Update dependency axios to v1.7.4 [SECURITY]

[openverse-bot]

This PR contains the following updates:

Package	Type	Update	Change
axios (source)	dependencies	patch	1.7.2 -> 1.7.4

GitHub Vulnerability Alerts

CVE-2024-39338

axios 1.7.2 allows SSRF via unexpected behavior where requests for path relative URLs get processed as protocol relative URLs.

---

Release Notes

axios/axios (axios)

v1.7.4

Compare Source

Bug Fixes

• sec: CVE-2024-39338 (#​6539) (#​6543) (6b6b605)
• sec: disregard protocol-relative URL to remediate SSRF (#​6539) (07a661a)

Contributors to this release

• Lev Pachmanov
• Đỗ Trọng Hải

v1.7.3

Compare Source

Bug Fixes

• adapter: fix progress event emitting; (#​6518) (e3c76fc)
• fetch: fix withCredentials request config (#​6505) (85d4d0e)
• xhr: return original config on errors from XHR adapter (#​6515) (8966ee7)

Contributors to this release

• Dmitriy Mozgovoy
• Valerii Sidorenko
• prianYu

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[github-actions]

Latest k6 run output¹

$     ✗ status was 200
      ↳  99% — ✓ 7999 / ✗ 1

     checks.........................: 99.98% ✓ 7999      ✗ 1   
     data_received..................: 1.8 GB 8.4 MB/s
     data_sent......................: 1.0 MB 4.9 kB/s
     http_req_blocked...............: avg=13.19µs  min=1.95µs  med=3.77µs   max=12.46ms p(90)=5.24µs   p(95)=5.67µs  
     http_req_connecting............: avg=6.7µs    min=0s      med=0s       max=12.43ms p(90)=0s       p(95)=0s      
     http_req_duration..............: avg=559.8ms  min=51.96ms med=504.69ms max=2.36s   p(90)=1.04s    p(95)=1.15s   
       { expected_response:true }...: avg=559.8ms  min=51.96ms med=504.69ms max=2.36s   p(90)=1.04s    p(95)=1.15s   
   ✓ http_req_failed................: 0.01%  ✓ 1         ✗ 7999
     http_req_receiving.............: avg=166.7µs  min=39.39µs med=113.13µs max=19.26ms p(90)=183.48µs p(95)=234.54µs
     http_req_sending...............: avg=23.96µs  min=6.72µs  med=19.08µs  max=13ms    p(90)=25.74µs  p(95)=32.69µs 
     http_req_tls_handshaking.......: avg=0s       min=0s      med=0s       max=0s      p(90)=0s       p(95)=0s      
     http_req_waiting...............: avg=559.61ms min=51.8ms  med=504.55ms max=2.36s   p(90)=1.04s    p(95)=1.15s   
     http_reqs......................: 8000   36.981327/s
     iteration_duration.............: avg=3.74s    min=1.13s   med=3.18s    max=11.61s  p(90)=8.03s    p(95)=8.62s   
     iterations.....................: 1200   5.547199/s
     vus............................: 5      min=5       max=30
     vus_max........................: 30     min=30      max=30

Footnotes

1. This comment will automatically update with new output each time k6 runs for this PR ↩