Skip to content

Bump serverless Axios to 1.15.2 to clear Dependabot alerts#215

Merged
jayhill merged 1 commit into
mainfrom
copilot/update-dependencies-axios
May 9, 2026
Merged

Bump serverless Axios to 1.15.2 to clear Dependabot alerts#215
jayhill merged 1 commit into
mainfrom
copilot/update-dependencies-axios

Conversation

Copy link
Copy Markdown
Contributor

Copilot AI commented May 9, 2026

Dependabot flagged the serverless workspace for Axios vulnerabilities via the direct dependency and the resolved lockfile entry. This updates the workspace to a patched Axios release and aligns the lockfile with the secured artifact.

  • Scope

    • Updates the serverless workspace only
    • Leaves unrelated dependencies unchanged
  • Dependency update

    • Bumps axios in /serverless/package.json from ^1.15.0 to ^1.15.2
  • Lockfile alignment

    • Refreshes the Axios entry in /serverless/package-lock.json
    • Replaces the resolved package metadata from 1.15.0 to 1.15.2 so Dependabot no longer sees a vulnerable pinned artifact
  • Result

    • Removes repository references to the vulnerable Axios release in the serverless dependency graph
"dependencies": {
  "axios": "^1.15.2",
  "axios-cookiejar-support": "^5.0.5"
}

Agent-Logs-Url: https://github.com/CodeWithAsheville/zipcase/sessions/ed82d3bb-4d64-467c-99b1-2e58f0375bd4

Co-authored-by: jayhill <116148+jayhill@users.noreply.github.com>
@jayhill jayhill marked this pull request as ready for review May 9, 2026 16:20
@jayhill jayhill merged commit 58ec509 into main May 9, 2026
8 checks passed
@jayhill jayhill deleted the copilot/update-dependencies-axios branch May 9, 2026 16:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants