Skip to content

Pin axios to 1.14.0#1205

Merged
annavik merged 1 commit intomainfrom
chore/pin-axios
Apr 3, 2026
Merged

Pin axios to 1.14.0#1205
annavik merged 1 commit intomainfrom
chore/pin-axios

Conversation

@annavik
Copy link
Copy Markdown
Member

@annavik annavik commented Apr 3, 2026

In this PR we pin axios to version 1.14.0. This is a security update to avoid axios 1.14.1 being pulled on new installs. See this blog post for more details: https://www.elastic.co/security-labs/axios-one-rat-to-rule-them-all

I also did a check and could confirm the compromised version did not appear in our lock file.

Summary by CodeRabbit

  • Chores
    • Updated HTTP client library dependency to a newer version for improved stability and performance.

@netlify
Copy link
Copy Markdown

netlify bot commented Apr 3, 2026

Deploy Preview for antenna-ssec ready!

Name Link
🔨 Latest commit d889f82
🔍 Latest deploy log https://app.netlify.com/projects/antenna-ssec/deploys/69cf77da0af6a30008b07291
😎 Deploy Preview https://deploy-preview-1205--antenna-ssec.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

@netlify
Copy link
Copy Markdown

netlify bot commented Apr 3, 2026

Deploy Preview for antenna-preview ready!

Name Link
🔨 Latest commit d889f82
🔍 Latest deploy log https://app.netlify.com/projects/antenna-preview/deploys/69cf77da7681ad0008026b4c
😎 Deploy Preview https://deploy-preview-1205--antenna-preview.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.
Lighthouse
Lighthouse
1 paths audited
Performance: 61 (🔴 down 4 from production)
Accessibility: 89 (no change from production)
Best Practices: 100 (no change from production)
SEO: 92 (no change from production)
PWA: 80 (no change from production)
View the detailed breakdown and full score reports

To edit notification comments on pull requests, go to your Netlify project configuration.

@coderabbitai
Copy link
Copy Markdown
Contributor

coderabbitai bot commented Apr 3, 2026

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: a7d14f13-ef10-4f41-b2aa-d3b75db5bab6

📥 Commits

Reviewing files that changed from the base of the PR and between 901606b and d889f82.

⛔ Files ignored due to path filters (1)
  • ui/yarn.lock is excluded by !**/yarn.lock, !**/*.lock
📒 Files selected for processing (1)
  • ui/package.json

📝 Walkthrough

Walkthrough

The axios dependency in ui/package.json has been pinned to a specific version. The semver range ^1.6.2 was replaced with the exact version 1.14.0, changing how npm resolves the dependency during installation.

Changes

Cohort / File(s) Summary
Dependency Update
ui/package.json
Updated axios from semver range ^1.6.2 to pinned version 1.14.0.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

Poem

🐰 A carrot for axios, version locked and true,
No more semver wildness—1.14.0 shines through!
Dependencies pinned like a rabbit's burrow wall,
Stability reigns supreme, stable for one and all! 🥕

🚥 Pre-merge checks | ✅ 3
✅ Passed checks (3 passed)
Check name Status Explanation
Title check ✅ Passed The title clearly and accurately summarizes the main change: pinning axios to a specific version.
Description check ✅ Passed The description addresses the security concern and includes context, but lacks key sections like testing instructions, deployment notes, and a formal checklist.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch chore/pin-axios

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

@annavik annavik merged commit 6573ada into main Apr 3, 2026
7 checks passed
@annavik annavik deleted the chore/pin-axios branch April 3, 2026 08:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant