Repository navigation
refactor: replace axios with native fetch API - #67
Merged
Merged
Conversation
Remove axios dependency and use the built-in fetch API for all HTTP requests in the auth module. This eliminates 23 transitive packages. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
There was a problem hiding this comment.
Cursor Bugbot has reviewed your changes and found 1 potential issue.
❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.
Reviewed by Cursor Bugbot for commit 54fb3a7. Configure here.
Remove @semantic-release/git and @semantic-release/changelog from devDependencies — neither is listed in the release.plugins config. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Check tokenSet.refreshToken is defined before using it, since URLSearchParams converts undefined to the literal string "undefined". Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Running npm uninstall on macOS pruned the lockfile entries for non-local platform native binaries (rolldown linux/win bindings), breaking npm ci on Linux CI runners. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
efirs
approved these changes
Apr 6, 2026
Contributor
|
🎉 This PR is included in version 2.16.0 🎉 The release is available on: Your semantic-release bot 📦🚀 |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.

Summary
axiosusage insrc/auth/client.tsandsrc/auth/fly.tswith the nativefetchAPIaxiosdependency, eliminating 23 transitive packagesURLSearchParamsforapplication/x-www-form-urlencodedrequest bodiesresponse.okchecks instead ofaxios.isAxiosErrorTest plan
tigris logindevice flow works end-to-end🤖 Generated with Claude Code
Note
Medium Risk
Touches the CLI’s Auth0 device-flow and token refresh HTTP calls; behavior changes around request encoding and error handling could break login/refresh in subtle ways.
Overview
Replaces
axioswith nativefetchfor Auth0 calls insrc/auth/client.ts(device authorization, token polling, refresh) andsrc/auth/fly.ts(/userinfo).Requests now use
URLSearchParamsforapplication/x-www-form-urlencodedbodies and switch toresponse.ok/manual JSON parsing for error handling. Theaxiosdependency is removed frompackage.json.Reviewed by Cursor Bugbot for commit d6690f2. Bugbot is set up for automated code reviews on this repo. Configure here.