Commit 8f08fcb
fix(browser-tests): Pin axios to 1.13.5 to avoid compromised 1.14.1 (#20047)
axios 1.14.1 contains a supply chain attack via the plain-crypto-js
dependency.
This PR pins to 1.13.5 to prevent accidental upgrades.
See: https://x.com/feross/status/2038807290422370479
Co-authored-by: Claude claude-opus-4-6 <noreply@anthropic.com>1 parent 3815492 commit 8f08fcb
File tree
2 files changed
+2
-2
lines changed- dev-packages/browser-integration-tests
2 files changed
+2
-2
lines changed| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
62 | 62 | | |
63 | 63 | | |
64 | 64 | | |
65 | | - | |
| 65 | + | |
66 | 66 | | |
67 | 67 | | |
68 | 68 | | |
| |||
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
11868 | 11868 | | |
11869 | 11869 | | |
11870 | 11870 | | |
11871 | | - | |
| 11871 | + | |
11872 | 11872 | | |
11873 | 11873 | | |
11874 | 11874 | | |
| |||
0 commit comments