chore(release): publish axios 1.18.0 security update

[ScriptedAlchemy]

Adds the missing patch changeset for @module-federation/typescript, @module-federation/native-federation-typescript, and @module-federation/native-federation-tests.

PRs #4914 and #4915 already updated these package manifests to Axios 1.18.0, but they merged without release metadata. As a result, published packages still expose Axios 1.16.1. This PR makes the existing security fix eligible for the next release and addresses #4916 and #4991. Those issues should remain open until the patched package versions are published.

Validation:

• pnpm exec prettier --check .changeset/release-patched-axios.md
• Changesets parser and release-plan validation passed
• Planned patch releases: @module-federation/typescript 3.1.10, @module-federation/native-federation-typescript 0.6.5, and @module-federation/native-federation-tests 0.6.5

Skipped: package builds and tests because this PR changes release metadata only; the Axios source changes already passed CI in #4914 and #4915.

[changeset-bot]

🦋 Changeset detected

Latest commit: 5a74a97

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 3 packages

Name	Type
@module-federation/native-federation-tests	Patch
@module-federation/native-federation-typescript	Patch
@module-federation/typescript	Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

[pkg-pr-new]

Open in StackBlitz

@module-federation/devtools

pnpm add https://pkg.pr.new/module-federation/core/@module-federation/devtools@5a74a97

@module-federation/cli

pnpm add https://pkg.pr.new/module-federation/core/@module-federation/cli@5a74a97

create-module-federation

pnpm add https://pkg.pr.new/module-federation/core/create-module-federation@5a74a97

@module-federation/dts-plugin

pnpm add https://pkg.pr.new/module-federation/core/@module-federation/dts-plugin@5a74a97

@module-federation/enhanced

pnpm add https://pkg.pr.new/module-federation/core/@module-federation/enhanced@5a74a97

@module-federation/error-codes

pnpm add https://pkg.pr.new/module-federation/core/@module-federation/error-codes@5a74a97

@module-federation/esbuild

pnpm add https://pkg.pr.new/module-federation/core/@module-federation/esbuild@5a74a97

@module-federation/managers

pnpm add https://pkg.pr.new/module-federation/core/@module-federation/managers@5a74a97

@module-federation/manifest

pnpm add https://pkg.pr.new/module-federation/core/@module-federation/manifest@5a74a97

@module-federation/metro

pnpm add https://pkg.pr.new/module-federation/core/@module-federation/metro@5a74a97

@module-federation/metro-plugin-rnc-cli

pnpm add https://pkg.pr.new/module-federation/core/@module-federation/metro-plugin-rnc-cli@5a74a97

@module-federation/metro-plugin-rnef

pnpm add https://pkg.pr.new/module-federation/core/@module-federation/metro-plugin-rnef@5a74a97

@module-federation/metro-plugin-rock

pnpm add https://pkg.pr.new/module-federation/core/@module-federation/metro-plugin-rock@5a74a97

@module-federation/modern-js

pnpm add https://pkg.pr.new/module-federation/core/@module-federation/modern-js@5a74a97

@module-federation/modern-js-v3

pnpm add https://pkg.pr.new/module-federation/core/@module-federation/modern-js-v3@5a74a97

@module-federation/native-federation-tests

pnpm add https://pkg.pr.new/module-federation/core/@module-federation/native-federation-tests@5a74a97

@module-federation/native-federation-typescript

pnpm add https://pkg.pr.new/module-federation/core/@module-federation/native-federation-typescript@5a74a97

@module-federation/nextjs-mf

pnpm add https://pkg.pr.new/module-federation/core/@module-federation/nextjs-mf@5a74a97

@module-federation/node

pnpm add https://pkg.pr.new/module-federation/core/@module-federation/node@5a74a97

@module-federation/observability-plugin

pnpm add https://pkg.pr.new/module-federation/core/@module-federation/observability-plugin@5a74a97

@module-federation/playground

pnpm add https://pkg.pr.new/module-federation/core/@module-federation/playground@5a74a97

@module-federation/retry-plugin

pnpm add https://pkg.pr.new/module-federation/core/@module-federation/retry-plugin@5a74a97

@module-federation/rsbuild-plugin

pnpm add https://pkg.pr.new/module-federation/core/@module-federation/rsbuild-plugin@5a74a97

@module-federation/rspack

pnpm add https://pkg.pr.new/module-federation/core/@module-federation/rspack@5a74a97

@module-federation/rspress-plugin

pnpm add https://pkg.pr.new/module-federation/core/@module-federation/rspress-plugin@5a74a97

@module-federation/rstest

pnpm add https://pkg.pr.new/module-federation/core/@module-federation/rstest@5a74a97

@module-federation/runtime

pnpm add https://pkg.pr.new/module-federation/core/@module-federation/runtime@5a74a97

@module-federation/runtime-core

pnpm add https://pkg.pr.new/module-federation/core/@module-federation/runtime-core@5a74a97

@module-federation/runtime-tools

pnpm add https://pkg.pr.new/module-federation/core/@module-federation/runtime-tools@5a74a97

@module-federation/sdk

pnpm add https://pkg.pr.new/module-federation/core/@module-federation/sdk@5a74a97

@module-federation/storybook-addon

pnpm add https://pkg.pr.new/module-federation/core/@module-federation/storybook-addon@5a74a97

@module-federation/third-party-dts-extractor

pnpm add https://pkg.pr.new/module-federation/core/@module-federation/third-party-dts-extractor@5a74a97

@module-federation/treeshake-frontend

pnpm add https://pkg.pr.new/module-federation/core/@module-federation/treeshake-frontend@5a74a97

@module-federation/treeshake-server

pnpm add https://pkg.pr.new/module-federation/core/@module-federation/treeshake-server@5a74a97

@module-federation/typescript

pnpm add https://pkg.pr.new/module-federation/core/@module-federation/typescript@5a74a97

@module-federation/utilities

pnpm add https://pkg.pr.new/module-federation/core/@module-federation/utilities@5a74a97

@module-federation/webpack-bundler-runtime

pnpm add https://pkg.pr.new/module-federation/core/@module-federation/webpack-bundler-runtime@5a74a97

@module-federation/bridge-react

pnpm add https://pkg.pr.new/module-federation/core/@module-federation/bridge-react@5a74a97

@module-federation/bridge-react-webpack-plugin

pnpm add https://pkg.pr.new/module-federation/core/@module-federation/bridge-react-webpack-plugin@5a74a97

@module-federation/bridge-shared

pnpm add https://pkg.pr.new/module-federation/core/@module-federation/bridge-shared@5a74a97

@module-federation/bridge-vue3

pnpm add https://pkg.pr.new/module-federation/core/@module-federation/bridge-vue3@5a74a97

@module-federation/inject-external-runtime-core-plugin

pnpm add https://pkg.pr.new/module-federation/core/@module-federation/inject-external-runtime-core-plugin@5a74a97

commit: 5a74a97

[github-actions]

Bundle Size Report

6 package(s) changed, 37 unchanged.

Bundle targets

Package	Web bundle (gzip)	Delta	Node bundle (gzip)	Delta
@module-federation/cli	2.3 kB	-1 B (-0.0%)	2.4 kB	-34 B (-1.4%)
@module-federation/core	1.0 kB	no change	1.0 kB	-34 B (-3.1%)
@module-federation/devtools	30.3 kB	-1 B (-0.0%)	30.3 kB	-25 B (-0.1%)
@module-federation/enhanced	2.7 kB	+12 B (+0.4%)	2.8 kB	-45 B (-1.6%)
@module-federation/metro-plugin-rnc-cli	416 B	no change	435 B	-27 B (-5.8%)
@module-federation/node	9.2 kB	+4 B (+0.0%)	9.2 kB	-31 B (-0.3%)

Consumer scenarios

Scenario	Web output (gzip)	Delta	Node output (gzip)	Delta	Gap (node-web)	Delta
Enhanced remoteEntry	21.6 kB	-10 B (-0.0%)	23.1 kB	-17 B (-0.1%)	+1.5 kB	-7 B

Total dist (raw): 35.88 MB (no change)
Total ESM gzip: 109.3 kB (no change)
Total web bundle (gzip): 238.2 kB (+14 B (+0.0%))
Total node bundle (gzip): 240.5 kB (-196 B (-0.1%))
Tracked ./bundler entry gzip: 556 B (no change)
Tracked ./bundler web bundle (gzip): 4.8 kB (no change)
Tracked ./bundler node bundle (gzip): 4.8 kB (no change)

Bundle sizes are generated with rslib (Rspack). Package-root metrics preserve the historical report. Tracked subpath exports such as ./bundler are measured separately so ENV_TARGET-driven tree-shaking is visible. Bare imports are externalized to keep package-level sizes consistent, and assets are emitted as resources.