Bump the production-dependencies group in /ui with 2 updates by dependabot[bot] · Pull Request #358 · lwitkowski/aero-offers

dependabot · 2026-01-27T00:14:03Z

Bumps the production-dependencies group in /ui with 2 updates: axios and core-js.

Updates axios from 1.13.2 to 1.13.3

Release notes

Release v1.13.3

Release notes:

Bug Fixes

http2: Use port 443 for HTTPS connections by default. (#7256) (d7e6065)

interceptor: handle the error in the same interceptor (#6269) (5945e40)

main field in package.json should correspond to cjs artifacts (#5756) (7373fbf)

package.json: add 'bun' package.json 'exports' condition. Load the Node.js build in Bun instead of the browser build (#5754) (b89217e)

silentJSONParsing=false should throw on invalid JSON (#7253) (#7257) (7d19335)

turn AxiosError into a native error (#5394) (#5558) (1c6a86d)

types: add handlers to AxiosInterceptorManager interface (#5551) (8d1271b)

types: restore AxiosError.cause type from unknown to Error (#7327) (d8233d9)

unclear error message is thrown when specifying an empty proxy authorization (#6314) (6ef867e)

Features

add undefined as a value in AxiosRequestConfig (#5560) (095033c)

add automatic minor and patch upgrades to dependabot (#6053) (65a7584)

add Node.js coverage script using c8 (closes #7289) (#7294) (ec9d94e)

added copilot instructions (3f83143)

compatibility with frozen prototypes (#6265) (860e033)

enhance pipeFileToResponse with error handling (#7169) (88d7884)

types: Intellisense for string literals in a widened union (#6134) (f73474d), closes microsoft/TypeScript#33471

Reverts

Revert "fix: silentJSONParsing=false should throw on invalid JSON (#7253) (#7…" (#7298) (a4230f5), closes #7253 #7 #7298

deps: bump peter-evans/create-pull-request from 7 to 8 in the github-actions group (#7334) (2d6ad5e)

Contributors to this release

Ashvin Tiwari

Nikunj Mochi

Anchal Singh

jasonsaayman

Julian Dax

Akash Dhar Dubey

Madhumita

Tackoil

Justin Dhillon

Rudransh

WuMingDao

codenomnom

Nandan Acharya

Eric Dubé

Tibor Pilz

Gabriel Quaresma

Turadg Aleahmad

... (truncated)

Changelog

Sourced from axios's changelog.

1.13.3 (2026-01-20)

Bug Fixes

http2: Use port 443 for HTTPS connections by default. (#7256) (d7e6065)

interceptor: handle the error in the same interceptor (#6269) (5945e40)

main field in package.json should correspond to cjs artifacts (#5756) (7373fbf)

package.json: add 'bun' package.json 'exports' condition. Load the Node.js build in Bun instead of the browser build (#5754) (b89217e)

silentJSONParsing=false should throw on invalid JSON (#7253) (#7257) (7d19335)

turn AxiosError into a native error (#5394) (#5558) (1c6a86d)

types: add handlers to AxiosInterceptorManager interface (#5551) (8d1271b)

types: restore AxiosError.cause type from unknown to Error (#7327) (d8233d9)

unclear error message is thrown when specifying an empty proxy authorization (#6314) (6ef867e)

Features

add undefined as a value in AxiosRequestConfig (#5560) (095033c)

add automatic minor and patch upgrades to dependabot (#6053) (65a7584)

add Node.js coverage script using c8 (closes #7289) (#7294) (ec9d94e)

added copilot instructions (3f83143)

compatibility with frozen prototypes (#6265) (860e033)

enhance pipeFileToResponse with error handling (#7169) (88d7884)

types: Intellisense for string literals in a widened union (#6134) (f73474d), closes microsoft/TypeScript#33471

Reverts

Revert "fix: silentJSONParsing=false should throw on invalid JSON (#7253) (#7…" (#7298) (a4230f5), closes #7253 #7 #7298

deps: bump peter-evans/create-pull-request from 7 to 8 in the github-actions group (#7334) (2d6ad5e)

Contributors to this release

Ashvin Tiwari

Nikunj Mochi

Anchal Singh

jasonsaayman

Julian Dax

Akash Dhar Dubey

Madhumita

Tackoil

Justin Dhillon

Rudransh

WuMingDao

codenomnom

Nandan Acharya

Eric Dubé

Tibor Pilz

Gabriel Quaresma

Turadg Aleahmad

JohnTitor

rohit miryala

... (truncated)

Commits

ab06109 chore(release): v1.13.3 (#7335)
2d6ad5e revert(deps): bump peter-evans/create-pull-request from 7 to 8 in the github-...
cb49a6f chore(sponsor): update sponsor block (#7330)
d8233d9 fix(types): restore AxiosError.cause type from unknown to Error (#7327)
5945e40 fix(interceptor): handle the error in the same interceptor (#6269)
7373fbf fix: main field in package.json should correspond to cjs artifacts (#5756)
8d1271b fix(types): add handlers to AxiosInterceptorManager interface (#5551)
f869434 docs: refresh CDN URLs and example JSON headers (#7236)
46db331 doc: update deprecated var usage in documentation examples (#7246)
d6bbb3d docs: add async/await timeout handling example (#7250)
Additional commits viewable in compare view

Updates core-js from 3.47.0 to 3.48.0

Changelog

Sourced from core-js's changelog.

3.48.0 - 2026.01.21

Changes v3.47.0...v3.48.0 (126 commits)

Map upsert proposal:

Built-ins:

Map.prototype.getOrInsert

Map.prototype.getOrInsertComputed

WeakMap.prototype.getOrInsert

WeakMap.prototype.getOrInsertComputed

Moved to stable ES, January 2026 TC39 meeting

Added es. namespace modules, /es/ and /stable/ namespaces entries

Use CreateDataProperty / CreateDataPropertyOrThrow in some missed cases, #1497

Minor fix / optimization in the RegExp constructor (NCG and dotAll) polyfill

Added some more workarounds for a Safari < 13 bug with silent ignore of non-writable array .length

Added detection of a Webkit bug: Iterator.prototype.flatMap throws on iterator without return method

Added detection of a V8 ~ Chromium < 144 bug: Uint8Array.prototype.setFromHex throws an error on length-tracking views over ResizableArrayBuffer

Compat data improvements:

Map upsert proposal features marked as shipped in V8 ~ Chrome 145

Joint iteration proposal features marked as shipped in FF148

Iterator.concat marked as shipped in Bun 1.3.7

Added Rhino 1.9.0 compat data

Added Deno 2.6 compat data mapping

Added Opera Android 93 and 94 compat data mapping

Added Electron 41 compat data mapping

Iterator.prototype.flatMap marked as supported from Safari 26.2 and Bun 1.2.21 because of a bug: throws on iterator without return method

Uint8Array.prototype.setFromHex marked as supported from V8 ~ Chromium 144 because of a bug: throws an error on length-tracking views over ResizableArrayBuffer

Commits

5d657da v3.48.0
5644e73 Add bug detection for Uint8Array.prototype.setFromHex
804a10e Merge pull request #1501 from zloirock/flat-map-fix
45d7fe3 Add bug detection to Iterator flatMap method
efd9c2f move Map upsert proposal to stable ES
dcb938d update the year and normalize the copyright wording
5454a5d add some more workarounds for a Safari < 13 bug with silent ignore of non-wri...
73d4b6c add some more createProperty cases
9c89290 fix: spec compliance for Array.prototype.flat and flatMap
e3774ce fix: use createProperty in Array.prototype.filter
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the production-dependencies group in /ui with 2 updates: [axios](https://github.com/axios/axios) and [core-js](https://github.com/zloirock/core-js/tree/HEAD/packages/core-js). Updates `axios` from 1.13.2 to 1.13.3 - [Release notes](https://github.com/axios/axios/releases) - [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md) - [Commits](axios/axios@v1.13.2...v1.13.3) Updates `core-js` from 3.47.0 to 3.48.0 - [Release notes](https://github.com/zloirock/core-js/releases) - [Changelog](https://github.com/zloirock/core-js/blob/master/CHANGELOG.md) - [Commits](https://github.com/zloirock/core-js/commits/v3.48.0/packages/core-js) --- updated-dependencies: - dependency-name: axios dependency-version: 1.13.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: core-js dependency-version: 3.48.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jan 27, 2026

lwitkowski merged commit 709fee9 into main Jan 27, 2026
2 checks passed

lwitkowski deleted the dependabot/npm_and_yarn/ui/production-dependencies-93b8e2db3f branch January 27, 2026 11:05

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the production-dependencies group in /ui with 2 updates#358

Bump the production-dependencies group in /ui with 2 updates#358
lwitkowski merged 1 commit intomainfrom
dependabot/npm_and_yarn/ui/production-dependencies-93b8e2db3f

dependabot bot commented on behalf of github Jan 27, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot bot commented on behalf of github Jan 27, 2026

Release v1.13.3

Release notes:

Bug Fixes

Features

Reverts

Contributors to this release

1.13.3 (2026-01-20)

Bug Fixes

Features

Reverts

Contributors to this release

3.48.0 - 2026.01.21

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant