From 53d0553d3fb3d571b9a69842cb7bd779ceb8658e Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 17 Feb 2026 09:45:35 +0100
Subject: [PATCH] build(deps): Bump axios from 1.13.4 to 1.13.5 (#82)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Bumps [axios](https://github.com/axios/axios) from 1.13.4 to 1.13.5.
Release notes
Sourced from axios's
releases.
v1.13.5
Release 1.13.5
Highlights
- Security: Fixed a potential Denial of
Service issue involving the
__proto__ key in
mergeConfig. (PR #7369)
- Bug fix: Resolved an issue where
AxiosError could be missing the status field
on and after v1.13.3. (PR #7368)
Changes
Security
- Fix Denial of Service via
__proto__ key in
mergeConfig. (PR #7369)
Fixes
- Fix/5657. (PR #7313)
- Ensure
status is present in AxiosError on
and after v1.13.3. (PR #7368)
Features / Improvements
- Add input validation to
isAbsoluteURL. (PR #7326)
- Refactor: bump minor package versions. (PR #7356)
Documentation
- Clarify object-check comment. (PR #7323)
- Fix deprecated
Buffer constructor usage and README
formatting. (PR #7371)
CI / Maintenance
- Chore: fix issues with YAML. (PR #7355)
- CI: update workflow YAMLs. (PR #7372)
- CI: fix run condition. (PR #7373)
- Dev deps: bump
karma-sourcemap-loader from 0.3.8 to
0.4.0. (PR #7360)
- Chore(release): prepare release 1.13.5. (PR #7379)
New Contributors
Full Changelog: https://github.com/axios/axios/compare/v1.13.4...v1.13.5
Commits
29f7542
chore(release): prepare release 1.13.5 (#7379)431c3a3
ci: fix run condition (#7373)9ff3a78
ci: update ymls (#7372)265b712
docs: fix deprecated Buffer constructor and formatting issues in README
(#7371)475e75a
feat: add input validation to isAbsoluteURL (#7326)28c7215
fix: Denial of Service via proto Key in mergeConfig (#7369)04cf019
docs: clarify object check comment (#7323)696fa75
fix: status is missing in AxiosError on and after v1.13.3 (#7368)569f028
fix: added a option to choose between legacy and the new
request/response int...44b7c9f
chore(deps-dev): bump karma-sourcemap-loader (#7360)- Additional commits viewable in compare
view
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/stats-organization/github-stats-extended/network/alerts).
Signed-off-by: dependabot[bot]
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
apps/backend/package.json | 2 +-
pnpm-lock.yaml | 24 ++++++++++++------------
2 files changed, 13 insertions(+), 13 deletions(-)
diff --git a/apps/backend/package.json b/apps/backend/package.json
index ecfa8e49..487fa5ec 100644
--- a/apps/backend/package.json
+++ b/apps/backend/package.json
@@ -42,7 +42,7 @@
"js-yaml": "^4.1.1"
},
"dependencies": {
- "axios": "^1.13.4",
+ "axios": "^1.13.5",
"dotenv": "^17.2.3",
"emoji-name-map": "^2.0.3",
"github-username-regex": "^1.0.0",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 5c78f32e..bca48490 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -72,8 +72,8 @@ importers:
apps/backend:
dependencies:
axios:
- specifier: ^1.13.4
- version: 1.13.4
+ specifier: ^1.13.5
+ version: 1.13.5
dotenv:
specifier: ^17.2.3
version: 17.2.3
@@ -104,7 +104,7 @@ importers:
version: 1.1.1
axios-mock-adapter:
specifier: ^2.1.0
- version: 2.1.0(axios@1.13.4)
+ version: 2.1.0(axios@1.13.5)
express:
specifier: ^5.2.1
version: 5.2.1
@@ -128,10 +128,10 @@ importers:
version: 4.1.18(vite@7.3.1(@types/node@25.0.3)(jiti@2.6.1)(lightningcss@1.30.2)(terser@5.44.1)(yaml@2.8.2))
axios:
specifier: ^1
- version: 1.13.4
+ version: 1.13.5
axios-cache-interceptor:
specifier: ^1
- version: 1.11.4(axios@1.13.4)
+ version: 1.11.4(axios@1.13.5)
daisyui:
specifier: 5.5.17
version: 5.5.17
@@ -1720,8 +1720,8 @@ packages:
peerDependencies:
axios: '>= 0.17.0'
- axios@1.13.4:
- resolution: {integrity: sha512-1wVkUaAO6WyaYtCkcYCOx12ZgpGf9Zif+qXa4n+oYzK558YryKqiL6UWwd5DqiH3VRW0GYhTZQ/vlgJrCoNQlg==}
+ axios@1.13.5:
+ resolution: {integrity: sha512-cz4ur7Vb0xS4/KUN0tPWe44eqxrIu31me+fbang3ijiNscE129POzipJJA6zniq2C/Z6sJCjMimjS8Lc/GAs8Q==}
babel-jest@30.2.0:
resolution: {integrity: sha512-0YiBEOxWqKkSQWL9nNGGEgndoeL0ZpWrbLMNL5u/Kaxrli3Eaxlt3ZtIDktEvXt4L/R9r3ODr2zKwGM/2BjxVw==}
@@ -5960,22 +5960,22 @@ snapshots:
dependencies:
possible-typed-array-names: 1.1.0
- axios-cache-interceptor@1.11.4(axios@1.13.4):
+ axios-cache-interceptor@1.11.4(axios@1.13.5):
dependencies:
- axios: 1.13.4
+ axios: 1.13.5
cache-parser: 1.2.6
fast-defer: 1.1.9
http-vary: 1.0.3
object-code: 2.0.0
try: 1.0.3
- axios-mock-adapter@2.1.0(axios@1.13.4):
+ axios-mock-adapter@2.1.0(axios@1.13.5):
dependencies:
- axios: 1.13.4
+ axios: 1.13.5
fast-deep-equal: 3.1.3
is-buffer: 2.0.5
- axios@1.13.4:
+ axios@1.13.5:
dependencies:
follow-redirects: 1.15.11
form-data: 4.0.5