[Snyk] Security upgrade axios from 0.19.0 to 0.32.0

[appfire-developer]

Snyk has created this PR to fix 2 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

• package.json
• package-lock.json

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Insertion of Sensitive Information Into Sent Data SNYK-JS-AXIOS-17172681	828
	Regular Expression Denial of Service (ReDoS) SNYK-JS-AXIOS-17172532	738

Breaking Change Risk

Notice: This assessment is enhanced by AI.

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)

[appfire-developer]

The upgrade from axios v0.19.0 to a version beyond 1.0.0 (the user-specified v0.32.0 does not exist; the library jumped from v0.27.2 to v1.0.0) is a major update with significant breaking changes. Code modifications are required.

Key Breaking Changes:

• Request Cancellation: The CancelToken API, used in v0.19.0, was deprecated in v0.22.0 and completely removed in v1.0.0. It has been replaced by the web-standard AbortController. Any code using CancelToken will break and must be migrated to use AbortController.
• Error Handling: The structure of error objects was refactored. The axios.isAxiosError() type guard is now the recommended way to identify and handle errors thrown by axios.
• FormData Handling: Starting from v0.27.0, there were significant changes to how FormData is handled, including a new toFormData helper and changes to Content-Type header behavior.
• Buggy Initial v1.0.0 Release: The initial v1.0.0 release had critical bugs, such as issues with URL query parameters, which broke many applications. While these have been fixed in subsequent patches, it highlights the magnitude of the changes.

Recommendation:
This is a high-risk upgrade that requires significant developer effort. Do not merge without a dedicated refactoring effort.

1. Search the codebase for all instances of CancelToken and cancelToken.
2. Refactor all request cancellation logic to use the AbortController API.
3. Review all error handling logic to align with the new AxiosError structure and use axios.isAxiosError().
4. Thoroughly test all API requests, paying special attention to request cancellation, error handling, and file uploads/FormData.

Source: Axios GitHub Releases, Axios v1.0.0 Upgrade Guide

Notice 🤖: This content was augmented using artificial intelligence. AI-generated content may contain errors and should be reviewed for accuracy before use.