fix(core): update axios to address CVE-2023-45857 (#20493)

nrwl · Jan 31, 2024 · f0d93d0 · f0d93d0
1 parent 7ed534f
commit f0d93d0
Show file tree

Hide file tree

Showing 6 changed files with 27 additions and 10 deletions.
diff --git a/package.json b/package.json
@@ -327,7 +327,7 @@
     "@yarnpkg/lockfile": "^1.1.0",
     "@yarnpkg/parsers": "3.0.0-rc.46",
     "@zkochan/js-yaml": "0.0.6",
-    "axios": "^1.5.1",
+    "axios": "^1.6.0",
     "classnames": "^2.3.1",
     "cliui": "^8.0.1",
     "core-js": "^3.6.5",

diff --git a/packages/create-nx-workspace/package.json b/packages/create-nx-workspace/package.json
@@ -36,7 +36,7 @@
     "tmp": "~0.2.1",
     "tslib": "^2.3.0",
     "yargs": "^17.6.2",
-    "axios": "^1.5.1"
+    "axios": "^1.6.0"
   },
   "publishConfig": {
     "access": "public"

diff --git a/packages/node/migrations.json b/packages/node/migrations.json
@@ -34,6 +34,15 @@
           "alwaysAddToPackageJson": false
         }
       }
+    },
+    "17.3.1": {
+      "version": "17.3.1-beta.0",
+      "packages": {
+        "axios": {
+          "version": "^1.6.0",
+          "alwaysAddToPackageJson": false
+        }
+      }
     }
   }
 }
diff --git a/packages/node/src/utils/versions.ts b/packages/node/src/utils/versions.ts
@@ -15,4 +15,4 @@ export const fastifyAutoloadVersion = '~5.7.1';
 export const fastifySensibleVersion = '~5.2.0';
 export const fastifyPluginVersion = '~4.5.0';
 
-export const axiosVersion = '^1.0.0';
+export const axiosVersion = '^1.6.0';
diff --git a/packages/nx/package.json b/packages/nx/package.json
@@ -36,7 +36,7 @@
     "@yarnpkg/lockfile": "^1.1.0",
     "@yarnpkg/parsers": "3.0.0-rc.46",
     "@zkochan/js-yaml": "0.0.6",
-    "axios": "^1.5.1",
+    "axios": "^1.6.0",
     "chalk": "^4.1.0",
     "cli-cursor": "3.1.0",
     "cli-spinners": "2.6.1",

diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml