Skip to content

chore(deps): bump axios to ^1.13.5#2415

Merged
zimeg merged 4 commits intoslackapi:mainfrom
lorem--ipsum:main
Feb 13, 2026
Merged

chore(deps): bump axios to ^1.13.5#2415
zimeg merged 4 commits intoslackapi:mainfrom
lorem--ipsum:main

Conversation

@lorem--ipsum
Copy link
Contributor

Summary

Upgrades axios to fix DOS vulnerability.

Requirements (place an x in each [ ])

@zimeg zimeg requested a review from a team as a code owner February 13, 2026 03:20
@changeset-bot
Copy link

changeset-bot bot commented Feb 13, 2026

🦋 Changeset detected

Latest commit: 963e070

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 2 packages
Name Type
@slack/web-api Patch
@slack/webhook Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

@zimeg zimeg added pkg:web-api applies to `@slack/web-api` pkg:webhook applies to `@slack/webhook` dependencies Pull requests that update a dependency file semver:patch security labels Feb 13, 2026
@zimeg zimeg changed the title Upgraded axios to 1.12.0 to alleviate vulnerability to DoS attack through lack of data size check chore(deps): bump axios to ^1.13.5 Feb 13, 2026
@zimeg zimeg linked an issue Feb 13, 2026 that may be closed by this pull request
7 tasks
@codecov
Copy link

codecov bot commented Feb 13, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 93.17%. Comparing base (a9fa6c1) to head (963e070).
⚠️ Report is 1 commits behind head on main.
✅ All tests successful. No failed tests found.

Additional details and impacted files
@@           Coverage Diff           @@
##             main    #2415   +/-   ##
=======================================
  Coverage   93.17%   93.17%           
=======================================
  Files          40       40           
  Lines       11384    11384           
  Branches      726      726           
=======================================
  Hits        10607    10607           
  Misses        765      765           
  Partials       12       12           
Flag Coverage Δ
cli-hooks 95.42% <ø> (ø)
cli-test 94.79% <ø> (ø)
oauth 77.39% <ø> (ø)
socket-mode 61.87% <ø> (ø)
web-api 98.12% <ø> (ø)
webhook 96.66% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

🚀 New features to boost your workflow:
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@zimeg zimeg enabled auto-merge (squash) February 13, 2026 03:25
Copy link
Member

@zimeg zimeg left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@lorem--ipsum Thank you for sharing this update with us! Let's get this merged and released to resolve #2514 as well 🙏 ✨

@zimeg zimeg merged commit 370cf22 into slackapi:main Feb 13, 2026
58 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

cla:signed dependencies Pull requests that update a dependency file pkg:web-api applies to `@slack/web-api` pkg:webhook applies to `@slack/webhook` security semver:patch

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Upgrade Axios to 1.13.5

2 participants