From 81be56abb55bf19100d17598f5d4b6550c3c59cd Mon Sep 17 00:00:00 2001 From: Tahier Hussain Date: Wed, 1 Apr 2026 10:33:58 +0530 Subject: [PATCH 1/2] fix: pin axios to exact version 1.8.4 to prevent supply chain attacks MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Removes the semver caret (^) to lock axios at version 1.8.4, preventing automatic upgrades to potentially compromised versions. 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude --- frontend/package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/frontend/package.json b/frontend/package.json index 8c4b027e..9e6109e2 100644 --- a/frontend/package.json +++ b/frontend/package.json @@ -14,7 +14,7 @@ "@testing-library/user-event": "^13.5.0", "ansi-to-html": "^0.7.2", "antd": "^5.24.2", - "axios": "^1.3.2", + "axios": "1.8.4", "cronstrue": "^3.0.0", "crypto-js": "^4.2.0", "dagre": "^0.8.5", From ed2460c45192532d3fefb1425a5bd0917825132c Mon Sep 17 00:00:00 2001 From: Tahier Hussain Date: Wed, 1 Apr 2026 10:46:05 +0530 Subject: [PATCH 2/2] chore: update package-lock.json after pinning axios version MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude --- frontend/package-lock.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/frontend/package-lock.json b/frontend/package-lock.json index 01ea59ef..969172de 100644 --- a/frontend/package-lock.json +++ b/frontend/package-lock.json @@ -19,7 +19,7 @@ "@testing-library/user-event": "^13.5.0", "ansi-to-html": "^0.7.2", "antd": "^5.24.2", - "axios": "^1.3.2", + "axios": "1.8.4", "cronstrue": "^3.0.0", "crypto-js": "^4.2.0", "dagre": "^0.8.5",