fix(deps): update npm minor and patch dependencies#207
Open
red-hat-konflux[bot] wants to merge 1 commit intomasterfrom
Open
fix(deps): update npm minor and patch dependencies#207red-hat-konflux[bot] wants to merge 1 commit intomasterfrom
red-hat-konflux[bot] wants to merge 1 commit intomasterfrom
Conversation
red-hat-konflux
Bot
force-pushed
the
konflux/mintmaker/master/npm-minor-and-patch-dependencies
branch
from
6560682 to
857113d
Compare
|
Note Reviews pausedIt looks like this branch is under active development. To avoid overwhelming you with review comments due to an influx of new commits, CodeRabbit has automatically paused this review. You can configure this behavior by changing the Use the following commands to manage reviews:
Use the checkboxes below for quick actions:
WalkthroughBumped multiple dependency and devDependency versions in Changes
Estimated code review effort🎯 2 (Simple) | ⏱️ ~10 minutes 🚥 Pre-merge checks | ✅ 2 | ❌ 1❌ Failed checks (1 warning)
✅ Passed checks (2 passed)
✏️ Tip: You can configure your own custom pre-merge checks in the settings. ✨ Finishing Touches📝 Generate docstrings
🧪 Generate unit tests (beta)
Comment |
red-hat-konflux
Bot
force-pushed
the
konflux/mintmaker/master/npm-minor-and-patch-dependencies
branch
8 times, most recently
from
35e9b7f to
3bcd890
Compare
red-hat-konflux
Bot
force-pushed
the
konflux/mintmaker/master/npm-minor-and-patch-dependencies
branch
4 times, most recently
from
551d65f to
d39038a
Compare
red-hat-konflux
Bot
force-pushed
the
konflux/mintmaker/master/npm-minor-and-patch-dependencies
branch
5 times, most recently
from
5fa536b to
88e8f23
Compare
red-hat-konflux
Bot
force-pushed
the
konflux/mintmaker/master/npm-minor-and-patch-dependencies
branch
2 times, most recently
from
9bd2036 to
340f242
Compare
![coderabbitai[bot]](https://avatars.githubusercontent.com/in/347564?s=60&v=4){kind=small}
There was a problem hiding this comment.
Actionable comments posted: 1
🤖 Fix all issues with AI agents
In `@package.json`:
- Around line 24-42: The engines declaration in package.json is incompatible
with the PatternFly v6 dependencies; update the "engines" field's "node"
constraint to ">=18.0.0" to match PatternFly v6 requirements, or alternatively
downgrade the PatternFly packages (`@patternfly/react-core`,
`@patternfly/react-table`, `@patternfly/quickstarts` and related PatternFly v6
entries) to v5; locate the "engines" object in package.json and change the
"node" value to ">=18.0.0" (or pin the PatternFly package versions to v5) so the
declared Node version aligns with the installed PatternFly packages.
e8385fe to
afeec24
Compare
red-hat-konflux
Bot
force-pushed
the
konflux/mintmaker/master/npm-minor-and-patch-dependencies
branch
from
afeec24 to
58e2852
Compare
red-hat-konflux
Bot
force-pushed
the
konflux/mintmaker/master/npm-minor-and-patch-dependencies
branch
7 times, most recently
from
bd7dcc1 to
5d8c1f0
Compare
red-hat-konflux
Bot
force-pushed
the
konflux/mintmaker/master/npm-minor-and-patch-dependencies
branch
4 times, most recently
from
48660a4 to
7572548
Compare
red-hat-konflux
Bot
force-pushed
the
konflux/mintmaker/master/npm-minor-and-patch-dependencies
branch
6 times, most recently
from
f154548 to
1afdd2c
Compare
red-hat-konflux
Bot
force-pushed
the
konflux/mintmaker/master/npm-minor-and-patch-dependencies
branch
3 times, most recently
from
5bac78f to
42bf6c3
Compare
red-hat-konflux
Bot
force-pushed
the
konflux/mintmaker/master/npm-minor-and-patch-dependencies
branch
5 times, most recently
from
a68b109 to
d71ce8c
Compare
red-hat-konflux
Bot
force-pushed
the
konflux/mintmaker/master/npm-minor-and-patch-dependencies
branch
3 times, most recently
from
ec3f784 to
54d047f
Compare
Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
red-hat-konflux
Bot
force-pushed
the
konflux/mintmaker/master/npm-minor-and-patch-dependencies
branch
from
54d047f to
e44bfdc
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
^4.1.4→^4.1.16^4.1.4→^4.1.14^6.4.0→^6.4.3^6.4.0→^6.4.31.59.0→1.59.1^6.8.3→^6.9.2^1.0.26→^1.1.1^9.1.17→^9.1.20^9.1.17→^9.1.20^0.23.0→^0.24.318.3.27→18.3.28^1.13.2→^1.16.02.12.10→2.14.2^2.0.6→^2.0.7>=18→>=18.20.8^6.6.2→^6.8.9^6.30.2→^6.30.3^4.0.0→^4.0.1^9.1.17→^9.1.20^29.4.5→^29.4.9^2.8.1→^2.8.4Release Notes
data-driven-forms/react-forms (@data-driven-forms/pf4-component-mapper)
v4.1.16Compare Source
4.1.16 (2026-04-10)
🧱 Updated Dependencies
v4.1.15Compare Source
4.1.15 (2026-03-09)
🩹 Fixes
🧱 Updated Dependencies
❤️ Thank You
v4.1.14Compare Source
4.1.14 (2026-02-16)
🧱 Updated Dependencies
v4.1.13Compare Source
4.1.13 (2026-02-11)
🚀 Features
🧱 Updated Dependencies
❤️ Thank You
v4.1.12Compare Source
4.1.12 (2026-02-09)
🧱 Updated Dependencies
v4.1.11Compare Source
4.1.11 (2026-02-05)
🚀 Features
🧱 Updated Dependencies
❤️ Thank You
v4.1.10Compare Source
4.1.10 (2026-02-04)
🧱 Updated Dependencies
v4.1.9Compare Source
4.1.9 (2026-02-02)
🧱 Updated Dependencies
v4.1.8Compare Source
4.1.8 (2026-02-02)
🧱 Updated Dependencies
patternfly/patternfly-react (@patternfly/react-core)
v6.4.3Compare Source
v6.4.2Compare Source
microsoft/playwright (@playwright/test)
v1.59.1Compare Source
Bug Fixes
codegen,--uiandshowcommands (#39990)RedHatInsights/frontend-components (@redhat-cloud-services/frontend-components-config)
v6.9.2Compare Source
v6.9.1Compare Source
v6.9.0Compare Source
v6.8.4Compare Source
storybookjs/test-runner (@storybook/test-runner)
v0.24.3Compare Source
🐛 Bug Fix
Authors: 1
v0.24.2Compare Source
🐛 Bug Fix
Authors: 1
v0.24.1Compare Source
🐛 Bug Fix
Authors: 3
v0.24.0Compare Source
🚀 Enhancement
🐛 Bug Fix
--testTimeoutexamples #579 (@IanVS)Authors: 3
axios/axios (axios)
v1.16.0Compare Source
v1.16.0 — May 2, 2026
This release adds support for the QUERY HTTP method and a new
ECONNREFUSEDerror constant, lands a substantial wave of HTTP, fetch, and XHR adapter bug fixes around redirects, aborts, headers, and timeouts, and welcomes 23 new contributors.A handful of fixes in this release are either security-adjacent or change observable behaviour. Please review before upgrading:
maxBodyLengthandmaxContentLength. These limits were silently ignored on the fetch adapter prior to 1.16.0 — anyone relying on them as a safety net (DoS protection, accidental large uploads) had no protection. (#10795)Hostheaders. Previously, the proxy path could overwrite a customHost. Virtual-host-style routing through a proxy will now behave correctly. (#10822)https://user:p%40ss@host), the decoded value is what now goes on the wire. (#10825)parseProtocolnow strictly requires a colon in the protocol separator. Strings that loosely parsed as protocols before may no longer match. (#10729)unescape()replaced with modern UTF-8 encoding. Non-ASCII URL handling is now spec-correct; consumers depending on legacyunescape()quirks may see different output bytes. (#7378)transformRequestinput typing change was reverted. The typing change introduced in #10745 was reverted in #10810 after follow-up review — net behavior is unchanged from 1.15.2. (#10745, #10810)🚀 New Features
ECONNREFUSEDas a constant onAxiosErrorso callers can match connection-refused failures without comparing string literals (closes #6485). (#10680)encodehelper frombuildURLso userland param serializers can reuse the same encoding logic that axios uses internally. (#6897)🐛 Bug Fixes
requestDetailsargument onbeforeRedirect, preserved user-suppliedHostheaders when forwarding through a proxy, and properly URL-decoded basic auth credentials. (#10794, #10800, #6241, #10822, #10825)AxiosErrorwhen a stream is aborted after headers arrive, honoured thetimeoutoption during the connect phase when redirects are disabled, and resolved an unsettled-promise hang when an aborted request was combined with compression andmaxRedirects: 0. (#10708, #10819, #7149)maxBodyLength/maxContentLengthin the fetch adapter, set theUser-Agentheader to match the HTTP adapter, preserved the original abort reason instead of replacing it with a generic error, and deferred global access so importing the module no longer throws aTypeErrorin restricted environments. (#10795, #10772, #10806, #7260)cancelTokenandAbortSignallisteners on the error, timeout, and abort code paths to prevent leaked subscriptions. (#10787)AxiosErrorwhenJSON.parsefails insidedispatchRequest, preventedsettlefrom emittingundefinederror codes, and tightened theparseProtocolregex to require a colon in the protocol separator. (#10724, #7276, #10729)CancelTokentypings with the ESM build, fixed a compiler error caused byRawAxiosHeaders, and re-exportedcreatefrom the package index. (#7414, #6389, #6460)unescape()call with a modern UTF-8 encoding implementation. (#7378)🔧 Maintenance & Chores
utilsmodule and XHR adapter to use ES6 features, and tidied the multipart boundary error message. (#10588, #7419)FormDataEPIPE failures, fixed Win32 platform support for the pipe tests, and corrected an incorrect test assumption. (#10820, #10791, #10796)paramsSerializer.encodefor strict RFC 3986 query encoding, updated theparseReviverTypeScript definitions and configuration docs for ES2023, added timeout guidance to the README's first async example, and expanded notes around the recent type changes. (#10821, #10782, #10759, #10804)transformRequestinput typing change from #10745 after follow-up review. (#10745, #10810)actions/setup-node, thegithub-actionsgroup, andpostcss(in/docs) to their latest versions. (#10785, #10813, #10814)🌟 New Contributors
We are thrilled to welcome our new contributors. Thank you for helping improve axios:
Full Changelog
v1.15.2Compare Source
This release delivers prototype-pollution hardening for the Node HTTP adapter, adds an opt-in
allowedSocketPathsallowlist to mitigate SSRF via Unix domain sockets, fixes a keep-alive socket memory leak, and ships supply-chain hardening across CI and security docs.v1.15.1Compare Source
This release ships a coordinated set of security hardening fixes across headers, body/redirect limits, multipart handling, and XSRF/prototype-pollution vectors, alongside a broad sweep of bug fixes, test migrations, and threat-model documentation updates.
🔒 Security Fixes
inchecks withhasOwnPropertyto prevent authentication bypass via prototype pollution on config objects, with additional regression tests. (#10761, #10760)withXSRFTokenTruthy Bypass: Short-circuits on any truthy non-boolean value, so an ambiguous config no longer silently leaks the XSRF token cross-origin. (#10762)maxBodyLengthWith Zero Redirects: EnforcesmaxBodyLengtheven whenmaxRedirectsis set to0, closing a bypass path for oversized request bodies. (#10753)maxContentLengthBypass: AppliesmaxContentLengthto streamed responses that previously bypassed the cap. (#10754)🚀 New Features
LocationRequest Header Type: AddsLocationtoCommonRequestHeadersListfor accurate typing of redirect-aware requests. (#7528)🐛 Bug Fixes
Content-Typewhen no boundary is present onFormDatafetch requests, supports multi-select fields, cancelsrequest.bodyinstead of the source stream on fetch abort, and fixes a recursion bug in form-data serialisation. (#7314, #10676, #10702, #10726)loadedtototalfor computable upload/download progress events. (#7458)runWhentype with the runtime behaviour inInterceptorManagerand makes response header keys case-insensitive. (#7529, #10677)buildFullPath: Uses strict equality in the base/relative URL check. (#7252)AxiosURLSearchParamsRegex: Improves the regex used for param serialisation to avoid edge-case mismatches. (#10736)🔧 Maintenance & Chores
THREATMODEL.md, including Hopper security update, TLS and tag-replay wording, mitigation descriptions, decompression-bomb guidance, and further cleanup. (#10672, #10715, #10718, #10722, #10763, #10765)shouldBypassProxycoverage for wildcard/IPv6/edge cases, documented and testedAxiosError.status, and migratedprogressEventReducertests to Vitest. (#10723, #10725, #10741)CODEOWNERS, switches v1.x releases to an ephemeral release branch, and removes orphaned Bower support. (#10739, #10738, #10746)follow-redirects(1.15.11→1.16.0) in root and docs,axios(1.14.0→1.15.0) in docs, and a group of 5 development dependencies. (#10717, #10716, #10684, #10709)🌟 New Contributors
We are thrilled to welcome our new contributors. Thank you for helping improve axios:
Full Changelog
v1.15.0Compare Source
Bug Fixes
Features
Contributors to this release
PRs
1.2.6 (2023-01-28)
Bug Fixes
CommonRequestHeadersList&CommonResponseHeadersListtypes to be private in commonJS; (#5503) (5a3d0a3)Contributors to this release
PRs
1.2.5 (2023-01-26)
Bug Fixes
Contributors to this release
PRs
1.2.4 (2023-01-22)
Bug Fixes
RawAxiosRequestConfigback toAxiosRequestConfig; (#5486) (2a71f49)AxiosRequestConfiggeneric; (#5478) (9bce81b)Contributors to this release
PRs
1.2.3 (2023-01-10)
Bug Fixes
Contributors to this release
PRs
[1.2.2] - 2022-12-29
Fixed
Chores
Contributors to this release
[1.2.1] - 2022-12-05
Changed
Fixed
Refactors
Chores
Contributors to this release
PRs
[1.2.0] - 2022-11-10
Changed
Fixed
Refactors
Chores
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
To execute skipped test pipelines write comment
/ok-to-test.Documentation
Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.