chore: pin axios version (#7632)

* chore: pin axios version * limit it to the max mentioned by the repo * chore: pin to 1.13.6 * chore: pin transitive * chore: update axios version to 1.13.6 * chore: min release age for deps
2026-06-11 09:51:30 +00:00 · 2026-03-31 15:30:00 +05:30
parent f0866be3b3
commit 3ea489816c
8 changed files with 252 additions and 25 deletions
--- a/.npmrc
+++ b/.npmrc
@@ -0,0 +1 @@
+min-release-age=30
--- a/package-lock.json
+++ b/package-lock.json
@@ -9621,7 +9621,7 @@
        "@swagger-api/apidom-core": "^1.4.0",
        "@swagger-api/apidom-error": "^1.4.0",
        "@types/ramda": "~0.30.0",
-        "axios": "^1.12.2",
+        "axios": "1.13.6",
        "minimatch": "^7.4.3",
        "process": "^0.11.10",
        "ramda": "~0.30.0",
@@ -11931,24 +11931,13 @@
        "axios": ">=1.6.0"
      }
    },
-    "node_modules/axios": {
-      "version": "1.13.2",
-      "resolved": "https://registry.npmjs.org/axios/-/axios-1.13.2.tgz",
-      "integrity": "sha512-VPk9ebNqPcy5lRGuSlKx752IlDatOjT9paPlm8A7yOuW2Fbvp4X3JznJtT4f0GzGLLiWE9W8onz51SqLYwzGaA==",
-      "license": "MIT",
-      "dependencies": {
-        "follow-redirects": "^1.15.6",
-        "form-data": "^4.0.4",
-        "proxy-from-env": "^1.1.0"
-      }
-    },
    "node_modules/axios-ntlm": {
      "version": "1.4.3",
      "resolved": "https://registry.npmjs.org/axios-ntlm/-/axios-ntlm-1.4.3.tgz",
      "integrity": "sha512-CS6WE8chZpEDKxv4IFwr5zcG7InMC6Ek0aj2n2tHauBh+8KiYVC4qMn3N2arjR5tnyILQuTGlI0mc83hgWxS4Q==",
      "license": "MIT",
      "dependencies": {
-        "axios": "^1.7.9",
+        "axios": "1.13.6",
        "des.js": "^1.1.0",
        "dev-null": "^0.1.1",
        "js-md4": "^0.3.2"
@@ -17194,6 +17183,7 @@
      "version": "4.0.4",
      "resolved": "https://registry.npmjs.org/form-data/-/form-data-4.0.4.tgz",
      "integrity": "sha512-KrGhL9Q4zjj0kiUt5OO4Mr/A/jlI2jDYs5eHBpYHPcBEVSiipAvn2Ko2HnPe20rmcuuvMHNdZFp+4IlGTMF0Ow==",
+      "dev": true,
      "license": "MIT",
      "dependencies": {
        "asynckit": "^0.4.0",
@@ -23939,7 +23929,7 @@
      "integrity": "sha512-l+fsjYEkTik3m/G0pE7gMr4qBJP84LhK779oQm6MBzhBGpd4By4qieTW+4FUAlNCyzQTynn3Nhsa50c0IELSxQ==",
      "license": "MIT",
      "dependencies": {
-        "axios": "^1.7.4",
+        "axios": "1.13.6",
        "rusha": "^0.8.14"
      },
      "engines": {
@@ -31951,7 +31941,7 @@
        "@usebruno/lang": "0.12.0",
        "@usebruno/requests": "^0.1.0",
        "aws4-axios": "^3.3.0",
-        "axios": "^1.8.3",
+        "axios": "1.13.6",
        "axios-ntlm": "^1.4.2",
        "chai": "^4.3.7",
        "chalk": "^3.0.0",
@@ -32999,6 +32989,53 @@
        "node": ">=18.0.0"
      }
    },
+    "packages/bruno-cli/node_modules/axios": {
+      "version": "1.13.6",
+      "resolved": "https://registry.npmjs.org/axios/-/axios-1.13.6.tgz",
+      "integrity": "sha512-ChTCHMouEe2kn713WHbQGcuYrr6fXTBiu460OTwWrWob16g1bXn4vtz07Ope7ewMozJAnEquLk5lWQWtBig9DQ==",
+      "license": "MIT",
+      "dependencies": {
+        "follow-redirects": "^1.15.11",
+        "form-data": "^4.0.5",
+        "proxy-from-env": "^1.1.0"
+      }
+    },
+    "packages/bruno-cli/node_modules/follow-redirects": {
+      "version": "1.15.11",
+      "resolved": "https://registry.npmjs.org/follow-redirects/-/follow-redirects-1.15.11.tgz",
+      "integrity": "sha512-deG2P0JfjrTxl50XGCDyfI97ZGVCxIpfKYmfyrQ54n5FO/0gfIES8C/Psl6kWVDolizcaaxZJnTS0QSMxvnsBQ==",
+      "funding": [
+        {
+          "type": "individual",
+          "url": "https://github.com/sponsors/RubenVerborgh"
+        }
+      ],
+      "license": "MIT",
+      "engines": {
+        "node": ">=4.0"
+      },
+      "peerDependenciesMeta": {
+        "debug": {
+          "optional": true
+        }
+      }
+    },
+    "packages/bruno-cli/node_modules/form-data": {
+      "version": "4.0.5",
+      "resolved": "https://registry.npmjs.org/form-data/-/form-data-4.0.5.tgz",
+      "integrity": "sha512-8RipRLol37bNs2bhoV67fiTEvdTrbMUYcFTiy3+wuuOnUog2QBHCZWXDRijWQfAkhBj2Uf5UnVaiWwA5vdd82w==",
+      "license": "MIT",
+      "dependencies": {
+        "asynckit": "^0.4.0",
+        "combined-stream": "^1.0.8",
+        "es-set-tostringtag": "^2.1.0",
+        "hasown": "^2.0.2",
+        "mime-types": "^2.1.12"
+      },
+      "engines": {
+        "node": ">= 6"
+      }
+    },
    "packages/bruno-cli/node_modules/fs-extra": {
      "version": "10.1.0",
      "resolved": "https://registry.npmjs.org/fs-extra/-/fs-extra-10.1.0.tgz",
@@ -33722,7 +33759,7 @@
        "adm-zip": "^0.5.16",
        "archiver": "^7.0.1",
        "aws4-axios": "^3.3.0",
-        "axios": "^1.8.3",
+        "axios": "1.13.6",
        "axios-ntlm": "^1.4.2",
        "chai": "^4.3.7",
        "chokidar": "^3.5.3",
@@ -35001,6 +35038,17 @@
        "electron-builder-squirrel-windows": "24.13.3"
      }
    },
+    "packages/bruno-electron/node_modules/axios": {
+      "version": "1.13.6",
+      "resolved": "https://registry.npmjs.org/axios/-/axios-1.13.6.tgz",
+      "integrity": "sha512-ChTCHMouEe2kn713WHbQGcuYrr6fXTBiu460OTwWrWob16g1bXn4vtz07Ope7ewMozJAnEquLk5lWQWtBig9DQ==",
+      "license": "MIT",
+      "dependencies": {
+        "follow-redirects": "^1.15.11",
+        "form-data": "^4.0.5",
+        "proxy-from-env": "^1.1.0"
+      }
+    },
    "packages/bruno-electron/node_modules/builder-util": {
      "version": "24.13.1",
      "resolved": "https://registry.npmjs.org/builder-util/-/builder-util-24.13.1.tgz",
@@ -35208,6 +35256,42 @@
        "mime": "^2.5.2"
      }
    },
+    "packages/bruno-electron/node_modules/follow-redirects": {
+      "version": "1.15.11",
+      "resolved": "https://registry.npmjs.org/follow-redirects/-/follow-redirects-1.15.11.tgz",
+      "integrity": "sha512-deG2P0JfjrTxl50XGCDyfI97ZGVCxIpfKYmfyrQ54n5FO/0gfIES8C/Psl6kWVDolizcaaxZJnTS0QSMxvnsBQ==",
+      "funding": [
+        {
+          "type": "individual",
+          "url": "https://github.com/sponsors/RubenVerborgh"
+        }
+      ],
+      "license": "MIT",
+      "engines": {
+        "node": ">=4.0"
+      },
+      "peerDependenciesMeta": {
+        "debug": {
+          "optional": true
+        }
+      }
+    },
+    "packages/bruno-electron/node_modules/form-data": {
+      "version": "4.0.5",
+      "resolved": "https://registry.npmjs.org/form-data/-/form-data-4.0.5.tgz",
+      "integrity": "sha512-8RipRLol37bNs2bhoV67fiTEvdTrbMUYcFTiy3+wuuOnUog2QBHCZWXDRijWQfAkhBj2Uf5UnVaiWwA5vdd82w==",
+      "license": "MIT",
+      "dependencies": {
+        "asynckit": "^0.4.0",
+        "combined-stream": "^1.0.8",
+        "es-set-tostringtag": "^2.1.0",
+        "hasown": "^2.0.2",
+        "mime-types": "^2.1.12"
+      },
+      "engines": {
+        "node": ">= 6"
+      }
+    },
    "packages/bruno-electron/node_modules/fs-extra": {
      "version": "10.1.0",
      "resolved": "https://registry.npmjs.org/fs-extra/-/fs-extra-10.1.0.tgz",
@@ -35525,7 +35609,7 @@
        "ajv": "^8.12.0",
        "ajv-formats": "^2.1.1",
        "atob": "^2.1.2",
-        "axios": "^1.8.3",
+        "axios": "1.13.6",
        "btoa": "^1.2.1",
        "chai": "^4.3.7",
        "chai-string": "^1.5.0",
@@ -35552,6 +35636,53 @@
        "rollup": "3.30.0"
      }
    },
+    "packages/bruno-js/node_modules/axios": {
+      "version": "1.13.6",
+      "resolved": "https://registry.npmjs.org/axios/-/axios-1.13.6.tgz",
+      "integrity": "sha512-ChTCHMouEe2kn713WHbQGcuYrr6fXTBiu460OTwWrWob16g1bXn4vtz07Ope7ewMozJAnEquLk5lWQWtBig9DQ==",
+      "license": "MIT",
+      "dependencies": {
+        "follow-redirects": "^1.15.11",
+        "form-data": "^4.0.5",
+        "proxy-from-env": "^1.1.0"
+      }
+    },
+    "packages/bruno-js/node_modules/follow-redirects": {
+      "version": "1.15.11",
+      "resolved": "https://registry.npmjs.org/follow-redirects/-/follow-redirects-1.15.11.tgz",
+      "integrity": "sha512-deG2P0JfjrTxl50XGCDyfI97ZGVCxIpfKYmfyrQ54n5FO/0gfIES8C/Psl6kWVDolizcaaxZJnTS0QSMxvnsBQ==",
+      "funding": [
+        {
+          "type": "individual",
+          "url": "https://github.com/sponsors/RubenVerborgh"
+        }
+      ],
+      "license": "MIT",
+      "engines": {
+        "node": ">=4.0"
+      },
+      "peerDependenciesMeta": {
+        "debug": {
+          "optional": true
+        }
+      }
+    },
+    "packages/bruno-js/node_modules/form-data": {
+      "version": "4.0.5",
+      "resolved": "https://registry.npmjs.org/form-data/-/form-data-4.0.5.tgz",
+      "integrity": "sha512-8RipRLol37bNs2bhoV67fiTEvdTrbMUYcFTiy3+wuuOnUog2QBHCZWXDRijWQfAkhBj2Uf5UnVaiWwA5vdd82w==",
+      "license": "MIT",
+      "dependencies": {
+        "asynckit": "^0.4.0",
+        "combined-stream": "^1.0.8",
+        "es-set-tostringtag": "^2.1.0",
+        "hasown": "^2.0.2",
+        "mime-types": "^2.1.12"
+      },
+      "engines": {
+        "node": ">= 6"
+      }
+    },
    "packages/bruno-js/node_modules/jsonwebtoken": {
      "version": "9.0.3",
      "resolved": "https://registry.npmjs.org/jsonwebtoken/-/jsonwebtoken-9.0.3.tgz",
@@ -35680,7 +35811,7 @@
        "@grpc/grpc-js": "^1.13.3",
        "@grpc/proto-loader": "^0.7.15",
        "@types/qs": "^6.9.18",
-        "axios": "^1.9.0",
+        "axios": "1.13.6",
        "debug": "^4.4.3",
        "google-protobuf": "^4.0.0",
        "grpc-js-reflection-client": "^1.3.0",
@@ -35728,6 +35859,17 @@
        "npm": ">=9.0.0"
      }
    },
+    "packages/bruno-requests/node_modules/axios": {
+      "version": "1.13.6",
+      "resolved": "https://registry.npmjs.org/axios/-/axios-1.13.6.tgz",
+      "integrity": "sha512-ChTCHMouEe2kn713WHbQGcuYrr6fXTBiu460OTwWrWob16g1bXn4vtz07Ope7ewMozJAnEquLk5lWQWtBig9DQ==",
+      "license": "MIT",
+      "dependencies": {
+        "follow-redirects": "^1.15.11",
+        "form-data": "^4.0.5",
+        "proxy-from-env": "^1.1.0"
+      }
+    },
    "packages/bruno-requests/node_modules/debug": {
      "version": "4.4.3",
      "resolved": "https://registry.npmjs.org/debug/-/debug-4.4.3.tgz",
@@ -35745,6 +35887,42 @@
        }
      }
    },
+    "packages/bruno-requests/node_modules/follow-redirects": {
+      "version": "1.15.11",
+      "resolved": "https://registry.npmjs.org/follow-redirects/-/follow-redirects-1.15.11.tgz",
+      "integrity": "sha512-deG2P0JfjrTxl50XGCDyfI97ZGVCxIpfKYmfyrQ54n5FO/0gfIES8C/Psl6kWVDolizcaaxZJnTS0QSMxvnsBQ==",
+      "funding": [
+        {
+          "type": "individual",
+          "url": "https://github.com/sponsors/RubenVerborgh"
+        }
+      ],
+      "license": "MIT",
+      "engines": {
+        "node": ">=4.0"
+      },
+      "peerDependenciesMeta": {
+        "debug": {
+          "optional": true
+        }
+      }
+    },
+    "packages/bruno-requests/node_modules/form-data": {
+      "version": "4.0.5",
+      "resolved": "https://registry.npmjs.org/form-data/-/form-data-4.0.5.tgz",
+      "integrity": "sha512-8RipRLol37bNs2bhoV67fiTEvdTrbMUYcFTiy3+wuuOnUog2QBHCZWXDRijWQfAkhBj2Uf5UnVaiWwA5vdd82w==",
+      "license": "MIT",
+      "dependencies": {
+        "asynckit": "^0.4.0",
+        "combined-stream": "^1.0.8",
+        "es-set-tostringtag": "^2.1.0",
+        "hasown": "^2.0.2",
+        "mime-types": "^2.1.12"
+      },
+      "engines": {
+        "node": ">= 6"
+      }
+    },
    "packages/bruno-requests/node_modules/ms": {
      "version": "2.1.3",
      "resolved": "https://registry.npmjs.org/ms/-/ms-2.1.3.tgz",
@@ -35836,7 +36014,7 @@
      "version": "0.0.1",
      "license": "MIT",
      "dependencies": {
-        "axios": "^1.8.3",
+        "axios": "1.13.6",
        "body-parser": "2.2.0",
        "cookie-parser": "^1.4.6",
        "cors": "^2.8.5",
@@ -35853,6 +36031,17 @@
        "ws": "^8.18.3"
      }
    },
+    "packages/bruno-tests/node_modules/axios": {
+      "version": "1.13.6",
+      "resolved": "https://registry.npmjs.org/axios/-/axios-1.13.6.tgz",
+      "integrity": "sha512-ChTCHMouEe2kn713WHbQGcuYrr6fXTBiu460OTwWrWob16g1bXn4vtz07Ope7ewMozJAnEquLk5lWQWtBig9DQ==",
+      "license": "MIT",
+      "dependencies": {
+        "follow-redirects": "^1.15.11",
+        "form-data": "^4.0.5",
+        "proxy-from-env": "^1.1.0"
+      }
+    },
    "packages/bruno-tests/node_modules/cookie": {
      "version": "0.7.1",
      "resolved": "https://registry.npmjs.org/cookie/-/cookie-0.7.1.tgz",
@@ -35952,6 +36141,42 @@
        "fxparser": "src/cli/cli.js"
      }
    },
+    "packages/bruno-tests/node_modules/follow-redirects": {
+      "version": "1.15.11",
+      "resolved": "https://registry.npmjs.org/follow-redirects/-/follow-redirects-1.15.11.tgz",
+      "integrity": "sha512-deG2P0JfjrTxl50XGCDyfI97ZGVCxIpfKYmfyrQ54n5FO/0gfIES8C/Psl6kWVDolizcaaxZJnTS0QSMxvnsBQ==",
+      "funding": [
+        {
+          "type": "individual",
+          "url": "https://github.com/sponsors/RubenVerborgh"
+        }
+      ],
+      "license": "MIT",
+      "engines": {
+        "node": ">=4.0"
+      },
+      "peerDependenciesMeta": {
+        "debug": {
+          "optional": true
+        }
+      }
+    },
+    "packages/bruno-tests/node_modules/form-data": {
+      "version": "4.0.5",
+      "resolved": "https://registry.npmjs.org/form-data/-/form-data-4.0.5.tgz",
+      "integrity": "sha512-8RipRLol37bNs2bhoV67fiTEvdTrbMUYcFTiy3+wuuOnUog2QBHCZWXDRijWQfAkhBj2Uf5UnVaiWwA5vdd82w==",
+      "license": "MIT",
+      "dependencies": {
+        "asynckit": "^0.4.0",
+        "combined-stream": "^1.0.8",
+        "es-set-tostringtag": "^2.1.0",
+        "hasown": "^2.0.2",
+        "mime-types": "^2.1.12"
+      },
+      "engines": {
+        "node": ">= 6"
+      }
+    },
    "packages/bruno-tests/node_modules/iconv-lite": {
      "version": "0.4.24",
      "resolved": "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.4.24.tgz",
--- a/package.json
+++ b/package.json
@@ -93,6 +93,7 @@
    ]
  },
  "overrides": {
+    "axios":"1.13.6",
    "rollup": "3.30.0",
    "pbkdf2":"3.1.5",
    "electron-store": {
@@ -105,4 +106,4 @@
    "ajv": "^8.17.1",
    "git-url-parse": "^14.1.0"
  }
-}
+}
--- a/packages/bruno-cli/package.json
+++ b/packages/bruno-cli/package.json
@@ -54,7 +54,7 @@
    "@usebruno/lang": "0.12.0",
    "@usebruno/requests": "^0.1.0",
    "aws4-axios": "^3.3.0",
-    "axios": "^1.8.3",
+    "axios": "1.13.6",
    "axios-ntlm": "^1.4.2",
    "chai": "^4.3.7",
    "chalk": "^3.0.0",
--- a/packages/bruno-electron/package.json
+++ b/packages/bruno-electron/package.json
@@ -45,7 +45,7 @@
    "adm-zip": "^0.5.16",
    "archiver": "^7.0.1",
    "aws4-axios": "^3.3.0",
-    "axios": "^1.8.3",
+    "axios": "1.13.6",
    "axios-ntlm": "^1.4.2",
    "chai": "^4.3.7",
    "chokidar": "^3.5.3",
--- a/packages/bruno-js/package.json
+++ b/packages/bruno-js/package.json
@@ -17,7 +17,7 @@
    "ajv": "^8.12.0",
    "ajv-formats": "^2.1.1",
    "atob": "^2.1.2",
-    "axios": "^1.8.3",
+    "axios": "1.13.6",
    "btoa": "^1.2.1",
    "chai": "^4.3.7",
    "chai-string": "^1.5.0",
--- a/packages/bruno-requests/package.json
+++ b/packages/bruno-requests/package.json
@@ -24,7 +24,7 @@
    "@grpc/grpc-js": "^1.13.3",
    "@grpc/proto-loader": "^0.7.15",
    "@types/qs": "^6.9.18",
-    "axios": "^1.9.0",
+    "axios": "1.13.6",
    "debug": "^4.4.3",
    "google-protobuf": "^4.0.0",
    "grpc-js-reflection-client": "^1.3.0",
--- a/packages/bruno-tests/package.json
+++ b/packages/bruno-tests/package.json
@@ -18,7 +18,7 @@
  },
  "homepage": "https://github.com/usebruno/bruno-testbench#readme",
  "dependencies": {
-    "axios": "^1.8.3",
+    "axios": "1.13.6",
    "body-parser": "2.2.0",
    "cookie-parser": "^1.4.6",
    "cors": "^2.8.5",