chore(deps): update dependency axios to v1.13.5 #705

Merged

renovate[bot] merged 1 commit from renovate/axios-1.x-lockfile into main

2026-02-08 13:10:53 +00:00

renovate[bot] commented

2026-02-08 13:10:03 +00:00

(Migrated from github.com)

This PR contains the following updates:

Package	Change	Age	Confidence
axios (source)	`1.13.4` → `1.13.5`

Release Notes

axios/axios (axios)

`v1.13.5`

Compare Source

Release 1.13.5

Highlights

Security: Fixed a potential Denial of Service issue involving the __proto__ key in mergeConfig. (PR #7369)
Bug fix: Resolved an issue where AxiosError could be missing the status field on and after v1.13.3. (PR #7368)

Changes

Security

Fix Denial of Service via __proto__ key in mergeConfig. (PR #7369)

Fixes

Fix/5657. (PR #7313)
Ensure status is present in AxiosError on and after v1.13.3. (PR #7368)

Features / Improvements

Add input validation to isAbsoluteURL. (PR #7326)
Refactor: bump minor package versions. (PR #7356)

Documentation

Clarify object-check comment. (PR #7323)
Fix deprecated Buffer constructor usage and README formatting. (PR #7371)

CI / Maintenance

Chore: fix issues with YAML. (PR #7355)
CI: update workflow YAMLs. (PR #7372)
CI: fix run condition. (PR #7373)
Dev deps: bump karma-sourcemap-loader from 0.3.8 to 0.4.0. (PR #7360)
Chore(release): prepare release 1.13.5. (PR #7379)

New Contributors

@sachin11063 (first contribution — PR #7323)
@asmitha-16 (first contribution — PR #7326)

Full Changelog: https://github.com/axios/axios/compare/v1.13.4...v1.13.5

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [axios](https://axios-http.com) ([source](https://redirect.github.com/axios/axios)) | [`1.13.4` → `1.13.5`](https://renovatebot.com/diffs/npm/axios/1.13.4/1.13.5) | ![age](https://developer.mend.io/api/mc/badges/age/npm/axios/1.13.5?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/axios/1.13.4/1.13.5?slim=true) | --- ### Release Notes <details> <summary>axios/axios (axios)</summary> ### [`v1.13.5`](https://redirect.github.com/axios/axios/releases/tag/v1.13.5) [Compare Source](https://redirect.github.com/axios/axios/compare/v1.13.4...v1.13.5) #### Release 1.13.5 ##### Highlights - **Security:** Fixed a potential **Denial of Service** issue involving the `__proto__` key in `mergeConfig`. (PR [#7369](https://redirect.github.com/axios/axios/pull/7369)) - **Bug fix:** Resolved an issue where `AxiosError` could be missing the `status` field on and after **v1.13.3**. (PR [#7368](https://redirect.github.com/axios/axios/pull/7368)) ##### Changes ##### Security - Fix Denial of Service via `__proto__` key in `mergeConfig`. (PR [#7369](https://redirect.github.com/axios/axios/pull/7369)) ##### Fixes - Fix/5657. (PR [#7313](https://redirect.github.com/axios/axios/pull/7313)) - Ensure `status` is present in `AxiosError` on and after v1.13.3. (PR [#7368](https://redirect.github.com/axios/axios/pull/7368)) ##### Features / Improvements - Add input validation to `isAbsoluteURL`. (PR [#7326](https://redirect.github.com/axios/axios/pull/7326)) - Refactor: bump minor package versions. (PR [#7356](https://redirect.github.com/axios/axios/pull/7356)) ##### Documentation - Clarify object-check comment. (PR [#7323](https://redirect.github.com/axios/axios/pull/7323)) - Fix deprecated `Buffer` constructor usage and README formatting. (PR [#7371](https://redirect.github.com/axios/axios/pull/7371)) ##### CI / Maintenance - Chore: fix issues with YAML. (PR [#7355](https://redirect.github.com/axios/axios/pull/7355)) - CI: update workflow YAMLs. (PR [#7372](https://redirect.github.com/axios/axios/pull/7372)) - CI: fix run condition. (PR [#7373](https://redirect.github.com/axios/axios/pull/7373)) - Dev deps: bump `karma-sourcemap-loader` from 0.3.8 to 0.4.0. (PR [#7360](https://redirect.github.com/axios/axios/pull/7360)) - Chore(release): prepare release 1.13.5. (PR [#7379](https://redirect.github.com/axios/axios/pull/7379)) ##### New Contributors - [@sachin11063](https://redirect.github.com/sachin11063) (first contribution — PR [#7323](https://redirect.github.com/axios/axios/pull/7323)) - [@asmitha-16](https://redirect.github.com/asmitha-16) (first contribution — PR [#7326](https://redirect.github.com/axios/axios/pull/7326)) **Full Changelog:** <https://github.com/axios/axios/compare/v1.13.4...v1.13.5> </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/webstreamr/webstreamr).