axios dependency requires update

[nijk]

We're currently using this lib in our project and we've received a dependabot alert for the version of axios used, I see there is a dependabot PR for this issue already.

Would it be possible to merge this and deploy a new version of this lib to npm please?

[quis]

Hey @nijk, you don’t need to wait for us to merge the PR into our repo. In fact us updating package-lock.json wouldn’t cause a consumer of our package to get the update.

If you merge the one Dependabot has opened on your repo you’ll get the patched version of axios.

[nijk]

@quis Thanks for the reply, I'd assumed this was a transitive dependency issue when I opened the issue a few days ago. It looks like Dependabot has raised that axios fix in my repo today.