Update dependency axios to v1.20.0 #128

Open
renovate-bot wants to merge 1 commit from renovate/axios-1.x into main
Collaborator

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
axios (source) 1.18.11.20.0 age adoption passing confidence

Release Notes

axios/axios (axios)

v1.20.0

Compare Source

v1.20.0 — August 19, 2026

This release hardens runtime option handling, adds RFC 9110 status-code aliases, fixes Node.js and XHR reliability issues, and refreshes project tooling and documentation.

⚠️ Breaking Changes & Deprecations

  • HTTP Status Naming: Added ContentTooLarge (413) and UnprocessableContent (422), while retaining PayloadTooLarge and UnprocessableEntity as backward-compatible deprecated aliases. (#​11082)

🔒 Security Fixes

  • Runtime Option Handling: Hardened behavioral configuration reads against shared and foreign prototype pollution and normalized unsafe interceptor replacement objects. This also clarifies Fetch redirect and custom implementation behavior, HTTP/2 DNS and proxy handling, CIDR-based NO_PROXY matching, and malformed data URI rejection; see the PR for documented compatibility effects. (#​11141)

🐛 Bug Fixes

  • Interceptor Lifecycle: Prevented unbounded handler-array growth by trimming trailing ejected interceptors without changing iteration semantics, and kept interceptor operations safe when the public handlers field is nullish. (#​11087, #​11118)
  • Request Error Preservation: Prevented custom Error.prepareStackTrace implementations that return non-string values from replacing the original request failure with an unrelated TypeError. (#​11109)
  • XHR Reliability: Navigation-canceled requests now reject with ECONNABORTED instead of resolving with status 0, while successful downloads flush their final progress callback during the live loadend dispatch. (#​11094, #​11121)
  • Node.js Socket Memory: Removed request-context retention from per-socket error listeners, preventing completed response data from being pinned for the lifetime of pooled keep-alive sockets. (#​11091)
  • Core Methods and HTTP Errors: Prevented structural method-header buckets from leaking into outgoing headers, standardized invalid DNS lookup and httpVersion failures as AxiosError.ERR_BAD_OPTION_VALUE, and corrected the timeoutErrorMessage merge strategy. (#​11096)

🔧 Maintenance & Chores

🌟 New Contributors

We are thrilled to welcome our new contributors. Thank you for helping improve axios:

Full Changelog (https://github.com/axios/axios/compare/v1.19.0...v1.20.0)

v1.19.0

Compare Source

This release raises the form-data security floor, adds configuration and type-system capabilities, and fixes NO_PROXY matching, interceptor errors, progress reporting, and serialization edge cases.


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Adoption](https://docs.renovatebot.com/merge-confidence/) | [Passing](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---|---|---| | [axios](https://axios-http.com) ([source](https://github.com/axios/axios)) | [`1.18.1` → `1.20.0`](https://renovatebot.com/diffs/npm/axios/1.18.1/1.20.0) | ![age](https://developer.mend.io/api/mc/badges/age/npm/axios/1.20.0?slim=true) | ![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/axios/1.20.0?slim=true) | ![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/axios/1.18.1/1.20.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/axios/1.18.1/1.20.0?slim=true) | --- ### Release Notes <details> <summary>axios/axios (axios)</summary> ### [`v1.20.0`](https://github.com/axios/axios/releases/tag/v1.20.0) [Compare Source](https://github.com/axios/axios/compare/v1.19.0...v1.20.0) #### v1.20.0 — August 19, 2026 This release hardens runtime option handling, adds RFC 9110 status-code aliases, fixes Node.js and XHR reliability issues, and refreshes project tooling and documentation. #### ⚠️ Breaking Changes & Deprecations - HTTP Status Naming: Added ContentTooLarge (413) and UnprocessableContent (422), while retaining PayloadTooLarge and UnprocessableEntity as backward-compatible deprecated aliases. ([#&#8203;11082](https://github.com/axios/axios/issues/11082)) #### 🔒 Security Fixes - Runtime Option Handling: Hardened behavioral configuration reads against shared and foreign prototype pollution and normalized unsafe interceptor replacement objects. This also clarifies Fetch redirect and custom implementation behavior, HTTP/2 DNS and proxy handling, CIDR-based NO\_PROXY matching, and malformed data URI rejection; see the PR for documented compatibility effects. ([#&#8203;11141](https://github.com/axios/axios/issues/11141)) #### 🐛 Bug Fixes - Interceptor Lifecycle: Prevented unbounded handler-array growth by trimming trailing ejected interceptors without changing iteration semantics, and kept interceptor operations safe when the public handlers field is nullish. ([#&#8203;11087](https://github.com/axios/axios/issues/11087), [#&#8203;11118](https://github.com/axios/axios/issues/11118)) - Request Error Preservation: Prevented custom Error.prepareStackTrace implementations that return non-string values from replacing the original request failure with an unrelated TypeError. ([#&#8203;11109](https://github.com/axios/axios/issues/11109)) - XHR Reliability: Navigation-canceled requests now reject with ECONNABORTED instead of resolving with status 0, while successful downloads flush their final progress callback during the live loadend dispatch. ([#&#8203;11094](https://github.com/axios/axios/issues/11094), [#&#8203;11121](https://github.com/axios/axios/issues/11121)) - Node.js Socket Memory: Removed request-context retention from per-socket error listeners, preventing completed response data from being pinned for the lifetime of pooled keep-alive sockets. ([#&#8203;11091](https://github.com/axios/axios/issues/11091)) - Core Methods and HTTP Errors: Prevented structural method-header buckets from leaking into outgoing headers, standardized invalid DNS lookup and httpVersion failures as AxiosError.ERR\_BAD\_OPTION\_VALUE, and corrected the timeoutErrorMessage merge strategy. ([#&#8203;11096](https://github.com/axios/axios/issues/11096)) #### 🔧 Maintenance & Chores - Dependencies: Updated fast-uri, postcss, js-yaml, mocha, development-tooling groups, and GitHub Actions dependencies. ([#&#8203;11092](https://github.com/axios/axios/issues/11092), [#&#8203;11098](https://github.com/axios/axios/issues/11098), [#&#8203;11099](https://github.com/axios/axios/issues/11099), [#&#8203;11106](https://github.com/axios/axios/issues/11106), [#&#8203;11107](https://github.com/axios/axios/issues/11107), [#&#8203;11122](https://github.com/axios/axios/issues/11122), [#&#8203;11123](https://github.com/axios/axios/issues/11123), [#&#8203;11126](https://github.com/axios/axios/issues/11126), [#&#8203;11127](https://github.com/axios/axios/issues/11127), [#&#8203;11133](https://github.com/axios/axios/issues/11133), [#&#8203;11140](https://github.com/axios/axios/issues/11140), [#&#8203;11143](https://github.com/axios/axios/issues/11143), [#&#8203;11144](https://github.com/axios/axios/issues/11144)) - Documentation: Applied the v1.19.0 documentation updates, added the missing fs import to the README stream example, introduced localized global search, and repaired the interceptor test link. ([#&#8203;11101](https://github.com/axios/axios/issues/11101), [#&#8203;11113](https://github.com/axios/axios/issues/11113), [#&#8203;11097](https://github.com/axios/axios/issues/11097), [#&#8203;11119](https://github.com/axios/axios/issues/11119)) - Sponsorship: Updated sponsorship links and data and added ScrapingBee as a sponsor. ([#&#8203;11124](https://github.com/axios/axios/issues/11124), [#&#8203;11136](https://github.com/axios/axios/issues/11136), [#&#8203;11137](https://github.com/axios/axios/issues/11137)) - CI and Release: Switched ESM smoke tests to locked dependencies and synchronized package and runtime version metadata for v1.20.0. ([#&#8203;11128](https://github.com/axios/axios/issues/11128), [#&#8203;11152](https://github.com/axios/axios/issues/11152)) #### 🌟 New Contributors We are thrilled to welcome our new contributors. Thank you for helping improve axios: - [@&#8203;yens1](https://github.com/yens1) ([#&#8203;11109](https://github.com/axios/axios/issues/11109)) - [@&#8203;Sasireddy001](https://github.com/Sasireddy001) ([#&#8203;11113](https://github.com/axios/axios/issues/11113)) - [@&#8203;ari-token-security](https://github.com/ari-token-security) ([#&#8203;11094](https://github.com/axios/axios/issues/11094)) - [@&#8203;timothyokooboh](https://github.com/timothyokooboh) ([#&#8203;11097](https://github.com/axios/axios/issues/11097)) - [@&#8203;gi9439041-png](https://github.com/gi9439041-png) ([#&#8203;11119](https://github.com/axios/axios/issues/11119)) - [@&#8203;Hashim1999164](https://github.com/Hashim1999164) ([#&#8203;11082](https://github.com/axios/axios/issues/11082)) - [@&#8203;v-dev-cl](https://github.com/v-dev-cl) ([#&#8203;11091](https://github.com/axios/axios/issues/11091)) - [@&#8203;r0h1tb](https://github.com/r0h1tb) ([#&#8203;11118](https://github.com/axios/axios/issues/11118)) - [@&#8203;ostapondo](https://github.com/ostapondo) ([#&#8203;11121](https://github.com/axios/axios/issues/11121)) Full Changelog (<https://github.com/axios/axios/compare/v1.19.0...v1.20.0>) ### [`v1.19.0`](https://github.com/axios/axios/blob/HEAD/CHANGELOG.md#v1190--July-22-2026) [Compare Source](https://github.com/axios/axios/compare/v1.18.1...v1.19.0) This release raises the form-data security floor, adds configuration and type-system capabilities, and fixes NO\_PROXY matching, interceptor errors, progress reporting, and serialization edge cases. </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yNjQuMiIsInVwZGF0ZWRJblZlciI6IjQ0LjY1LjUiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImZyb250ZW5kIiwicmVub3ZhdGUiXX0=-->
renovate-bot force-pushed renovate/axios-1.x from 1ca27fc00d to 1565e419f7 2026-08-27 06:01:31 +01:00 Compare
renovate-bot changed title from Update dependency axios to v1.19.0 to Update dependency axios to v1.20.0 2026-08-27 06:01:33 +01:00
This pull request can be merged automatically.
You are not authorized to merge this pull request.
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin renovate/axios-1.x:renovate/axios-1.x
git switch renovate/axios-1.x

Merge

Merge the changes and update on Forgejo.

Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.

git switch main
git merge --no-ff renovate/axios-1.x
git switch renovate/axios-1.x
git rebase main
git switch main
git merge --ff-only renovate/axios-1.x
git switch renovate/axios-1.x
git rebase main
git switch main
git merge --no-ff renovate/axios-1.x
git switch main
git merge --squash renovate/axios-1.x
git switch main
git merge --ff-only renovate/axios-1.x
git switch main
git merge renovate/axios-1.x
git push origin main
Sign in to join this conversation.
No reviewers
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
MobiusReactor/TicTacToeV2!128
No description provided.