axios 0.21.4 → 0.30.0

package/SECURITY.md

@@ -1,5 +1,5 @@
-# Security Policy
+# Reporting a Vulnerability
 
-## Reporting a Vulnerability
+If you discover a security vulnerability within axios, please submit a report via [huntr.dev](https://huntr.dev/bounties/?target=https%3A%2F%2Fgithub.com%2Faxios%2Faxios). Bounties and CVEs are automatically managed and allocated via the platform.
 
-Please report security issues to jasonsaayman@gmail.com
+All security vulnerabilities will be promptly addressed.

package/UPGRADE_GUIDE.md

@@ -1,14 +1,20 @@
 # Upgrade Guide
 
-### 0.15.x -> 0.16.0
+## 0.18.x -> 0.19.0
 
-#### `Promise` Type Declarations
+### HTTPS Proxies
+
+Routing through an https proxy now requires setting the `protocol` attribute of the proxy configuration to `https`
+
+## 0.15.x -> 0.16.0
+
+### `Promise` Type Declarations
 
 The `Promise` type declarations have been removed from the axios typings in favor of the built-in type declarations. If you use axios in a TypeScript project that targets `ES5`, please make sure to include the `es2015.promise` lib. Please see [this post](https://blog.mariusschulz.com/2016/11/25/typescript-2-0-built-in-type-declarations) for details.
 
-### 0.13.x -> 0.14.0
+## 0.13.x -> 0.14.0
 
-#### TypeScript Definitions
+### TypeScript Definitions
 
 The axios TypeScript definitions have been updated to match the axios API and use the ES2015 module syntax.
 
@@ -22,7 +28,7 @@ axios.get('/foo')
   .catch(error => console.log(error));
 ```
 
-#### `agent` Config Option
+### `agent` Config Option
 
 The `agent` config option has been replaced with two new options: `httpAgent` and `httpsAgent`. Please use them instead.
 
@@ -35,7 +41,7 @@ The `agent` config option has been replaced with two new options: `httpAgent` an
 }
 ```
 
-#### `progress` Config Option
+### `progress` Config Option
 
 The `progress` config option has been replaced with the `onUploadProgress` and `onDownloadProgress` options.
 
@@ -53,11 +59,11 @@ The `progress` config option has been replaced with the `onUploadProgress` and `
 }
 ```
 
-### 0.12.x -> 0.13.0
+## 0.12.x -> 0.13.0
 
 The `0.13.0` release contains several changes to custom adapters and error handling.
 
-#### Error Handling
+### Error Handling
 
 Previous to this release an error could either be a server response with bad status code or an actual `Error`. With this release Promise will always reject with an `Error`. In the case that a response was received, the `Error` will also include the response.
 
@@ -71,7 +77,7 @@ axios.get('/user/12345')
   });
 ```
 
-#### Request Adapters
+### Request Adapters
 
 This release changes a few things about how request adapters work. Please take note if you are using your own custom adapter.
 
@@ -115,14 +121,15 @@ function myAdapter(config) {
 ```
 
 See the related commits for more details:
+
 - [Response transformers](https://github.com/axios/axios/commit/10eb23865101f9347570552c04e9d6211376e25e)
 - [Request adapter Promise](https://github.com/axios/axios/commit/157efd5615890301824e3121cc6c9d2f9b21f94a)
 
-### 0.5.x -> 0.6.0
+## 0.5.x -> 0.6.0
 
 The `0.6.0` release contains mostly bug fixes, but there are a couple things to be aware of when upgrading.
 
-#### ES6 Promise Polyfill
+### ES6 Promise Polyfill
 
 Up until the `0.6.0` release ES6 `Promise` was being polyfilled using [es6-promise](https://github.com/jakearchibald/es6-promise). With this release, the polyfill has been removed, and you will need to supply it yourself if your environment needs it.
 
@@ -133,7 +140,7 @@ var axios = require('axios');
 
 This will polyfill the global environment, and only needs to be done once.
 
-#### `axios.success`/`axios.error`
+### `axios.success`/`axios.error`
 
 The `success`, and `error` aliases were deprecated in [0.4.0](https://github.com/axios/axios/blob/master/CHANGELOG.md#040-oct-03-2014). As of this release they have been removed entirely. Instead please use `axios.then`, and `axios.catch` respectively.
 
@@ -147,7 +154,7 @@ axios.get('some/url')
   });
 ```
 
-#### UMD
+### UMD
 
 Previous versions of axios shipped with an AMD, CommonJS, and Global build. This has all been rolled into a single UMD build.
 
@@ -160,3 +167,24 @@ require(['bower_components/axios/dist/axios'], function (axios) {
 // CommonJS
 var axios = require('axios/dist/axios');
 ```
+
+## 0.28.x -> 0.28.1
+
+The way to pass in a custom parameter serializer has changed
+
+0.28.0
+```js
+axios.create({
+    paramsSerializer: (params) => {
+        return qs.stringify(params, { arrayFormat: 'repeat', skipNulls: true })
+    }, ...config);
+```
+now the serializer needs to be in under a new key:
+
+0.28.1
+```js
+axios.create({
+    paramsSerializer: {
+        serialize: (params) => qs.stringify(params, { arrayFormat: 'repeat', skipNulls: true }),
+    }, ...config);
+```

package/bin/check-build-version.js

@@ -0,0 +1,19 @@
+const fs = require('fs');
+const assert = require('assert');
+const axios  = require('../index.js');
+
+const {version} = JSON.parse(fs.readFileSync('./package.json'));
+
+console.log('Checking versions...\n----------------------------')
+
+console.log(`Package version: v${version}`);
+console.log(`Axios version: v${axios.VERSION}`);
+console.log(`----------------------------`);
+
+assert.strictEqual(
+  version,
+  axios.VERSION,
+  `Version mismatch between package and Axios ${version} != ${axios.VERSION}`
+);
+
+console.log('✔️ PASSED\n');

package/bin/ssl_hotfix.js

@@ -0,0 +1,22 @@
+const {spawn} = require('child_process');
+
+const args = process.argv.slice(2);
+
+console.log(`Running ${args.join(' ')} on ${process.version}\n`);
+
+const match = /v(\d+)/.exec(process.version);
+
+const isHotfixNeeded = match && match[1] > 16;
+
+isHotfixNeeded && console.warn('Setting --openssl-legacy-provider as ssl hotfix');
+
+const test = spawn('cross-env',
+  isHotfixNeeded ? ['NODE_OPTIONS=--openssl-legacy-provider', ...args] : args, {
+    shell: true,
+    stdio: 'inherit'
+  }
+);
+
+test.on('exit', function (code) {
+  process.exit(code)
+})