Skip to content

Commit a60cffd

Browse files
committed
chore(awareness-service): bump axios floor to a non-vulnerable release
The declared range was ^1.6.7 - a stale floor that permits axios versions with known CVEs. The lockfile already resolved to 1.13.6 (past the relevant fixes); raise the declared floor to ^1.13.6 so the range itself can no longer resolve to a vulnerable version.
1 parent c70ea59 commit a60cffd

2 files changed

Lines changed: 73 additions & 18 deletions

File tree

pnpm-lock.yaml

Lines changed: 72 additions & 17 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

services/awareness-service/api/package.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -16,7 +16,7 @@
1616
},
1717
"dependencies": {
1818
"@scalar/express-api-reference": "^0.9.16",
19-
"axios": "^1.6.7",
19+
"axios": "^1.13.6",
2020
"cors": "^2.8.5",
2121
"dotenv": "^16.4.5",
2222
"express": "^4.18.2",

0 commit comments

Comments
 (0)