Bump axios and ignore-sync #4738

dependabot · 2024-08-20T18:46:54Z

Bumps axios to 1.7.4 and updates ancestor dependency ignore-sync. These dependencies need to be updated together.

Updates axios from 0.26.1 to 1.7.4

Release notes

Release v1.7.4

Release notes:

Bug Fixes

sec: CVE-2024-39338 (#6539) (#6543) (6b6b605)

sec: disregard protocol-relative URL to remediate SSRF (#6539) (07a661a)

Contributors to this release

Lev Pachmanov

Đỗ Trọng Hải

Release v1.7.3

Release notes:

Bug Fixes

adapter: fix progress event emitting; (#6518) (e3c76fc)

fetch: fix withCredentials request config (#6505) (85d4d0e)

xhr: return original config on errors from XHR adapter (#6515) (8966ee7)

Contributors to this release

Dmitriy Mozgovoy

Valerii Sidorenko

prianYu

Release v1.7.2

Release notes:

Bug Fixes

fetch: enhance fetch API detection; (#6413) (4f79aef)

Contributors to this release

Dmitriy Mozgovoy

Release v1.7.1

Release notes:

Bug Fixes

fetch: fixed ReferenceError issue when TextEncoder is not available in the environment; (#6410) (733f15f)

Contributors to this release

Dmitriy Mozgovoy

Release v1.7.0

Release notes:

Features

... (truncated)

Changelog

Sourced from axios's changelog.

1.7.4 (2024-08-13)

Bug Fixes

sec: CVE-2024-39338 (#6539) (#6543) (6b6b605)

sec: disregard protocol-relative URL to remediate SSRF (#6539) (07a661a)

Contributors to this release

Lev Pachmanov

Đỗ Trọng Hải

1.7.3 (2024-08-01)

Bug Fixes

adapter: fix progress event emitting; (#6518) (e3c76fc)

fetch: fix withCredentials request config (#6505) (85d4d0e)

xhr: return original config on errors from XHR adapter (#6515) (8966ee7)

Contributors to this release

Dmitriy Mozgovoy

Valerii Sidorenko

prianYu

1.7.2 (2024-05-21)

Bug Fixes

fetch: enhance fetch API detection; (#6413) (4f79aef)

Contributors to this release

Dmitriy Mozgovoy

1.7.1 (2024-05-20)

Bug Fixes

fetch: fixed ReferenceError issue when TextEncoder is not available in the environment; (#6410) (733f15f)

Contributors to this release

Dmitriy Mozgovoy

... (truncated)

Commits

abd24a7 chore(release): v1.7.4 (#6544)
6b6b605 fix(sec): CVE-2024-39338 (#6539) (#6543)
07a661a fix(sec): disregard protocol-relative URL to remediate SSRF (#6539)
c6cce43 chore(release): v1.7.3 (#6521)
e3c76fc fix(adapter): fix progress event emitting; (#6518)
85d4d0e fix(fetch): fix withCredentials request config (#6505)
92cd8ed chore(github): update ISSUE_TEMPLATE.md (#6519)
8966ee7 fix(xhr): return original config on errors from XHR adapter (#6515)
0e4f9fa chore(release): v1.7.2 (#6414)
4f79aef fix(fetch): enhance fetch API detection; (#6413)
Additional commits viewable in compare view

Updates ignore-sync from 5.0.1 to 7.0.1

Changelog

Sourced from ignore-sync's changelog.

7.0.1 (2023-05-17)

Bug Fixes

use default branch instead of master (993b749)

7.0.0 (2023-05-02)

⚠ BREAKING CHANGES

require node ^16.14.0 || >=18.12.0 (a09d957)

drop nodejs 14.17 and 18.11 (3db126f)

Bug Fixes

support repository with dot or hyphen (a731938)

6.0.2 (2022-10-08)

Bug Fixes

fix a breaking change introduced by axios v1.1.2 (ec435d2)

6.0.1 (2022-10-06)

Bug Fixes

fix a breaking change introduced by axios v1.1.0 (f4db4eb)

6.0.0 (2022-10-06)

⚠ BREAKING CHANGES

drop node.js v12 and v17 (238cdca)

Features

support referencing other ignore-sync files (00dd0ef)

Commits

682ee82 chore(release): 7.0.1
f13bd69 Merge pull request #681 from risu729/fix/use-default-branch
993b749 fix: use default branch instead of master
93c402c chore(deps): update dependency eslint to v8.40.0
30a4a92 chore(deps): update commitlint monorepo to v17.6.3
0d2e01e chore(deps): update yarn to v3.5.1
e798422 docs: update changelog
c1bbd09 chore(release): 7.0.0
e304850 chore: unpin axios
fab7b37 Merge pull request #676 from risu729/fix/repository-name-regex
Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

Bumps [axios](https://github.com/axios/axios) to 1.7.4 and updates ancestor dependency [ignore-sync](https://github.com/foray1010/ignore-sync). These dependencies need to be updated together. Updates `axios` from 0.26.1 to 1.7.4 - [Release notes](https://github.com/axios/axios/releases) - [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md) - [Commits](axios/axios@v0.26.1...v1.7.4) Updates `ignore-sync` from 5.0.1 to 7.0.1 - [Changelog](https://github.com/foray1010/ignore-sync/blob/master/CHANGELOG.md) - [Commits](foray1010/ignore-sync@v5.0.1...v7.0.1) --- updated-dependencies: - dependency-name: axios dependency-type: indirect - dependency-name: ignore-sync dependency-type: direct:development ... Signed-off-by: dependabot[bot] <support@github.com>

changeset-bot · 2024-08-20T18:46:58Z

⚠️ No Changeset found

Latest commit: d76062e

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

github-actions · 2024-08-20T18:47:08Z

📊 Tachometer Benchmark Results

Summary

nop-update

this-change, tip-of-tree, previous-release: unsure 🔍 -7% - +2% (-1.03ms - +0.33ms)
^{this-change vs tip-of-tree}

render

this-change: 44.72ms - 46.21ms
this-change, tip-of-tree, previous-release: slower ❌ 0% - 11% (0.04ms - 1.98ms)
^{this-change vs tip-of-tree}
this-change, tip-of-tree, previous-release: unsure 🔍 -2% - +4% (-0.60ms - +1.25ms)
^{this-change vs tip-of-tree}
this-change, tip-of-tree, previous-release: unsure 🔍 -1% - +3% (-0.29ms - +0.99ms)
^{this-change vs tip-of-tree}

update

this-change: 479.76ms - 484.99ms
this-change, tip-of-tree, previous-release: unsure 🔍 -5% - +6% (-1.84ms - +2.56ms)
^{this-change vs tip-of-tree}
this-change, tip-of-tree, previous-release: unsure 🔍 -4% - +2% (-3.19ms - +1.76ms)
^{this-change vs tip-of-tree}
this-change, tip-of-tree, previous-release: unsure 🔍 -1% - +1% (-4.00ms - +7.33ms)
^{this-change vs tip-of-tree}

update-reflect

this-change: 481.57ms - 487.56ms
this-change, tip-of-tree, previous-release: unsure 🔍 -1% - +1% (-6.72ms - +4.36ms)
^{this-change vs tip-of-tree}

Results

this-change

Browser: chrome-headless 127.0.6533.99
Sample size: 50
Built by: Benchmarks #6355
Commit: d76062e

render

Version	Avg time	vs
	44.72ms - 46.21ms	-

update

Version	Avg time	vs
	479.76ms - 484.99ms	-

update-reflect

Version	Avg time	vs
	481.57ms - 487.56ms	-

this-change, tip-of-tree, previous-release

Browser: chrome-headless 127.0.6533.99
Sample size: 30
Built by: Benchmarks #6355
Commit: d76062e

render

Version	Avg time	vs this-change	vs tip-of-tree tip-of-tree	vs previous-release previous-release
this-change	19.00ms - 20.78ms	-	slower ❌ 0% - 11% 0.04ms - 1.98ms	unsure 🔍 -4% - +7% -0.70ms - +1.32ms
tip-of-tree tip-of-tree	18.50ms - 19.26ms	faster ✔ 0% - 10% 0.04ms - 1.98ms	-	faster ✔ 1% - 7% 0.09ms - 1.31ms
previous-release previous-release	19.11ms - 20.05ms	unsure 🔍 -7% - +3% -1.32ms - +0.70ms	slower ❌ 0% - 7% 0.09ms - 1.31ms	-

update

Version	Avg time	vs this-change	vs tip-of-tree tip-of-tree	vs previous-release previous-release
this-change	38.54ms - 41.88ms	-	unsure 🔍 -5% - +6% -1.84ms - +2.56ms	unsure 🔍 -9% - +2% -3.76ms - +1.04ms
tip-of-tree tip-of-tree	38.41ms - 41.29ms	unsure 🔍 -6% - +5% -2.56ms - +1.84ms	-	unsure 🔍 -9% - +1% -3.97ms - +0.52ms
previous-release previous-release	39.85ms - 43.30ms	unsure 🔍 -3% - +9% -1.04ms - +3.76ms	unsure 🔍 -1% - +10% -0.52ms - +3.97ms	-

nop-update

Version	Avg time	vs this-change	vs tip-of-tree tip-of-tree	vs previous-release previous-release
this-change	12.87ms - 13.86ms	-	unsure 🔍 -7% - +2% -1.03ms - +0.33ms	unsure 🔍 -7% - +2% -1.02ms - +0.31ms
tip-of-tree tip-of-tree	13.24ms - 14.18ms	unsure 🔍 -3% - +8% -0.33ms - +1.03ms	-	unsure 🔍 -5% - +5% -0.66ms - +0.64ms
previous-release previous-release	13.28ms - 14.16ms	unsure 🔍 -2% - +8% -0.31ms - +1.02ms	unsure 🔍 -5% - +5% -0.64ms - +0.66ms	-

this-change, tip-of-tree, previous-release

Browser: chrome-headless 127.0.6533.99
Sample size: 50
Built by: Benchmarks #6355
Commit: d76062e

render

Version	Avg time	vs this-change	vs tip-of-tree tip-of-tree	vs previous-release previous-release
this-change	34.51ms - 35.87ms	-	unsure 🔍 -2% - +4% -0.60ms - +1.25ms	unsure 🔍 -2% - +4% -0.71ms - +1.42ms
tip-of-tree tip-of-tree	34.24ms - 35.49ms	unsure 🔍 -4% - +2% -1.25ms - +0.60ms	-	unsure 🔍 -3% - +3% -1.00ms - +1.06ms
previous-release previous-release	34.02ms - 35.65ms	unsure 🔍 -4% - +2% -1.42ms - +0.71ms	unsure 🔍 -3% - +3% -1.06ms - +1.00ms	-

update

Version	Avg time	vs this-change	vs tip-of-tree tip-of-tree	vs previous-release previous-release
this-change	72.79ms - 76.43ms	-	unsure 🔍 -4% - +2% -3.19ms - +1.76ms	unsure 🔍 -3% - +4% -2.10ms - +3.04ms
tip-of-tree tip-of-tree	73.64ms - 77.01ms	unsure 🔍 -2% - +4% -1.76ms - +3.19ms	-	unsure 🔍 -2% - +5% -1.30ms - +3.67ms
previous-release previous-release	72.32ms - 75.96ms	unsure 🔍 -4% - +3% -3.04ms - +2.10ms	unsure 🔍 -5% - +2% -3.67ms - +1.30ms	-

this-change, tip-of-tree, previous-release

Browser: chrome-headless 127.0.6533.99
Sample size: 50
Built by: Benchmarks #6355
Commit: d76062e

render

Version	Avg time	vs this-change	vs tip-of-tree tip-of-tree	vs previous-release previous-release
this-change	31.93ms - 32.74ms	-	unsure 🔍 -1% - +3% -0.29ms - +0.99ms	unsure 🔍 -1% - +2% -0.41ms - +0.73ms
tip-of-tree tip-of-tree	31.49ms - 32.47ms	unsure 🔍 -3% - +1% -0.99ms - +0.29ms	-	unsure 🔍 -3% - +1% -0.82ms - +0.44ms
previous-release previous-release	31.78ms - 32.56ms	unsure 🔍 -2% - +1% -0.73ms - +0.41ms	unsure 🔍 -1% - +3% -0.44ms - +0.82ms	-

update

Version	Avg time	vs this-change	vs tip-of-tree tip-of-tree	vs previous-release previous-release
this-change	495.09ms - 503.05ms	-	unsure 🔍 -1% - +1% -4.00ms - +7.33ms	unsure 🔍 -1% - +1% -5.83ms - +6.32ms
tip-of-tree tip-of-tree	493.37ms - 501.44ms	unsure 🔍 -1% - +1% -7.33ms - +4.00ms	-	unsure 🔍 -2% - +1% -7.53ms - +4.69ms
previous-release previous-release	494.24ms - 503.42ms	unsure 🔍 -1% - +1% -6.32ms - +5.83ms	unsure 🔍 -1% - +2% -4.69ms - +7.53ms	-

update-reflect

Version	Avg time	vs this-change	vs tip-of-tree tip-of-tree	vs previous-release previous-release
this-change	526.47ms - 534.47ms	-	unsure 🔍 -1% - +1% -6.72ms - +4.36ms	unsure 🔍 -1% - +1% -6.75ms - +4.81ms
tip-of-tree tip-of-tree	527.82ms - 535.49ms	unsure 🔍 -1% - +1% -4.36ms - +6.72ms	-	unsure 🔍 -1% - +1% -5.46ms - +5.88ms
previous-release previous-release	527.27ms - 535.61ms	unsure 🔍 -1% - +1% -4.81ms - +6.75ms	unsure 🔍 -1% - +1% -5.88ms - +5.46ms	-

_{tachometer-reporter-action v2 for Benchmarks}

github-actions · 2024-08-20T18:49:01Z

The size of lit-html.js and lit-core.min.js are as expected.

dependabot bot requested a review from kevinpschaaf as a code owner August 20, 2024 18:46

dependabot bot added the dependencies Pull requests that update a dependency file label Aug 20, 2024

dependabot bot mentioned this pull request Aug 20, 2024

Bump the npm_and_yarn group group with 1 update #4574

Closed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump axios and ignore-sync #4738

Bump axios and ignore-sync #4738

dependabot bot commented on behalf of github Aug 20, 2024 •

edited

Loading

changeset-bot bot commented Aug 20, 2024

github-actions bot commented Aug 20, 2024 •

edited

Loading

📊 Tachometer Benchmark Results

Summary

nop-update

render

update

update-reflect

Results

render

update

update-reflect

render

update

nop-update

render

update

render

update

update-reflect

github-actions bot commented Aug 20, 2024

Bump axios and ignore-sync #4738

Are you sure you want to change the base?

Bump axios and ignore-sync #4738

Conversation

dependabot bot commented on behalf of github Aug 20, 2024 • edited Loading

Release v1.7.4

Release notes:

Bug Fixes

Contributors to this release

Release v1.7.3

Release notes:

Bug Fixes

Contributors to this release

Release v1.7.2

Release notes:

Bug Fixes

Contributors to this release

Release v1.7.1

Release notes:

Bug Fixes

Contributors to this release

Release v1.7.0

Release notes:

Features

1.7.4 (2024-08-13)

Bug Fixes

Contributors to this release

1.7.3 (2024-08-01)

Bug Fixes

Contributors to this release

1.7.2 (2024-05-21)

Bug Fixes

Contributors to this release

1.7.1 (2024-05-20)

Bug Fixes

Contributors to this release

7.0.1 (2023-05-17)

Bug Fixes

7.0.0 (2023-05-02)

⚠ BREAKING CHANGES

Bug Fixes

6.0.2 (2022-10-08)

Bug Fixes

6.0.1 (2022-10-06)

Bug Fixes

6.0.0 (2022-10-06)

⚠ BREAKING CHANGES

Features

changeset-bot bot commented Aug 20, 2024

⚠️ No Changeset found

github-actions bot commented Aug 20, 2024 • edited Loading

📊 Tachometer Benchmark Results

Summary

nop-update

render

update

update-reflect

Results

render

update

update-reflect

render

update

nop-update

render

update

render

update

update-reflect

github-actions bot commented Aug 20, 2024

dependabot bot commented on behalf of github Aug 20, 2024 •

edited

Loading

github-actions bot commented Aug 20, 2024 •

edited

Loading