[Snyk] Security upgrade axios from 1.3.4 to 1.7.4

[schalla0791]

Snyk has created this PR to fix 1 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

• package.json
• package-lock.json

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Server-side Request Forgery (SSRF) SNYK-JS-AXIOS-7361793	833

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Server-side Request Forgery (SSRF)

[dryrunsecurity]

DryRun Security Summary

The pull request updates the axios library version in the package.json and package-lock.json files, which is a recommended security practice to address known vulnerabilities and security issues, and the changes should be thoroughly tested to ensure no regressions or unexpected behavior changes.

Expand for full summary

Summary:

The code changes in this pull request focus on updating the version of the axios library in the package.json and package-lock.json files. Updating dependencies is a recommended security practice, as it helps to address known vulnerabilities and security issues in the underlying libraries. The axios library is a popular HTTP client used for making HTTP requests from JavaScript and Node.js applications, and upgrading to a newer version may include bug fixes, performance improvements, and security enhancements.

While this code change appears to be a routine dependency update, it's important to thoroughly test the application after the update to ensure that there are no regressions or unexpected behavior changes. Additionally, it's a good idea to review the axios release notes and documentation to understand the changes between the versions and how they might impact the application.

Files Changed:

1. package.json: The axios library version has been updated from 1.3.4 to 1.7.4. This is a significant version bump, and it's important to review the changes in the dependency to ensure there are no breaking changes that could impact the application.
2. package-lock.json: The axios dependency has been updated from version 1.3.4 to version 1.7.4. This change should be reviewed and tested carefully to ensure the application continues to function as expected.

Code Analysis

We ran 9 analyzers against 2 files and 1 analyzer had findings. 8 analyzers had no findings.

Analyzer	Findings
Sensitive Files Analyzer	2 findings

Riskiness

🟢 Risk threshold not exceeded.

View PR in the DryRun Dashboard.