Skip to content

chore: bump axios to 1.15.1#29711

Merged
tommasini merged 1 commit into
mainfrom
chore/bump-axios-1.15.1
May 5, 2026
Merged

chore: bump axios to 1.15.1#29711
tommasini merged 1 commit into
mainfrom
chore/bump-axios-1.15.1

Conversation

@tommasini

@tommasini tommasini commented May 5, 2026 •
edited by cursor Bot
Loading

Copy link
Copy Markdown
Contributor

Description

Bump axios to 1.15.1

Changelog

CHANGELOG entry:

Related issues

Fixes:

Manual testing steps

Feature: my feature name

  Scenario: user [verb for user action]
    Given [describe expected initial app state]

    When user [verb for user action]
    Then [describe expected outcome]

Screenshots/Recordings

Before

After

Pre-merge author checklist

Performance checks (if applicable)

  • I've tested on Android
    • Ideally on a mid-range device; emulator is acceptable
  • I've tested with a power user scenario
    • Use these power-user SRPs to import wallets with many accounts and tokens
  • I've instrumented key operations with Sentry traces for production performance metrics

For performance guidelines and tooling, see the Performance Guide.

Pre-merge reviewer checklist

  • I've manually tested the PR (e.g. pull and build branch, run the app, test code being changed).
  • I confirm that this PR addresses all acceptance criteria described in the ticket it closes and includes the necessary testing evidence such as recordings and or screenshots.

Note

Low Risk
Low risk dependency bump limited to axios via Yarn resolutions/lockfile, with potential for minor runtime behavior changes in HTTP requests.

Overview
Updates the Yarn resolutions override to axios@^1.15.1 and refreshes yarn.lock to pull in axios@1.15.2.

Reviewed by Cursor Bugbot for commit c6c6073. Bugbot is set up for automated code reviews on this repo. Configure here.

@github-actions

github-actions Bot commented May 5, 2026

Copy link
Copy Markdown
Contributor

CLA Signature Action: All authors have signed the CLA. You may need to manually re-run the blocking PR check if it doesn't pass in a few minutes.

@metamaskbotv2 metamaskbotv2 Bot added the team-mobile-platform Mobile Platform team label May 5, 2026
@socket-security

socket-security Bot commented May 5, 2026

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Addednpm/​axios@​1.15.29010010096100

View full report

@github-actions

github-actions Bot commented May 5, 2026

Copy link
Copy Markdown
Contributor

🔍 Smart E2E Test Selection

  • Selected E2E tags: SmokeMoney
  • Selected Performance tags: None (no tests recommended)
  • Risk Level: low
  • AI Confidence: 85%
click to see 🤖 AI reasoning details

E2E Test Selection:
The PR only bumps the axios dependency from version 1.15.0 to 1.15.2 (a patch version update via the ^1.15.1 range in the overrides section of package.json). This is a minor security/bug-fix patch with no breaking API changes expected.

Axios is used in the following areas:

  1. Card controller services (BaanxService.ts, BaanxProvider.ts) - SmokeMoney
  2. Ramp/Deposit hooks (useDepositRouting.ts, useDepositUser.ts) - SmokeMoney
  3. Network checker utility (networkChecker.util.ts) - low-level utility
  4. E2E test utilities (e2eCommandPolling.ts, e2eStateExport.ts, FixtureHelper.ts) - test infrastructure
  5. Performance test helpers (feature-flag-helper.ts) - test infrastructure

The most user-facing code affected is the Card and Ramp/Deposit flows, which are covered by SmokeMoney. The network checker is a utility used internally and unlikely to be affected by a patch bump. Test infrastructure utilities using axios are not E2E test targets themselves.

Since this is a patch version bump with no API changes, the risk is very low. Running SmokeMoney provides adequate coverage for the most directly impacted user-facing flows (Card and Ramp/Deposit). No other feature areas are meaningfully impacted by this change.

Performance Test Selection:
This is a patch version bump of axios (1.15.0 → 1.15.2). Axios is an HTTP client library and a patch update does not introduce performance regressions. No performance-sensitive rendering, state management, or UI components are changed. Performance tests are not warranted for this change.

View GitHub Actions results

@sonarqubecloud

sonarqubecloud Bot commented May 5, 2026

Copy link
Copy Markdown

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

@tommasini tommasini enabled auto-merge May 5, 2026 08:04
@tommasini tommasini added the no-changelog no-changelog Indicates no external facing user changes, therefore no changelog documentation needed label May 5, 2026
@tommasini tommasini added this pull request to the merge queue May 5, 2026
Merged via the queue into main with commit 813c415 May 5, 2026
176 of 183 checks passed
@tommasini tommasini deleted the chore/bump-axios-1.15.1 branch May 5, 2026 08:53
@github-actions github-actions Bot locked and limited conversation to collaborators May 5, 2026
@metamaskbotv2 metamaskbotv2 Bot added the release-7.77.0 Issue or pull request that will be included in release 7.77.0 label May 5, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Reviewers

@jvbriones jvbriones jvbriones approved these changes

@sahar-fehri sahar-fehri sahar-fehri approved these changes

@baptiste-marchand baptiste-marchand baptiste-marchand approved these changes

Assignees

No one assigned

Labels

no-changelog no-changelog Indicates no external facing user changes, therefore no changelog documentation needed release-7.77.0 Issue or pull request that will be included in release 7.77.0 size-XS team-mobile-platform Mobile Platform team

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

4 participants

@tommasini @jvbriones @sahar-fehri @baptiste-marchand