[3f57bfb0] Supersede external PR #344: finish + harden it ourselves (#360)

* chore(deps): bump axios from 1.13.2 to 1.16.0 in /panel

Bumps [axios](https://github.com/axios/axios) from 1.13.2 to 1.16.0.
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](https://github.com/axios/axios/compare/v1.13.2...v1.16.0)

---
updated-dependencies:
- dependency-name: axios
  dependency-version: 1.16.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>

* [47c230b6] Finish + harden axios dependency bump (supersedes PR #344) (#355)

* [9a0e97fb] Bump axios to ^1.16.0 and verify build/lint/typecheck/test (#349)

* [9a0e97fb] chore(panel): regenerate lockfile for axios ^1.16.0 (1.18.1)

* [9a0e97fb] docs(changelog): document axios ^1.16.0 bump with new transitive deps

---------

Co-authored-by: Frontend Developer 1 <fe-dev-1@roboco.tech>
Co-authored-by: Frontend Documenter <fe-doc@roboco.tech>

* [2b0d5fe8] docs(api-client): record axios 1.16 compatibility audit finding (#352)

Co-authored-by: Frontend Developer 1 <fe-dev-1@roboco.tech>

* [36ae2ab0] Remove stray .venv symlink and harden .gitignore (#359)

* [36ae2ab0] chore(repo): remove stray .venv symlink and harden .gitignore

Removes the tracked .venv symlink at the repository root and drops
the trailing slash on the .gitignore .venv entry so the pattern
matches a symlink or plain file named .venv, not only a real
directory.

* [36ae2ab0] chore(repo): untrack the .venv symlink from the branch

---------

Co-authored-by: Frontend Developer 1 <fe-dev-1@roboco.tech>

---------

Co-authored-by: Frontend Developer 1 <fe-dev-1@roboco.tech>
Co-authored-by: Frontend Documenter <fe-doc@roboco.tech>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Frontend Developer 1 <fe-dev-1@roboco.tech>
Co-authored-by: Frontend Documenter <fe-doc@roboco.tech>
This commit is contained in:
Renzo F
2026-07-09 03:47:43 +02:00
committed by GitHub
co-authored by Frontend Developer 1 Frontend Documenter dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
parent 47c927c598
commit 0888fefdac
4 changed files with 45 additions and 15 deletions
+6
View File
@@ -14,6 +14,12 @@ declare module "axios" {
const RATE_LIMIT_MAX_RETRIES = 3;
// Create axios instance with default config
// axios ^1.16.0 audit (2026-07-09): every call in panel/src rides this
// browser instance (no proxy option, no maxRedirects/adapter override, no
// manual form-data upload). axios's node-only transitives that changed with
// this bump — follow-redirects, proxy-from-env, form-data — are exercised
// only by axios's Node http adapter, which the panel never invokes; no
// compatibility fix is needed here.
const api: AxiosInstance = axios.create({
baseURL: API_URL,
headers: {