chore(deps): update dependency axios to v1.15.2 #126

Open

renovate-bot wants to merge 1 commit from renovate/axios-1.x-lockfile into main

pull from: renovate/axios-1.x-lockfile

merge into: phbaer:main

phbaer:main

phbaer:improve-backend-cache

phbaer:renovate/vitest-4.x-lockfile

phbaer:renovate/vitest-coverage-v8-4.x-lockfile

phbaer:renovate/tailwindcss-postcss-4.x-lockfile

phbaer:renovate/vue-tsc-3.x-lockfile

phbaer:renovate/vite-8.x-lockfile

phbaer:renovate/dependencytrack-apiserver-4.x

phbaer:rescoring-improvements

phbaer:cve-filter-dashboard

phbaer:bearer-token-api-access

Conversation 0 Commits 1 Files changed 1 +3 -19

renovate-bot commented 2026-04-20 00:02:28 +00:00

Collaborator

Copy link

This PR contains the following updates:

Package	Type	Update	Change
axios (source)	dependencies	patch	1.15.0 → 1.15.2

---

Release Notes

axios/axios (axios)

v1.15.2

Compare Source

This release delivers prototype-pollution hardening for the Node HTTP adapter, adds an opt-in allowedSocketPaths allowlist to mitigate SSRF via Unix domain sockets, fixes a keep-alive socket memory leak, and ships supply-chain hardening across CI and security docs.

v1.15.1

Compare Source

This release ships a coordinated set of security hardening fixes across headers, body/redirect limits, multipart handling, and XSRF/prototype-pollution vectors, alongside a broad sweep of bug fixes, test migrations, and threat-model documentation updates.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [axios](https://axios-http.com) ([source](https://github.com/axios/axios)) | dependencies | patch | [`1.15.0` → `1.15.2`](https://renovatebot.com/diffs/npm/axios/1.15.0/1.15.2) | --- ### Release Notes <details> <summary>axios/axios (axios)</summary> ### [`v1.15.2`](https://github.com/axios/axios/blob/HEAD/CHANGELOG.md#v1152---April-21-2026) [Compare Source](https://github.com/axios/axios/compare/v1.15.1...v1.15.2) This release delivers prototype-pollution hardening for the Node HTTP adapter, adds an opt-in `allowedSocketPaths` allowlist to mitigate SSRF via Unix domain sockets, fixes a keep-alive socket memory leak, and ships supply-chain hardening across CI and security docs. ### [`v1.15.1`](https://github.com/axios/axios/blob/HEAD/CHANGELOG.md#v1151---April-19-2026) [Compare Source](https://github.com/axios/axios/compare/v1.15.0...v1.15.1) This release ships a coordinated set of security hardening fixes across headers, body/redirect limits, multipart handling, and XSRF/prototype-pollution vectors, alongside a broad sweep of bug fixes, test migrations, and threat-model documentation updates. </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMzIuMSIsInVwZGF0ZWRJblZlciI6IjQzLjEzMi4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

renovate-bot added 1 commit 2026-04-20 00:02:28 +00:00

chore(deps): update dependency axios to v1.15.1 590eb0f9ee

renovate-bot force-pushed renovate/axios-1.x-lockfile from 590eb0f9ee to 6c3ca75844 2026-04-21 00:01:24 +00:00 Compare

renovate-bot force-pushed renovate/axios-1.x-lockfile from 6c3ca75844 to ace7628a8e 2026-04-22 00:01:40 +00:00 Compare

renovate-bot changed title from chore(deps): update dependency axios to v1.15.1 to chore(deps): update dependency axios to v1.15.2 2026-04-22 00:01:41 +00:00

All checks were successful

Hide all checks

Build and Publish Docker Images / test-backend (pull_request) Successful in 30s

Details

Build and Publish Docker Images / test-frontend (pull_request) Successful in 2m59s

Details

Build and Publish Docker Images / delete-pr-images (pull_request) Has been skipped

Details

Build and Publish Docker Images / check-version (pull_request) Has been skipped

Details

Build and Publish Docker Images / build-push-images (pull_request) Successful in 4m33s

Details

Build and Publish Docker Images / release (pull_request) Has been skipped

Details

This pull request can be merged automatically.

This branch is out-of-date with the base branch

You are not authorized to merge this pull request.

View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.

git fetch -u origin renovate/axios-1.x-lockfile:renovate/axios-1.x-lockfile

git switch renovate/axios-1.x-lockfile

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels

No items

No labels

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

phbaer/dtvp!126

No description provided.