plat-16016-SCA-error fix for error sdk#2728
Closed
SB-priyankap wants to merge 4 commits intonextfrom
Closed
Conversation
SB-priyankap
requested review from
SB-gulshans,
SB-jigneshR,
Copilot and
hamudi-ahmed
Contributor
There was a problem hiding this comment.
Pull request overview
Updates the repository’s dependency resolution to address an SCA finding by forcing a newer axios version via npm overrides, and refreshes the lockfile accordingly.
Changes:
- Add an npm
overridesentry to forceaxiosto^1.15.0. - Regenerate
package-lock.jsonto reflectaxios@1.15.0and its updated transitive dependencies (follow-redirects,form-data,proxy-from-env).
Reviewed changes
Copilot reviewed 1 out of 2 changed files in this pull request and generated 1 comment.
| File | Description |
|---|---|
| package.json | Adds axios override to force the resolved version across the workspace. |
| package-lock.json | Updates the resolved dependency tree to axios@1.15.0 and related transitive updates. |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
| "form-data": "^3.0.3" | ||
| }, | ||
| "@types/babel__traverse": "7.17.1", | ||
| "axios": "^1.15.0", |
There was a problem hiding this comment.
PR description mentions upgrading/overriding "axis", but this change overrides "axios". Please align the PR description/title with the actual dependency being overridden so reviewers/auditors can track the security fix accurately.
Contributor
Author
|
Close PR |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Goal
upgrade axios to v1.15
Changeset
inside package.json file to override axis version
Testing
run unit test cases