[Snyk] Security upgrade axios from 0.19.0 to 0.33.0

[appfire-developer]

Snyk has created this PR to fix 3 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

• package.json
• package-lock.json

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Uncontrolled Recursion SNYK-JS-AXIOS-18060730	738
	Prototype Pollution SNYK-JS-AXIOS-18065349	708
	Prototype Pollution SNYK-JS-AXIOS-18065355	708

Breaking Change Risk

Notice: This assessment is enhanced by AI.

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Uncontrolled Recursion
🦉 Prototype Pollution

[appfire-developer]

This is a major upgrade from a very old version of axios to a non-existent version. The 0.x series stopped at v0.27.2 and the latest stable version is on the 1.x line. This analysis assumes the intent is to upgrade to a modern, stable version and covers the significant breaking changes between v0.19.0 and v1.x.

High-Impact Breaking Changes:

• Promise Handling (v0.20.0+): The helper methods axios.all and axios.spread have been removed. Code must be refactored to use the standard Promise.all() syntax.
• Request Cancellation (v0.22.0+): The legacy CancelToken API was deprecated in v0.22.0 and fully replaced in v1.0.0. Modern applications should use the standard AbortController API for request cancellation.
• Parameter Serialization (v1.0.0+): The function signature for paramsSerializer was changed. Custom serializer functions will need to be updated to accept the new signature.
• Environment Support (v1.0.0+): Support for Node.js versions below 14 was dropped. This upgrade requires a modern Node.js runtime.
• Behavioral Changes: There have been numerous behavioral changes and security hardenings, such as stricter URL parsing and improved proxy handling, which may affect edge cases.

Source: GitHub Releases

Recommendation: This upgrade requires significant code modifications. Developers must carefully review usages of promise helpers, request cancellation, and custom serializers. A full regression test is strongly recommended.

Notice 🤖: This content was augmented using artificial intelligence. AI-generated content may contain errors and should be reviewed for accuracy before use.