (PR #7326)
  • Refactor: bump minor package versions. (PR #7356)

Documentation

  • Clarify object-check comment. (PR #7323)
  • Fix deprecated Buffer constructor usage and README formatting. (PR #7371)

CI / Maintenance

  • Chore: fix issues with YAML. (PR #7355)
  • CI: update workflow YAMLs. (PR #7372)
  • CI: fix run condition. (PR #7373)
  • Dev deps: bump karma-sourcemap-loader from 0.3.8 to 0.4.0. (PR #7360)
  • Chore(release): prepare release 1.13.5. (PR #7379)

New Contributors

Full Changelog: axios/axios@v1.13.4...v1.13.5

v1.13.4

Overview

The release addresses issues discovered in v1.13.3 and includes significant CI/CD improvements.

Full Changelog: v1.13.3...v1.13.4

What's New in v1.13.4

Bug Fixes

  • fix: issues with version 1.13.3 (#7352) (ee90dfc)
    • Fixed issues discovered in v1.13.3 release

... (truncated)

Commits
  • 29f7542 chore(release): prepare release 1.13.5 (#7379)
  • 431c3a3 ci: fix run condition (#7373)
  • 9ff3a78 ci: update ymls (#7372)
  • 265b712 docs: fix deprecated Buffer constructor and formatting issues in README (#7371)
  • 475e75a feat: add input validation to isAbsoluteURL (#7326)
  • 28c7215 fix: Denial of Service via proto Key in mergeConfig (#7369)
  • 04cf019 docs: clarify object check comment (#7323)
  • 696fa75 fix: status is missing in AxiosError on and after v1.13.3 (#7368)
  • 569f028 fix: added a option to choose between legacy and the new request/response int...
  • 44b7c9f chore(deps-dev): bump karma-sourcemap-loader (#7360)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for axios since your current version.


Updates start-server-and-test from 1.14.0 to 2.1.3

Release notes

Sourced from start-server-and-test's releases.

v2.1.3

2.1.3 (2025-11-19)

Bug Fixes

  • deps: update dependency wait-on to v9 (#408) (8f1942b)

v2.1.2

2.1.2 (2025-09-19)

Bug Fixes

  • deps: update dependency wait-on to v8.0.5 (#407) (e09a718)

v2.1.1

2.1.1 (2025-09-17)

Bug Fixes

  • deps: update dependency debug to v4.4.3 (#406) (d0db7f6)

v2.1.0

2.1.0 (2025-09-04)

Features

v2.0.13

2.0.13 (2025-08-03)

Bug Fixes

  • deps: update dependency wait-on to v8.0.4 (#405) (6385e1d)

v2.0.12

2.0.12 (2025-05-15)

Bug Fixes

  • deps: update dependency debug to v4.4.1 (#403) (b3b82c0)

v2.0.11

2.0.11 (2025-03-13)

... (truncated)

Commits
  • 8f1942b fix(deps): update dependency wait-on to v9 (#408)
  • e09a718 fix(deps): update dependency wait-on to v8.0.5 (#407)
  • d0db7f6 fix(deps): update dependency debug to v4.4.3 (#406)
  • b399fec feat: support axios proxy (#402)
  • 6385e1d fix(deps): update dependency wait-on to v8.0.4 (#405)
  • b3b82c0 fix(deps): update dependency debug to v4.4.1 (#403)
  • 005ee08 fix(deps): update dependency wait-on to v8.0.3 (#400)
  • a514875 fix(deps): update dependency wait-on to v8.0.2 (#399)
  • 0f057d7 fix(deps): update dependency debug to v4.4.0 (#397)
  • fe1c25d fix(deps): update dependency wait-on to v8.0.1
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Feb 10, 2026
@github-actions

Copy link
Copy Markdown
Contributor

Code Coverage

Package Line Rate Health
. 77%
authentication 65%
cli 67%
destinations 63%
gcloud 100%
handlers 73%
metrics 94%
models 89%
plywood 42%
plywood.handlers 7%
plywood.objects 47%
plywood.parsers 67%
query_runner 52%
serializers 81%
services 96%
settings 96%
tasks 66%
tasks.queries 82%
templates._includes 100%
utils 70%
Summary 64% (10412 / 16314)

Minimum allowed line rate is 60%

Bumps [axios](https://github.com/axios/axios) and [start-server-and-test](https://github.com/bahmutov/start-server-and-test). These dependencies needed to be updated together.

Updates `axios` from 0.21.2 to 1.13.5
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](axios/axios@v0.21.2...v1.13.5)

Updates `start-server-and-test` from 1.14.0 to 2.1.3
- [Release notes](https://github.com/bahmutov/start-server-and-test/releases)
- [Commits](bahmutov/start-server-and-test@v1.14.0...v2.1.3)

---
updated-dependencies:
- dependency-name: axios
  dependency-version: 1.13.5
  dependency-type: direct:production
- dependency-name: start-server-and-test
  dependency-version: 2.1.3
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/client/app/components/TurniloComponent/multi-bfe3adf0f8 branch from 9d69d85 to 622b017 Compare February 20, 2026 11:38
@dependabot @github

dependabot Bot commented on behalf of github Apr 8, 2026

Copy link
Copy Markdown
Contributor Author

Superseded by #726.

@dependabot dependabot Bot closed this Apr 8, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/client/app/components/TurniloComponent/multi-bfe3adf0f8 branch April 8, 2026 19:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants