bumped axios version, ran npm install, pushing updates up

[stbarillas]

Description

Small PR
Bumping Axios version to address vulnerability

Verify

• Code runs without errors
• Tests pass with >=85% coverage

[guardrails]

⚠️ We detected 5 security issues in this pull request:

Vulnerable Libraries (5)

Severity	Details
Medium	pkg:npm/[email protected] (t) upgrade to: > 27.1.5
High	pkg:npm/[email protected] (t) upgrade to: > 19.0.3
Medium	pkg:npm/@slack/[email protected] (t) upgrade to: > 6.7.1
High	pkg:npm/@semantic-release/[email protected] (t) upgrade to: > 9.0.1
High	pkg:npm/@commitlint/[email protected] (t) upgrade to: > 16.2.3

More info on how to fix Vulnerable Libraries in JavaScript.

---

👉 Go to the dashboard for detailed results.

📥 Happy? Share your feedback with us.

[stbarillas]

@bamohan , I don't have a lob api key to run tests locally. Could you help me verify that tests are still passing?

Also, the security issues found by guardrails are for dev dependencies. Could these be overlooked for this PR?

[ronakshahlob]

I ran the tests on the PR and looks like the upgrade does have some breaking changes. Could you take a look. You should be able to see the breaking tests on the PR, let me know if not.

[bamohan]

#275 (review)

[comp615]

@bamohan @ronakshahlob Heya, I did an update to Steve's patch here. Due to how Axios changed packaging with cjs, Jest 27 is not able to understand that. We could add a hack/exception, but the easier solution is to just update that to Jest 29. So I did that and verified that npm test works locally now.

Thanks!

[prescottprue]

Any update here? It would be nice to remove vulnerabilities

[juanfriss]

so you were able to test locally, no breaking changes from axios? if yes, good to merge.

I think we should also bump up this package's version from "version": "1.3.3", to 1.3.4

[comp615]

so you were able to test locally, no breaking changes from axios? if yes, good to merge.

I think we should also bump up this package's version from "version": "1.3.3", to 1.3.4

All tests passed; we used the update in our code as well with no issues, however that's not to say we exercise all the functionality but seemed ok.

Feel free to bump the version as appropriate after merging so you can release :)

[QuentinLemCode]

Hello @stbarillas @amaan-lob @BennyKitchell
Can you merge this PR, please?
The axios version of this package raises a security issue on our repo

[multigl]

also requesting this, axios is showing up in our vulnerability scans from @lob/lob-typescript-sdk

[juanfriss]

I will publish 1.3.4 in #277 and publish the new version shortly.

[juanfriss]

ended up publishing version 1.3.5