Skip to content

chore: release v0.31.0#10697

Merged
jasonsaayman merged 5 commits intov0.xfrom
release-v0x/version-0.31.0
Apr 12, 2026
Merged

chore: release v0.31.0#10697
jasonsaayman merged 5 commits intov0.xfrom
release-v0x/version-0.31.0

Conversation

@github-actions
Copy link
Copy Markdown
Contributor

@github-actions github-actions bot commented Apr 12, 2026

Automated version bump to v0.31.0.


Summary by cubic

Release axios v0.31.0 with aligned versioning, rebuilt bundles, safer header handling, and an updated release workflow. Test suite restored.

Description

  • Bump to 0.31.0 in package.json, package-lock.json, bower.json, and lib/env/data.js.
  • Rebuild dist/* and dist/esm/*:
    • Sanitize header values during request dispatch (remove invalid/control chars, trim boundary whitespace).
    • Safer isEmptyObject implementation.
  • CI: .github/workflows/release-branch.yml runs npm run preversion and npm run build when creating the release PR; ensures Bower versioning.

Testing

  • Tests restored in the repo.
  • Ensure coverage for:
    • Header value sanitization on dispatch.
    • Version consistency between lib/env/data.js and package.json.

Written for commit ffc9c1d. Summary will update on new commits.

@github-actions github-actions bot added commit::chore The PR is related to a chore priority::high A high priority issue type::automated-pr The PR has been created by an automation labels Apr 12, 2026
Copy link
Copy Markdown
Contributor

@cubic-dev-ai cubic-dev-ai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

No issues found across 3 files

Confidence score: 5/5

  • Automated review surfaced no issues in the provided summaries.
  • No files require special attention.

@jasonsaayman jasonsaayman self-assigned this Apr 12, 2026
Copy link
Copy Markdown
Contributor

@cubic-dev-ai cubic-dev-ai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

1 issue found across 11 files (changes from recent commits).

Prompt for AI agents (unresolved issues)

Check if these issues are valid — if so, understand the root cause of each and fix them. If appropriate, use sub-agents to investigate and fix each issue separately.


<file name="package.json">

<violation number="1" location="package.json:10">
P2: `preversion` no longer runs the test suite, so releases can proceed without test validation.</violation>
</file>

Reply with feedback, questions, or to request a fix. Tag @cubic-dev-ai to re-run a review.

Comment thread package.json Outdated
Co-authored-by: cubic-dev-ai[bot] <191113872+cubic-dev-ai[bot]@users.noreply.github.com>
@jasonsaayman jasonsaayman merged commit 5073eca into v0.x Apr 12, 2026
15 checks passed
@jasonsaayman jasonsaayman deleted the release-v0x/version-0.31.0 branch April 12, 2026 09:21
@VikramSingh1994
Copy link
Copy Markdown

VikramSingh1994 commented Apr 13, 2026

Hi @jasonsaayman ,
Thanks for update 0.x line.
Could you please scan and check once snyk report for this version.
https://security.snyk.io/package/npm/axios/0.31.0
Thanks.
ss_snyk

@jasonsaayman
Copy link
Copy Markdown
Member

Changes to the CVE already requested

@VikramSingh1994
Copy link
Copy Markdown

Thanks @jasonsaayman ,
Just checked, 1 Critical vulns seems fixed, 2 High is remaining now.
https://security.snyk.io/package/npm/axios/0.31.0

ss213212

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

commit::chore The PR is related to a chore priority::high A high priority issue type::automated-pr The PR has been created by an automation

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants