From 977999e3e54f08906bb108a0b82c91596cb27235 Mon Sep 17 00:00:00 2001 From: PrashantRaj18198 Date: Mon, 19 Oct 2026 13:03:14 +0530 Subject: [PATCH 1/2] chore(deps): bump axios to 1.20.0, override handlebars to 4.7.10 axios: GHSA-x97p-jq2g-jp4f, GHSA-mghh-pgcx-3jjj, GHSA-c29m-xwm3-cm6r, GHSA-542g-h47m-68v8, GHSA-m8m8-qj5v-23w3. handlebars: CVE-2026-106444/5/6 (dev-only). Co-Authored-By: Claude Fable 5.1 --- package-lock.json | 18 +++++++++--------- package.json | 5 +++-- 2 files changed, 12 insertions(+), 11 deletions(-) diff --git a/package-lock.json b/package-lock.json index 0e3e011..8218d7f 100644 --- a/package-lock.json +++ b/package-lock.json @@ -18,7 +18,7 @@ "@azure/storage-blob": "^12.33.0", "@google-cloud/storage": "^7.17.1", "@octokit/webhooks-types": "^7.6.1", - "axios": "^1.18.1", + "axios": "^1.20.0", "google-auth-library": "^9.15.1", "semver": "^7.7.2" }, @@ -1741,13 +1741,13 @@ "license": "MIT" }, "node_modules/axios": { - "version": "1.18.1", - "resolved": "https://registry.npmjs.org/axios/-/axios-1.18.1.tgz", - "integrity": "sha512-3nTvFlvpn9Zu/RkHUqtc7/+al4UpRW5az71ap5zccp6e8RAYEzhMTecX8Dz1wWDYrPpUoB1HAQEGEAEvUr7S9g==", + "version": "1.20.0", + "resolved": "https://registry.npmjs.org/axios/-/axios-1.20.0.tgz", + "integrity": "sha512-r8aOh8j9cGKpgQAqpzrUHnSIc6a59Y3Xf/cv8sy1DrHCkZHzQGEuoq1tARk6qSyDdtQGSDgpb9kFlruzPvrgwg==", "license": "MIT", "dependencies": { "follow-redirects": "^1.16.0", - "form-data": "^4.0.5", + "form-data": "^4.0.6", "https-proxy-agent": "^5.0.1", "proxy-from-env": "^2.1.0" } @@ -2965,13 +2965,13 @@ } }, "node_modules/handlebars": { - "version": "4.7.9", - "resolved": "https://registry.npmjs.org/handlebars/-/handlebars-4.7.9.tgz", - "integrity": "sha512-4E71E0rpOaQuJR2A3xDZ+GM1HyWYv1clR58tC8emQNeQe3RH7MAzSbat+V0wG78LQBo6m6bzSG/L4pBuCsgnUQ==", + "version": "4.7.10", + "resolved": "https://registry.npmjs.org/handlebars/-/handlebars-4.7.10.tgz", + "integrity": "sha512-P5VJMVM7qgBn6vjXMw8WG9uVI+ncf2pi72j4de4yz5ZULLj2RGqLYaKOYGsgyrViQ0tePOVlN1tDCCXXtFqXKg==", "dev": true, "license": "MIT", "dependencies": { - "minimist": "^1.2.5", + "minimist": "^1.2.8", "neo-async": "^2.6.2", "source-map": "^0.6.1", "wordwrap": "^1.0.0" diff --git a/package.json b/package.json index bd51e0d..8ef6877 100644 --- a/package.json +++ b/package.json @@ -56,7 +56,7 @@ "@azure/storage-blob": "^12.33.0", "@google-cloud/storage": "^7.17.1", "@octokit/webhooks-types": "^7.6.1", - "axios": "^1.18.1", + "axios": "^1.20.0", "google-auth-library": "^9.15.1", "semver": "^7.7.2" }, @@ -69,6 +69,7 @@ "typescript": "^5.9.3" }, "overrides": { - "uuid": "^11.1.1" + "uuid": "^11.1.1", + "handlebars": "^4.7.10" } } From 9736f0b2fa1be937287604ce4862ee2b4bd94f65 Mon Sep 17 00:00:00 2001 From: PrashantRaj18198 Date: Mon, 19 Oct 2026 13:05:16 +0530 Subject: [PATCH 2/2] fix(sdk): annotate createRequestFunction return type for axios 1.20 types TS2527 after the axios bump: inferred type referenced an inaccessible unique symbol. Co-Authored-By: Claude Fable 5.1 --- src/internal/warpcache-ts-sdk/common.ts | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/src/internal/warpcache-ts-sdk/common.ts b/src/internal/warpcache-ts-sdk/common.ts index 6e51f99..256fdb3 100644 --- a/src/internal/warpcache-ts-sdk/common.ts +++ b/src/internal/warpcache-ts-sdk/common.ts @@ -143,8 +143,8 @@ export const toPathString = function (url: URL) { * @export */ export const createRequestFunction = function (axiosArgs: RequestArgs, globalAxios: AxiosInstance, BASE_PATH: string, configuration?: Configuration) { - return >(axios: AxiosInstance = globalAxios, basePath: string = BASE_PATH) => { + return >(axios: AxiosInstance = globalAxios, basePath: string = BASE_PATH): Promise => { const axiosRequestArgs = {...axiosArgs.options, url: (axios.defaults.baseURL ? '' : configuration?.basePath ?? basePath) + axiosArgs.url}; - return axios.request(axiosRequestArgs); + return axios.request(axiosRequestArgs) as Promise; }; }