Skip to content

Bump axios and wasm-pack#85

Merged
pimterry merged 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-c1a0873fab
May 30, 2026
Merged

Bump axios and wasm-pack#85
pimterry merged 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-c1a0873fab

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 30, 2026

Removes axios. It's no longer used after updating ancestor dependency wasm-pack. These dependencies need to be updated together.

Removes axios

Updates wasm-pack from 0.13.1 to 0.15.0

Release notes

Sourced from wasm-pack's releases.

🌷 v0.15.0

  • ✨ Features

    • Add wasm64-unknown-unknown target support - audreyt, pull/1553

      Parameterizes the target triple in cargo_build_wasm() and cargo_build_wasm_tests(), extracts --target from extra options, adds --enable-memory64 to wasm-opt args for wasm64 targets, and dynamically constructs the CARGO_TARGET_*_RUNNER env var from the target triple.

    • Add --panic-unwind flag to build and test commands - guybedford, pull/1572

    • Move wasm-pack-template into the repo - guybedford, pull/1573

      Vendors the project template directly into this repository so wasm-pack new no longer depends on a separate external template repo.

  • 🤕 Fixes

    • Replace deprecated binary-install and add release auto-publish - guybedford, pull/1579

      The 0.14.0 npm package shipped with the old drager/wasm-pack release URL and was never republished after the repository moved, so npm install -g wasm-pack failed with a 404. This inlines the install/run logic into npm/binary.js, drops the deprecated binary-install dependency (which pulled in unmaintained rimraf@3, glob@7, inflight, and tar@6), promotes tar to a real dependency, and adds release workflow automation so the npm package no longer requires a manual npm publish.

    • Make init.sh POSIX-compatible and stop mangling $VERSION - guybedford, pull/1578

    • Add trailing newline in package.json - joaofreires, pull/1162

    • Fix dragerwasm-bindgen in URLs - akesling, pull/1571

  • 🛠️ Maintenance

    • Bump follow-redirects from 1.15.11 to 1.16.0 in /npm - [dependabot], pull/1565

    • Bump rustls-webpki from 0.103.9 to 0.103.13 - [dependabot], [pull/1570]

... (truncated)

Changelog

Sourced from wasm-pack's changelog.

🌷 0.15.0

  • ✨ Features

    • Add wasm64-unknown-unknown target support - audreyt, pull/1553

      Parameterizes the target triple in cargo_build_wasm() and cargo_build_wasm_tests(), extracts --target from extra options, adds --enable-memory64 to wasm-opt args for wasm64 targets, and dynamically constructs the CARGO_TARGET_*_RUNNER env var from the target triple.

    • Add --panic-unwind flag to build and test commands - guybedford, pull/1572

    • Move wasm-pack-template into the repo - guybedford, pull/1573

      Vendors the project template directly into this repository so wasm-pack new no longer depends on a separate external template repo.

  • 🤕 Fixes

    • Replace deprecated binary-install and add release auto-publish - guybedford, pull/1579

      The 0.14.0 npm package shipped with the old drager/wasm-pack release URL and was never republished after the repository moved, so npm install -g wasm-pack failed with a 404. This inlines the install/run logic into npm/binary.js, drops the deprecated binary-install dependency (which pulled in unmaintained rimraf@3, glob@7, inflight, and tar@6), promotes tar to a real dependency, and adds release workflow automation so the npm package no longer requires a manual npm publish.

    • Make init.sh POSIX-compatible and stop mangling $VERSION - guybedford, pull/1578

    • Add trailing newline in package.json - joaofreires, pull/1162

    • Fix dragerwasm-bindgen in URLs - akesling, pull/1571

  • 🛠️ Maintenance

    • Bump follow-redirects from 1.15.11 to 1.16.0 in /npm - [dependabot], pull/1565

... (truncated)

Commits
  • 8320269 0.15.0
  • a7cae9d fix(npm): replace deprecated binary-install and add release auto-publish (#1579)
  • a127ae2 fix(installer): make init.sh POSIX-compatible and stop mangling $VERSION (#1578)
  • 1e6c1de feat: add --panic-unwind flag to build and test commands (#1572)
  • 88de54d add EOL in package.json (#1162)
  • 3e09cc7 feat: update doc and reference to github repo (#1567)
  • 862bb29 chore(deps): bump follow-redirects from 1.15.11 to 1.16.0 in /npm (#1565)
  • 61f4032 chore(deps): bump rustls-webpki from 0.103.9 to 0.103.13 (#1570)
  • ba62a51 chore(deps): bump brace-expansion from 1.1.12 to 1.1.14 in /npm (#1574)
  • 0d11680 Move wasm-pack template into repo (#1573)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Removes [axios](https://github.com/axios/axios). It's no longer used after updating ancestor dependency [wasm-pack](https://github.com/wasm-bindgen/wasm-pack). These dependencies need to be updated together.


Removes `axios`

Updates `wasm-pack` from 0.13.1 to 0.15.0
- [Release notes](https://github.com/wasm-bindgen/wasm-pack/releases)
- [Changelog](https://github.com/wasm-bindgen/wasm-pack/blob/master/CHANGELOG.md)
- [Commits](wasm-bindgen/wasm-pack@v0.13.1...v0.15.0)

---
updated-dependencies:
- dependency-name: axios
  dependency-version:
  dependency-type: indirect
- dependency-name: wasm-pack
  dependency-version: 0.15.0
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels May 30, 2026
@socket-security
Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatednpm/​wasm-pack@​0.13.1 ⏵ 0.15.090 +110094 -386100

View full report

@pimterry pimterry merged commit 3b1051e into main May 30, 2026
14 checks passed
@dependabot dependabot Bot deleted the dependabot/npm_and_yarn/multi-c1a0873fab branch May 30, 2026 13:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant