contentful-management 12.6.0 → 12.8.0

package/dist/browser/index.js

@@ -4366,7 +4366,7 @@ var contentfulManagement = (function (exports) {
 
     	    if (obj === null) {
     	        if (strictNullHandling) {
-    	            return encoder && !encodeValuesOnly ? encoder(prefix, defaults.encoder, charset, 'key', format) : prefix;
+    	            return formatter(encoder && !encodeValuesOnly ? encoder(prefix, defaults.encoder, charset, 'key', format) : prefix);
     	        }
 
     	        obj = '';
@@ -4390,7 +4390,9 @@ var contentfulManagement = (function (exports) {
     	    if (generateArrayPrefix === 'comma' && isArray(obj)) {
     	        // we need to join elements in
     	        if (encodeValuesOnly && encoder) {
-    	            obj = utils.maybeMap(obj, encoder);
+    	            obj = utils.maybeMap(obj, function (v) {
+    	                return v == null ? v : encoder(v);
+    	            });
     	        }
     	        objKeys = [{ value: obj.length > 0 ? obj.join(',') || null : void undefined }];
     	    } else if (isArray(filter)) {
@@ -4560,6 +4562,11 @@ var contentfulManagement = (function (exports) {
     	    var sideChannel = getSideChannel();
     	    for (var i = 0; i < objKeys.length; ++i) {
     	        var key = objKeys[i];
+
+    	        if (typeof key === 'undefined' || key === null) {
+    	            continue;
+    	        }
+
     	        var value = obj[key];
 
     	        if (options.skipNulls && value === null) {
@@ -4593,10 +4600,10 @@ var contentfulManagement = (function (exports) {
     	    if (options.charsetSentinel) {
     	        if (options.charset === 'iso-8859-1') {
     	            // encodeURIComponent('&#10003;'), the "numeric entity" representation of a checkmark
-    	            prefix += 'utf8=%26%2310003%3B&';
+    	            prefix += 'utf8=%26%2310003%3B' + options.delimiter;
     	        } else {
     	            // encodeURIComponent('✓')
-    	            prefix += 'utf8=%E2%9C%93&';
+    	            prefix += 'utf8=%E2%9C%93' + options.delimiter;
     	        }
     	    }
 
@@ -4679,10 +4686,10 @@ var contentfulManagement = (function (exports) {
     	    var limit = options.parameterLimit === Infinity ? void undefined : options.parameterLimit;
     	    var parts = cleanStr.split(
     	        options.delimiter,
-    	        options.throwOnLimitExceeded ? limit + 1 : limit
+    	        options.throwOnLimitExceeded && typeof limit !== 'undefined' ? limit + 1 : limit
     	    );
 
-    	    if (options.throwOnLimitExceeded && parts.length > limit) {
+    	    if (options.throwOnLimitExceeded && typeof limit !== 'undefined' && parts.length > limit) {
     	        throw new RangeError('Parameter limit exceeded. Only ' + limit + ' parameter' + (limit === 1 ? '' : 's') + ' allowed.');
     	    }
 
@@ -4826,9 +4833,12 @@ var contentfulManagement = (function (exports) {
     	    return leaf;
     	};
 
-    	var splitKeyIntoSegments = function splitKeyIntoSegments(givenKey, options) {
-    	    var key = options.allowDots ? givenKey.replace(/\.([^.[]+)/g, '[$1]') : givenKey;
+    	// Split a key like "a[b][c[]]" into ['a', '[b]', '[c[]]'] while preserving
+    	// qs parse semantics for depth/prototype guards.
+    	var splitKeyIntoSegments = function splitKeyIntoSegments(originalKey, options) {
+    	    var key = options.allowDots ? originalKey.replace(/\.([^.[]+)/g, '[$1]') : originalKey;
 
+    	    // depth <= 0 keeps the whole key as one segment
     	    if (options.depth <= 0) {
     	        if (!options.plainObjects && has.call(Object.prototype, key)) {
     	            if (!options.allowPrototypes) {
@@ -4839,14 +4849,11 @@ var contentfulManagement = (function (exports) {
     	        return [key];
     	    }
 
-    	    var brackets = /(\[[^[\]]*])/;
-    	    var child = /(\[[^[\]]*])/g;
-
-    	    var segment = brackets.exec(key);
-    	    var parent = segment ? key.slice(0, segment.index) : key;
-
-    	    var keys = [];
+    	    var segments = [];
 
+    	    // parent before the first '[' (may be empty if key starts with '[')
+    	    var first = key.indexOf('[');
+    	    var parent = first >= 0 ? key.slice(0, first) : key;
     	    if (parent) {
     	        if (!options.plainObjects && has.call(Object.prototype, parent)) {
     	            if (!options.allowPrototypes) {
@@ -4854,32 +4861,62 @@ var contentfulManagement = (function (exports) {
     	            }
     	        }
 
-    	        keys[keys.length] = parent;
+    	        segments[segments.length] = parent;
     	    }
 
-    	    var i = 0;
-    	    while ((segment = child.exec(key)) !== null && i < options.depth) {
-    	        i += 1;
-
-    	        var segmentContent = segment[1].slice(1, -1);
-    	        if (!options.plainObjects && has.call(Object.prototype, segmentContent)) {
-    	            if (!options.allowPrototypes) {
-    	                return;
+    	    var n = key.length;
+    	    var open = first;
+    	    var collected = 0;
+
+    	    while (open >= 0 && collected < options.depth) {
+    	        var level = 1;
+    	        var i = open + 1;
+    	        var close = -1;
+
+    	        // balance nested '[' and ']' inside this bracket group using a nesting level counter
+    	        while (i < n && close < 0) {
+    	            var cu = key.charCodeAt(i);
+    	            if (cu === 0x5B) { // '['
+    	                level += 1;
+    	            } else if (cu === 0x5D) { // ']'
+    	                level -= 1;
+    	                if (level === 0) {
+    	                    close = i; // found matching close; loop will exit by condition
+    	                }
     	            }
+    	            i += 1;
+    	        }
+
+    	        if (close < 0) {
+    	            // Unterminated group: wrap the raw remainder in one bracket pair so it stays
+    	            // a single literal segment (e.g. "[[]b" -> "[[]b]"); we do not infer missing ']'.
+    	            segments[segments.length] = '[' + key.slice(open) + ']';
+    	            return segments;
+    	        }
+
+    	        var seg = key.slice(open, close + 1);
+    	        // prototype guard for the content of this group
+    	        var content = seg.slice(1, -1);
+    	        if (!options.plainObjects && has.call(Object.prototype, content) && !options.allowPrototypes) {
+    	            return;
     	        }
 
-    	        keys[keys.length] = segment[1];
+    	        segments[segments.length] = seg;
+    	        collected += 1;
+
+    	        // find the next '[' after this balanced group
+    	        open = key.indexOf('[', close + 1);
     	    }
 
-    	    if (segment) {
+    	    if (open >= 0) {
     	        if (options.strictDepth === true) {
     	            throw new RangeError('Input depth exceeded depth option of ' + options.depth + ' and strictDepth is true');
     	        }
 
-    	        keys[keys.length] = '[' + key.slice(segment.index) + ']';
+    	        segments[segments.length] = '[' + key.slice(open) + ']';
     	    }
 
-    	    return keys;
+    	    return segments;
     	};
 
     	var parseKeys = function parseQueryStringKeys(givenKey, val, options, valuesParsed) {
@@ -5463,7 +5500,7 @@ var contentfulManagement = (function (exports) {
         throw error;
     }
 
-    /*! Axios v1.15.0 Copyright (c) 2026 Matt Zabriskie and contributors */
+    /*! Axios v1.18.0 Copyright (c) 2026 Matt Zabriskie and contributors */
 
     var axios_1;
     var hasRequiredAxios;
@@ -5491,6 +5528,57 @@ var contentfulManagement = (function (exports) {
     	const { getPrototypeOf } = Object;
     	const { iterator, toStringTag } = Symbol;
 
+    	/* Creating a function that will check if an object has a property. */
+    	const hasOwnProperty = (
+    	  ({ hasOwnProperty }) =>
+    	  (obj, prop) =>
+    	    hasOwnProperty.call(obj, prop)
+    	)(Object.prototype);
+
+    	/**
+    	 * Walk the prototype chain (excluding the shared Object.prototype) looking for
+    	 * an own `prop`. This distinguishes genuine own/inherited members — including
+    	 * class accessors and template prototypes — from members injected via
+    	 * Object.prototype pollution (e.g. `Object.prototype.username = '...'`), which
+    	 * live on Object.prototype itself and are therefore never matched.
+    	 *
+    	 * @param {*} thing The value whose chain to inspect
+    	 * @param {string|symbol} prop The property key to look for
+    	 *
+    	 * @returns {boolean} True when `prop` is owned below Object.prototype
+    	 */
+    	const hasOwnInPrototypeChain = (thing, prop) => {
+    	  let obj = thing;
+    	  const seen = [];
+
+    	  while (obj != null && obj !== Object.prototype) {
+    	    if (seen.indexOf(obj) !== -1) {
+    	      return false;
+    	    }
+    	    seen.push(obj);
+
+    	    if (hasOwnProperty(obj, prop)) {
+    	      return true;
+    	    }
+    	    obj = getPrototypeOf(obj);
+    	  }
+    	  return false;
+    	};
+
+    	/**
+    	 * Read `obj[prop]` only when it is safe from Object.prototype pollution. Own
+    	 * properties and members inherited from a non-Object.prototype source (a class
+    	 * instance or template object) are honored; a value reachable only through a
+    	 * polluted Object.prototype is ignored and `undefined` is returned.
+    	 *
+    	 * @param {*} obj The source object
+    	 * @param {string|symbol} prop The property key to read
+    	 *
+    	 * @returns {*} The resolved value, or undefined when unsafe/absent
+    	 */
+    	const getSafeProp = (obj, prop) =>
+    	  obj != null && hasOwnInPrototypeChain(obj, prop) ? obj[prop] : undefined;
+
     	const kindOf = ((cache) => (thing) => {
     	  const str = toString.call(thing);
     	  return cache[str] || (cache[str] = str.slice(8, -1).toLowerCase());
@@ -5616,7 +5704,7 @@ var contentfulManagement = (function (exports) {
     	 * @returns {boolean} True if value is a plain Object, otherwise false
     	 */
     	const isPlainObject = (val) => {
-    	  if (kindOf(val) !== 'object') {
+    	  if (!isObject(val)) {
     	    return false;
     	  }
 
@@ -5624,9 +5712,12 @@ var contentfulManagement = (function (exports) {
     	  return (
     	    (prototype === null ||
     	      prototype === Object.prototype ||
-    	      Object.getPrototypeOf(prototype) === null) &&
-    	    !(toStringTag in val) &&
-    	    !(iterator in val)
+    	      getPrototypeOf(prototype) === null) &&
+    	    // Treat any genuine (non-Object.prototype-polluted) Symbol.toStringTag or
+    	    // Symbol.iterator as evidence the value is a tagged/iterable type rather
+    	    // than a plain object, while ignoring keys injected onto Object.prototype.
+    	    !hasOwnInPrototypeChain(val, toStringTag) &&
+    	    !hasOwnInPrototypeChain(val, iterator)
     	  );
     	};
 
@@ -5675,9 +5766,9 @@ var contentfulManagement = (function (exports) {
     	 * also have a `name` and `type` attribute to specify filename and content type
     	 *
     	 * @see https://github.com/facebook/react-native/blob/26684cf3adf4094eb6c405d345a75bf8c7c0bf88/Libraries/Network/FormData.js#L68-L71
-    	 * 
+    	 *
     	 * @param {*} value The value to test
-    	 * 
+    	 *
     	 * @returns {boolean} True if value is a React Native Blob, otherwise false
     	 */
     	const isReactNativeBlob = (value) => {
@@ -5687,9 +5778,9 @@ var contentfulManagement = (function (exports) {
     	/**
     	 * Determine if environment is React Native
     	 * ReactNative `FormData` has a non-standard `getParts()` method
-    	 * 
+    	 *
     	 * @param {*} formData The formData to test
-    	 * 
+    	 *
     	 * @returns {boolean} True if environment is React Native, otherwise false
     	 */
     	const isReactNative = (formData) => formData && typeof formData.getParts !== 'undefined';
@@ -5708,7 +5799,7 @@ var contentfulManagement = (function (exports) {
     	 *
     	 * @param {*} val The value to test
     	 *
-    	 * @returns {boolean} True if value is a File, otherwise false
+    	 * @returns {boolean} True if value is a FileList, otherwise false
     	 */
     	const isFileList = kindOfTest('FileList');
 
@@ -5740,15 +5831,17 @@ var contentfulManagement = (function (exports) {
     	const FormDataCtor = typeof G.FormData !== 'undefined' ? G.FormData : undefined;
 
     	const isFormData = (thing) => {
-    	  let kind;
-    	  return thing && (
-    	    (FormDataCtor && thing instanceof FormDataCtor) || (
-    	      isFunction$1(thing.append) && (
-    	        (kind = kindOf(thing)) === 'formdata' ||
-    	        // detect form-data instance
-    	        (kind === 'object' && isFunction$1(thing.toString) && thing.toString() === '[object FormData]')
-    	      )
-    	    )
+    	  if (!thing) return false;
+    	  if (FormDataCtor && thing instanceof FormDataCtor) return true;
+    	  // Reject plain objects inheriting directly from Object.prototype so prototype-pollution gadgets can't spoof FormData.
+    	  const proto = getPrototypeOf(thing);
+    	  if (!proto || proto === Object.prototype) return false;
+    	  if (!isFunction$1(thing.append)) return false;
+    	  const kind = kindOf(thing);
+    	  return (
+    	    kind === 'formdata' ||
+    	    // detect form-data instance
+    	    (kind === 'object' && isFunction$1(thing.toString) && thing.toString() === '[object FormData]')
     	  );
     	};
 
@@ -5884,7 +5977,7 @@ var contentfulManagement = (function (exports) {
     	 *
     	 * @returns {Object} Result of all merge properties
     	 */
-    	function merge(/* obj1, obj2, obj3, ... */) {
+    	function merge(...objs) {
     	  const { caseless, skipUndefined } = (isContextDefined(this) && this) || {};
     	  const result = {};
     	  const assignValue = (val, key) => {
@@ -5893,9 +5986,15 @@ var contentfulManagement = (function (exports) {
     	      return;
     	    }
 
-    	    const targetKey = (caseless && findKey(result, key)) || key;
-    	    if (isPlainObject(result[targetKey]) && isPlainObject(val)) {
-    	      result[targetKey] = merge(result[targetKey], val);
+    	    // findKey lowercases the key, so caseless lookup only applies to strings —
+    	    // symbol keys are identity-matched.
+    	    const targetKey = (caseless && typeof key === 'string' && findKey(result, key)) || key;
+    	    // Read via own-prop only — a bare `result[targetKey]` walks the prototype
+    	    // chain, so a polluted Object.prototype value could surface here and get
+    	    // copied into the merged result.
+    	    const existing = hasOwnProperty(result, targetKey) ? result[targetKey] : undefined;
+    	    if (isPlainObject(existing) && isPlainObject(val)) {
+    	      result[targetKey] = merge(existing, val);
     	    } else if (isPlainObject(val)) {
     	      result[targetKey] = merge({}, val);
     	    } else if (isArray(val)) {
@@ -5905,8 +6004,25 @@ var contentfulManagement = (function (exports) {
     	    }
     	  };
 
-    	  for (let i = 0, l = arguments.length; i < l; i++) {
-    	    arguments[i] && forEach(arguments[i], assignValue);
+    	  for (let i = 0, l = objs.length; i < l; i++) {
+    	    const source = objs[i];
+    	    if (!source || isBuffer(source)) {
+    	      continue;
+    	    }
+
+    	    forEach(source, assignValue);
+
+    	    if (typeof source !== 'object' || isArray(source)) {
+    	      continue;
+    	    }
+
+    	    const symbols = Object.getOwnPropertySymbols(source);
+    	    for (let j = 0; j < symbols.length; j++) {
+    	      const symbol = symbols[j];
+    	      if (propertyIsEnumerable.call(source, symbol)) {
+    	        assignValue(source[symbol], symbol);
+    	      }
+    	    }
     	  }
     	  return result;
     	}
@@ -5928,6 +6044,9 @@ var contentfulManagement = (function (exports) {
     	    (val, key) => {
     	      if (thisArg && isFunction$1(val)) {
     	        Object.defineProperty(a, key, {
+    	          // Null-proto descriptor so a polluted Object.prototype.get cannot
+    	          // hijack defineProperty's accessor-vs-data resolution.
+    	          __proto__: null,
     	          value: bind(val, thisArg),
     	          writable: true,
     	          enumerable: true,
@@ -5935,6 +6054,7 @@ var contentfulManagement = (function (exports) {
     	        });
     	      } else {
     	        Object.defineProperty(a, key, {
+    	          __proto__: null,
     	          value: val,
     	          writable: true,
     	          enumerable: true,
@@ -5973,12 +6093,14 @@ var contentfulManagement = (function (exports) {
     	const inherits = (constructor, superConstructor, props, descriptors) => {
     	  constructor.prototype = Object.create(superConstructor.prototype, descriptors);
     	  Object.defineProperty(constructor.prototype, 'constructor', {
+    	    __proto__: null,
     	    value: constructor,
     	    writable: true,
     	    enumerable: false,
     	    configurable: true,
     	  });
     	  Object.defineProperty(constructor, 'super', {
+    	    __proto__: null,
     	    value: superConstructor.prototype,
     	  });
     	  props && Object.assign(constructor.prototype, props);
@@ -6122,12 +6244,7 @@ var contentfulManagement = (function (exports) {
     	  });
     	};
 
-    	/* Creating a function that will check if an object has a property. */
-    	const hasOwnProperty = (
-    	  ({ hasOwnProperty }) =>
-    	  (obj, prop) =>
-    	    hasOwnProperty.call(obj, prop)
-    	)(Object.prototype);
+    	const { propertyIsEnumerable } = Object.prototype;
 
     	/**
     	 * Determine if a value is a RegExp object
@@ -6160,7 +6277,7 @@ var contentfulManagement = (function (exports) {
     	const freezeMethods = (obj) => {
     	  reduceDescriptors(obj, (descriptor, name) => {
     	    // skip restricted props in strict mode
-    	    if (isFunction$1(obj) && ['arguments', 'caller', 'callee'].indexOf(name) !== -1) {
+    	    if (isFunction$1(obj) && ['arguments', 'caller', 'callee'].includes(name)) {
     	      return false;
     	    }
 
@@ -6234,11 +6351,11 @@ var contentfulManagement = (function (exports) {
     	 * @returns {Object} The JSON-compatible object.
     	 */
     	const toJSONObject = (obj) => {
-    	  const stack = new Array(10);
+    	  const visited = new WeakSet();
 
-    	  const visit = (source, i) => {
+    	  const visit = (source) => {
     	    if (isObject(source)) {
-    	      if (stack.indexOf(source) >= 0) {
+    	      if (visited.has(source)) {
     	        return;
     	      }
 
@@ -6248,15 +6365,16 @@ var contentfulManagement = (function (exports) {
     	      }
 
     	      if (!('toJSON' in source)) {
-    	        stack[i] = source;
+    	        // add-on descent / delete-on-ascent: preserves path semantics, so DAG nodes serialise at every occurrence (see #7230).
+    	        visited.add(source);
     	        const target = isArray(source) ? [] : {};
 
     	        forEach(source, (value, key) => {
-    	          const reducedValue = visit(value, i + 1);
+    	          const reducedValue = visit(value);
     	          !isUndefined(reducedValue) && (target[key] = reducedValue);
     	        });
 
-    	        stack[i] = undefined;
+    	        visited.delete(source);
 
     	        return target;
     	      }
@@ -6265,7 +6383,7 @@ var contentfulManagement = (function (exports) {
     	    return source;
     	  };
 
-    	  return visit(obj, 0);
+    	  return visit(obj);
     	};
 
     	/**
@@ -6339,6 +6457,20 @@ var contentfulManagement = (function (exports) {
 
     	const isIterable = (thing) => thing != null && isFunction$1(thing[iterator]);
 
+    	/**
+    	 * Determine if a value is iterable via an iterator that is NOT sourced solely
+    	 * from a polluted Object.prototype. Use this instead of `isIterable` whenever
+    	 * the iterable comes from untrusted input (e.g. user-supplied header sources),
+    	 * so `Object.prototype[Symbol.iterator] = ...` cannot turn an ordinary object
+    	 * into an attacker-controlled entries iterator.
+    	 *
+    	 * @param {*} thing The value to test
+    	 *
+    	 * @returns {boolean} True if value has a non-polluted iterator
+    	 */
+    	const isSafeIterable = (thing) =>
+    	  thing != null && hasOwnInPrototypeChain(thing, iterator) && isIterable(thing);
+
     	var utils$1 = {
     	  isArray,
     	  isArrayBuffer,
@@ -6383,6 +6515,8 @@ var contentfulManagement = (function (exports) {
     	  isHTMLForm,
     	  hasOwnProperty,
     	  hasOwnProp: hasOwnProperty, // an alias to avoid ESLint no-prototype-builtins detection
+    	  hasOwnInPrototypeChain,
+    	  getSafeProp,
     	  reduceDescriptors,
     	  freezeMethods,
     	  toObjectSet,
@@ -6399,1299 +6533,1482 @@ var contentfulManagement = (function (exports) {
     	  setImmediate: _setImmediate,
     	  asap,
     	  isIterable,
+    	  isSafeIterable,
     	};
 
-    	class AxiosError extends Error {
-    	  static from(error, code, config, request, response, customProps) {
-    	    const axiosError = new AxiosError(error.message, code || error.code, config, request, response);
-    	    axiosError.cause = error;
-    	    axiosError.name = error.name;
+    	// RawAxiosHeaders whose duplicates are ignored by node
+    	// c.f. https://nodejs.org/api/http.html#http_message_headers
+    	const ignoreDuplicateOf = utils$1.toObjectSet([
+    	  'age',
+    	  'authorization',
+    	  'content-length',
+    	  'content-type',
+    	  'etag',
+    	  'expires',
+    	  'from',
+    	  'host',
+    	  'if-modified-since',
+    	  'if-unmodified-since',
+    	  'last-modified',
+    	  'location',
+    	  'max-forwards',
+    	  'proxy-authorization',
+    	  'referer',
+    	  'retry-after',
+    	  'user-agent',
+    	]);
 
-    	    // Preserve status from the original error if not already set from response
-    	    if (error.status != null && axiosError.status == null) {
-    	      axiosError.status = error.status;
+    	/**
+    	 * Parse headers into an object
+    	 *
+    	 * ```
+    	 * Date: Wed, 27 Aug 2014 08:58:49 GMT
+    	 * Content-Type: application/json
+    	 * Connection: keep-alive
+    	 * Transfer-Encoding: chunked
+    	 * ```
+    	 *
+    	 * @param {String} rawHeaders Headers needing to be parsed
+    	 *
+    	 * @returns {Object} Headers parsed into an object
+    	 */
+    	var parseHeaders = (rawHeaders) => {
+    	  const parsed = {};
+    	  let key;
+    	  let val;
+    	  let i;
+
+    	  rawHeaders &&
+    	    rawHeaders.split('\n').forEach(function parser(line) {
+    	      i = line.indexOf(':');
+    	      key = line.substring(0, i).trim().toLowerCase();
+    	      val = line.substring(i + 1).trim();
+
+    	      if (!key || (parsed[key] && ignoreDuplicateOf[key])) {
+    	        return;
+    	      }
+
+    	      if (key === 'set-cookie') {
+    	        if (parsed[key]) {
+    	          parsed[key].push(val);
+    	        } else {
+    	          parsed[key] = [val];
+    	        }
+    	      } else {
+    	        parsed[key] = parsed[key] ? parsed[key] + ', ' + val : val;
+    	      }
+    	    });
+
+    	  return parsed;
+    	};
+
+    	function trimSPorHTAB(str) {
+    	  let start = 0;
+    	  let end = str.length;
+
+    	  while (start < end) {
+    	    const code = str.charCodeAt(start);
+
+    	    if (code !== 0x09 && code !== 0x20) {
+    	      break;
     	    }
 
-    	    customProps && Object.assign(axiosError, customProps);
-    	    return axiosError;
+    	    start += 1;
     	  }
 
-    	    /**
-    	     * Create an Error with the specified message, config, error code, request and response.
-    	     *
-    	     * @param {string} message The error message.
-    	     * @param {string} [code] The error code (for example, 'ECONNABORTED').
-    	     * @param {Object} [config] The config.
-    	     * @param {Object} [request] The request.
-    	     * @param {Object} [response] The response.
-    	     *
-    	     * @returns {Error} The created error.
-    	     */
-    	    constructor(message, code, config, request, response) {
-    	      super(message);
-    	      
-    	      // Make message enumerable to maintain backward compatibility
-    	      // The native Error constructor sets message as non-enumerable,
-    	      // but axios < v1.13.3 had it as enumerable
-    	      Object.defineProperty(this, 'message', {
-    	          value: message,
-    	          enumerable: true,
-    	          writable: true,
-    	          configurable: true
-    	      });
-    	      
-    	      this.name = 'AxiosError';
-    	      this.isAxiosError = true;
-    	      code && (this.code = code);
-    	      config && (this.config = config);
-    	      request && (this.request = request);
-    	      if (response) {
-    	          this.response = response;
-    	          this.status = response.status;
-    	      }
+    	  while (end > start) {
+    	    const code = str.charCodeAt(end - 1);
+
+    	    if (code !== 0x09 && code !== 0x20) {
+    	      break;
     	    }
 
-    	  toJSON() {
-    	    return {
-    	      // Standard
-    	      message: this.message,
-    	      name: this.name,
-    	      // Microsoft
-    	      description: this.description,
-    	      number: this.number,
-    	      // Mozilla
-    	      fileName: this.fileName,
-    	      lineNumber: this.lineNumber,
-    	      columnNumber: this.columnNumber,
-    	      stack: this.stack,
-    	      // Axios
-    	      config: utils$1.toJSONObject(this.config),
-    	      code: this.code,
-    	      status: this.status,
-    	    };
+    	    end -= 1;
     	  }
+
+    	  return start === 0 && end === str.length ? str : str.slice(start, end);
     	}
 
-    	// This can be changed to static properties as soon as the parser options in .eslint.cjs are updated.
-    	AxiosError.ERR_BAD_OPTION_VALUE = 'ERR_BAD_OPTION_VALUE';
-    	AxiosError.ERR_BAD_OPTION = 'ERR_BAD_OPTION';
-    	AxiosError.ECONNABORTED = 'ECONNABORTED';
-    	AxiosError.ETIMEDOUT = 'ETIMEDOUT';
-    	AxiosError.ERR_NETWORK = 'ERR_NETWORK';
-    	AxiosError.ERR_FR_TOO_MANY_REDIRECTS = 'ERR_FR_TOO_MANY_REDIRECTS';
-    	AxiosError.ERR_DEPRECATED = 'ERR_DEPRECATED';
-    	AxiosError.ERR_BAD_RESPONSE = 'ERR_BAD_RESPONSE';
-    	AxiosError.ERR_BAD_REQUEST = 'ERR_BAD_REQUEST';
-    	AxiosError.ERR_CANCELED = 'ERR_CANCELED';
-    	AxiosError.ERR_NOT_SUPPORT = 'ERR_NOT_SUPPORT';
-    	AxiosError.ERR_INVALID_URL = 'ERR_INVALID_URL';
+    	// The control-code ranges are intentional: header sanitization strips C0/DEL bytes.
+    	// eslint-disable-next-line no-control-regex
+    	const INVALID_UNICODE_HEADER_VALUE_CHARS = new RegExp('[\\u0000-\\u0008\\u000a-\\u001f\\u007f]+', 'g');
+    	// eslint-disable-next-line no-control-regex
+    	const INVALID_BYTE_STRING_HEADER_VALUE_CHARS = new RegExp('[^\\u0009\\u0020-\\u007e\\u0080-\\u00ff]+', 'g');
 
-    	// eslint-disable-next-line strict
-    	var httpAdapter = null;
+    	function sanitizeValue(value, invalidChars) {
+    	  if (utils$1.isArray(value)) {
+    	    return value.map((item) => sanitizeValue(item, invalidChars));
+    	  }
 
-    	/**
-    	 * Determines if the given thing is a array or js object.
-    	 *
-    	 * @param {string} thing - The object or array to be visited.
-    	 *
-    	 * @returns {boolean}
-    	 */
-    	function isVisitable(thing) {
-    	  return utils$1.isPlainObject(thing) || utils$1.isArray(thing);
+    	  return trimSPorHTAB(String(value).replace(invalidChars, ''));
     	}
 
-    	/**
-    	 * It removes the brackets from the end of a string
-    	 *
-    	 * @param {string} key - The key of the parameter.
-    	 *
-    	 * @returns {string} the key without the brackets.
-    	 */
-    	function removeBrackets(key) {
-    	  return utils$1.endsWith(key, '[]') ? key.slice(0, -2) : key;
+    	const sanitizeHeaderValue = (value) =>
+    	  sanitizeValue(value, INVALID_UNICODE_HEADER_VALUE_CHARS);
+
+    	const sanitizeByteStringHeaderValue = (value) =>
+    	  sanitizeValue(value, INVALID_BYTE_STRING_HEADER_VALUE_CHARS);
+
+    	function toByteStringHeaderObject(headers) {
+    	  const byteStringHeaders = Object.create(null);
+
+    	  utils$1.forEach(headers.toJSON(), (value, header) => {
+    	    byteStringHeaders[header] = sanitizeByteStringHeaderValue(value);
+    	  });
+
+    	  return byteStringHeaders;
     	}
 
-    	/**
-    	 * It takes a path, a key, and a boolean, and returns a string
-    	 *
-    	 * @param {string} path - The path to the current key.
-    	 * @param {string} key - The key of the current object being iterated over.
-    	 * @param {string} dots - If true, the key will be rendered with dots instead of brackets.
-    	 *
-    	 * @returns {string} The path to the current key.
-    	 */
-    	function renderKey(path, key, dots) {
-    	  if (!path) return key;
-    	  return path
-    	    .concat(key)
-    	    .map(function each(token, i) {
-    	      // eslint-disable-next-line no-param-reassign
-    	      token = removeBrackets(token);
-    	      return !dots && i ? '[' + token + ']' : token;
-    	    })
-    	    .join(dots ? '.' : '');
+    	const $internals = Symbol('internals');
+
+    	function normalizeHeader(header) {
+    	  return header && String(header).trim().toLowerCase();
     	}
 
-    	/**
-    	 * If the array is an array and none of its elements are visitable, then it's a flat array.
-    	 *
-    	 * @param {Array<any>} arr - The array to check
-    	 *
-    	 * @returns {boolean}
-    	 */
-    	function isFlatArray(arr) {
-    	  return utils$1.isArray(arr) && !arr.some(isVisitable);
+    	function normalizeValue(value) {
+    	  if (value === false || value == null) {
+    	    return value;
+    	  }
+
+    	  return utils$1.isArray(value) ? value.map(normalizeValue) : sanitizeHeaderValue(String(value));
     	}
 
-    	const predicates = utils$1.toFlatObject(utils$1, {}, null, function filter(prop) {
-    	  return /^is[A-Z]/.test(prop);
-    	});
-
-    	/**
-    	 * Convert a data object to FormData
-    	 *
-    	 * @param {Object} obj
-    	 * @param {?Object} [formData]
-    	 * @param {?Object} [options]
-    	 * @param {Function} [options.visitor]
-    	 * @param {Boolean} [options.metaTokens = true]
-    	 * @param {Boolean} [options.dots = false]
-    	 * @param {?Boolean} [options.indexes = false]
-    	 *
-    	 * @returns {Object}
-    	 **/
+    	function parseTokens(str) {
+    	  const tokens = Object.create(null);
+    	  const tokensRE = /([^\s,;=]+)\s*(?:=\s*([^,;]+))?/g;
+    	  let match;
 
-    	/**
-    	 * It converts an object into a FormData object
-    	 *
-    	 * @param {Object<any, any>} obj - The object to convert to form data.
-    	 * @param {string} formData - The FormData object to append to.
-    	 * @param {Object<string, any>} options
-    	 *
-    	 * @returns
-    	 */
-    	function toFormData(obj, formData, options) {
-    	  if (!utils$1.isObject(obj)) {
-    	    throw new TypeError('target must be an object');
+    	  while ((match = tokensRE.exec(str))) {
+    	    tokens[match[1]] = match[2];
     	  }
 
-    	  // eslint-disable-next-line no-param-reassign
-    	  formData = formData || new (FormData)();
+    	  return tokens;
+    	}
 
-    	  // eslint-disable-next-line no-param-reassign
-    	  options = utils$1.toFlatObject(
-    	    options,
-    	    {
-    	      metaTokens: true,
-    	      dots: false,
-    	      indexes: false,
-    	    },
-    	    false,
-    	    function defined(option, source) {
-    	      // eslint-disable-next-line no-eq-null,eqeqeq
-    	      return !utils$1.isUndefined(source[option]);
-    	    }
-    	  );
+    	const isValidHeaderName = (str) => /^[-_a-zA-Z0-9^`|~,!#$%&'*+.]+$/.test(str.trim());
 
-    	  const metaTokens = options.metaTokens;
-    	  // eslint-disable-next-line no-use-before-define
-    	  const visitor = options.visitor || defaultVisitor;
-    	  const dots = options.dots;
-    	  const indexes = options.indexes;
-    	  const _Blob = options.Blob || (typeof Blob !== 'undefined' && Blob);
-    	  const useBlob = _Blob && utils$1.isSpecCompliantForm(formData);
+    	function matchHeaderValue(context, value, header, filter, isHeaderNameFilter) {
+    	  if (utils$1.isFunction(filter)) {
+    	    return filter.call(this, value, header);
+    	  }
 
-    	  if (!utils$1.isFunction(visitor)) {
-    	    throw new TypeError('visitor must be a function');
+    	  if (isHeaderNameFilter) {
+    	    value = header;
     	  }
 
-    	  function convertValue(value) {
-    	    if (value === null) return '';
+    	  if (!utils$1.isString(value)) return;
 
-    	    if (utils$1.isDate(value)) {
-    	      return value.toISOString();
-    	    }
+    	  if (utils$1.isString(filter)) {
+    	    return value.indexOf(filter) !== -1;
+    	  }
 
-    	    if (utils$1.isBoolean(value)) {
-    	      return value.toString();
-    	    }
+    	  if (utils$1.isRegExp(filter)) {
+    	    return filter.test(value);
+    	  }
+    	}
 
-    	    if (!useBlob && utils$1.isBlob(value)) {
-    	      throw new AxiosError('Blob is not supported. Use a Buffer instead.');
-    	    }
+    	function formatHeader(header) {
+    	  return header
+    	    .trim()
+    	    .toLowerCase()
+    	    .replace(/([a-z\d])(\w*)/g, (w, char, str) => {
+    	      return char.toUpperCase() + str;
+    	    });
+    	}
 
-    	    if (utils$1.isArrayBuffer(value) || utils$1.isTypedArray(value)) {
-    	      return useBlob && typeof Blob === 'function' ? new Blob([value]) : Buffer.from(value);
-    	    }
+    	function buildAccessors(obj, header) {
+    	  const accessorName = utils$1.toCamelCase(' ' + header);
 
-    	    return value;
+    	  ['get', 'set', 'has'].forEach((methodName) => {
+    	    Object.defineProperty(obj, methodName + accessorName, {
+    	      // Null-proto descriptor so a polluted Object.prototype.get cannot turn
+    	      // this data descriptor into an accessor descriptor on the way in.
+    	      __proto__: null,
+    	      value: function (arg1, arg2, arg3) {
+    	        return this[methodName].call(this, header, arg1, arg2, arg3);
+    	      },
+    	      configurable: true,
+    	    });
+    	  });
+    	}
+
+    	class AxiosHeaders {
+    	  constructor(headers) {
+    	    headers && this.set(headers);
     	  }
 
-    	  /**
-    	   * Default visitor.
-    	   *
-    	   * @param {*} value
-    	   * @param {String|Number} key
-    	   * @param {Array<String|Number>} path
-    	   * @this {FormData}
-    	   *
-    	   * @returns {boolean} return true to visit the each prop of the value recursively
-    	   */
-    	  function defaultVisitor(value, key, path) {
-    	    let arr = value;
+    	  set(header, valueOrRewrite, rewrite) {
+    	    const self = this;
 
-    	    if (utils$1.isReactNative(formData) && utils$1.isReactNativeBlob(value)) {
-    	      formData.append(renderKey(path, key, dots), convertValue(value));
-    	      return false;
-    	    }
+    	    function setHeader(_value, _header, _rewrite) {
+    	      const lHeader = normalizeHeader(_header);
 
-    	    if (value && !path && typeof value === 'object') {
-    	      if (utils$1.endsWith(key, '{}')) {
-    	        // eslint-disable-next-line no-param-reassign
-    	        key = metaTokens ? key : key.slice(0, -2);
-    	        // eslint-disable-next-line no-param-reassign
-    	        value = JSON.stringify(value);
-    	      } else if (
-    	        (utils$1.isArray(value) && isFlatArray(value)) ||
-    	        ((utils$1.isFileList(value) || utils$1.endsWith(key, '[]')) && (arr = utils$1.toArray(value)))
-    	      ) {
-    	        // eslint-disable-next-line no-param-reassign
-    	        key = removeBrackets(key);
+    	      if (!lHeader) {
+    	        return;
+    	      }
 
-    	        arr.forEach(function each(el, index) {
-    	          !(utils$1.isUndefined(el) || el === null) &&
-    	            formData.append(
-    	              // eslint-disable-next-line no-nested-ternary
-    	              indexes === true
-    	                ? renderKey([key], index, dots)
-    	                : indexes === null
-    	                  ? key
-    	                  : key + '[]',
-    	              convertValue(el)
-    	            );
-    	        });
-    	        return false;
+    	      const key = utils$1.findKey(self, lHeader);
+
+    	      if (
+    	        !key ||
+    	        self[key] === undefined ||
+    	        _rewrite === true ||
+    	        (_rewrite === undefined && self[key] !== false)
+    	      ) {
+    	        self[key || _header] = normalizeValue(_value);
     	      }
     	    }
 
-    	    if (isVisitable(value)) {
-    	      return true;
-    	    }
+    	    const setHeaders = (headers, _rewrite) =>
+    	      utils$1.forEach(headers, (_value, _header) => setHeader(_value, _header, _rewrite));
 
-    	    formData.append(renderKey(path, key, dots), convertValue(value));
+    	    if (utils$1.isPlainObject(header) || header instanceof this.constructor) {
+    	      setHeaders(header, valueOrRewrite);
+    	    } else if (utils$1.isString(header) && (header = header.trim()) && !isValidHeaderName(header)) {
+    	      setHeaders(parseHeaders(header), valueOrRewrite);
+    	    } else if (utils$1.isObject(header) && utils$1.isSafeIterable(header)) {
+    	      let obj = Object.create(null),
+    	        dest,
+    	        key;
+    	      for (const entry of header) {
+    	        if (!utils$1.isArray(entry)) {
+    	          throw new TypeError('Object iterator must return a key-value pair');
+    	        }
 
-    	    return false;
+    	        key = entry[0];
+
+    	        if (utils$1.hasOwnProp(obj, key)) {
+    	          dest = obj[key];
+    	          obj[key] = utils$1.isArray(dest) ? [...dest, entry[1]] : [dest, entry[1]];
+    	        } else {
+    	          obj[key] = entry[1];
+    	        }
+    	      }
+
+    	      setHeaders(obj, valueOrRewrite);
+    	    } else {
+    	      header != null && setHeader(valueOrRewrite, header, rewrite);
+    	    }
+
+    	    return this;
     	  }
 
-    	  const stack = [];
+    	  get(header, parser) {
+    	    header = normalizeHeader(header);
 
-    	  const exposedHelpers = Object.assign(predicates, {
-    	    defaultVisitor,
-    	    convertValue,
-    	    isVisitable,
-    	  });
+    	    if (header) {
+    	      const key = utils$1.findKey(this, header);
 
-    	  function build(value, path) {
-    	    if (utils$1.isUndefined(value)) return;
+    	      if (key) {
+    	        const value = this[key];
 
-    	    if (stack.indexOf(value) !== -1) {
-    	      throw Error('Circular reference detected in ' + path.join('.'));
-    	    }
+    	        if (!parser) {
+    	          return value;
+    	        }
 
-    	    stack.push(value);
+    	        if (parser === true) {
+    	          return parseTokens(value);
+    	        }
 
-    	    utils$1.forEach(value, function each(el, key) {
-    	      const result =
-    	        !(utils$1.isUndefined(el) || el === null) &&
-    	        visitor.call(formData, el, utils$1.isString(key) ? key.trim() : key, path, exposedHelpers);
+    	        if (utils$1.isFunction(parser)) {
+    	          return parser.call(this, value, key);
+    	        }
 
-    	      if (result === true) {
-    	        build(el, path ? path.concat(key) : [key]);
-    	      }
-    	    });
+    	        if (utils$1.isRegExp(parser)) {
+    	          return parser.exec(value);
+    	        }
 
-    	    stack.pop();
+    	        throw new TypeError('parser must be boolean|regexp|function');
+    	      }
+    	    }
     	  }
 
-    	  if (!utils$1.isObject(obj)) {
-    	    throw new TypeError('data must be an object');
-    	  }
+    	  has(header, matcher) {
+    	    header = normalizeHeader(header);
 
-    	  build(obj);
+    	    if (header) {
+    	      const key = utils$1.findKey(this, header);
 
-    	  return formData;
-    	}
+    	      return !!(
+    	        key &&
+    	        this[key] !== undefined &&
+    	        (!matcher || matchHeaderValue(this, this[key], key, matcher))
+    	      );
+    	    }
 
-    	/**
-    	 * It encodes a string by replacing all characters that are not in the unreserved set with
-    	 * their percent-encoded equivalents
-    	 *
-    	 * @param {string} str - The string to encode.
-    	 *
-    	 * @returns {string} The encoded string.
-    	 */
-    	function encode$1(str) {
-    	  const charMap = {
-    	    '!': '%21',
-    	    "'": '%27',
-    	    '(': '%28',
-    	    ')': '%29',
-    	    '~': '%7E',
-    	    '%20': '+',
-    	    '%00': '\x00',
-    	  };
-    	  return encodeURIComponent(str).replace(/[!'()~]|%20|%00/g, function replacer(match) {
-    	    return charMap[match];
-    	  });
-    	}
+    	    return false;
+    	  }
 
-    	/**
-    	 * It takes a params object and converts it to a FormData object
-    	 *
-    	 * @param {Object<string, any>} params - The parameters to be converted to a FormData object.
-    	 * @param {Object<string, any>} options - The options object passed to the Axios constructor.
-    	 *
-    	 * @returns {void}
-    	 */
-    	function AxiosURLSearchParams(params, options) {
-    	  this._pairs = [];
+    	  delete(header, matcher) {
+    	    const self = this;
+    	    let deleted = false;
 
-    	  params && toFormData(params, this, options);
-    	}
+    	    function deleteHeader(_header) {
+    	      _header = normalizeHeader(_header);
 
-    	const prototype = AxiosURLSearchParams.prototype;
+    	      if (_header) {
+    	        const key = utils$1.findKey(self, _header);
 
-    	prototype.append = function append(name, value) {
-    	  this._pairs.push([name, value]);
-    	};
+    	        if (key && (!matcher || matchHeaderValue(self, self[key], key, matcher))) {
+    	          delete self[key];
 
-    	prototype.toString = function toString(encoder) {
-    	  const _encode = encoder
-    	    ? function (value) {
-    	        return encoder.call(this, value, encode$1);
+    	          deleted = true;
+    	        }
     	      }
-    	    : encode$1;
+    	    }
 
-    	  return this._pairs
-    	    .map(function each(pair) {
-    	      return _encode(pair[0]) + '=' + _encode(pair[1]);
-    	    }, '')
-    	    .join('&');
-    	};
+    	    if (utils$1.isArray(header)) {
+    	      header.forEach(deleteHeader);
+    	    } else {
+    	      deleteHeader(header);
+    	    }
 
-    	/**
-    	 * It replaces URL-encoded forms of `:`, `$`, `,`, and spaces with
-    	 * their plain counterparts (`:`, `$`, `,`, `+`).
-    	 *
-    	 * @param {string} val The value to be encoded.
-    	 *
-    	 * @returns {string} The encoded value.
-    	 */
-    	function encode(val) {
-    	  return encodeURIComponent(val)
-    	    .replace(/%3A/gi, ':')
-    	    .replace(/%24/g, '$')
-    	    .replace(/%2C/gi, ',')
-    	    .replace(/%20/g, '+');
-    	}
+    	    return deleted;
+    	  }
 
-    	/**
-    	 * Build a URL by appending params to the end
-    	 *
-    	 * @param {string} url The base of the url (e.g., http://www.google.com)
-    	 * @param {object} [params] The params to be appended
-    	 * @param {?(object|Function)} options
-    	 *
-    	 * @returns {string} The formatted url
-    	 */
-    	function buildURL(url, params, options) {
-    	  if (!params) {
-    	    return url;
+    	  clear(matcher) {
+    	    const keys = Object.keys(this);
+    	    let i = keys.length;
+    	    let deleted = false;
+
+    	    while (i--) {
+    	      const key = keys[i];
+    	      if (!matcher || matchHeaderValue(this, this[key], key, matcher, true)) {
+    	        delete this[key];
+    	        deleted = true;
+    	      }
+    	    }
+
+    	    return deleted;
     	  }
 
-    	  const _encode = (options && options.encode) || encode;
+    	  normalize(format) {
+    	    const self = this;
+    	    const headers = {};
 
-    	  const _options = utils$1.isFunction(options)
-    	    ? {
-    	        serialize: options,
+    	    utils$1.forEach(this, (value, header) => {
+    	      const key = utils$1.findKey(headers, header);
+
+    	      if (key) {
+    	        self[key] = normalizeValue(value);
+    	        delete self[header];
+    	        return;
     	      }
-    	    : options;
 
-    	  const serializeFn = _options && _options.serialize;
+    	      const normalized = format ? formatHeader(header) : String(header).trim();
 
-    	  let serializedParams;
+    	      if (normalized !== header) {
+    	        delete self[header];
+    	      }
 
-    	  if (serializeFn) {
-    	    serializedParams = serializeFn(params, _options);
-    	  } else {
-    	    serializedParams = utils$1.isURLSearchParams(params)
-    	      ? params.toString()
-    	      : new AxiosURLSearchParams(params, _options).toString(_encode);
-    	  }
+    	      self[normalized] = normalizeValue(value);
 
-    	  if (serializedParams) {
-    	    const hashmarkIndex = url.indexOf('#');
+    	      headers[normalized] = true;
+    	    });
 
-    	    if (hashmarkIndex !== -1) {
-    	      url = url.slice(0, hashmarkIndex);
-    	    }
-    	    url += (url.indexOf('?') === -1 ? '?' : '&') + serializedParams;
+    	    return this;
     	  }
 
-    	  return url;
-    	}
-
-    	class InterceptorManager {
-    	  constructor() {
-    	    this.handlers = [];
+    	  concat(...targets) {
+    	    return this.constructor.concat(this, ...targets);
     	  }
 
-    	  /**
-    	   * Add a new interceptor to the stack
-    	   *
-    	   * @param {Function} fulfilled The function to handle `then` for a `Promise`
-    	   * @param {Function} rejected The function to handle `reject` for a `Promise`
-    	   * @param {Object} options The options for the interceptor, synchronous and runWhen
-    	   *
-    	   * @return {Number} An ID used to remove interceptor later
-    	   */
-    	  use(fulfilled, rejected, options) {
-    	    this.handlers.push({
-    	      fulfilled,
-    	      rejected,
-    	      synchronous: options ? options.synchronous : false,
-    	      runWhen: options ? options.runWhen : null,
+    	  toJSON(asStrings) {
+    	    const obj = Object.create(null);
+
+    	    utils$1.forEach(this, (value, header) => {
+    	      value != null &&
+    	        value !== false &&
+    	        (obj[header] = asStrings && utils$1.isArray(value) ? value.join(', ') : value);
     	    });
-    	    return this.handlers.length - 1;
+
+    	    return obj;
     	  }
 
-    	  /**
-    	   * Remove an interceptor from the stack
-    	   *
-    	   * @param {Number} id The ID that was returned by `use`
-    	   *
-    	   * @returns {void}
-    	   */
-    	  eject(id) {
-    	    if (this.handlers[id]) {
-    	      this.handlers[id] = null;
-    	    }
+    	  [Symbol.iterator]() {
+    	    return Object.entries(this.toJSON())[Symbol.iterator]();
     	  }
 
-    	  /**
-    	   * Clear all interceptors from the stack
-    	   *
-    	   * @returns {void}
-    	   */
-    	  clear() {
-    	    if (this.handlers) {
-    	      this.handlers = [];
-    	    }
+    	  toString() {
+    	    return Object.entries(this.toJSON())
+    	      .map(([header, value]) => header + ': ' + value)
+    	      .join('\n');
     	  }
 
-    	  /**
-    	   * Iterate over all the registered interceptors
-    	   *
-    	   * This method is particularly useful for skipping over any
-    	   * interceptors that may have become `null` calling `eject`.
-    	   *
-    	   * @param {Function} fn The function to call for each interceptor
-    	   *
-    	   * @returns {void}
-    	   */
-    	  forEach(fn) {
-    	    utils$1.forEach(this.handlers, function forEachHandler(h) {
-    	      if (h !== null) {
-    	        fn(h);
-    	      }
-    	    });
+    	  getSetCookie() {
+    	    return this.get('set-cookie') || [];
     	  }
-    	}
 
-    	var transitionalDefaults = {
-    	  silentJSONParsing: true,
-    	  forcedJSONParsing: true,
-    	  clarifyTimeoutError: false,
-    	  legacyInterceptorReqResOrdering: true,
-    	};
+    	  get [Symbol.toStringTag]() {
+    	    return 'AxiosHeaders';
+    	  }
 
-    	var URLSearchParams$1 = typeof URLSearchParams !== 'undefined' ? URLSearchParams : AxiosURLSearchParams;
+    	  static from(thing) {
+    	    return thing instanceof this ? thing : new this(thing);
+    	  }
 
-    	var FormData$1 = typeof FormData !== 'undefined' ? FormData : null;
+    	  static concat(first, ...targets) {
+    	    const computed = new this(first);
 
-    	var Blob$1 = typeof Blob !== 'undefined' ? Blob : null;
+    	    targets.forEach((target) => computed.set(target));
 
-    	var platform$1 = {
-    	  isBrowser: true,
-    	  classes: {
-    	    URLSearchParams: URLSearchParams$1,
-    	    FormData: FormData$1,
-    	    Blob: Blob$1,
-    	  },
-    	  protocols: ['http', 'https', 'file', 'blob', 'url', 'data'],
-    	};
+    	    return computed;
+    	  }
 
-    	const hasBrowserEnv = typeof window !== 'undefined' && typeof document !== 'undefined';
+    	  static accessor(header) {
+    	    const internals =
+    	      (this[$internals] =
+    	      this[$internals] =
+    	        {
+    	          accessors: {},
+    	        });
 
-    	const _navigator = (typeof navigator === 'object' && navigator) || undefined;
+    	    const accessors = internals.accessors;
+    	    const prototype = this.prototype;
 
-    	/**
-    	 * Determine if we're running in a standard browser environment
-    	 *
-    	 * This allows axios to run in a web worker, and react-native.
-    	 * Both environments support XMLHttpRequest, but not fully standard globals.
-    	 *
-    	 * web workers:
-    	 *  typeof window -> undefined
-    	 *  typeof document -> undefined
-    	 *
-    	 * react-native:
-    	 *  navigator.product -> 'ReactNative'
-    	 * nativescript
-    	 *  navigator.product -> 'NativeScript' or 'NS'
-    	 *
-    	 * @returns {boolean}
-    	 */
-    	const hasStandardBrowserEnv =
-    	  hasBrowserEnv &&
-    	  (!_navigator || ['ReactNative', 'NativeScript', 'NS'].indexOf(_navigator.product) < 0);
+    	    function defineAccessor(_header) {
+    	      const lHeader = normalizeHeader(_header);
 
-    	/**
-    	 * Determine if we're running in a standard browser webWorker environment
-    	 *
-    	 * Although the `isStandardBrowserEnv` method indicates that
-    	 * `allows axios to run in a web worker`, the WebWorker will still be
-    	 * filtered out due to its judgment standard
-    	 * `typeof window !== 'undefined' && typeof document !== 'undefined'`.
-    	 * This leads to a problem when axios post `FormData` in webWorker
-    	 */
-    	const hasStandardBrowserWebWorkerEnv = (() => {
-    	  return (
-    	    typeof WorkerGlobalScope !== 'undefined' &&
-    	    // eslint-disable-next-line no-undef
-    	    self instanceof WorkerGlobalScope &&
-    	    typeof self.importScripts === 'function'
-    	  );
-    	})();
+    	      if (!accessors[lHeader]) {
+    	        buildAccessors(prototype, _header);
+    	        accessors[lHeader] = true;
+    	      }
+    	    }
 
-    	const origin = (hasBrowserEnv && window.location.href) || 'http://localhost';
+    	    utils$1.isArray(header) ? header.forEach(defineAccessor) : defineAccessor(header);
 
-    	var utils = /*#__PURE__*/Object.freeze({
-    	  __proto__: null,
-    	  hasBrowserEnv: hasBrowserEnv,
-    	  hasStandardBrowserEnv: hasStandardBrowserEnv,
-    	  hasStandardBrowserWebWorkerEnv: hasStandardBrowserWebWorkerEnv,
-    	  navigator: _navigator,
-    	  origin: origin
+    	    return this;
+    	  }
+    	}
+
+    	AxiosHeaders.accessor([
+    	  'Content-Type',
+    	  'Content-Length',
+    	  'Accept',
+    	  'Accept-Encoding',
+    	  'User-Agent',
+    	  'Authorization',
+    	]);
+
+    	// reserved names hotfix
+    	utils$1.reduceDescriptors(AxiosHeaders.prototype, ({ value }, key) => {
+    	  let mapped = key[0].toUpperCase() + key.slice(1); // map `set` => `Set`
+    	  return {
+    	    get: () => value,
+    	    set(headerValue) {
+    	      this[mapped] = headerValue;
+    	    },
+    	  };
     	});
 
-    	var platform = {
-    	  ...utils,
-    	  ...platform$1,
-    	};
+    	utils$1.freezeMethods(AxiosHeaders);
 
-    	function toURLEncodedForm(data, options) {
-    	  return toFormData(data, new platform.classes.URLSearchParams(), {
-    	    visitor: function (value, key, path, helpers) {
-    	      if (platform.isNode && utils$1.isBuffer(value)) {
-    	        this.append(key, value.toString('base64'));
-    	        return false;
-    	      }
+    	const REDACTED = '[REDACTED ****]';
 
-    	      return helpers.defaultVisitor.apply(this, arguments);
-    	    },
-    	    ...options,
-    	  });
-    	}
+    	function hasOwnOrPrototypeToJSON(source) {
+    	  if (utils$1.hasOwnProp(source, 'toJSON')) {
+    	    return true;
+    	  }
 
-    	/**
-    	 * It takes a string like `foo[x][y][z]` and returns an array like `['foo', 'x', 'y', 'z']
-    	 *
-    	 * @param {string} name - The name of the property to get.
-    	 *
-    	 * @returns An array of strings.
-    	 */
-    	function parsePropPath(name) {
-    	  // foo[x][y][z]
-    	  // foo.x.y.z
-    	  // foo-x-y-z
-    	  // foo x y z
-    	  return utils$1.matchAll(/\w+|\[(\w*)]/g, name).map((match) => {
-    	    return match[0] === '[]' ? '' : match[1] || match[0];
-    	  });
-    	}
+    	  let prototype = Object.getPrototypeOf(source);
 
-    	/**
-    	 * Convert an array to an object.
-    	 *
-    	 * @param {Array<any>} arr - The array to convert to an object.
-    	 *
-    	 * @returns An object with the same keys and values as the array.
-    	 */
-    	function arrayToObject(arr) {
-    	  const obj = {};
-    	  const keys = Object.keys(arr);
-    	  let i;
-    	  const len = keys.length;
-    	  let key;
-    	  for (i = 0; i < len; i++) {
-    	    key = keys[i];
-    	    obj[key] = arr[key];
+    	  while (prototype && prototype !== Object.prototype) {
+    	    if (utils$1.hasOwnProp(prototype, 'toJSON')) {
+    	      return true;
+    	    }
+
+    	    prototype = Object.getPrototypeOf(prototype);
     	  }
-    	  return obj;
+
+    	  return false;
     	}
 
-    	/**
-    	 * It takes a FormData object and returns a JavaScript object
-    	 *
-    	 * @param {string} formData The FormData object to convert to JSON.
-    	 *
-    	 * @returns {Object<string, any> | null} The converted object.
-    	 */
-    	function formDataToJSON(formData) {
-    	  function buildPath(path, value, target, index) {
-    	    let name = path[index++];
+    	// Build a plain-object snapshot of `config` and replace the value of any key
+    	// (case-insensitive) listed in `redactKeys` with REDACTED. Walks through arrays
+    	// and AxiosHeaders, and short-circuits on circular references.
+    	function redactConfig(config, redactKeys) {
+    	  const lowerKeys = new Set(redactKeys.map((k) => String(k).toLowerCase()));
+    	  const seen = [];
 
-    	    if (name === '__proto__') return true;
+    	  const visit = (source) => {
+    	    if (source === null || typeof source !== 'object') return source;
+    	    if (utils$1.isBuffer(source)) return source;
+    	    if (seen.indexOf(source) !== -1) return undefined;
 
-    	    const isNumericKey = Number.isFinite(+name);
-    	    const isLast = index >= path.length;
-    	    name = !name && utils$1.isArray(target) ? target.length : name;
+    	    if (source instanceof AxiosHeaders) {
+    	      source = source.toJSON();
+    	    }
 
-    	    if (isLast) {
-    	      if (utils$1.hasOwnProp(target, name)) {
-    	        target[name] = [target[name], value];
-    	      } else {
-    	        target[name] = value;
+    	    seen.push(source);
+
+    	    let result;
+    	    if (utils$1.isArray(source)) {
+    	      result = [];
+    	      source.forEach((v, i) => {
+    	        const reducedValue = visit(v);
+    	        if (!utils$1.isUndefined(reducedValue)) {
+    	          result[i] = reducedValue;
+    	        }
+    	      });
+    	    } else {
+    	      if (!utils$1.isPlainObject(source) && hasOwnOrPrototypeToJSON(source)) {
+    	        seen.pop();
+    	        return source;
     	      }
 
-    	      return !isNumericKey;
+    	      result = Object.create(null);
+    	      for (const [key, value] of Object.entries(source)) {
+    	        const reducedValue = lowerKeys.has(key.toLowerCase()) ? REDACTED : visit(value);
+    	        if (!utils$1.isUndefined(reducedValue)) {
+    	          result[key] = reducedValue;
+    	        }
+    	      }
     	    }
 
-    	    if (!target[name] || !utils$1.isObject(target[name])) {
-    	      target[name] = [];
-    	    }
+    	    seen.pop();
+    	    return result;
+    	  };
 
-    	    const result = buildPath(path, value, target[name], index);
+    	  return visit(config);
+    	}
 
-    	    if (result && utils$1.isArray(target[name])) {
-    	      target[name] = arrayToObject(target[name]);
+    	class AxiosError extends Error {
+    	  static from(error, code, config, request, response, customProps) {
+    	    const axiosError = new AxiosError(error.message, code || error.code, config, request, response);
+    	    axiosError.cause = error;
+    	    axiosError.name = error.name;
+
+    	    // Preserve status from the original error if not already set from response
+    	    if (error.status != null && axiosError.status == null) {
+    	      axiosError.status = error.status;
     	    }
 
-    	    return !isNumericKey;
+    	    customProps && Object.assign(axiosError, customProps);
+    	    return axiosError;
     	  }
 
-    	  if (utils$1.isFormData(formData) && utils$1.isFunction(formData.entries)) {
-    	    const obj = {};
-
-    	    utils$1.forEachEntry(formData, (name, value) => {
-    	      buildPath(parsePropPath(name), value, obj, 0);
+    	  /**
+    	   * Create an Error with the specified message, config, error code, request and response.
+    	   *
+    	   * @param {string} message The error message.
+    	   * @param {string} [code] The error code (for example, 'ECONNABORTED').
+    	   * @param {Object} [config] The config.
+    	   * @param {Object} [request] The request.
+    	   * @param {Object} [response] The response.
+    	   *
+    	   * @returns {Error} The created error.
+    	   */
+    	  constructor(message, code, config, request, response) {
+    	    super(message);
+
+    	    // Make message enumerable to maintain backward compatibility
+    	    // The native Error constructor sets message as non-enumerable,
+    	    // but axios < v1.13.3 had it as enumerable
+    	    Object.defineProperty(this, 'message', {
+    	      // Null-proto descriptor so a polluted Object.prototype.get cannot turn
+    	      // this data descriptor into an accessor descriptor on the way in.
+    	      __proto__: null,
+    	      value: message,
+    	      enumerable: true,
+    	      writable: true,
+    	      configurable: true,
     	    });
 
-    	    return obj;
+    	    this.name = 'AxiosError';
+    	    this.isAxiosError = true;
+    	    code && (this.code = code);
+    	    config && (this.config = config);
+    	    request && (this.request = request);
+    	    if (response) {
+    	      this.response = response;
+    	      this.status = response.status;
+    	    }
     	  }
 
-    	  return null;
+    	  toJSON() {
+    	    // Opt-in redaction: when the request config carries a `redact` array, the
+    	    // value of any matching key (case-insensitive, at any depth) is replaced
+    	    // with REDACTED in the serialized snapshot. Undefined or empty leaves the
+    	    // existing serialization behavior unchanged.
+    	    const config = this.config;
+    	    const redactKeys = config && utils$1.hasOwnProp(config, 'redact') ? config.redact : undefined;
+    	    const serializedConfig =
+    	      utils$1.isArray(redactKeys) && redactKeys.length > 0
+    	        ? redactConfig(config, redactKeys)
+    	        : utils$1.toJSONObject(config);
+
+    	    return {
+    	      // Standard
+    	      message: this.message,
+    	      name: this.name,
+    	      // Microsoft
+    	      description: this.description,
+    	      number: this.number,
+    	      // Mozilla
+    	      fileName: this.fileName,
+    	      lineNumber: this.lineNumber,
+    	      columnNumber: this.columnNumber,
+    	      stack: this.stack,
+    	      // Axios
+    	      config: serializedConfig,
+    	      code: this.code,
+    	      status: this.status,
+    	    };
+    	  }
     	}
 
+    	// This can be changed to static properties as soon as the parser options in .eslint.cjs are updated.
+    	AxiosError.ERR_BAD_OPTION_VALUE = 'ERR_BAD_OPTION_VALUE';
+    	AxiosError.ERR_BAD_OPTION = 'ERR_BAD_OPTION';
+    	AxiosError.ECONNABORTED = 'ECONNABORTED';
+    	AxiosError.ETIMEDOUT = 'ETIMEDOUT';
+    	AxiosError.ECONNREFUSED = 'ECONNREFUSED';
+    	AxiosError.ERR_NETWORK = 'ERR_NETWORK';
+    	AxiosError.ERR_FR_TOO_MANY_REDIRECTS = 'ERR_FR_TOO_MANY_REDIRECTS';
+    	AxiosError.ERR_DEPRECATED = 'ERR_DEPRECATED';
+    	AxiosError.ERR_BAD_RESPONSE = 'ERR_BAD_RESPONSE';
+    	AxiosError.ERR_BAD_REQUEST = 'ERR_BAD_REQUEST';
+    	AxiosError.ERR_CANCELED = 'ERR_CANCELED';
+    	AxiosError.ERR_NOT_SUPPORT = 'ERR_NOT_SUPPORT';
+    	AxiosError.ERR_INVALID_URL = 'ERR_INVALID_URL';
+    	AxiosError.ERR_FORM_DATA_DEPTH_EXCEEDED = 'ERR_FORM_DATA_DEPTH_EXCEEDED';
+
+    	// eslint-disable-next-line strict
+    	var httpAdapter = null;
+
+    	// Default nesting limit shared with the inverse transform (formDataToJSON) so
+    	// the FormData <-> JSON round-trip stays symmetric.
+    	const DEFAULT_FORM_DATA_MAX_DEPTH = 100;
+
     	/**
-    	 * It takes a string, tries to parse it, and if it fails, it returns the stringified version
-    	 * of the input
+    	 * Determines if the given thing is a array or js object.
     	 *
-    	 * @param {any} rawValue - The value to be stringified.
-    	 * @param {Function} parser - A function that parses a string into a JavaScript object.
-    	 * @param {Function} encoder - A function that takes a value and returns a string.
+    	 * @param {string} thing - The object or array to be visited.
     	 *
-    	 * @returns {string} A stringified version of the rawValue.
+    	 * @returns {boolean}
     	 */
-    	function stringifySafely(rawValue, parser, encoder) {
-    	  if (utils$1.isString(rawValue)) {
-    	    try {
-    	      (parser || JSON.parse)(rawValue);
-    	      return utils$1.trim(rawValue);
-    	    } catch (e) {
-    	      if (e.name !== 'SyntaxError') {
-    	        throw e;
-    	      }
-    	    }
-    	  }
-
-    	  return (encoder || JSON.stringify)(rawValue);
+    	function isVisitable(thing) {
+    	  return utils$1.isPlainObject(thing) || utils$1.isArray(thing);
     	}
 
-    	const defaults = {
-    	  transitional: transitionalDefaults,
-
-    	  adapter: ['xhr', 'http', 'fetch'],
+    	/**
+    	 * It removes the brackets from the end of a string
+    	 *
+    	 * @param {string} key - The key of the parameter.
+    	 *
+    	 * @returns {string} the key without the brackets.
+    	 */
+    	function removeBrackets(key) {
+    	  return utils$1.endsWith(key, '[]') ? key.slice(0, -2) : key;
+    	}
 
-    	  transformRequest: [
-    	    function transformRequest(data, headers) {
-    	      const contentType = headers.getContentType() || '';
-    	      const hasJSONContentType = contentType.indexOf('application/json') > -1;
-    	      const isObjectPayload = utils$1.isObject(data);
+    	/**
+    	 * It takes a path, a key, and a boolean, and returns a string
+    	 *
+    	 * @param {string} path - The path to the current key.
+    	 * @param {string} key - The key of the current object being iterated over.
+    	 * @param {string} dots - If true, the key will be rendered with dots instead of brackets.
+    	 *
+    	 * @returns {string} The path to the current key.
+    	 */
+    	function renderKey(path, key, dots) {
+    	  if (!path) return key;
+    	  return path
+    	    .concat(key)
+    	    .map(function each(token, i) {
+    	      // eslint-disable-next-line no-param-reassign
+    	      token = removeBrackets(token);
+    	      return !dots && i ? '[' + token + ']' : token;
+    	    })
+    	    .join(dots ? '.' : '');
+    	}
 
-    	      if (isObjectPayload && utils$1.isHTMLForm(data)) {
-    	        data = new FormData(data);
-    	      }
+    	/**
+    	 * If the array is an array and none of its elements are visitable, then it's a flat array.
+    	 *
+    	 * @param {Array<any>} arr - The array to check
+    	 *
+    	 * @returns {boolean}
+    	 */
+    	function isFlatArray(arr) {
+    	  return utils$1.isArray(arr) && !arr.some(isVisitable);
+    	}
 
-    	      const isFormData = utils$1.isFormData(data);
+    	const predicates = utils$1.toFlatObject(utils$1, {}, null, function filter(prop) {
+    	  return /^is[A-Z]/.test(prop);
+    	});
 
-    	      if (isFormData) {
-    	        return hasJSONContentType ? JSON.stringify(formDataToJSON(data)) : data;
-    	      }
+    	/**
+    	 * Convert a data object to FormData
+    	 *
+    	 * @param {Object} obj
+    	 * @param {?Object} [formData]
+    	 * @param {?Object} [options]
+    	 * @param {Function} [options.visitor]
+    	 * @param {Boolean} [options.metaTokens = true]
+    	 * @param {Boolean} [options.dots = false]
+    	 * @param {?Boolean} [options.indexes = false]
+    	 *
+    	 * @returns {Object}
+    	 **/
 
-    	      if (
-    	        utils$1.isArrayBuffer(data) ||
-    	        utils$1.isBuffer(data) ||
-    	        utils$1.isStream(data) ||
-    	        utils$1.isFile(data) ||
-    	        utils$1.isBlob(data) ||
-    	        utils$1.isReadableStream(data)
-    	      ) {
-    	        return data;
-    	      }
-    	      if (utils$1.isArrayBufferView(data)) {
-    	        return data.buffer;
-    	      }
-    	      if (utils$1.isURLSearchParams(data)) {
-    	        headers.setContentType('application/x-www-form-urlencoded;charset=utf-8', false);
-    	        return data.toString();
-    	      }
+    	/**
+    	 * It converts an object into a FormData object
+    	 *
+    	 * @param {Object<any, any>} obj - The object to convert to form data.
+    	 * @param {string} formData - The FormData object to append to.
+    	 * @param {Object<string, any>} options
+    	 *
+    	 * @returns
+    	 */
+    	function toFormData(obj, formData, options) {
+    	  if (!utils$1.isObject(obj)) {
+    	    throw new TypeError('target must be an object');
+    	  }
 
-    	      let isFileList;
+    	  // eslint-disable-next-line no-param-reassign
+    	  formData = formData || new (FormData)();
 
-    	      if (isObjectPayload) {
-    	        if (contentType.indexOf('application/x-www-form-urlencoded') > -1) {
-    	          return toURLEncodedForm(data, this.formSerializer).toString();
-    	        }
+    	  // eslint-disable-next-line no-param-reassign
+    	  options = utils$1.toFlatObject(
+    	    options,
+    	    {
+    	      metaTokens: true,
+    	      dots: false,
+    	      indexes: false,
+    	    },
+    	    false,
+    	    function defined(option, source) {
+    	      // eslint-disable-next-line no-eq-null,eqeqeq
+    	      return !utils$1.isUndefined(source[option]);
+    	    }
+    	  );
 
-    	        if (
-    	          (isFileList = utils$1.isFileList(data)) ||
-    	          contentType.indexOf('multipart/form-data') > -1
-    	        ) {
-    	          const _FormData = this.env && this.env.FormData;
+    	  const metaTokens = options.metaTokens;
+    	  // eslint-disable-next-line no-use-before-define
+    	  const visitor = options.visitor || defaultVisitor;
+    	  const dots = options.dots;
+    	  const indexes = options.indexes;
+    	  const _Blob = options.Blob || (typeof Blob !== 'undefined' && Blob);
+    	  const maxDepth = options.maxDepth === undefined ? DEFAULT_FORM_DATA_MAX_DEPTH : options.maxDepth;
+    	  const useBlob = _Blob && utils$1.isSpecCompliantForm(formData);
+    	  const stack = [];
 
-    	          return toFormData(
-    	            isFileList ? { 'files[]': data } : data,
-    	            _FormData && new _FormData(),
-    	            this.formSerializer
-    	          );
-    	        }
-    	      }
+    	  if (!utils$1.isFunction(visitor)) {
+    	    throw new TypeError('visitor must be a function');
+    	  }
 
-    	      if (isObjectPayload || hasJSONContentType) {
-    	        headers.setContentType('application/json', false);
-    	        return stringifySafely(data);
-    	      }
+    	  function convertValue(value) {
+    	    if (value === null) return '';
 
-    	      return data;
-    	    },
-    	  ],
+    	    if (utils$1.isDate(value)) {
+    	      return value.toISOString();
+    	    }
 
-    	  transformResponse: [
-    	    function transformResponse(data) {
-    	      const transitional = this.transitional || defaults.transitional;
-    	      const forcedJSONParsing = transitional && transitional.forcedJSONParsing;
-    	      const JSONRequested = this.responseType === 'json';
+    	    if (utils$1.isBoolean(value)) {
+    	      return value.toString();
+    	    }
 
-    	      if (utils$1.isResponse(data) || utils$1.isReadableStream(data)) {
-    	        return data;
-    	      }
+    	    if (!useBlob && utils$1.isBlob(value)) {
+    	      throw new AxiosError('Blob is not supported. Use a Buffer instead.');
+    	    }
 
-    	      if (
-    	        data &&
-    	        utils$1.isString(data) &&
-    	        ((forcedJSONParsing && !this.responseType) || JSONRequested)
-    	      ) {
-    	        const silentJSONParsing = transitional && transitional.silentJSONParsing;
-    	        const strictJSONParsing = !silentJSONParsing && JSONRequested;
+    	    if (utils$1.isArrayBuffer(value) || utils$1.isTypedArray(value)) {
+    	      return useBlob && typeof Blob === 'function' ? new Blob([value]) : Buffer.from(value);
+    	    }
 
-    	        try {
-    	          return JSON.parse(data, this.parseReviver);
-    	        } catch (e) {
-    	          if (strictJSONParsing) {
-    	            if (e.name === 'SyntaxError') {
-    	              throw AxiosError.from(e, AxiosError.ERR_BAD_RESPONSE, this, null, this.response);
-    	            }
-    	            throw e;
-    	          }
-    	        }
+    	    return value;
+    	  }
+
+    	  function throwIfMaxDepthExceeded(depth) {
+    	    if (depth > maxDepth) {
+    	      throw new AxiosError(
+    	        'Object is too deeply nested (' + depth + ' levels). Max depth: ' + maxDepth,
+    	        AxiosError.ERR_FORM_DATA_DEPTH_EXCEEDED
+    	      );
+    	    }
+    	  }
+
+    	  function stringifyWithDepthLimit(value, depth) {
+    	    if (maxDepth === Infinity) {
+    	      return JSON.stringify(value);
+    	    }
+
+    	    const ancestors = [];
+
+    	    return JSON.stringify(value, function limitDepth(_key, currentValue) {
+    	      if (!utils$1.isObject(currentValue)) {
+    	        return currentValue;
     	      }
 
-    	      return data;
-    	    },
-    	  ],
+    	      while (ancestors.length && ancestors[ancestors.length - 1] !== this) {
+    	        ancestors.pop();
+    	      }
+
+    	      ancestors.push(currentValue);
+    	      throwIfMaxDepthExceeded(depth + ancestors.length - 1);
+
+    	      return currentValue;
+    	    });
+    	  }
 
     	  /**
-    	   * A timeout in milliseconds to abort a request. If set to 0 (default) a
-    	   * timeout is not created.
+    	   * Default visitor.
+    	   *
+    	   * @param {*} value
+    	   * @param {String|Number} key
+    	   * @param {Array<String|Number>} path
+    	   * @this {FormData}
+    	   *
+    	   * @returns {boolean} return true to visit the each prop of the value recursively
     	   */
-    	  timeout: 0,
-
-    	  xsrfCookieName: 'XSRF-TOKEN',
-    	  xsrfHeaderName: 'X-XSRF-TOKEN',
+    	  function defaultVisitor(value, key, path) {
+    	    let arr = value;
 
-    	  maxContentLength: -1,
-    	  maxBodyLength: -1,
+    	    if (utils$1.isReactNative(formData) && utils$1.isReactNativeBlob(value)) {
+    	      formData.append(renderKey(path, key, dots), convertValue(value));
+    	      return false;
+    	    }
 
-    	  env: {
-    	    FormData: platform.classes.FormData,
-    	    Blob: platform.classes.Blob,
-    	  },
+    	    if (value && !path && typeof value === 'object') {
+    	      if (utils$1.endsWith(key, '{}')) {
+    	        // eslint-disable-next-line no-param-reassign
+    	        key = metaTokens ? key : key.slice(0, -2);
+    	        // eslint-disable-next-line no-param-reassign
+    	        value = stringifyWithDepthLimit(value, 1);
+    	      } else if (
+    	        (utils$1.isArray(value) && isFlatArray(value)) ||
+    	        ((utils$1.isFileList(value) || utils$1.endsWith(key, '[]')) && (arr = utils$1.toArray(value)))
+    	      ) {
+    	        // eslint-disable-next-line no-param-reassign
+    	        key = removeBrackets(key);
 
-    	  validateStatus: function validateStatus(status) {
-    	    return status >= 200 && status < 300;
-    	  },
+    	        arr.forEach(function each(el, index) {
+    	          !(utils$1.isUndefined(el) || el === null) &&
+    	            formData.append(
+    	              // eslint-disable-next-line no-nested-ternary
+    	              indexes === true
+    	                ? renderKey([key], index, dots)
+    	                : indexes === null
+    	                  ? key
+    	                  : key + '[]',
+    	              convertValue(el)
+    	            );
+    	        });
+    	        return false;
+    	      }
+    	    }
 
-    	  headers: {
-    	    common: {
-    	      Accept: 'application/json, text/plain, */*',
-    	      'Content-Type': undefined,
-    	    },
-    	  },
-    	};
+    	    if (isVisitable(value)) {
+    	      return true;
+    	    }
 
-    	utils$1.forEach(['delete', 'get', 'head', 'post', 'put', 'patch'], (method) => {
-    	  defaults.headers[method] = {};
-    	});
+    	    formData.append(renderKey(path, key, dots), convertValue(value));
 
-    	// RawAxiosHeaders whose duplicates are ignored by node
-    	// c.f. https://nodejs.org/api/http.html#http_message_headers
-    	const ignoreDuplicateOf = utils$1.toObjectSet([
-    	  'age',
-    	  'authorization',
-    	  'content-length',
-    	  'content-type',
-    	  'etag',
-    	  'expires',
-    	  'from',
-    	  'host',
-    	  'if-modified-since',
-    	  'if-unmodified-since',
-    	  'last-modified',
-    	  'location',
-    	  'max-forwards',
-    	  'proxy-authorization',
-    	  'referer',
-    	  'retry-after',
-    	  'user-agent',
-    	]);
+    	    return false;
+    	  }
 
-    	/**
-    	 * Parse headers into an object
-    	 *
-    	 * ```
-    	 * Date: Wed, 27 Aug 2014 08:58:49 GMT
-    	 * Content-Type: application/json
-    	 * Connection: keep-alive
-    	 * Transfer-Encoding: chunked
-    	 * ```
-    	 *
-    	 * @param {String} rawHeaders Headers needing to be parsed
-    	 *
-    	 * @returns {Object} Headers parsed into an object
-    	 */
-    	var parseHeaders = (rawHeaders) => {
-    	  const parsed = {};
-    	  let key;
-    	  let val;
-    	  let i;
+    	  const exposedHelpers = Object.assign(predicates, {
+    	    defaultVisitor,
+    	    convertValue,
+    	    isVisitable,
+    	  });
 
-    	  rawHeaders &&
-    	    rawHeaders.split('\n').forEach(function parser(line) {
-    	      i = line.indexOf(':');
-    	      key = line.substring(0, i).trim().toLowerCase();
-    	      val = line.substring(i + 1).trim();
+    	  function build(value, path, depth = 0) {
+    	    if (utils$1.isUndefined(value)) return;
 
-    	      if (!key || (parsed[key] && ignoreDuplicateOf[key])) {
-    	        return;
-    	      }
+    	    throwIfMaxDepthExceeded(depth);
 
-    	      if (key === 'set-cookie') {
-    	        if (parsed[key]) {
-    	          parsed[key].push(val);
-    	        } else {
-    	          parsed[key] = [val];
-    	        }
-    	      } else {
-    	        parsed[key] = parsed[key] ? parsed[key] + ', ' + val : val;
-    	      }
-    	    });
+    	    if (stack.indexOf(value) !== -1) {
+    	      throw new Error('Circular reference detected in ' + path.join('.'));
+    	    }
 
-    	  return parsed;
-    	};
+    	    stack.push(value);
 
-    	const $internals = Symbol('internals');
+    	    utils$1.forEach(value, function each(el, key) {
+    	      const result =
+    	        !(utils$1.isUndefined(el) || el === null) &&
+    	        visitor.call(formData, el, utils$1.isString(key) ? key.trim() : key, path, exposedHelpers);
 
-    	const isValidHeaderValue = (value) => !/[\r\n]/.test(value);
+    	      if (result === true) {
+    	        build(el, path ? path.concat(key) : [key], depth + 1);
+    	      }
+    	    });
 
-    	function assertValidHeaderValue(value, header) {
-    	  if (value === false || value == null) {
-    	    return;
+    	    stack.pop();
     	  }
 
-    	  if (utils$1.isArray(value)) {
-    	    value.forEach((v) => assertValidHeaderValue(v, header));
-    	    return;
+    	  if (!utils$1.isObject(obj)) {
+    	    throw new TypeError('data must be an object');
     	  }
 
-    	  if (!isValidHeaderValue(String(value))) {
-    	    throw new Error(`Invalid character in header content ["${header}"]`);
-    	  }
+    	  build(obj);
+
+    	  return formData;
     	}
 
-    	function normalizeHeader(header) {
-    	  return header && String(header).trim().toLowerCase();
+    	/**
+    	 * It encodes a string by replacing all characters that are not in the unreserved set with
+    	 * their percent-encoded equivalents
+    	 *
+    	 * @param {string} str - The string to encode.
+    	 *
+    	 * @returns {string} The encoded string.
+    	 */
+    	function encode$1(str) {
+    	  const charMap = {
+    	    '!': '%21',
+    	    "'": '%27',
+    	    '(': '%28',
+    	    ')': '%29',
+    	    '~': '%7E',
+    	    '%20': '+',
+    	  };
+    	  return encodeURIComponent(str).replace(/[!'()~]|%20/g, function replacer(match) {
+    	    return charMap[match];
+    	  });
     	}
 
-    	function stripTrailingCRLF(str) {
-    	  let end = str.length;
+    	/**
+    	 * It takes a params object and converts it to a FormData object
+    	 *
+    	 * @param {Object<string, any>} params - The parameters to be converted to a FormData object.
+    	 * @param {Object<string, any>} options - The options object passed to the Axios constructor.
+    	 *
+    	 * @returns {void}
+    	 */
+    	function AxiosURLSearchParams(params, options) {
+    	  this._pairs = [];
 
-    	  while (end > 0) {
-    	    const charCode = str.charCodeAt(end - 1);
+    	  params && toFormData(params, this, options);
+    	}
 
-    	    if (charCode !== 10 && charCode !== 13) {
-    	      break;
-    	    }
+    	const prototype = AxiosURLSearchParams.prototype;
 
-    	    end -= 1;
-    	  }
+    	prototype.append = function append(name, value) {
+    	  this._pairs.push([name, value]);
+    	};
+
+    	prototype.toString = function toString(encoder) {
+    	  const _encode = encoder
+    	    ? function (value) {
+    	        return encoder.call(this, value, encode$1);
+    	      }
+    	    : encode$1;
+
+    	  return this._pairs
+    	    .map(function each(pair) {
+    	      return _encode(pair[0]) + '=' + _encode(pair[1]);
+    	    }, '')
+    	    .join('&');
+    	};
 
-    	  return end === str.length ? str : str.slice(0, end);
+    	/**
+    	 * It replaces URL-encoded forms of `:`, `$`, `,`, and spaces with
+    	 * their plain counterparts (`:`, `$`, `,`, `+`).
+    	 *
+    	 * @param {string} val The value to be encoded.
+    	 *
+    	 * @returns {string} The encoded value.
+    	 */
+    	function encode(val) {
+    	  return encodeURIComponent(val)
+    	    .replace(/%3A/gi, ':')
+    	    .replace(/%24/g, '$')
+    	    .replace(/%2C/gi, ',')
+    	    .replace(/%20/g, '+');
     	}
 
-    	function normalizeValue(value) {
-    	  if (value === false || value == null) {
-    	    return value;
+    	/**
+    	 * Build a URL by appending params to the end
+    	 *
+    	 * @param {string} url The base of the url (e.g., http://www.google.com)
+    	 * @param {object} [params] The params to be appended
+    	 * @param {?(object|Function)} options
+    	 *
+    	 * @returns {string} The formatted url
+    	 */
+    	function buildURL(url, params, options) {
+    	  if (!params) {
+    	    return url;
     	  }
 
-    	  return utils$1.isArray(value) ? value.map(normalizeValue) : stripTrailingCRLF(String(value));
-    	}
+    	  const _options = utils$1.isFunction(options)
+    	    ? {
+    	        serialize: options,
+    	      }
+    	    : options;
 
-    	function parseTokens(str) {
-    	  const tokens = Object.create(null);
-    	  const tokensRE = /([^\s,;=]+)\s*(?:=\s*([^,;]+))?/g;
-    	  let match;
+    	  // Read serializer options pollution-safely: own properties and methods on a
+    	  // class/template prototype are honored, but values injected onto a polluted
+    	  // Object.prototype are ignored.
+    	  const _encode = utils$1.getSafeProp(_options, 'encode') || encode;
+    	  const serializeFn = utils$1.getSafeProp(_options, 'serialize');
 
-    	  while ((match = tokensRE.exec(str))) {
-    	    tokens[match[1]] = match[2];
+    	  let serializedParams;
+
+    	  if (serializeFn) {
+    	    serializedParams = serializeFn(params, _options);
+    	  } else {
+    	    serializedParams = utils$1.isURLSearchParams(params)
+    	      ? params.toString()
+    	      : new AxiosURLSearchParams(params, _options).toString(_encode);
     	  }
 
-    	  return tokens;
-    	}
+    	  if (serializedParams) {
+    	    const hashmarkIndex = url.indexOf('#');
 
-    	const isValidHeaderName = (str) => /^[-_a-zA-Z0-9^`|~,!#$%&'*+.]+$/.test(str.trim());
+    	    if (hashmarkIndex !== -1) {
+    	      url = url.slice(0, hashmarkIndex);
+    	    }
+    	    url += (url.indexOf('?') === -1 ? '?' : '&') + serializedParams;
+    	  }
 
-    	function matchHeaderValue(context, value, header, filter, isHeaderNameFilter) {
-    	  if (utils$1.isFunction(filter)) {
-    	    return filter.call(this, value, header);
+    	  return url;
+    	}
+
+    	class InterceptorManager {
+    	  constructor() {
+    	    this.handlers = [];
     	  }
 
-    	  if (isHeaderNameFilter) {
-    	    value = header;
+    	  /**
+    	   * Add a new interceptor to the stack
+    	   *
+    	   * @param {Function} fulfilled The function to handle `then` for a `Promise`
+    	   * @param {Function} rejected The function to handle `reject` for a `Promise`
+    	   * @param {Object} options The options for the interceptor, synchronous and runWhen
+    	   *
+    	   * @return {Number} An ID used to remove interceptor later
+    	   */
+    	  use(fulfilled, rejected, options) {
+    	    this.handlers.push({
+    	      fulfilled,
+    	      rejected,
+    	      synchronous: options ? options.synchronous : false,
+    	      runWhen: options ? options.runWhen : null,
+    	    });
+    	    return this.handlers.length - 1;
     	  }
 
-    	  if (!utils$1.isString(value)) return;
-
-    	  if (utils$1.isString(filter)) {
-    	    return value.indexOf(filter) !== -1;
+    	  /**
+    	   * Remove an interceptor from the stack
+    	   *
+    	   * @param {Number} id The ID that was returned by `use`
+    	   *
+    	   * @returns {void}
+    	   */
+    	  eject(id) {
+    	    if (this.handlers[id]) {
+    	      this.handlers[id] = null;
+    	    }
     	  }
 
-    	  if (utils$1.isRegExp(filter)) {
-    	    return filter.test(value);
+    	  /**
+    	   * Clear all interceptors from the stack
+    	   *
+    	   * @returns {void}
+    	   */
+    	  clear() {
+    	    if (this.handlers) {
+    	      this.handlers = [];
+    	    }
     	  }
-    	}
-
-    	function formatHeader(header) {
-    	  return header
-    	    .trim()
-    	    .toLowerCase()
-    	    .replace(/([a-z\d])(\w*)/g, (w, char, str) => {
-    	      return char.toUpperCase() + str;
-    	    });
-    	}
-
-    	function buildAccessors(obj, header) {
-    	  const accessorName = utils$1.toCamelCase(' ' + header);
 
-    	  ['get', 'set', 'has'].forEach((methodName) => {
-    	    Object.defineProperty(obj, methodName + accessorName, {
-    	      value: function (arg1, arg2, arg3) {
-    	        return this[methodName].call(this, header, arg1, arg2, arg3);
-    	      },
-    	      configurable: true,
+    	  /**
+    	   * Iterate over all the registered interceptors
+    	   *
+    	   * This method is particularly useful for skipping over any
+    	   * interceptors that may have become `null` calling `eject`.
+    	   *
+    	   * @param {Function} fn The function to call for each interceptor
+    	   *
+    	   * @returns {void}
+    	   */
+    	  forEach(fn) {
+    	    utils$1.forEach(this.handlers, function forEachHandler(h) {
+    	      if (h !== null) {
+    	        fn(h);
+    	      }
     	    });
-    	  });
-    	}
-
-    	class AxiosHeaders {
-    	  constructor(headers) {
-    	    headers && this.set(headers);
     	  }
+    	}
 
-    	  set(header, valueOrRewrite, rewrite) {
-    	    const self = this;
+    	var transitionalDefaults = {
+    	  silentJSONParsing: true,
+    	  forcedJSONParsing: true,
+    	  clarifyTimeoutError: false,
+    	  legacyInterceptorReqResOrdering: true,
+    	  advertiseZstdAcceptEncoding: false,
+    	  validateStatusUndefinedResolves: true,
+    	};
 
-    	    function setHeader(_value, _header, _rewrite) {
-    	      const lHeader = normalizeHeader(_header);
+    	var URLSearchParams$1 = typeof URLSearchParams !== 'undefined' ? URLSearchParams : AxiosURLSearchParams;
 
-    	      if (!lHeader) {
-    	        throw new Error('header name must be a non-empty string');
-    	      }
+    	var FormData$1 = typeof FormData !== 'undefined' ? FormData : null;
 
-    	      const key = utils$1.findKey(self, lHeader);
+    	var Blob$1 = typeof Blob !== 'undefined' ? Blob : null;
 
-    	      if (
-    	        !key ||
-    	        self[key] === undefined ||
-    	        _rewrite === true ||
-    	        (_rewrite === undefined && self[key] !== false)
-    	      ) {
-    	        assertValidHeaderValue(_value, _header);
-    	        self[key || _header] = normalizeValue(_value);
-    	      }
-    	    }
+    	var platform$1 = {
+    	  isBrowser: true,
+    	  classes: {
+    	    URLSearchParams: URLSearchParams$1,
+    	    FormData: FormData$1,
+    	    Blob: Blob$1,
+    	  },
+    	  protocols: ['http', 'https', 'file', 'blob', 'url', 'data'],
+    	};
 
-    	    const setHeaders = (headers, _rewrite) =>
-    	      utils$1.forEach(headers, (_value, _header) => setHeader(_value, _header, _rewrite));
+    	const hasBrowserEnv = typeof window !== 'undefined' && typeof document !== 'undefined';
 
-    	    if (utils$1.isPlainObject(header) || header instanceof this.constructor) {
-    	      setHeaders(header, valueOrRewrite);
-    	    } else if (utils$1.isString(header) && (header = header.trim()) && !isValidHeaderName(header)) {
-    	      setHeaders(parseHeaders(header), valueOrRewrite);
-    	    } else if (utils$1.isObject(header) && utils$1.isIterable(header)) {
-    	      let obj = {},
-    	        dest,
-    	        key;
-    	      for (const entry of header) {
-    	        if (!utils$1.isArray(entry)) {
-    	          throw TypeError('Object iterator must return a key-value pair');
-    	        }
+    	const _navigator = (typeof navigator === 'object' && navigator) || undefined;
 
-    	        obj[(key = entry[0])] = (dest = obj[key])
-    	          ? utils$1.isArray(dest)
-    	            ? [...dest, entry[1]]
-    	            : [dest, entry[1]]
-    	          : entry[1];
-    	      }
+    	/**
+    	 * Determine if we're running in a standard browser environment
+    	 *
+    	 * This allows axios to run in a web worker, and react-native.
+    	 * Both environments support XMLHttpRequest, but not fully standard globals.
+    	 *
+    	 * web workers:
+    	 *  typeof window -> undefined
+    	 *  typeof document -> undefined
+    	 *
+    	 * react-native:
+    	 *  navigator.product -> 'ReactNative'
+    	 * nativescript
+    	 *  navigator.product -> 'NativeScript' or 'NS'
+    	 *
+    	 * @returns {boolean}
+    	 */
+    	const hasStandardBrowserEnv =
+    	  hasBrowserEnv &&
+    	  (!_navigator || ['ReactNative', 'NativeScript', 'NS'].indexOf(_navigator.product) < 0);
 
-    	      setHeaders(obj, valueOrRewrite);
-    	    } else {
-    	      header != null && setHeader(valueOrRewrite, header, rewrite);
-    	    }
+    	/**
+    	 * Determine if we're running in a standard browser webWorker environment
+    	 *
+    	 * Although the `isStandardBrowserEnv` method indicates that
+    	 * `allows axios to run in a web worker`, the WebWorker will still be
+    	 * filtered out due to its judgment standard
+    	 * `typeof window !== 'undefined' && typeof document !== 'undefined'`.
+    	 * This leads to a problem when axios post `FormData` in webWorker
+    	 */
+    	const hasStandardBrowserWebWorkerEnv = (() => {
+    	  return (
+    	    typeof WorkerGlobalScope !== 'undefined' &&
+    	    // eslint-disable-next-line no-undef
+    	    self instanceof WorkerGlobalScope &&
+    	    typeof self.importScripts === 'function'
+    	  );
+    	})();
 
-    	    return this;
-    	  }
+    	const origin = (hasBrowserEnv && window.location.href) || 'http://localhost';
 
-    	  get(header, parser) {
-    	    header = normalizeHeader(header);
+    	var utils = /*#__PURE__*/Object.freeze({
+    	  __proto__: null,
+    	  hasBrowserEnv: hasBrowserEnv,
+    	  hasStandardBrowserEnv: hasStandardBrowserEnv,
+    	  hasStandardBrowserWebWorkerEnv: hasStandardBrowserWebWorkerEnv,
+    	  navigator: _navigator,
+    	  origin: origin
+    	});
 
-    	    if (header) {
-    	      const key = utils$1.findKey(this, header);
+    	var platform = {
+    	  ...utils,
+    	  ...platform$1,
+    	};
 
-    	      if (key) {
-    	        const value = this[key];
+    	function toURLEncodedForm(data, options) {
+    	  return toFormData(data, new platform.classes.URLSearchParams(), {
+    	    visitor: function (value, key, path, helpers) {
+    	      if (platform.isNode && utils$1.isBuffer(value)) {
+    	        this.append(key, value.toString('base64'));
+    	        return false;
+    	      }
 
-    	        if (!parser) {
-    	          return value;
-    	        }
+    	      return helpers.defaultVisitor.apply(this, arguments);
+    	    },
+    	    ...options,
+    	  });
+    	}
 
-    	        if (parser === true) {
-    	          return parseTokens(value);
-    	        }
+    	const MAX_DEPTH = DEFAULT_FORM_DATA_MAX_DEPTH;
 
-    	        if (utils$1.isFunction(parser)) {
-    	          return parser.call(this, value, key);
-    	        }
+    	function throwIfDepthExceeded(index) {
+    	  if (index > MAX_DEPTH) {
+    	    throw new AxiosError(
+    	      'FormData field is too deeply nested (' + index + ' levels). Max depth: ' + MAX_DEPTH,
+    	      AxiosError.ERR_FORM_DATA_DEPTH_EXCEEDED
+    	    );
+    	  }
+    	}
 
-    	        if (utils$1.isRegExp(parser)) {
-    	          return parser.exec(value);
-    	        }
+    	/**
+    	 * It takes a string like `foo[x][y][z]` and returns an array like `['foo', 'x', 'y', 'z']
+    	 *
+    	 * @param {string} name - The name of the property to get.
+    	 *
+    	 * @returns An array of strings.
+    	 */
+    	function parsePropPath(name) {
+    	  // foo[x][y][z]
+    	  // foo.x.y.z
+    	  // foo-x-y-z
+    	  // foo x y z
+    	  const path = [];
+    	  const pattern = /\w+|\[(\w*)]/g;
+    	  let match;
 
-    	        throw new TypeError('parser must be boolean|regexp|function');
-    	      }
-    	    }
+    	  while ((match = pattern.exec(name)) !== null) {
+    	    throwIfDepthExceeded(path.length);
+    	    path.push(match[0] === '[]' ? '' : match[1] || match[0]);
     	  }
 
-    	  has(header, matcher) {
-    	    header = normalizeHeader(header);
+    	  return path;
+    	}
 
-    	    if (header) {
-    	      const key = utils$1.findKey(this, header);
+    	/**
+    	 * Convert an array to an object.
+    	 *
+    	 * @param {Array<any>} arr - The array to convert to an object.
+    	 *
+    	 * @returns An object with the same keys and values as the array.
+    	 */
+    	function arrayToObject(arr) {
+    	  const obj = {};
+    	  const keys = Object.keys(arr);
+    	  let i;
+    	  const len = keys.length;
+    	  let key;
+    	  for (i = 0; i < len; i++) {
+    	    key = keys[i];
+    	    obj[key] = arr[key];
+    	  }
+    	  return obj;
+    	}
 
-    	      return !!(
-    	        key &&
-    	        this[key] !== undefined &&
-    	        (!matcher || matchHeaderValue(this, this[key], key, matcher))
-    	      );
-    	    }
+    	/**
+    	 * It takes a FormData object and returns a JavaScript object
+    	 *
+    	 * @param {string} formData The FormData object to convert to JSON.
+    	 *
+    	 * @returns {Object<string, any> | null} The converted object.
+    	 */
+    	function formDataToJSON(formData) {
+    	  function buildPath(path, value, target, index) {
+    	    throwIfDepthExceeded(index);
 
-    	    return false;
-    	  }
+    	    let name = path[index++];
 
-    	  delete(header, matcher) {
-    	    const self = this;
-    	    let deleted = false;
+    	    if (name === '__proto__') return true;
 
-    	    function deleteHeader(_header) {
-    	      _header = normalizeHeader(_header);
+    	    const isNumericKey = Number.isFinite(+name);
+    	    const isLast = index >= path.length;
+    	    name = !name && utils$1.isArray(target) ? target.length : name;
 
-    	      if (_header) {
-    	        const key = utils$1.findKey(self, _header);
+    	    if (isLast) {
+    	      if (utils$1.hasOwnProp(target, name)) {
+    	        target[name] = utils$1.isArray(target[name])
+    	          ? target[name].concat(value)
+    	          : [target[name], value];
+    	      } else {
+    	        target[name] = value;
+    	      }
 
-    	        if (key && (!matcher || matchHeaderValue(self, self[key], key, matcher))) {
-    	          delete self[key];
+    	      return !isNumericKey;
+    	    }
 
-    	          deleted = true;
-    	        }
-    	      }
+    	    if (!utils$1.hasOwnProp(target, name) || !utils$1.isObject(target[name])) {
+    	      target[name] = [];
     	    }
 
-    	    if (utils$1.isArray(header)) {
-    	      header.forEach(deleteHeader);
-    	    } else {
-    	      deleteHeader(header);
+    	    const result = buildPath(path, value, target[name], index);
+
+    	    if (result && utils$1.isArray(target[name])) {
+    	      target[name] = arrayToObject(target[name]);
     	    }
 
-    	    return deleted;
+    	    return !isNumericKey;
     	  }
 
-    	  clear(matcher) {
-    	    const keys = Object.keys(this);
-    	    let i = keys.length;
-    	    let deleted = false;
+    	  if (utils$1.isFormData(formData) && utils$1.isFunction(formData.entries)) {
+    	    const obj = {};
 
-    	    while (i--) {
-    	      const key = keys[i];
-    	      if (!matcher || matchHeaderValue(this, this[key], key, matcher, true)) {
-    	        delete this[key];
-    	        deleted = true;
-    	      }
-    	    }
+    	    utils$1.forEachEntry(formData, (name, value) => {
+    	      buildPath(parsePropPath(name), value, obj, 0);
+    	    });
 
-    	    return deleted;
+    	    return obj;
     	  }
 
-    	  normalize(format) {
-    	    const self = this;
-    	    const headers = {};
+    	  return null;
+    	}
 
-    	    utils$1.forEach(this, (value, header) => {
-    	      const key = utils$1.findKey(headers, header);
+    	const own = (obj, key) => (obj != null && utils$1.hasOwnProp(obj, key) ? obj[key] : undefined);
 
-    	      if (key) {
-    	        self[key] = normalizeValue(value);
-    	        delete self[header];
-    	        return;
+    	/**
+    	 * It takes a string, tries to parse it, and if it fails, it returns the stringified version
+    	 * of the input
+    	 *
+    	 * @param {any} rawValue - The value to be stringified.
+    	 * @param {Function} parser - A function that parses a string into a JavaScript object.
+    	 * @param {Function} encoder - A function that takes a value and returns a string.
+    	 *
+    	 * @returns {string} A stringified version of the rawValue.
+    	 */
+    	function stringifySafely(rawValue, parser, encoder) {
+    	  if (utils$1.isString(rawValue)) {
+    	    try {
+    	      (parser || JSON.parse)(rawValue);
+    	      return utils$1.trim(rawValue);
+    	    } catch (e) {
+    	      if (e.name !== 'SyntaxError') {
+    	        throw e;
     	      }
+    	    }
+    	  }
 
-    	      const normalized = format ? formatHeader(header) : String(header).trim();
+    	  return (encoder || JSON.stringify)(rawValue);
+    	}
 
-    	      if (normalized !== header) {
-    	        delete self[header];
-    	      }
+    	const defaults = {
+    	  transitional: transitionalDefaults,
 
-    	      self[normalized] = normalizeValue(value);
+    	  adapter: ['xhr', 'http', 'fetch'],
 
-    	      headers[normalized] = true;
-    	    });
+    	  transformRequest: [
+    	    function transformRequest(data, headers) {
+    	      const contentType = headers.getContentType() || '';
+    	      const hasJSONContentType = contentType.indexOf('application/json') > -1;
+    	      const isObjectPayload = utils$1.isObject(data);
 
-    	    return this;
-    	  }
+    	      if (isObjectPayload && utils$1.isHTMLForm(data)) {
+    	        data = new FormData(data);
+    	      }
 
-    	  concat(...targets) {
-    	    return this.constructor.concat(this, ...targets);
-    	  }
+    	      const isFormData = utils$1.isFormData(data);
 
-    	  toJSON(asStrings) {
-    	    const obj = Object.create(null);
+    	      if (isFormData) {
+    	        return hasJSONContentType ? JSON.stringify(formDataToJSON(data)) : data;
+    	      }
 
-    	    utils$1.forEach(this, (value, header) => {
-    	      value != null &&
-    	        value !== false &&
-    	        (obj[header] = asStrings && utils$1.isArray(value) ? value.join(', ') : value);
-    	    });
+    	      if (
+    	        utils$1.isArrayBuffer(data) ||
+    	        utils$1.isBuffer(data) ||
+    	        utils$1.isStream(data) ||
+    	        utils$1.isFile(data) ||
+    	        utils$1.isBlob(data) ||
+    	        utils$1.isReadableStream(data)
+    	      ) {
+    	        return data;
+    	      }
+    	      if (utils$1.isArrayBufferView(data)) {
+    	        return data.buffer;
+    	      }
+    	      if (utils$1.isURLSearchParams(data)) {
+    	        headers.setContentType('application/x-www-form-urlencoded;charset=utf-8', false);
+    	        return data.toString();
+    	      }
 
-    	    return obj;
-    	  }
+    	      let isFileList;
 
-    	  [Symbol.iterator]() {
-    	    return Object.entries(this.toJSON())[Symbol.iterator]();
-    	  }
+    	      if (isObjectPayload) {
+    	        const formSerializer = own(this, 'formSerializer');
+    	        if (contentType.indexOf('application/x-www-form-urlencoded') > -1) {
+    	          return toURLEncodedForm(data, formSerializer).toString();
+    	        }
 
-    	  toString() {
-    	    return Object.entries(this.toJSON())
-    	      .map(([header, value]) => header + ': ' + value)
-    	      .join('\n');
-    	  }
+    	        if (
+    	          (isFileList = utils$1.isFileList(data)) ||
+    	          contentType.indexOf('multipart/form-data') > -1
+    	        ) {
+    	          const env = own(this, 'env');
+    	          const _FormData = env && env.FormData;
 
-    	  getSetCookie() {
-    	    return this.get('set-cookie') || [];
-    	  }
+    	          return toFormData(
+    	            isFileList ? { 'files[]': data } : data,
+    	            _FormData && new _FormData(),
+    	            formSerializer
+    	          );
+    	        }
+    	      }
 
-    	  get [Symbol.toStringTag]() {
-    	    return 'AxiosHeaders';
-    	  }
+    	      if (isObjectPayload || hasJSONContentType) {
+    	        headers.setContentType('application/json', false);
+    	        return stringifySafely(data);
+    	      }
 
-    	  static from(thing) {
-    	    return thing instanceof this ? thing : new this(thing);
-    	  }
+    	      return data;
+    	    },
+    	  ],
 
-    	  static concat(first, ...targets) {
-    	    const computed = new this(first);
+    	  transformResponse: [
+    	    function transformResponse(data) {
+    	      const transitional = own(this, 'transitional') || defaults.transitional;
+    	      const forcedJSONParsing = transitional && transitional.forcedJSONParsing;
+    	      const responseType = own(this, 'responseType');
+    	      const JSONRequested = responseType === 'json';
 
-    	    targets.forEach((target) => computed.set(target));
+    	      if (utils$1.isResponse(data) || utils$1.isReadableStream(data)) {
+    	        return data;
+    	      }
 
-    	    return computed;
-    	  }
+    	      if (
+    	        data &&
+    	        utils$1.isString(data) &&
+    	        ((forcedJSONParsing && !responseType) || JSONRequested)
+    	      ) {
+    	        const silentJSONParsing = transitional && transitional.silentJSONParsing;
+    	        const strictJSONParsing = !silentJSONParsing && JSONRequested;
 
-    	  static accessor(header) {
-    	    const internals =
-    	      (this[$internals] =
-    	      this[$internals] =
-    	        {
-    	          accessors: {},
-    	        });
+    	        try {
+    	          return JSON.parse(data, own(this, 'parseReviver'));
+    	        } catch (e) {
+    	          if (strictJSONParsing) {
+    	            if (e.name === 'SyntaxError') {
+    	              throw AxiosError.from(e, AxiosError.ERR_BAD_RESPONSE, this, null, own(this, 'response'));
+    	            }
+    	            throw e;
+    	          }
+    	        }
+    	      }
 
-    	    const accessors = internals.accessors;
-    	    const prototype = this.prototype;
+    	      return data;
+    	    },
+    	  ],
 
-    	    function defineAccessor(_header) {
-    	      const lHeader = normalizeHeader(_header);
+    	  /**
+    	   * A timeout in milliseconds to abort a request. If set to 0 (default) a
+    	   * timeout is not created.
+    	   */
+    	  timeout: 0,
 
-    	      if (!accessors[lHeader]) {
-    	        buildAccessors(prototype, _header);
-    	        accessors[lHeader] = true;
-    	      }
-    	    }
+    	  xsrfCookieName: 'XSRF-TOKEN',
+    	  xsrfHeaderName: 'X-XSRF-TOKEN',
 
-    	    utils$1.isArray(header) ? header.forEach(defineAccessor) : defineAccessor(header);
+    	  maxContentLength: -1,
+    	  maxBodyLength: -1,
 
-    	    return this;
-    	  }
-    	}
+    	  env: {
+    	    FormData: platform.classes.FormData,
+    	    Blob: platform.classes.Blob,
+    	  },
 
-    	AxiosHeaders.accessor([
-    	  'Content-Type',
-    	  'Content-Length',
-    	  'Accept',
-    	  'Accept-Encoding',
-    	  'User-Agent',
-    	  'Authorization',
-    	]);
+    	  validateStatus: function validateStatus(status) {
+    	    return status >= 200 && status < 300;
+    	  },
 
-    	// reserved names hotfix
-    	utils$1.reduceDescriptors(AxiosHeaders.prototype, ({ value }, key) => {
-    	  let mapped = key[0].toUpperCase() + key.slice(1); // map `set` => `Set`
-    	  return {
-    	    get: () => value,
-    	    set(headerValue) {
-    	      this[mapped] = headerValue;
+    	  headers: {
+    	    common: {
+    	      Accept: 'application/json, text/plain, */*',
+    	      'Content-Type': undefined,
     	    },
-    	  };
-    	});
+    	  },
+    	};
 
-    	utils$1.freezeMethods(AxiosHeaders);
+    	utils$1.forEach(['delete', 'get', 'head', 'post', 'put', 'patch', 'query'], (method) => {
+    	  defaults.headers[method] = {};
+    	});
 
     	/**
     	 * Transform the data for a request or a response
@@ -7751,22 +8068,18 @@ var contentfulManagement = (function (exports) {
     	  if (!response.status || !validateStatus || validateStatus(response.status)) {
     	    resolve(response);
     	  } else {
-    	    reject(
-    	      new AxiosError(
-    	        'Request failed with status code ' + response.status,
-    	        [AxiosError.ERR_BAD_REQUEST, AxiosError.ERR_BAD_RESPONSE][
-    	          Math.floor(response.status / 100) - 4
-    	        ],
-    	        response.config,
-    	        response.request,
-    	        response
-    	      )
-    	    );
+    	    reject(new AxiosError(
+    	      'Request failed with status code ' + response.status,
+    	      response.status >= 400 && response.status < 500 ? AxiosError.ERR_BAD_REQUEST : AxiosError.ERR_BAD_RESPONSE,
+    	      response.config,
+    	      response.request,
+    	      response
+    	    ));
     	  }
     	}
 
     	function parseProtocol(url) {
-    	  const match = /^([-+\w]{1,25})(:?\/\/|:)/.exec(url);
+    	  const match = /^([-+\w]{1,25}):(?:\/\/)?/.exec(url);
     	  return (match && match[1]) || '';
     	}
 
@@ -7870,13 +8183,16 @@ var contentfulManagement = (function (exports) {
     	  const _speedometer = speedometer(50, 250);
 
     	  return throttle((e) => {
-    	    const loaded = e.loaded;
+    	    if (!e || typeof e.loaded !== 'number') {
+    	      return;
+    	    }
+    	    const rawLoaded = e.loaded;
     	    const total = e.lengthComputable ? e.total : undefined;
-    	    const progressBytes = loaded - bytesNotified;
+    	    const loaded = total != null ? Math.min(rawLoaded, total) : rawLoaded;
+    	    const progressBytes = Math.max(0, loaded - bytesNotified);
     	    const rate = _speedometer(progressBytes);
-    	    const inRange = loaded <= total;
 
-    	    bytesNotified = loaded;
+    	    bytesNotified = Math.max(bytesNotified, loaded);
 
     	    const data = {
     	      loaded,
@@ -7884,7 +8200,7 @@ var contentfulManagement = (function (exports) {
     	      progress: total ? loaded / total : undefined,
     	      bytes: progressBytes,
     	      rate: rate ? rate : undefined,
-    	      estimated: rate && total && inRange ? (total - loaded) / rate : undefined,
+    	      estimated: rate && total ? (total - loaded) / rate : undefined,
     	      event: e,
     	      lengthComputable: total != null,
     	      [isDownloadStream ? 'download' : 'upload']: true,
@@ -7957,8 +8273,20 @@ var contentfulManagement = (function (exports) {
 
     	      read(name) {
     	        if (typeof document === 'undefined') return null;
-    	        const match = document.cookie.match(new RegExp('(?:^|; )' + name + '=([^;]*)'));
-    	        return match ? decodeURIComponent(match[1]) : null;
+    	        // Match name=value by splitting on the semicolon separator instead of building a
+    	        // RegExp from `name` — interpolating an unescaped string into a RegExp would let
+    	        // metacharacters (e.g. `.+?` in an attacker-influenced cookie name) cause ReDoS or
+    	        // match the wrong cookie. Browsers may serialize cookie pairs as either ";" or
+    	        // "; ", so ignore optional whitespace before each cookie name.
+    	        const cookies = document.cookie.split(';');
+    	        for (let i = 0; i < cookies.length; i++) {
+    	          const cookie = cookies[i].replace(/^\s+/, '');
+    	          const eq = cookie.indexOf('=');
+    	          if (eq !== -1 && cookie.slice(0, eq) === name) {
+    	            return decodeURIComponent(cookie.slice(eq + 1));
+    	          }
+    	        }
+    	        return null;
     	      },
 
     	      remove(name) {
@@ -8006,6 +8334,31 @@ var contentfulManagement = (function (exports) {
     	    : baseURL;
     	}
 
+    	const malformedHttpProtocol = /^https?:(?!\/\/)/i;
+    	const httpProtocolControlCharacters = /[\t\n\r]/g;
+
+    	function stripLeadingC0ControlOrSpace(url) {
+    	  let i = 0;
+    	  while (i < url.length && url.charCodeAt(i) <= 0x20) {
+    	    i++;
+    	  }
+    	  return url.slice(i);
+    	}
+
+    	function normalizeURLForProtocolCheck(url) {
+    	  return stripLeadingC0ControlOrSpace(url).replace(httpProtocolControlCharacters, '');
+    	}
+
+    	function assertValidHttpProtocolURL(url, config) {
+    	  if (typeof url === 'string' && malformedHttpProtocol.test(normalizeURLForProtocolCheck(url))) {
+    	    throw new AxiosError(
+    	      'Invalid URL: missing "//" after protocol',
+    	      AxiosError.ERR_INVALID_URL,
+    	      config
+    	    );
+    	  }
+    	}
+
     	/**
     	 * Creates a new URL by combining the baseURL with the requestedURL,
     	 * only when the requestedURL is not already an absolute URL.
@@ -8016,9 +8369,11 @@ var contentfulManagement = (function (exports) {
     	 *
     	 * @returns {string} The combined full path
     	 */
-    	function buildFullPath(baseURL, requestedURL, allowAbsoluteUrls) {
+    	function buildFullPath(baseURL, requestedURL, allowAbsoluteUrls, config) {
+    	  assertValidHttpProtocolURL(requestedURL, config);
     	  let isRelativeUrl = !isAbsoluteURL(requestedURL);
-    	  if (baseURL && (isRelativeUrl || allowAbsoluteUrls == false)) {
+    	  if (baseURL && (isRelativeUrl || allowAbsoluteUrls === false)) {
+    	    assertValidHttpProtocolURL(baseURL, config);
     	    return combineURLs(baseURL, requestedURL);
     	  }
     	  return requestedURL;
@@ -8038,7 +8393,21 @@ var contentfulManagement = (function (exports) {
     	function mergeConfig(config1, config2) {
     	  // eslint-disable-next-line no-param-reassign
     	  config2 = config2 || {};
-    	  const config = {};
+
+    	  // Use a null-prototype object so that downstream reads such as `config.auth`
+    	  // or `config.baseURL` cannot inherit polluted values from Object.prototype.
+    	  // `hasOwnProperty` is restored as a non-enumerable own slot to preserve
+    	  // ergonomics for user code that relies on it.
+    	  const config = Object.create(null);
+    	  Object.defineProperty(config, 'hasOwnProperty', {
+    	    // Null-proto descriptor so a polluted Object.prototype.get cannot turn
+    	    // this data descriptor into an accessor descriptor on the way in.
+    	    __proto__: null,
+    	    value: Object.prototype.hasOwnProperty,
+    	    enumerable: false,
+    	    writable: true,
+    	    configurable: true,
+    	  });
 
     	  function getMergedValue(target, source, prop, caseless) {
     	    if (utils$1.isPlainObject(target) && utils$1.isPlainObject(source)) {
@@ -8075,11 +8444,33 @@ var contentfulManagement = (function (exports) {
     	    }
     	  }
 
+    	  function getMergedTransitionalOption(prop) {
+    	    const transitional2 = utils$1.hasOwnProp(config2, 'transitional') ? config2.transitional : undefined;
+
+    	    if (!utils$1.isUndefined(transitional2)) {
+    	      if (utils$1.isPlainObject(transitional2)) {
+    	        if (utils$1.hasOwnProp(transitional2, prop)) {
+    	          return transitional2[prop];
+    	        }
+    	      } else {
+    	        return undefined;
+    	      }
+    	    }
+
+    	    const transitional1 = utils$1.hasOwnProp(config1, 'transitional') ? config1.transitional : undefined;
+
+    	    if (utils$1.isPlainObject(transitional1) && utils$1.hasOwnProp(transitional1, prop)) {
+    	      return transitional1[prop];
+    	    }
+
+    	    return undefined;
+    	  }
+
     	  // eslint-disable-next-line consistent-return
     	  function mergeDirectKeys(a, b, prop) {
-    	    if (prop in config2) {
+    	    if (utils$1.hasOwnProp(config2, prop)) {
     	      return getMergedValue(a, b);
-    	    } else if (prop in config1) {
+    	    } else if (utils$1.hasOwnProp(config1, prop)) {
     	      return getMergedValue(undefined, a);
     	    }
     	  }
@@ -8111,6 +8502,7 @@ var contentfulManagement = (function (exports) {
     	    httpsAgent: defaultToConfig2,
     	    cancelToken: defaultToConfig2,
     	    socketPath: defaultToConfig2,
+    	    allowedSocketPaths: defaultToConfig2,
     	    responseEncoding: defaultToConfig2,
     	    validateStatus: mergeDirectKeys,
     	    headers: (a, b, prop) =>
@@ -8120,52 +8512,101 @@ var contentfulManagement = (function (exports) {
     	  utils$1.forEach(Object.keys({ ...config1, ...config2 }), function computeConfigValue(prop) {
     	    if (prop === '__proto__' || prop === 'constructor' || prop === 'prototype') return;
     	    const merge = utils$1.hasOwnProp(mergeMap, prop) ? mergeMap[prop] : mergeDeepProperties;
-    	    const configValue = merge(config1[prop], config2[prop], prop);
+    	    const a = utils$1.hasOwnProp(config1, prop) ? config1[prop] : undefined;
+    	    const b = utils$1.hasOwnProp(config2, prop) ? config2[prop] : undefined;
+    	    const configValue = merge(a, b, prop);
     	    (utils$1.isUndefined(configValue) && merge !== mergeDirectKeys) || (config[prop] = configValue);
     	  });
 
+    	  if (
+    	    utils$1.hasOwnProp(config2, 'validateStatus') &&
+    	    utils$1.isUndefined(config2.validateStatus) &&
+    	    getMergedTransitionalOption('validateStatusUndefinedResolves') === false
+    	  ) {
+    	    if (utils$1.hasOwnProp(config1, 'validateStatus')) {
+    	      config.validateStatus = getMergedValue(undefined, config1.validateStatus);
+    	    } else {
+    	      delete config.validateStatus;
+    	    }
+    	  }
+
     	  return config;
     	}
 
-    	var resolveConfig = (config) => {
+    	const FORM_DATA_CONTENT_HEADERS = ['content-type', 'content-length'];
+
+    	function setFormDataHeaders(headers, formHeaders, policy) {
+    	  if (policy !== 'content-only') {
+    	    headers.set(formHeaders);
+    	    return;
+    	  }
+
+    	  Object.entries(formHeaders).forEach(([key, val]) => {
+    	    if (FORM_DATA_CONTENT_HEADERS.includes(key.toLowerCase())) {
+    	      headers.set(key, val);
+    	    }
+    	  });
+    	}
+
+    	/**
+    	 * Encode a UTF-8 string to a Latin-1 byte string for use with btoa().
+    	 * This is a modern replacement for the deprecated unescape(encodeURIComponent(str)) pattern.
+    	 *
+    	 * @param {string} str The string to encode
+    	 *
+    	 * @returns {string} UTF-8 bytes as a Latin-1 string
+    	 */
+    	const encodeUTF8$1 = (str) =>
+    	  encodeURIComponent(str).replace(/%([0-9A-F]{2})/gi, (_, hex) =>
+    	    String.fromCharCode(parseInt(hex, 16))
+    	  );
+
+    	function resolveConfig(config) {
     	  const newConfig = mergeConfig({}, config);
 
-    	  let { data, withXSRFToken, xsrfHeaderName, xsrfCookieName, headers, auth } = newConfig;
+    	  // Read only own properties to prevent prototype pollution gadgets
+    	  // (e.g. Object.prototype.baseURL = 'https://evil.com').
+    	  const own = (key) => (utils$1.hasOwnProp(newConfig, key) ? newConfig[key] : undefined);
+
+    	  const data = own('data');
+    	  let withXSRFToken = own('withXSRFToken');
+    	  const xsrfHeaderName = own('xsrfHeaderName');
+    	  const xsrfCookieName = own('xsrfCookieName');
+    	  let headers = own('headers');
+    	  const auth = own('auth');
+    	  const baseURL = own('baseURL');
+    	  const allowAbsoluteUrls = own('allowAbsoluteUrls');
+    	  const url = own('url');
 
     	  newConfig.headers = headers = AxiosHeaders.from(headers);
 
     	  newConfig.url = buildURL(
-    	    buildFullPath(newConfig.baseURL, newConfig.url, newConfig.allowAbsoluteUrls),
-    	    config.params,
-    	    config.paramsSerializer
+    	    buildFullPath(baseURL, url, allowAbsoluteUrls, newConfig),
+    	    own('params'),
+    	    own('paramsSerializer')
     	  );
 
     	  // HTTP basic authentication
     	  if (auth) {
+    	    const username = utils$1.getSafeProp(auth, 'username') || '';
+    	    const password = utils$1.getSafeProp(auth, 'password') || '';
+
     	    headers.set(
     	      'Authorization',
-    	      'Basic ' +
-    	        btoa(
-    	          (auth.username || '') +
-    	            ':' +
-    	            (auth.password ? unescape(encodeURIComponent(auth.password)) : '')
-    	        )
+    	      'Basic ' + btoa(username + ':' + (password ? encodeUTF8$1(password) : ''))
     	    );
     	  }
 
     	  if (utils$1.isFormData(data)) {
-    	    if (platform.hasStandardBrowserEnv || platform.hasStandardBrowserWebWorkerEnv) {
-    	      headers.setContentType(undefined); // browser handles it
+    	    if (
+    	      platform.hasStandardBrowserEnv ||
+    	      platform.hasStandardBrowserWebWorkerEnv ||
+    	      utils$1.isReactNative(data)
+    	    ) {
+    	      headers.setContentType(undefined); // browser/web worker/RN handles it
     	    } else if (utils$1.isFunction(data.getHeaders)) {
     	      // Node.js FormData (like form-data package)
-    	      const formHeaders = data.getHeaders();
-    	      // Only set safe headers to avoid overwriting security headers
-    	      const allowedHeaders = ['content-type', 'content-length'];
-    	      Object.entries(formHeaders).forEach(([key, val]) => {
-    	        if (allowedHeaders.includes(key.toLowerCase())) {
-    	          headers.set(key, val);
-    	        }
-    	      });
+    	      setFormDataHeaders(headers, data.getHeaders(), own('formDataHeaderPolicy'));
     	    }
     	  }
 
@@ -8174,10 +8615,17 @@ var contentfulManagement = (function (exports) {
     	  // Specifically not if we're in a web worker, or react-native.
 
     	  if (platform.hasStandardBrowserEnv) {
-    	    withXSRFToken && utils$1.isFunction(withXSRFToken) && (withXSRFToken = withXSRFToken(newConfig));
+    	    if (utils$1.isFunction(withXSRFToken)) {
+    	      withXSRFToken = withXSRFToken(newConfig);
+    	    }
+
+    	    // Strict boolean check — prevents proto-pollution gadgets (e.g. Object.prototype.withXSRFToken = 1)
+    	    // and misconfigurations (e.g. "false") from short-circuiting the same-origin check and leaking
+    	    // the XSRF token cross-origin.
+    	    const shouldSendXSRF =
+    	      withXSRFToken === true || (withXSRFToken == null && isURLSameOrigin(newConfig.url));
 
-    	    if (withXSRFToken || (withXSRFToken !== false && isURLSameOrigin(newConfig.url))) {
-    	      // Add xsrf header
+    	    if (shouldSendXSRF) {
     	      const xsrfValue = xsrfHeaderName && xsrfCookieName && cookies.read(xsrfCookieName);
 
     	      if (xsrfValue) {
@@ -8187,7 +8635,7 @@ var contentfulManagement = (function (exports) {
     	  }
 
     	  return newConfig;
-    	};
+    	}
 
     	const isXHRAdapterSupported = typeof XMLHttpRequest !== 'undefined';
 
@@ -8271,7 +8719,7 @@ var contentfulManagement = (function (exports) {
     	          // will return status as 0 even though it's a successful request
     	          if (
     	            request.status === 0 &&
-    	            !(request.responseURL && request.responseURL.indexOf('file:') === 0)
+    	            !(request.responseURL && request.responseURL.startsWith('file:'))
     	          ) {
     	            return;
     	          }
@@ -8288,6 +8736,7 @@ var contentfulManagement = (function (exports) {
     	        }
 
     	        reject(new AxiosError('Request aborted', AxiosError.ECONNABORTED, config, request));
+    	        done();
 
     	        // Clean up request
     	        request = null;
@@ -8303,6 +8752,7 @@ var contentfulManagement = (function (exports) {
     	        // attach the underlying event for consumers who want details
     	        err.event = event || null;
     	        reject(err);
+    	        done();
     	        request = null;
     	      };
 
@@ -8323,6 +8773,7 @@ var contentfulManagement = (function (exports) {
     	            request
     	          )
     	        );
+    	        done();
 
     	        // Clean up request
     	        request = null;
@@ -8333,7 +8784,7 @@ var contentfulManagement = (function (exports) {
 
     	      // Add headers to the request
     	      if ('setRequestHeader' in request) {
-    	        utils$1.forEach(requestHeaders.toJSON(), function setRequestHeader(val, key) {
+    	        utils$1.forEach(toByteStringHeaderObject(requestHeaders), function setRequestHeader(val, key) {
     	          request.setRequestHeader(key, val);
     	        });
     	      }
@@ -8372,6 +8823,7 @@ var contentfulManagement = (function (exports) {
     	          }
     	          reject(!cancel || cancel.type ? new CanceledError(null, config, request) : cancel);
     	          request.abort();
+    	          done();
     	          request = null;
     	        };
 
@@ -8385,7 +8837,7 @@ var contentfulManagement = (function (exports) {
 
     	      const protocol = parseProtocol(_config.url);
 
-    	      if (protocol && platform.protocols.indexOf(protocol) === -1) {
+    	      if (protocol && !platform.protocols.includes(protocol)) {
     	        reject(
     	          new AxiosError(
     	            'Unsupported protocol ' + protocol + ':',
@@ -8402,54 +8854,55 @@ var contentfulManagement = (function (exports) {
     	  };
 
     	const composeSignals = (signals, timeout) => {
-    	  const { length } = (signals = signals ? signals.filter(Boolean) : []);
-
-    	  if (timeout || length) {
-    	    let controller = new AbortController();
-
-    	    let aborted;
-
-    	    const onabort = function (reason) {
-    	      if (!aborted) {
-    	        aborted = true;
-    	        unsubscribe();
-    	        const err = reason instanceof Error ? reason : this.reason;
-    	        controller.abort(
-    	          err instanceof AxiosError
-    	            ? err
-    	            : new CanceledError(err instanceof Error ? err.message : err)
-    	        );
-    	      }
-    	    };
+    	  signals = signals ? signals.filter(Boolean) : [];
 
-    	    let timer =
-    	      timeout &&
-    	      setTimeout(() => {
-    	        timer = null;
-    	        onabort(new AxiosError(`timeout of ${timeout}ms exceeded`, AxiosError.ETIMEDOUT));
-    	      }, timeout);
-
-    	    const unsubscribe = () => {
-    	      if (signals) {
-    	        timer && clearTimeout(timer);
-    	        timer = null;
-    	        signals.forEach((signal) => {
-    	          signal.unsubscribe
-    	            ? signal.unsubscribe(onabort)
-    	            : signal.removeEventListener('abort', onabort);
-    	        });
-    	        signals = null;
-    	      }
-    	    };
+    	  if (!timeout && !signals.length) {
+    	    return;
+    	  }
 
-    	    signals.forEach((signal) => signal.addEventListener('abort', onabort));
+    	  const controller = new AbortController();
 
-    	    const { signal } = controller;
+    	  let aborted = false;
 
-    	    signal.unsubscribe = () => utils$1.asap(unsubscribe);
+    	  const onabort = function (reason) {
+    	    if (!aborted) {
+    	      aborted = true;
+    	      unsubscribe();
+    	      const err = reason instanceof Error ? reason : this.reason;
+    	      controller.abort(
+    	        err instanceof AxiosError
+    	          ? err
+    	          : new CanceledError(err instanceof Error ? err.message : err)
+    	      );
+    	    }
+    	  };
 
-    	    return signal;
-    	  }
+    	  let timer =
+    	    timeout &&
+    	    setTimeout(() => {
+    	      timer = null;
+    	      onabort(new AxiosError(`timeout of ${timeout}ms exceeded`, AxiosError.ETIMEDOUT));
+    	    }, timeout);
+
+    	  const unsubscribe = () => {
+    	    if (!signals) { return; }
+    	    timer && clearTimeout(timer);
+    	    timer = null;
+    	    signals.forEach((signal) => {
+    	      signal.unsubscribe
+    	        ? signal.unsubscribe(onabort)
+    	        : signal.removeEventListener('abort', onabort);
+    	    });
+    	    signals = null;
+    	  };
+
+    	  signals.forEach((signal) => signal.addEventListener('abort', onabort));
+
+    	  const { signal } = controller;
+
+    	  signal.unsubscribe = () => utils$1.asap(unsubscribe);
+
+    	  return signal;
     	};
 
     	const streamChunk = function* (chunk, chunkSize) {
@@ -8542,16 +8995,146 @@ var contentfulManagement = (function (exports) {
     	  );
     	};
 
+    	/**
+    	 * Estimate decoded byte length of a data:// URL *without* allocating large buffers.
+    	 * - For base64: compute exact decoded size using length and padding;
+    	 *               handle %XX at the character-count level (no string allocation).
+    	 * - For non-base64: compute the exact percent-decoded UTF-8 byte length.
+    	 *
+    	 * @param {string} url
+    	 * @returns {number}
+    	 */
+    	const isHexDigit = (charCode) =>
+    	  (charCode >= 48 && charCode <= 57) ||
+    	  (charCode >= 65 && charCode <= 70) ||
+    	  (charCode >= 97 && charCode <= 102);
+
+    	const isPercentEncodedByte = (str, i, len) =>
+    	  i + 2 < len && isHexDigit(str.charCodeAt(i + 1)) && isHexDigit(str.charCodeAt(i + 2));
+
+    	function estimateDataURLDecodedBytes(url) {
+    	  if (!url || typeof url !== 'string') return 0;
+    	  if (!url.startsWith('data:')) return 0;
+
+    	  const comma = url.indexOf(',');
+    	  if (comma < 0) return 0;
+
+    	  const meta = url.slice(5, comma);
+    	  const body = url.slice(comma + 1);
+    	  const isBase64 = /;base64/i.test(meta);
+
+    	  if (isBase64) {
+    	    let effectiveLen = body.length;
+    	    const len = body.length; // cache length
+
+    	    for (let i = 0; i < len; i++) {
+    	      if (body.charCodeAt(i) === 37 /* '%' */ && i + 2 < len) {
+    	        const a = body.charCodeAt(i + 1);
+    	        const b = body.charCodeAt(i + 2);
+    	        const isHex = isHexDigit(a) && isHexDigit(b);
+
+    	        if (isHex) {
+    	          effectiveLen -= 2;
+    	          i += 2;
+    	        }
+    	      }
+    	    }
+
+    	    let pad = 0;
+    	    let idx = len - 1;
+
+    	    const tailIsPct3D = (j) =>
+    	      j >= 2 &&
+    	      body.charCodeAt(j - 2) === 37 && // '%'
+    	      body.charCodeAt(j - 1) === 51 && // '3'
+    	      (body.charCodeAt(j) === 68 || body.charCodeAt(j) === 100); // 'D' or 'd'
+
+    	    if (idx >= 0) {
+    	      if (body.charCodeAt(idx) === 61 /* '=' */) {
+    	        pad++;
+    	        idx--;
+    	      } else if (tailIsPct3D(idx)) {
+    	        pad++;
+    	        idx -= 3;
+    	      }
+    	    }
+
+    	    if (pad === 1 && idx >= 0) {
+    	      if (body.charCodeAt(idx) === 61 /* '=' */) {
+    	        pad++;
+    	      } else if (tailIsPct3D(idx)) {
+    	        pad++;
+    	      }
+    	    }
+
+    	    const groups = Math.floor(effectiveLen / 4);
+    	    const bytes = groups * 3 - (pad || 0);
+    	    return bytes > 0 ? bytes : 0;
+    	  }
+
+    	  // Compute UTF-8 byte length directly from UTF-16 code units without allocating
+    	  // a byte buffer (TextEncoder.encode would defeat the DoS guard on large bodies).
+    	  // Valid %XX triplets count as one decoded byte; this matches the bytes that
+    	  // decodeURIComponent(body) would produce before Buffer re-encodes the string.
+    	  let bytes = 0;
+    	  for (let i = 0, len = body.length; i < len; i++) {
+    	    const c = body.charCodeAt(i);
+    	    if (c === 37 /* '%' */ && isPercentEncodedByte(body, i, len)) {
+    	      bytes += 1;
+    	      i += 2;
+    	    } else if (c < 0x80) {
+    	      bytes += 1;
+    	    } else if (c < 0x800) {
+    	      bytes += 2;
+    	    } else if (c >= 0xd800 && c <= 0xdbff && i + 1 < len) {
+    	      const next = body.charCodeAt(i + 1);
+    	      if (next >= 0xdc00 && next <= 0xdfff) {
+    	        bytes += 4;
+    	        i++;
+    	      } else {
+    	        bytes += 3;
+    	      }
+    	    } else {
+    	      bytes += 3;
+    	    }
+    	  }
+    	  return bytes;
+    	}
+
+    	const VERSION = "1.18.0";
+
     	const DEFAULT_CHUNK_SIZE = 64 * 1024;
 
     	const { isFunction } = utils$1;
 
-    	const globalFetchAPI = (({ Request, Response }) => ({
-    	  Request,
-    	  Response,
-    	}))(utils$1.global);
+    	/**
+    	 * Encode a UTF-8 string to a Latin-1 byte string for use with btoa().
+    	 * This is a modern replacement for the deprecated unescape(encodeURIComponent(str)) pattern.
+    	 *
+    	 * @param {string} str The string to encode
+    	 *
+    	 * @returns {string} UTF-8 bytes as a Latin-1 string
+    	 */
+    	const encodeUTF8 = (str) =>
+    	  encodeURIComponent(str).replace(/%([0-9A-F]{2})/gi, (_, hex) =>
+    	    String.fromCharCode(parseInt(hex, 16))
+    	  );
+
+    	// Node's WHATWG URL parser returns `username` and `password` percent-encoded.
+    	// Decode before composing the `auth` option so credentials such as
+    	// `my%40email.com:pass` are sent as `my@email.com:pass`. Falls back to the
+    	// original value for malformed input so a bad encoding never throws.
+    	const decodeURIComponentSafe = (value) => {
+    	  if (!utils$1.isString(value)) {
+    	    return value;
+    	  }
 
-    	const { ReadableStream: ReadableStream$1, TextEncoder } = utils$1.global;
+    	  try {
+    	    return decodeURIComponent(value);
+    	  } catch (error) {
+    	    return value;
+    	  }
+    	};
 
     	const test = (fn, ...args) => {
     	  try {
@@ -8561,12 +9144,30 @@ var contentfulManagement = (function (exports) {
     	  }
     	};
 
+    	const maybeWithAuthCredentials = (url) => {
+    	  const protocolIndex = url.indexOf('://');
+    	  let urlToCheck = url;
+    	  if (protocolIndex !== -1) {
+    	    urlToCheck = urlToCheck.slice(protocolIndex + 3);
+    	  }
+    	  return urlToCheck.includes('@') || urlToCheck.includes(':');
+    	};
+
     	const factory = (env) => {
+    	  const globalObject =
+    	    utils$1.global !== undefined && utils$1.global !== null
+    	      ? utils$1.global
+    	      : globalThis;
+    	  const { ReadableStream, TextEncoder } = globalObject;
+
     	  env = utils$1.merge.call(
     	    {
     	      skipUndefined: true,
     	    },
-    	    globalFetchAPI,
+    	    {
+    	      Request: globalObject.Request,
+    	      Response: globalObject.Response,
+    	    },
     	    env
     	  );
 
@@ -8579,7 +9180,7 @@ var contentfulManagement = (function (exports) {
     	    return false;
     	  }
 
-    	  const isReadableStreamSupported = isFetchSupported && isFunction(ReadableStream$1);
+    	  const isReadableStreamSupported = isFetchSupported && isFunction(ReadableStream);
 
     	  const encodeText =
     	    isFetchSupported &&
@@ -8596,18 +9197,20 @@ var contentfulManagement = (function (exports) {
     	    test(() => {
     	      let duplexAccessed = false;
 
-    	      const body = new ReadableStream$1();
-
-    	      const hasContentType = new Request(platform.origin, {
-    	        body,
+    	      const request = new Request(platform.origin, {
+    	        body: new ReadableStream(),
     	        method: 'POST',
     	        get duplex() {
     	          duplexAccessed = true;
     	          return 'half';
     	        },
-    	      }).headers.has('Content-Type');
+    	      });
 
-    	      body.cancel();
+    	      const hasContentType = request.headers.has('Content-Type');
+
+    	      if (request.body != null) {
+    	        request.body.cancel();
+    	      }
 
     	      return duplexAccessed && !hasContentType;
     	    });
@@ -8691,8 +9294,14 @@ var contentfulManagement = (function (exports) {
     	      headers,
     	      withCredentials = 'same-origin',
     	      fetchOptions,
+    	      maxContentLength,
+    	      maxBodyLength,
     	    } = resolveConfig(config);
 
+    	    const hasMaxContentLength = utils$1.isNumber(maxContentLength) && maxContentLength > -1;
+    	    const hasMaxBodyLength = utils$1.isNumber(maxBodyLength) && maxBodyLength > -1;
+    	    const own = (key) => (utils$1.hasOwnProp(config, key) ? config[key] : undefined);
+
     	    let _fetch = envFetch || fetch;
 
     	    responseType = responseType ? (responseType + '').toLowerCase() : 'text';
@@ -8713,34 +9322,166 @@ var contentfulManagement = (function (exports) {
 
     	    let requestContentLength;
 
+    	    // AxiosError we raise while the request body is being streamed. Captured
+    	    // by identity so the catch block can surface it directly, regardless of
+    	    // how the runtime wraps the resulting fetch rejection (undici exposes it
+    	    // as `err.cause`; some browsers drop the original error entirely).
+    	    let pendingBodyError = null;
+
+    	    const maxBodyLengthError = () =>
+    	      new AxiosError(
+    	        'Request body larger than maxBodyLength limit',
+    	        AxiosError.ERR_BAD_REQUEST,
+    	        config,
+    	        request
+    	      );
+
     	    try {
+    	      // HTTP basic authentication
+    	      let auth = undefined;
+    	      const configAuth = own('auth');
+
+    	      if (configAuth) {
+    	        const username = utils$1.getSafeProp(configAuth, 'username') || '';
+    	        const password = utils$1.getSafeProp(configAuth, 'password') || '';
+    	        auth = {
+    	          username,
+    	          password
+    	        };
+    	      }
+
+    	      if (maybeWithAuthCredentials(url)) {
+    	        const parsedURL = new URL(url, platform.origin);
+
+    	        if (!auth && (parsedURL.username || parsedURL.password)) {
+    	          const urlUsername = decodeURIComponentSafe(parsedURL.username);
+    	          const urlPassword = decodeURIComponentSafe(parsedURL.password);
+    	          auth = {
+    	            username: urlUsername,
+    	            password: urlPassword
+    	          };
+    	        }
+
+    	        if (parsedURL.username || parsedURL.password) {
+    	          parsedURL.username = '';
+    	          parsedURL.password = '';
+    	          url = parsedURL.href;
+    	        }
+    	      }
+
+    	      if (auth) {
+    	        headers.delete('authorization');
+    	        headers.set(
+    	          'Authorization',
+    	          'Basic ' + btoa(encodeUTF8((auth.username || '') + ':' + (auth.password || '')))
+    	        );
+    	      }
+
+    	      // Enforce maxContentLength for data: URLs up-front so we never materialize
+    	      // an oversized payload. The HTTP adapter applies the same check (see http.js
+    	      // "if (protocol === 'data:')" branch).
+    	      if (hasMaxContentLength && typeof url === 'string' && url.startsWith('data:')) {
+    	        const estimated = estimateDataURLDecodedBytes(url);
+    	        if (estimated > maxContentLength) {
+    	          throw new AxiosError(
+    	            'maxContentLength size of ' + maxContentLength + ' exceeded',
+    	            AxiosError.ERR_BAD_RESPONSE,
+    	            config,
+    	            request
+    	          );
+    	        }
+    	      }
+
+    	      // Enforce maxBodyLength against known-size bodies before dispatch using
+    	      // the body's *actual* size — never a caller-declared Content-Length,
+    	      // which could under-report to slip an oversized body past the check.
+    	      // Unknown-size streams return undefined here and are counted per-chunk
+    	      // below as fetch consumes them.
+    	      if (hasMaxBodyLength && method !== 'get' && method !== 'head') {
+    	        const outboundLength = await getBodyLength(data);
+    	        if (typeof outboundLength === 'number' && isFinite(outboundLength)) {
+    	          requestContentLength = outboundLength;
+    	          if (outboundLength > maxBodyLength) {
+    	            throw maxBodyLengthError();
+    	          }
+    	        }
+    	      }
+
+    	      // A streamed body under maxBodyLength must be counted as fetch consumes
+    	      // it; its size is never trusted from a caller-declared Content-Length.
+    	      const mustEnforceStreamBody =
+    	        hasMaxBodyLength && (utils$1.isReadableStream(data) || utils$1.isStream(data));
+
+    	      const trackRequestStream = (stream, onProgress, flush) =>
+    	        trackStream(
+    	          stream,
+    	          DEFAULT_CHUNK_SIZE,
+    	          (loadedBytes) => {
+    	            if (hasMaxBodyLength && loadedBytes > maxBodyLength) {
+    	              throw (pendingBodyError = maxBodyLengthError());
+    	            }
+    	            onProgress && onProgress(loadedBytes);
+    	          },
+    	          flush
+    	        );
+
     	      if (
-    	        onUploadProgress &&
     	        supportsRequestStream &&
     	        method !== 'get' &&
     	        method !== 'head' &&
-    	        (requestContentLength = await resolveBodyLength(headers, data)) !== 0
+    	        (onUploadProgress || mustEnforceStreamBody)
     	      ) {
-    	        let _request = new Request(url, {
-    	          method: 'POST',
-    	          body: data,
-    	          duplex: 'half',
-    	        });
+    	        requestContentLength =
+    	          requestContentLength == null ? await resolveBodyLength(headers, data) : requestContentLength;
+
+    	        // A declared length of 0 is only trusted to skip the wrap when we are
+    	        // not enforcing a stream limit (which must not rely on that header).
+    	        if (requestContentLength !== 0 || mustEnforceStreamBody) {
+    	          let _request = new Request(url, {
+    	            method: 'POST',
+    	            body: data,
+    	            duplex: 'half',
+    	          });
 
-    	        let contentTypeHeader;
+    	          let contentTypeHeader;
 
-    	        if (utils$1.isFormData(data) && (contentTypeHeader = _request.headers.get('content-type'))) {
-    	          headers.setContentType(contentTypeHeader);
-    	        }
+    	          if (utils$1.isFormData(data) && (contentTypeHeader = _request.headers.get('content-type'))) {
+    	            headers.setContentType(contentTypeHeader);
+    	          }
 
-    	        if (_request.body) {
-    	          const [onProgress, flush] = progressEventDecorator(
-    	            requestContentLength,
-    	            progressEventReducer(asyncDecorator(onUploadProgress))
-    	          );
+    	          if (_request.body) {
+    	            const [onProgress, flush] =
+    	              (onUploadProgress &&
+    	                progressEventDecorator(
+    	                  requestContentLength,
+    	                  progressEventReducer(asyncDecorator(onUploadProgress))
+    	                )) ||
+    	              [];
 
-    	          data = trackStream(_request.body, DEFAULT_CHUNK_SIZE, onProgress, flush);
+    	            data = trackRequestStream(_request.body, onProgress, flush);
+    	          }
     	        }
+    	      } else if (
+    	        mustEnforceStreamBody &&
+    	        !isRequestSupported &&
+    	        isReadableStreamSupported &&
+    	        method !== 'get' &&
+    	        method !== 'head'
+    	      ) {
+    	        data = trackRequestStream(data);
+    	      } else if (
+    	        mustEnforceStreamBody &&
+    	        isRequestSupported &&
+    	        !supportsRequestStream &&
+    	        method !== 'get' &&
+    	        method !== 'head'
+    	      ) {
+    	        throw new AxiosError(
+    	          'Stream request bodies are not supported by the current fetch implementation',
+    	          AxiosError.ERR_NOT_SUPPORT,
+    	          config,
+    	          request
+    	        );
     	      }
 
     	      if (!utils$1.isString(withCredentials)) {
@@ -8751,11 +9492,27 @@ var contentfulManagement = (function (exports) {
     	      // see https://github.com/cloudflare/workerd/issues/902
     	      const isCredentialsSupported = isRequestSupported && 'credentials' in Request.prototype;
 
+    	      // If data is FormData and Content-Type is multipart/form-data without boundary,
+    	      // delete it so fetch can set it correctly with the boundary
+    	      if (utils$1.isFormData(data)) {
+    	        const contentType = headers.getContentType();
+    	        if (
+    	          contentType &&
+    	          /^multipart\/form-data/i.test(contentType) &&
+    	          !/boundary=/i.test(contentType)
+    	        ) {
+    	          headers.delete('content-type');
+    	        }
+    	      }
+
+    	      // Set User-Agent header if not already set (fetch defaults to 'node' in Node.js)
+    	      headers.set('User-Agent', 'axios/' + VERSION, false);
+
     	      const resolvedOptions = {
     	        ...fetchOptions,
     	        signal: composedSignal,
     	        method: method.toUpperCase(),
-    	        headers: headers.normalize().toJSON(),
+    	        headers: toByteStringHeaderObject(headers.normalize()),
     	        body: data,
     	        duplex: 'half',
     	        credentials: isCredentialsSupported ? withCredentials : undefined,
@@ -8767,17 +9524,37 @@ var contentfulManagement = (function (exports) {
     	        ? _fetch(request, fetchOptions)
     	        : _fetch(url, resolvedOptions));
 
+    	      const responseHeaders = AxiosHeaders.from(response.headers);
+
+    	      // Cheap pre-check: if the server honestly declares a content-length that
+    	      // already exceeds the cap, reject before we start streaming.
+    	      if (hasMaxContentLength) {
+    	        const declaredLength = utils$1.toFiniteNumber(responseHeaders.getContentLength());
+    	        if (declaredLength != null && declaredLength > maxContentLength) {
+    	          throw new AxiosError(
+    	            'maxContentLength size of ' + maxContentLength + ' exceeded',
+    	            AxiosError.ERR_BAD_RESPONSE,
+    	            config,
+    	            request
+    	          );
+    	        }
+    	      }
+
     	      const isStreamResponse =
     	        supportsResponseStream && (responseType === 'stream' || responseType === 'response');
 
-    	      if (supportsResponseStream && (onDownloadProgress || (isStreamResponse && unsubscribe))) {
+    	      if (
+    	        supportsResponseStream &&
+    	        response.body &&
+    	        (onDownloadProgress || hasMaxContentLength || (isStreamResponse && unsubscribe))
+    	      ) {
     	        const options = {};
 
     	        ['status', 'statusText', 'headers'].forEach((prop) => {
     	          options[prop] = response[prop];
     	        });
 
-    	        const responseContentLength = utils$1.toFiniteNumber(response.headers.get('content-length'));
+    	        const responseContentLength = utils$1.toFiniteNumber(responseHeaders.getContentLength());
 
     	        const [onProgress, flush] =
     	          (onDownloadProgress &&
@@ -8787,8 +9564,24 @@ var contentfulManagement = (function (exports) {
     	            )) ||
     	          [];
 
+    	        let bytesRead = 0;
+    	        const onChunkProgress = (loadedBytes) => {
+    	          if (hasMaxContentLength) {
+    	            bytesRead = loadedBytes;
+    	            if (bytesRead > maxContentLength) {
+    	              throw new AxiosError(
+    	                'maxContentLength size of ' + maxContentLength + ' exceeded',
+    	                AxiosError.ERR_BAD_RESPONSE,
+    	                config,
+    	                request
+    	              );
+    	            }
+    	          }
+    	          onProgress && onProgress(loadedBytes);
+    	        };
+
     	        response = new Response(
-    	          trackStream(response.body, DEFAULT_CHUNK_SIZE, onProgress, () => {
+    	          trackStream(response.body, DEFAULT_CHUNK_SIZE, onChunkProgress, () => {
     	            flush && flush();
     	            unsubscribe && unsubscribe();
     	          }),
@@ -8803,6 +9596,33 @@ var contentfulManagement = (function (exports) {
     	        config
     	      );
 
+    	      // Fallback enforcement for environments without ReadableStream support
+    	      // (legacy runtimes). Detect materialized size from typed output; skip
+    	      // streams/Response passthrough since the user will read those themselves.
+    	      if (hasMaxContentLength && !supportsResponseStream && !isStreamResponse) {
+    	        let materializedSize;
+    	        if (responseData != null) {
+    	          if (typeof responseData.byteLength === 'number') {
+    	            materializedSize = responseData.byteLength;
+    	          } else if (typeof responseData.size === 'number') {
+    	            materializedSize = responseData.size;
+    	          } else if (typeof responseData === 'string') {
+    	            materializedSize =
+    	              typeof TextEncoder === 'function'
+    	                ? new TextEncoder().encode(responseData).byteLength
+    	                : responseData.length;
+    	          }
+    	        }
+    	        if (typeof materializedSize === 'number' && materializedSize > maxContentLength) {
+    	          throw new AxiosError(
+    	            'maxContentLength size of ' + maxContentLength + ' exceeded',
+    	            AxiosError.ERR_BAD_RESPONSE,
+    	            config,
+    	            request
+    	          );
+    	        }
+    	      }
+
     	      !isStreamResponse && unsubscribe && unsubscribe();
 
     	      return await new Promise((resolve, reject) => {
@@ -8818,6 +9638,34 @@ var contentfulManagement = (function (exports) {
     	    } catch (err) {
     	      unsubscribe && unsubscribe();
 
+    	      // Safari can surface fetch aborts as a DOMException-like object whose
+    	      // branded getters throw. Prefer our composed signal reason before reading
+    	      // the caught error, preserving timeout vs cancellation semantics.
+    	      if (composedSignal && composedSignal.aborted && composedSignal.reason instanceof AxiosError) {
+    	        const canceledError = composedSignal.reason;
+    	        canceledError.config = config;
+    	        request && (canceledError.request = request);
+    	        err !== canceledError && (canceledError.cause = err);
+    	        throw canceledError;
+    	      }
+
+    	      // Surface a maxBodyLength violation we raised while the request body was
+    	      // being streamed. Matching by identity (rather than reading
+    	      // `err.cause.isAxiosError`) keeps the error deterministic across runtimes
+    	      // and avoids both prototype-pollution reads and mis-attributing a foreign
+    	      // AxiosError that merely happened to land in `err.cause`.
+    	      if (pendingBodyError) {
+    	        request && !pendingBodyError.request && (pendingBodyError.request = request);
+    	        throw pendingBodyError;
+    	      }
+
+    	      // Re-throw AxiosErrors we raised synchronously (data: URL / content-length
+    	      // pre-checks, response size enforcement) without re-wrapping them.
+    	      if (err instanceof AxiosError) {
+    	        request && !err.request && (err.request = request);
+    	        throw err;
+    	      }
+
     	      if (err && err.name === 'TypeError' && /Load failed|fetch/i.test(err.message)) {
     	        throw Object.assign(
     	          new AxiosError(
@@ -8886,11 +9734,13 @@ var contentfulManagement = (function (exports) {
     	utils$1.forEach(knownAdapters, (fn, value) => {
     	  if (fn) {
     	    try {
-    	      Object.defineProperty(fn, 'name', { value });
+    	      // Null-proto descriptors so a polluted Object.prototype.get cannot turn
+    	      // these data descriptors into accessor descriptors on the way in.
+    	      Object.defineProperty(fn, 'name', { __proto__: null, value });
     	    } catch (e) {
     	      // eslint-disable-next-line no-empty
     	    }
-    	    Object.defineProperty(fn, 'adapterName', { value });
+    	    Object.defineProperty(fn, 'adapterName', { __proto__: null, value });
     	  }
     	});
 
@@ -9032,8 +9882,15 @@ var contentfulManagement = (function (exports) {
     	    function onAdapterResolution(response) {
     	      throwIfCancellationRequested(config);
 
-    	      // Transform response data
-    	      response.data = transformData.call(config, config.transformResponse, response);
+    	      // Expose the current response on config so that transformResponse can
+    	      // attach it to any AxiosError it throws (e.g. on JSON parse failure).
+    	      // We clean it up afterwards to avoid polluting the config object.
+    	      config.response = response;
+    	      try {
+    	        response.data = transformData.call(config, config.transformResponse, response);
+    	      } finally {
+    	        delete config.response;
+    	      }
 
     	      response.headers = AxiosHeaders.from(response.headers);
 
@@ -9045,11 +9902,16 @@ var contentfulManagement = (function (exports) {
 
     	        // Transform response data
     	        if (reason && reason.response) {
-    	          reason.response.data = transformData.call(
-    	            config,
-    	            config.transformResponse,
-    	            reason.response
-    	          );
+    	          config.response = reason.response;
+    	          try {
+    	            reason.response.data = transformData.call(
+    	              config,
+    	              config.transformResponse,
+    	              reason.response
+    	            );
+    	          } finally {
+    	            delete config.response;
+    	          }
     	          reason.response.headers = AxiosHeaders.from(reason.response.headers);
     	        }
     	      }
@@ -9059,8 +9921,6 @@ var contentfulManagement = (function (exports) {
     	  );
     	}
 
-    	const VERSION = "1.15.0";
-
     	const validators$1 = {};
 
     	// eslint-disable-next-line func-names
@@ -9144,7 +10004,9 @@ var contentfulManagement = (function (exports) {
     	  let i = keys.length;
     	  while (i-- > 0) {
     	    const opt = keys[i];
-    	    const validator = schema[opt];
+    	    // Use hasOwnProperty so a polluted Object.prototype.<opt> cannot supply
+    	    // a non-function validator and cause a TypeError.
+    	    const validator = Object.prototype.hasOwnProperty.call(schema, opt) ? schema[opt] : undefined;
     	    if (validator) {
     	      const value = options[opt];
     	      const result = value === undefined || validator(value, opt, options);
@@ -9258,6 +10120,8 @@ var contentfulManagement = (function (exports) {
     	          forcedJSONParsing: validators.transitional(validators.boolean),
     	          clarifyTimeoutError: validators.transitional(validators.boolean),
     	          legacyInterceptorReqResOrdering: validators.transitional(validators.boolean),
+    	          advertiseZstdAcceptEncoding: validators.transitional(validators.boolean),
+    	          validateStatusUndefinedResolves: validators.transitional(validators.boolean),
     	        },
     	        false
     	      );
@@ -9303,7 +10167,7 @@ var contentfulManagement = (function (exports) {
     	    let contextHeaders = headers && utils$1.merge(headers.common, headers[config.method]);
 
     	    headers &&
-    	      utils$1.forEach(['delete', 'get', 'head', 'post', 'put', 'patch', 'common'], (method) => {
+    	      utils$1.forEach(['delete', 'get', 'head', 'post', 'put', 'patch', 'query', 'common'], (method) => {
     	        delete headers[method];
     	      });
 
@@ -9387,7 +10251,7 @@ var contentfulManagement = (function (exports) {
 
     	  getUri(config) {
     	    config = mergeConfig(this.defaults, config);
-    	    const fullPath = buildFullPath(config.baseURL, config.url, config.allowAbsoluteUrls);
+    	    const fullPath = buildFullPath(config.baseURL, config.url, config.allowAbsoluteUrls, config);
     	    return buildURL(fullPath, config.params, config.paramsSerializer);
     	  }
     	}
@@ -9400,13 +10264,13 @@ var contentfulManagement = (function (exports) {
     	      mergeConfig(config || {}, {
     	        method,
     	        url,
-    	        data: (config || {}).data,
+    	        data: config && utils$1.hasOwnProp(config, 'data') ? config.data : undefined,
     	      })
     	    );
     	  };
     	});
 
-    	utils$1.forEach(['post', 'put', 'patch'], function forEachMethodWithData(method) {
+    	utils$1.forEach(['post', 'put', 'patch', 'query'], function forEachMethodWithData(method) {
     	  function generateHTTPMethod(isForm) {
     	    return function httpMethod(url, data, config) {
     	      return this.request(
@@ -9426,7 +10290,11 @@ var contentfulManagement = (function (exports) {
 
     	  Axios.prototype[method] = generateHTTPMethod();
 
-    	  Axios.prototype[method + 'Form'] = generateHTTPMethod(true);
+    	  // QUERY is a safe/idempotent read method; multipart form bodies don't fit
+    	  // its semantics, so no queryForm shorthand is generated.
+    	  if (method !== 'query') {
+    	    Axios.prototype[method + 'Form'] = generateHTTPMethod(true);
+    	  }
     	});
 
     	/**
@@ -11188,9 +12056,9 @@ var contentfulManagement = (function (exports) {
     const BODY_FORMAT_HEADER = 'x-contentful-comment-body-format';
     const PARENT_ENTITY_REFERENCE_HEADER = 'x-contentful-parent-entity-reference';
     const PARENT_COMMENT_ID_HEADER = 'x-contentful-parent-id';
-    const getSpaceEnvBaseUrl = (params) => `/spaces/${params.spaceId}/environments/${params.environmentId}`;
+    const getSpaceEnvBaseUrl$1 = (params) => `/spaces/${params.spaceId}/environments/${params.environmentId}`;
     const getEntityCommentUrl = (params) => `${getEntityBaseUrl(params)}/${params.commentId}`;
-    function getParentPlural(parentEntityType) {
+    function getParentPlural$1(parentEntityType) {
         switch (parentEntityType) {
             case 'ContentType':
                 return 'content_types';
@@ -11198,11 +12066,19 @@ var contentfulManagement = (function (exports) {
                 return 'entries';
             case 'Workflow':
                 return 'workflows';
+            case 'Experience':
+                return 'experiences';
+            case 'Fragment':
+                return 'fragments';
+            case 'ComponentType':
+                return 'component_types';
+            case 'Template':
+                return 'templates';
         }
     }
     /**
-     * Comments can be added to a content type, an entry, and a workflow. Workflow comments requires a version
-     * to be set as part of the URL path. Workflow comments only support `create` (with
+     * Comments can be added to a content type, an entry, a workflow, or ExO entities. Workflow comments requires a version
+     * to be set as part of the URL path for versioned operations. Workflow comments only support `create` (with
      * versionized URL) and `getMany` (without version). The API might support more methods
      * in the future with new use cases being discovered.
      */
@@ -11216,9 +12092,9 @@ var contentfulManagement = (function (exports) {
             }
             : paramsOrg;
         const { parentEntityId, parentEntityType } = params;
-        const parentPlural = getParentPlural(parentEntityType);
+        const parentPlural = getParentPlural$1(parentEntityType);
         const versionPath = 'parentEntityVersion' in params ? `/versions/${params.parentEntityVersion}` : '';
-        return `${getSpaceEnvBaseUrl(params)}/${parentPlural}/${parentEntityId}${versionPath}/comments`;
+        return `${getSpaceEnvBaseUrl$1(params)}/${parentPlural}/${parentEntityId}${versionPath}/comments`;
     };
     const get$J = (http, params) => get$14(http, getEntityCommentUrl(params), {
         headers: params.bodyFormat === 'rich-text'
@@ -12859,7 +13735,34 @@ var contentfulManagement = (function (exports) {
         update: update$9
     });
 
-    const getBaseUrl$8 = (params) => `/spaces/${params.spaceId}/environments/${params.environmentId}/entries/${params.entryId}/tasks`;
+    const getSpaceEnvBaseUrl = (params) => `/spaces/${params.spaceId}/environments/${params.environmentId}`;
+    function getParentPlural(parentEntityType) {
+        switch (parentEntityType) {
+            case 'Entry':
+                return 'entries';
+            case 'Experience':
+                return 'experiences';
+            case 'Fragment':
+                return 'fragments';
+            case 'Template':
+                return 'templates';
+            case 'ComponentType':
+                return 'component_types';
+        }
+    }
+    const normalizeTaskParentParams = (paramsOrg) => 'entryId' in paramsOrg
+        ? {
+            spaceId: paramsOrg.spaceId,
+            environmentId: paramsOrg.environmentId,
+            parentEntityType: 'Entry',
+            parentEntityId: paramsOrg.entryId,
+        }
+        : paramsOrg;
+    const getBaseUrl$8 = (paramsOrg) => {
+        const params = normalizeTaskParentParams(paramsOrg);
+        const parentPlural = getParentPlural(params.parentEntityType);
+        return `${getSpaceEnvBaseUrl(params)}/${parentPlural}/${params.parentEntityId}/tasks`;
+    };
     const getTaskUrl = (params) => `${getBaseUrl$8(params)}/${params.taskId}`;
     const get$8 = (http, params) => get$14(http, getTaskUrl(params));
     const getMany$6 = (http, params) => get$14(http, getBaseUrl$8(params), {
@@ -14204,12 +15107,16 @@ var contentfulManagement = (function (exports) {
      * @internal
      */
     function createTaskApi(makeRequest) {
-        const getParams = (task) => ({
-            spaceId: task.sys.space.sys.id,
-            environmentId: task.sys.environment.sys.id,
-            entryId: task.sys.parentEntity.sys.id,
-            taskId: task.sys.id,
-        });
+        const getParams = (task) => {
+            const parentEntity = task.sys.parentEntity;
+            return {
+                spaceId: task.sys.space.sys.id,
+                environmentId: task.sys.environment.sys.id,
+                parentEntityType: parentEntity.sys.linkType,
+                parentEntityId: parentEntity.sys.id,
+                taskId: task.sys.id,
+            };
+        };
         return {
             update: function () {
                 const raw = this.toPlainObject();
@@ -14259,12 +15166,16 @@ var contentfulManagement = (function (exports) {
      * @internal
      */
     function createCommentApi(makeRequest) {
-        const getParams = (comment) => ({
-            spaceId: comment.sys.space.sys.id,
-            environmentId: comment.sys.environment.sys.id,
-            entryId: comment.sys.parentEntity.sys.id,
-            commentId: comment.sys.id,
-        });
+        const getParams = (comment) => {
+            const parentEntity = comment.sys.parentEntity;
+            return {
+                spaceId: comment.sys.space.sys.id,
+                environmentId: comment.sys.environment.sys.id,
+                commentId: comment.sys.id,
+                parentEntityType: parentEntity.sys.linkType,
+                parentEntityId: parentEntity.sys.id,
+            };
+        };
         return {
             update: async function () {
                 const raw = this.toPlainObject();