Skip to content

Bump "axios" package version#3371

Closed
updateclibot[bot] wants to merge 0 commit into
masterfrom
updatecli_master_6a92006ed02c93a4ad363bb1559c3677fc6e71825aebfd014b2c87c9d32b228c
Closed

Bump "axios" package version#3371
updateclibot[bot] wants to merge 0 commit into
masterfrom
updatecli_master_6a92006ed02c93a4ad363bb1559c3677fc6e71825aebfd014b2c87c9d32b228c

Conversation

@updateclibot

@updateclibot updateclibot Bot commented Jun 15, 2026

Copy link
Copy Markdown
Contributor

Bump "axios" package version

Bump "axios" package version to 1.18.0

ran shell command "npm install --package-lock-only --dry-run=$DRY_RUN axios@1.18.0"

v1.18.0
## v1.18.0 — June 13, 2026

This release hardens redirect and URL handling, improves the validateStatus configuration semantics, and includes updates to documentation, dependencies, and release metadata.

## 🔒 Security Fixes

* **Redirect Header Safety:** Added Node HTTP adapter support for stripping caller-specified sensitive headers on cross-origin redirects, helping prevent custom auth headers such as API keys from leaking to another origin. (__#10892__)

* **URL And Request Hardening:** Rejects malformed `http:` and `https:` URLs that omit `//` with `ERR_INVALID_URL`, while tightening prototype-pollution-safe config reads, stream size limits, FormData depth handling, data URL sizing, and local `NO_PROXY` matching. (__#11000__)

## 🐛 Bug Fixes

* **Status Validation:** Added `transitional.validateStatusUndefinedResolves` so applications can opt in to treating `validateStatus: undefined` like the option was omitted, while `validateStatus: null` remains the explicit way to accept every status. (__#10899__)

## 🔧 Maintenance & Chores

* **Documentation:** Published the v1.17.0 release notes, fixed a changelog typo, clarified the package update PR policy, and marked the `proxy` request config as Node.js-only in the advanced docs. (__#10984__, __#10988__, __#10992__, __#10995__)

* **Dependencies:** Bumped `@babel/core`, `@babel/preset-env`, `@commitlint/cli`, `@commitlint/config-conventional`, `@rollup/plugin-babel`, `@rollup/plugin-commonjs`, `@vitest/browser`, `@vitest/browser-playwright`, `eslint`, `lint-staged`, `rollup`, `vitest`, and `actions/checkout`. (__#10989__, __#10996__, __#10997__)

* **Release Metadata:** Prepared the 1.18.0 release by updating package metadata and the runtime `VERSION` value. (__#11003__)

## 🌟 New Contributors

We are thrilled to welcome our new contributors. Thank you for helping improve axios:

* __@drori12__ (__#10984__)
* __@eyupcanakman__ (__#10899__)
* __@Adi-Beker__ (__#10995__)

[Full Changelog](https://github.com/axios/axios/compare/v1.17.0...v1.18.0)
GitHub Action workflow link
Updatecli logo

Created automatically by Updatecli

Options:

Most of Updatecli configuration is done via its manifest(s).

  • If you close this pull request, Updatecli will automatically reopen it, the next time it runs.
  • If you close this pull request and delete the base branch, Updatecli will automatically recreate it, erasing all previous commits made.

Feel free to report any issues at github.com/updatecli/updatecli.
If you find this tool useful, do not hesitate to star our GitHub repository as a sign of appreciation, and/or to tell us directly on our chat!

@updateclibot updateclibot Bot added the dependencies Pull requests that update a dependency file label Jun 15, 2026
@updateclibot updateclibot Bot enabled auto-merge (squash) June 15, 2026 18:22
@updateclibot updateclibot Bot closed this Jun 15, 2026
auto-merge was automatically disabled June 15, 2026 19:12

Pull request was closed

@updateclibot updateclibot Bot force-pushed the updatecli_master_6a92006ed02c93a4ad363bb1559c3677fc6e71825aebfd014b2c87c9d32b228c branch from 619b6b0 to 0fb202d Compare June 15, 2026 19:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants