UNPKG

axios

Version:

Promise based HTTP client for the browser and node.js

860 lines (664 loc) 69.1 kB
# Changelog ## v0.32.0 — May 4, 2026 This release backports a comprehensive set of security and hardening fixes from the v1.x branch into v0.x, covering prototype-pollution protections, default error redaction, stricter proxy/cookie/socket handling, and one breaking change to merged config and header object prototypes. ## ⚠️ Breaking Changes & Deprecations - Null-prototype merged objects: mergeConfig and header merging now return objects with a null prototype to block prototype-pollution gadgets. Consumers must use Object.prototype.hasOwnProperty.call(obj, key) and avoid implicit string coercion against merged config or header objects. (#10838) ## 🔒 Security Fixes - Default error redaction: AxiosError.toJSON() now redacts sensitive keys by default to prevent credential leaks in logs. The behavior is configurable via config.redact, with defaults exposed on defaults.redact. (#10838) - Cookie & XSRF handling: Cookie names are read literally rather than via regex, and only own properties are respected when evaluating withXSRFToken. (#10838) - Proxy bypass IPv6 parity: NO_PROXY matching now handles canonical IPv4-mapped IPv6 forms such as ::ffff:127.0.0.1 and ::ffff:7f00:1. (#10838) - Node http adapter hardening: Strips Proxy-Authorization when no proxy is in use and gates socketPath behind a new allowedSocketPaths allowlist (string or array, normalized) to reduce accidental Unix socket exposure. (#10838) - Browser xhr adapter: Stricter own-property checks when reading config and headers. (#10838) - URL parameters: AxiosURLSearchParams keeps %00 encoded and applies consistent encoding throughout. (#10838) - Public type surface: Adds formDataHeaderPolicy, redact, and allowedSocketPaths to the TypeScript declarations alongside their runtime defaults. (#10838) ## 🔧 Maintenance & Chores - Repo hygiene: Updates README.md and CHANGELOG.md, adds AGENTS.md, and refreshes the issue and PR templates. (#10838) [**Full Changelog**](https://github.com/axios/axios/compare/v0.31.1...v0.32.0) ## 0.31.1 (2024-12-19) This release backports a broad set of security hardenings from the v1 line — covering prototype-pollution defences, stream size enforcement, XSRF handling, URL null-byte encoding, and bounded FormData recursion — and drops committed `dist/` artefacts along with Bower support. ## ⚠️ Breaking Changes & Deprecations * **Bower & Committed `dist/` Removed:** `dist/` bundles are no longer committed to the repo, and `bower.json` plus the Grunt `package2bower` task have been removed. CI still builds bundles before publish, so npm/yarn/pnpm consumers are unaffected; installs via Bower or directly from the git tree must migrate to npm or a CDN. (__#10747__) ## 🔒 Security Fixes * **Prototype Pollution in Header Merge (GHSA-6chq-wfr3-2hj9):** Tightened `isFormData` to reject plain/null-prototype objects and require `append`, and guarded the Node HTTP adapter so `data.getHeaders()` is only merged when it is not inherited from `Object.prototype`. Blocks injected headers via polluted `getHeaders`. (__#10750__) * **Prototype Pollution in Config Merging (GHSA-pf86-5x62-jrwf):** `mergeConfig`, defaults resolution, and the HTTP adapter now uses own-property checks for `transport`, `env`, `Blob`, `formSerializer`, and transforms arrays, and merged configs are returned as null-prototype objects. Prevents hijacking of the request flow through polluted prototypes. (__#10752__) * **FormData / Params Recursion DoS:** Added a configurable `maxDepth` (default `100`, `Infinity` disables) to `toFormData` and params serialisation, throwing `AxiosError` with code `ERR_FORM_DATA_DEPTH_EXCEEDED` when exceeded. Circular-reference detection is preserved. (__#10728__) * **Null-Byte Injection in Query Strings:** Removed the unsafe `%00` → null-byte substitution from `AxiosURLSearchParams.encode` so `%00` is preserved as-is. Other encoding behaviour (including `%20` → `+`) unchanged. (__#10737__) * **Consolidated v1 Security Backport:** Rolls up remaining v1 hardenings into `v0.x`: `maxContentLength` enforcement for `responseType: 'stream'` via a guarded transform with deferred piping, `maxBodyLength` enforcement for streamed uploads on native `http`/`https` with `maxRedirects: 0`, and stricter `withXSRFToken` handling so only own boolean `true` enables cross-origin XSRF headers. (__#10764__) ## 🔧 Maintenance & Chores * **CODEOWNERS:** Added `.github/CODEOWNERS` with `* @jasonsaayman` to set a default reviewer for all paths. (__#10740__) [Full Changelog](https://github.com/axios/axios/compare/v0.31.0...v0.31.1) ## 0.31.0 (2024-12-17) This release backports security fixes from v1.x, hardens the CI/CD supply chain with OIDC publishing and `zizmor` scanning, resolves TypeScript typing issues in `AxiosInstance`, and fixes a performance regression in `isEmptyObject()`. ## 🔒 Security Fixes * **Header Injection & Proxy Bypass:** Backports v1 security hardening — sanitizes outgoing header values to strip invalid bytes, CRLF sequences, and boundary whitespace (including array values); adds proper `NO_PROXY`/`no_proxy` enforcement covering wildcards, explicit ports, loopback aliases (`localhost`, `127.0.0.1`, `::1`), bracketed IPv6, and trailing-dot hostnames. Proxy bypass is now checked before the proxy URL is parsed, and `parsed.host` is used for correct port and IPv6 handling. (__#10688__) * **CI Security:** SHA-pins all actions and disables credential persistence in v0.x CI, introduces `zizmor` security scanning with SARIF upload to code scanning, adds an OIDC Trusted Publishing workflow with npm provenance attestations, and gates all publishes behind a required `npm-publish` GitHub Environment with configurable reviewer protections. (__#10638__, __#10639__, __#10667__) ## 🐛 Bug Fixes * **TypeScript — `AxiosInstance` Return Types:** Fixes return types in `AxiosInstance` methods to correctly resolve to `Promise<R>` (matching `AxiosPromise<T>` semantics), and corrects the generic call signature so TypeScript properly enforces the response data type. TypeScript-only changes; no runtime impact. (__#6253__, __#7328__) * **Performance:** Fixes a performance regression in `isEmptyObject()` that caused excessive computation when the argument was a large string. (__#6484__) ## 🔧 Maintenance & Chores * **Versioning & CI Workflow:** Adds an automated versioning flow for v0.x, renames the CI workflow for consistency with the v1.x naming convention, and corrects the branch name reference in CI config. (__#10690__, __#10691__, __#10692__) ## 🌟 New Contributors We are thrilled to welcome our new contributors. Thank you for helping improve axios: * __@nakataki17__ (__#6253__) * __@gmasclet__ (__#6484__) * __@shaanmajid__ (__#10638__, __#10639__, __#10667__) * __@ivan-churakov__ (__#7328__) [Full Changelog](https://github.com/axios/axios/compare/v0.30.3...v0.31.0) ## 0.30.3 (2024-12-10) This is a critical security maintenance release for the v0.x branch. It addresses a high-priority vulnerability involving prototype pollution that could lead to a Denial of Service (DoS). Recommendation: All users currently on the 0.x release line should upgrade to this version immediately to ensure environment stability. ## 🛡️ Security Fixes - **Backport: Fix DoS via __proto__ key in merge config** - Patched a vulnerability where specifically crafted configuration objects using the __proto__ key could cause a Denial of Service during the merge process. - _by @FeBe95 in [PR #7388](https://github.com/axios/axios/pull/7388)_ ## ⚙️ Maintenance & CI - **CI Infrastructure Update** - Updated Continuous Integration workflows for the v0.x branch to maintain long-term support and build reliability. - _by @jasonsaayman in [PR #7407](https://github.com/axios/axios/pull/7407)_ ## ⚠️ Breaking Changes Configuration Merging Behavior: As part of the security fix, Axios now restricts the merging of the __proto__ key within configuration objects. If your codebase relies on unconventional deep-merging patterns that target the object prototype via Axios config, those operations will now be blocked. This is a necessary change to prevent prototype pollution. Full Changelog: [v0.30.2...v0.30.3](https://github.com/axios/axios/compare/v0.30.2...v0.30.3) ## 0.30.2 (2024-11-28) ## What's Changed * Backport `maxContentLength` vulnerability fix to v0.x by @FeBe95 in https://github.com/axios/axios/pull/7034 ## New Contributors * @FeBe95 made their first contribution in https://github.com/axios/axios/pull/7034 **Full Changelog**: https://github.com/axios/axios/compare/v0.30.1...v0.30.2 ## 0.30.1 (2024-11-27) ## Release notes: ### Bug Fixes * chore(deps): bump form-data from 4.0.0 to 4.0.4 for v0.x by @wolandec in https://github.com/axios/axios/pull/6978 ### Contributors to this release * @wolandec made their first contribution in https://github.com/axios/axios/pull/6978 **Full Changelog**: https://github.com/axios/axios/compare/v0.30.0...v0.30.1 ## 0.30.0 (2024-11-21) ## Release notes: ### Bug Fixes * fix: modify log while request is aborted by @mori5321 in https://github.com/axios/axios/pull/4917 * fix: update CHANGELOG.md for v0.x by @TehZarathustra in https://github.com/axios/axios/pull/6271 * fix: modify upgrade guide for 0.28.1's breaking change by @nafeger in https://github.com/axios/axios/pull/6787 * fix: backport allowAbsoluteUrls vulnerability fix to v0.x by @thatguyinabeanie in https://github.com/axios/axios/pull/6829 * fix: add allowAbsoluteUrls type by @thatguyinabeanie in https://github.com/axios/axios/pull/6849 ### Contributors to this release * @mori5321 made their first contribution in https://github.com/axios/axios/pull/4917 * @TehZarathustra made their first contribution in https://github.com/axios/axios/pull/6271 * @nafeger made their first contribution in https://github.com/axios/axios/pull/6787 * @thatguyinabeanie made their first contribution in https://github.com/axios/axios/pull/6829 **Full Changelog**: https://github.com/axios/axios/compare/v0.29.0...v0.30.0 ## 0.29.0 (2024-11-21) ## Release notes: ### Bug Fixes - fix: modify log while request is aborted ([#4917](https://github.com/axios/axios/pull/4917)) - fix: update CHANGELOG.md for v0.x ([#6271](https://github.com/axios/axios/pull/6271)) - fix: modify upgrade guide for 0.28.1's breaking change ([#6787](https://github.com/axios/axios/pull/6787)) - fix: backport allowAbsoluteUrls vulnerability fix to v0.x ([#6829](https://github.com/axios/axios/pull/6829)) - fix: add allowAbsoluteUrls type ([#6849](https://github.com/axios/axios/pull/6849)) ## [0.29.0](https://github.com/axios/axios/compare/v0.28.1...v0.29.0) (2024-11-21) ## 0.28.1 (2024-03-24) ## Release notes: ### Bug Fixes - fix(backport): backport security fixes in commits #6167 and #6163 (#6402) - fix: omit nulls in params (#6394) - fix(backport): fix paramsSerializer function validation (#6361) - fix: regular expression denial of service (ReDoS) (#6708) ## [0.28.1](https://github.com/axios/axios/compare/v0.28.0...v0.28.1) (2024-03-24) ## 0.28.0 (2024-02-12) ## Release notes: ### Bug Fixes - fix(backport): custom params serializer support (#6263) - fix(backport): uncaught ReferenceError `req` is not defined (#6307) ## [0.28.0](https://github.com/axios/axios/compare/v0.27.2...v0.28.0) (2024-02-12) ## Release notes: ### Bug Fixes - fix(security): fixed CVE-2023-45857 by backporting `withXSRFToken` option to v0.x ([#6091](https://github.com/axios/axios/pull/6091)) ### Backports from v1.x: - Allow null indexes on formSerializer and paramsSerializer v0.x ([#4961](https://github.com/axios/axios/pull/4961)) - Fixing content-type header repeated ([#4745](https://github.com/axios/axios/pull/4745)) - Fixed timeout error message for HTTP ([#4738](https://github.com/axios/axios/pull/4738)) - Added `axios.formToJSON` method ([#4735](https://github.com/axios/axios/pull/4735)) - URL params serializer ([#4734](https://github.com/axios/axios/pull/4734)) - Fixed toFormData Blob issue on node>v17 ([#4728](https://github.com/axios/axios/pull/4728)) - Adding types for progress event callbacks ([#4675](https://github.com/axios/axios/pull/4675)) - Fixed max body length defaults ([#4731](https://github.com/axios/axios/pull/4731)) - Added data URL support for node.js ([#4725](https://github.com/axios/axios/pull/4725)) - Added isCancel type assert ([#4293](https://github.com/axios/axios/pull/4293)) - Added the ability for the `url-encoded-form` serializer to respect the `formSerializer` config ([#4721](https://github.com/axios/axios/pull/4721)) - Add `string[]` to `AxiosRequestHeaders` type ([#4322](https://github.com/axios/axios/pull/4224)) - Allow type definition for axios instance methods ([#4224](https://github.com/axios/axios/pull/4224)) - Fixed `AxiosError` stack capturing; ([#4718](https://github.com/axios/axios/pull/4718)) - Fixed `AxiosError` status code type; ([#4717](https://github.com/axios/axios/pull/4717)) - Adding Canceler parameters config and request ([#4711](https://github.com/axios/axios/pull/4711)) - fix(types): allow to specify partial default headers for instance creation ([#4185](https://github.com/axios/axios/pull/4185)) - Added `blob` to the list of protocols supported by the browser ([#4678](https://github.com/axios/axios/pull/4678)) - Fixing Z_BUF_ERROR when no content ([#4701](https://github.com/axios/axios/pull/4701)) - Fixed race condition on immediate requests cancellation ([#4261](https://github.com/axios/axios/pull/4261)) - Added a clear() function to the request and response interceptors object so a user can ensure that all interceptors have been removed from an Axios instance ([#4248](https://github.com/axios/axios/pull/4248)) - Added generic AxiosAbortSignal TS interface to avoid importing AbortController polyfill ([#4229](https://github.com/axios/axios/pull/4229)) - Fix TS definition for AxiosRequestTransformer ([#4201](https://github.com/axios/axios/pull/4201)) - Use type alias instead of interface for AxiosPromise ([#4505](https://github.com/axios/axios/pull/4505)) - Include request and config when creating a CanceledError instance ([#4659](https://github.com/axios/axios/pull/4659)) - Added generic TS types for the exposed toFormData helper ([#4668](https://github.com/axios/axios/pull/4668)) - Optimized the code that checks cancellation ([#4587](https://github.com/axios/axios/pull/4587)) - Replaced webpack with rollup ([#4596](https://github.com/axios/axios/pull/4596)) - Added stack trace to AxiosError ([#4624](https://github.com/axios/axios/pull/4624)) - Updated AxiosError.config to be optional in the type definition ([#4665](https://github.com/axios/axios/pull/4665)) - Removed incorrect argument for NetworkError constructor ([#4656](https://github.com/axios/axios/pull/4656)) ## 0.27.2 (April 27, 2022) Fixes and Functionality: - Fixed FormData posting in browser environment by reverting #3785 ([#4640](https://github.com/axios/axios/pull/4640)) - Enhanced protocol parsing implementation ([#4639](https://github.com/axios/axios/pull/4639)) - Fixed bundle size ## 0.27.1 (April 26, 2022) Fixes and Functionality: - Removed import of url module in browser build due to huge size overhead and builds being broken ([#4594](https://github.com/axios/axios/pull/4594)) - Bumped follow-redirects to ^1.14.9 ([#4615](https://github.com/axios/axios/pull/4615)) ## 0.27.0 (April 25, 2022) Breaking changes: - New toFormData helper function that allows the implementor to pass an object and allow axios to convert it to FormData ([#3757](https://github.com/axios/axios/pull/3757)) - Removed functionality that removed the the `Content-Type` request header when passing FormData ([#3785](https://github.com/axios/axios/pull/3785)) - **(\*)** Refactored error handling implementing AxiosError as a constructor, this is a large change to error handling on the whole ([#3645](https://github.com/axios/axios/pull/3645)) - Separated responsibility for FormData instantiation between `transformRequest` and `toFormData` ([#4470](https://github.com/axios/axios/pull/4470)) - **(\*)** Improved and fixed multiple issues with FormData support ([#4448](https://github.com/axios/axios/pull/4448)) QOL and DevX improvements: - Added a multipart/form-data testing playground allowing contributors to debug changes easily ([#4465](https://github.com/axios/axios/pull/4465)) Fixes and Functionality: - Refactored project file structure to avoid circular imports ([#4515](https://github.com/axios/axios/pull/4516)) & ([#4516](https://github.com/axios/axios/pull/4516)) - Bumped follow-redirects to ^1.14.9 ([#4562](https://github.com/axios/axios/pull/4562)) Internal and Tests: - Updated dev dependencies to latest version Documentation: - Fixing incorrect link in changelog ([#4551](https://github.com/axios/axios/pull/4551)) Notes: - **(\*)** Please read these pull requests before updating, these changes are very impactful and far reaching. ## 0.26.1 (March 9, 2022) Fixes and Functionality: - Refactored project file structure to avoid circular imports ([#4220](https://github.com/axios/axios/pull/4220)) ## 0.26.0 (February 13, 2022) Fixes and Functionality: - Fixed The timeoutErrorMessage property in config not work with Node.js ([#3581](https://github.com/axios/axios/pull/3581)) - Added errors to be displayed when the query parsing process itself fails ([#3961](https://github.com/axios/axios/pull/3961)) - Fix/remove url required ([#4426](https://github.com/axios/axios/pull/4426)) - Update follow-redirects dependency due to Vulnerability ([#4462](https://github.com/axios/axios/pull/4462)) - Bump karma from 6.3.11 to 6.3.14 ([#4461](https://github.com/axios/axios/pull/4461)) - Bump follow-redirects from 1.14.7 to 1.14.8 ([#4473](https://github.com/axios/axios/pull/4473)) ## 0.25.0 (January 18, 2022) Breaking changes: - Fixing maxBodyLength enforcement ([#3786](https://github.com/axios/axios/pull/3786)) - Don't rely on strict mode behavior for arguments ([#3470](https://github.com/axios/axios/pull/3470)) - Adding error handling when missing url ([#3791](https://github.com/axios/axios/pull/3791)) - Update isAbsoluteURL.js removing escaping of non-special characters ([#3809](https://github.com/axios/axios/pull/3809)) - Use native Array.isArray() in utils.js ([#3836](https://github.com/axios/axios/pull/3836)) - Adding error handling inside stream end callback ([#3967](https://github.com/axios/axios/pull/3967)) Fixes and Functionality: - Added aborted even handler ([#3916](https://github.com/axios/axios/pull/3916)) - Header types expanded allowing `boolean` and `number` types ([#4144](https://github.com/axios/axios/pull/4144)) - Fix cancel signature allowing cancel message to be `undefined` ([#3153](https://github.com/axios/axios/pull/3153)) - Updated type checks to be formulated better ([#3342](https://github.com/axios/axios/pull/3342)) - Avoid unnecessary buffer allocations ([#3321](https://github.com/axios/axios/pull/3321)) - Adding a socket handler to keep TCP connection live when processing long living requests ([#3422](https://github.com/axios/axios/pull/3422)) - Added toFormData helper function ([#3757](https://github.com/axios/axios/pull/3757)) - Adding responseEncoding prop type in AxiosRequestConfig ([#3918](https://github.com/axios/axios/pull/3918)) Internal and Tests: - Adding axios-test-instance to ecosystem ([#3496](https://github.com/axios/axios/pull/3496)) - Optimize the logic of isAxiosError ([#3546](https://github.com/axios/axios/pull/3546)) - Add tests and documentation to display how multiple inceptors work ([#3564](https://github.com/axios/axios/pull/3564)) - Updating follow-redirects to version 1.14.7 ([#4379](https://github.com/axios/axios/pull/4379)) Documentation: - Fixing changelog to show correct pull request ([#4219](https://github.com/axios/axios/pull/4219)) - Update upgrade guide for https proxy setting ([#3604](https://github.com/axios/axios/pull/3604)) Huge thanks to everyone who contributed to this release via code (authors listed below) or via reviews and triaging on GitHub: - [Jay](mailto:jasonsaayman@gmail.com) - [Rijk van Zanten](https://github.com/rijkvanzanten) - [Kohta Ito](https://github.com/koh110) - [Brandon Faulkner](https://github.com/bfaulk96) - [Stefano Magni](https://github.com/NoriSte) - [enofan](https://github.com/fanguangyi) - [Andrey Pechkurov](https://github.com/puzpuzpuz) - [Doowonee](https://github.com/doowonee) - [Emil Broman](https://github.com/emilbroman-eqt) - [Remco Haszing](https://github.com/remcohaszing) - [Black-Hole](https://github.com/BlackHole1) - [Wolfram Kriesing](https://github.com/wolframkriesing) - [Andrew Ovens](https://github.com/repl-andrew-ovens) - [Paulo Renato](https://github.com/PauloRSF) - [Ben Carp](https://github.com/carpben) - [Hirotaka Tagawa](https://github.com/wafuwafu13) - [狼族小狈](https://github.com/lzxb) - [C. Lewis](https://github.com/ctjlewis) - [Felipe Carvalho](https://github.com/FCarvalhoVII) - [Daniel](https://github.com/djs113) - [Gustavo Sales](https://github.com/gussalesdev) ## 0.24.0 (October 25, 2021) Breaking changes: - Revert: change type of AxiosResponse to any, please read lengthy discussion here: ([#4141](https://github.com/axios/axios/issues/4141)) pull request: ([#4186](https://github.com/axios/axios/pull/4186)) Huge thanks to everyone who contributed to this release via code (authors listed below) or via reviews and triaging on GitHub: - [Jay](mailto:jasonsaayman@gmail.com) - [Rodry](https://github.com/ImRodry) - [Remco Haszing](https://github.com/remcohaszing) - [Isaiah Thomason](https://github.com/ITenthusiasm) ## 0.23.0 (October 12, 2021) Breaking changes: - Distinguish request and response data types ([#4116](https://github.com/axios/axios/pull/4116)) - Change never type to unknown ([#4142](https://github.com/axios/axios/pull/4142)) - Fixed TransitionalOptions typings ([#4147](https://github.com/axios/axios/pull/4147)) Fixes and Functionality: - Adding globalObject: 'this' to webpack config ([#3176](https://github.com/axios/axios/pull/3176)) - Adding insecureHTTPParser type to AxiosRequestConfig ([#4066](https://github.com/axios/axios/pull/4066)) - Fix missing semicolon in typings ([#4115](https://github.com/axios/axios/pull/4115)) - Fix response headers types ([#4136](https://github.com/axios/axios/pull/4136)) Internal and Tests: - Improve timeout error when timeout is browser default ([#3209](https://github.com/axios/axios/pull/3209)) - Fix node version on CI ([#4069](https://github.com/axios/axios/pull/4069)) - Added testing to TypeScript portion of project ([#4140](https://github.com/axios/axios/pull/4140)) Documentation: - Rename Angular to AngularJS ([#4114](https://github.com/axios/axios/pull/4114)) Huge thanks to everyone who contributed to this release via code (authors listed below) or via reviews and triaging on GitHub: - [Jay](mailto:jasonsaayman@gmail.com) - [Evan-Finkelstein](https://github.com/Evan-Finkelstein) - [Paweł Szymański](https://github.com/Jezorko) - [Dobes Vandermeer](https://github.com/dobesv) - [Claas Augner](https://github.com/caugner) - [Remco Haszing](https://github.com/remcohaszing) - [Evgeniy](https://github.com/egmen) - [Dmitriy Mozgovoy](https://github.com/DigitalBrainJS) ## 0.22.0 (October 01, 2021) Fixes and Functionality: - Caseless header comparing in HTTP adapter ([#2880](https://github.com/axios/axios/pull/2880)) - Avoid package.json import fixing issues and warnings related to this ([#4041](https://github.com/axios/axios/pull/4041)), ([#4065](https://github.com/axios/axios/pull/4065)) - Fixed cancelToken leakage and added AbortController support ([#3305](https://github.com/axios/axios/pull/3305)) - Updating CI to run on release branches - Bump follow redirects version - Fixed default transitional config for custom Axios instance; ([#4052](https://github.com/axios/axios/pull/4052)) Huge thanks to everyone who contributed to this release via code (authors listed below) or via reviews and triaging on GitHub: - [Jay](mailto:jasonsaayman@gmail.com) - [Matt R. Wilson](https://github.com/mastermatt) - [Xianming Zhong](https://github.com/chinesedfan) - [Dmitriy Mozgovoy](https://github.com/DigitalBrainJS) ## 0.21.4 (September 6, 2021) Fixes and Functionality: - Fixing JSON transform when data is stringified. Providing backward compatibility and complying to the JSON RFC standard ([#4020](https://github.com/axios/axios/pull/4020)) Huge thanks to everyone who contributed to this release via code (authors listed below) or via reviews and triaging on GitHub: - [Jay](mailto:jasonsaayman@gmail.com) - [Guillaume Fortaine](https://github.com/gfortaine) - [Yusuke Kawasaki](https://github.com/kawanet) - [Dmitriy Mozgovoy](https://github.com/DigitalBrainJS) ## 0.21.3 (September 4, 2021) Fixes and Functionality: - Fixing response interceptor not being called when request interceptor is attached ([#4013](https://github.com/axios/axios/pull/4013)) Huge thanks to everyone who contributed to this release via code (authors listed below) or via reviews and triaging on GitHub: - [Jay](mailto:jasonsaayman@gmail.com) - [Julian Hollmann](https://github.com/nerdbeere) ## 0.21.2 (September 4, 2021) Fixes and Functionality: - Updating axios requests to be delayed by pre-emptive promise creation ([#2702](https://github.com/axios/axios/pull/2702)) - Adding "synchronous" and "runWhen" options to interceptors api ([#2702](https://github.com/axios/axios/pull/2702)) - Updating of transformResponse ([#3377](https://github.com/axios/axios/pull/3377)) - Adding ability to omit User-Agent header ([#3703](https://github.com/axios/axios/pull/3703)) - Adding multiple JSON improvements ([#3688](https://github.com/axios/axios/pull/3688), [#3763](https://github.com/axios/axios/pull/3763)) - Fixing quadratic runtime and extra memory usage when setting a maxContentLength ([#3738](https://github.com/axios/axios/pull/3738)) - Adding parseInt to config.timeout ([#3781](https://github.com/axios/axios/pull/3781)) - Adding custom return type support to interceptor ([#3783](https://github.com/axios/axios/pull/3783)) - Adding security fix for ReDoS vulnerability ([#3980](https://github.com/axios/axios/pull/3980)) Internal and Tests: - Updating build dev dependencies ([#3401](https://github.com/axios/axios/pull/3401)) - Fixing builds running on Travis CI ([#3538](https://github.com/axios/axios/pull/3538)) - Updating follow redirect version ([#3694](https://github.com/axios/axios/pull/3694), [#3771](https://github.com/axios/axios/pull/3771)) - Updating karma sauce launcher to fix failing sauce tests ([#3712](https://github.com/axios/axios/pull/3712), [#3717](https://github.com/axios/axios/pull/3717)) - Updating content-type header for application/json to not contain charset field, according do RFC 8259 ([#2154](https://github.com/axios/axios/pull/2154)) - Fixing tests by bumping karma-sauce-launcher version ([#3813](https://github.com/axios/axios/pull/3813)) - Changing testing process from Travis CI to GitHub Actions ([#3938](https://github.com/axios/axios/pull/3938)) Documentation: - Updating documentation around the use of `AUTH_TOKEN` with multiple domain endpoints ([#3539](https://github.com/axios/axios/pull/3539)) - Remove duplication of item in changelog ([#3523](https://github.com/axios/axios/pull/3523)) - Fixing grammatical errors ([#2642](https://github.com/axios/axios/pull/2642)) - Fixing spelling error ([#3567](https://github.com/axios/axios/pull/3567)) - Moving gitpod mention ([#2637](https://github.com/axios/axios/pull/2637)) - Adding new axios documentation website link ([#3681](https://github.com/axios/axios/pull/3681), [#3707](https://github.com/axios/axios/pull/3707)) - Updating documentation around dispatching requests ([#3772](https://github.com/axios/axios/pull/3772)) - Adding documentation for the type guard isAxiosError ([#3767](https://github.com/axios/axios/pull/3767)) - Adding explanation of cancel token ([#3803](https://github.com/axios/axios/pull/3803)) - Updating CI status badge ([#3953](https://github.com/axios/axios/pull/3953)) - Fixing errors with JSON documentation ([#3936](https://github.com/axios/axios/pull/3936)) - Fixing README typo under Request Config ([#3825](https://github.com/axios/axios/pull/3825)) - Adding axios-multi-api to the ecosystem file ([#3817](https://github.com/axios/axios/pull/3817)) - Adding SECURITY.md to properly disclose security vulnerabilities ([#3981](https://github.com/axios/axios/pull/3981)) Huge thanks to everyone who contributed to this release via code (authors listed below) or via reviews and triaging on GitHub: - [Jay](mailto:jasonsaayman@gmail.com) - [Sasha Korotkov](https://github.com/SashaKoro) - [Daniel Lopretto](https://github.com/timemachine3030) - [Mike Bishop](https://github.com/MikeBishop) - [Dmitriy Mozgovoy](https://github.com/DigitalBrainJS) - [Mark](https://github.com/bimbiltu) - [Philipe Gouveia Paixão](https://github.com/piiih) - [hippo](https://github.com/hippo2cat) - [ready-research](https://github.com/ready-research) - [Xianming Zhong](https://github.com/chinesedfan) - [Christopher Chrapka](https://github.com/OJezu) - [Brian Anglin](https://github.com/anglinb) - [Kohta Ito](https://github.com/koh110) - [Ali Clark](https://github.com/aliclark) - [caikan](https://github.com/caikan) - [Elina Gorshkova](https://github.com/elinagorshkova) - [Ryota Ikezawa](https://github.com/paveg) - [Nisar Hassan Naqvi](https://github.com/nisarhassan12) - [Jake](https://github.com/codemaster138) - [TagawaHirotaka](https://github.com/wafuwafu13) - [Johannes Jarbratt](https://github.com/johachi) - [Mo Sattler](https://github.com/MoSattler) - [Sam Carlton](https://github.com/ThatGuySam) - [Matt Czapliński](https://github.com/MattCCC) - [Ziding Zhang](https://github.com/zidingz) ## 0.21.1 (December 21, 2020) Fixes and Functionality: - Hotfix: Prevent SSRF ([#3410](https://github.com/axios/axios/pull/3410)) - Protocol not parsed when setting proxy config from env vars ([#3070](https://github.com/axios/axios/pull/3070)) - Updating axios in types to be lower case ([#2797](https://github.com/axios/axios/pull/2797)) - Adding a type guard for `AxiosError` ([#2949](https://github.com/axios/axios/pull/2949)) Internal and Tests: - Remove the skipping of the `socket` http test ([#3364](https://github.com/axios/axios/pull/3364)) - Use different socket for Win32 test ([#3375](https://github.com/axios/axios/pull/3375)) Huge thanks to everyone who contributed to this release via code (authors listed below) or via reviews and triaging on GitHub: - Daniel Lopretto <timemachine3030@users.noreply.github.com> - Jason Kwok <JasonHK@users.noreply.github.com> - Jay <jasonsaayman@gmail.com> - Jonathan Foster <jonathan@jonathanfoster.io> - Remco Haszing <remcohaszing@gmail.com> - Xianming Zhong <chinesedfan@qq.com> ## 0.21.0 (October 23, 2020) Fixes and Functionality: - Fixing requestHeaders.Authorization ([#3287](https://github.com/axios/axios/pull/3287)) - Fixing node types ([#3237](https://github.com/axios/axios/pull/3237)) - Fixing axios.delete ignores config.data ([#3282](https://github.com/axios/axios/pull/3282)) - Revert "Fixing overwrite Blob/File type as Content-Type in browser. (#1773)" ([#3289](https://github.com/axios/axios/pull/3289)) - Fixing an issue that type 'null' and 'undefined' is not assignable to validateStatus when typescript strict option is enabled ([#3200](https://github.com/axios/axios/pull/3200)) Internal and Tests: - Lock travis to not use node v15 ([#3361](https://github.com/axios/axios/pull/3361)) Documentation: - Fixing simple typo, existent -> existent ([#3252](https://github.com/axios/axios/pull/3252)) - Fixing typos ([#3309](https://github.com/axios/axios/pull/3309)) Huge thanks to everyone who contributed to this release via code (authors listed below) or via reviews and triaging on GitHub: - Allan Cruz <57270969+Allanbcruz@users.noreply.github.com> - George Cheng <Gerhut@GMail.com> - Jay <jasonsaayman@gmail.com> - Kevin Kirsche <Kev.Kirsche+GitHub@gmail.com> - Remco Haszing <remcohaszing@gmail.com> - Taemin Shin <cprayer13@gmail.com> - Tim Gates <tim.gates@iress.com> - Xianming Zhong <chinesedfan@qq.com> ## 0.20.0 (August 20, 2020) Release of 0.20.0-pre as a full release with no other changes. ## 0.20.0-pre (July 15, 2020) Fixes and Functionality: - Fixing response with utf-8 BOM can not parse to json ([#2419](https://github.com/axios/axios/pull/2419)) - fix: remove byte order marker (UTF-8 BOM) when transform response - fix: remove BOM only utf-8 - test: utf-8 BOM - fix: incorrect param name - Refactor mergeConfig without utils.deepMerge ([#2844](https://github.com/axios/axios/pull/2844)) - Adding failing test - Fixing #2587 default custom config persisting - Adding Concat keys and filter duplicates - Fixed value from CPE - update for review feedbacks - no deepMerge - only merge between plain objects - fix rename - always merge config by mergeConfig - extract function mergeDeepProperties - refactor mergeConfig with all keys, and add special logic for validateStatus - add test for resetting headers - add lots of tests and fix a bug - should not inherit `data` - use simple toString - Fixing overwrite Blob/File type as Content-Type in browser. ([#1773](https://github.com/axios/axios/pull/1773)) - Fixing an issue that type 'null' is not assignable to validateStatus ([#2773](https://github.com/axios/axios/pull/2773)) - Fixing special char encoding ([#1671](https://github.com/axios/axios/pull/1671)) - removing @ character from replacement list since it is a reserved character - Updating buildURL test to not include the @ character - Removing console logs - Fixing password encoding with special characters in basic authentication ([#1492](https://github.com/axios/axios/pull/1492)) - Fixing password encoding with special characters in basic authentication - Adding test to check if password with non-Latin1 characters pass - Fixing 'Network Error' in react native android ([#1487](https://github.com/axios/axios/pull/1487)) There is a bug in react native Android platform when using get method. It will trigger a 'Network Error' when passing the requestData which is an empty string to request.send function. So if the requestData is an empty string we can set it to null as well to fix the bug. - Fixing Cookie Helper with Async Components ([#1105](https://github.com/axios/axios/pull/1105)) ([#1107](https://github.com/axios/axios/pull/1107)) - Fixing 'progressEvent' type ([#2851](https://github.com/axios/axios/pull/2851)) - Fix 'progressEvent' type - Update axios.ts - Fixing getting local files (file://) failed ([#2470](https://github.com/axios/axios/pull/2470)) - fix issue #2416, #2396 - fix Eslint warn - Modify judgment conditions - add unit test - update unit test - update unit test - Allow PURGE method in typings ([#2191](https://github.com/axios/axios/pull/2191)) - Adding option to disable automatic decompression ([#2661](https://github.com/axios/axios/pull/2661)) - Adding ability to disable auto decompression - Updating decompress documentation in README - Fixing test\unit\adapters\http.js lint errors - Adding test for disabling auto decompression - Removing changes that fixed lint errors in tests - Removing formatting change to unit test - Add independent `maxBodyLength` option ([#2781](https://github.com/axios/axios/pull/2781)) - Add independent option to set the maximum size of the request body - Remove maxBodyLength check - Update README - Assert for error code and message - Adding responseEncoding to mergeConfig ([#1745](https://github.com/axios/axios/pull/1745)) - Compatible with follow-redirect aborts the request ([#2689](https://github.com/axios/axios/pull/2689)) - Compatible with follow-redirect aborts the request - Use the error code - Fix merging of params ([#2656](https://github.com/axios/axios/pull/2656)) - Name function to avoid ESLint func-names warning - Switch params config to merge list and update tests - Restore testing of both false and null - Restore test cases for keys without defaults - Include test for non-object values that aren't false-y. - Revert `finally` as `then` ([#2683](https://github.com/axios/axios/pull/2683)) Internal and Tests: - Fix stale bot config ([#3049](https://github.com/axios/axios/pull/3049)) - fix stale bot config - fix multiple lines - Add days and change name to work ([#3035](https://github.com/axios/axios/pull/3035)) - Update close-issues.yml ([#3031](https://github.com/axios/axios/pull/3031)) - Update close-issues.yml Update close message to read better 😄 - Fix use of quotations Use single quotes as per other .yml files - Remove user name form message - Add GitHub actions to close stale issues/prs ([#3029](https://github.com/axios/axios/pull/3029)) - prepare stale actions - update messages - Add exempt labels and lighten up comments - Add GitHub actions to close invalid issues ([#3022](https://github.com/axios/axios/pull/3022)) - add close actions - fix with checkout - update issue templates - add reminder - update close message - Add test with Node.js 12 ([#2860](https://github.com/axios/axios/pull/2860)) - test with Node.js 12 - test with latest - Adding console log on sandbox server startup ([#2210](https://github.com/axios/axios/pull/2210)) - Adding console log on sandbox server startup - Update server.js Add server error handling - Update server.js Better error message, remove retry. - Adding tests for method `options` type definitions ([#1996](https://github.com/axios/axios/pull/1996)) Update tests. - Add test for redirecting with too large response ([#2695](https://github.com/axios/axios/pull/2695)) - Fixing unit test failure in Windows OS ([#2601](https://github.com/axios/axios/pull/2601)) - Fixing issue for HEAD method and gzipped response ([#2666](https://github.com/axios/axios/pull/2666)) - Fix tests in browsers ([#2748](https://github.com/axios/axios/pull/2748)) - chore: add `jsdelivr` and `unpkg` support ([#2443](https://github.com/axios/axios/pull/2443)) Documentation: - Adding support for URLSearchParams in node ([#1900](https://github.com/axios/axios/pull/1900)) - Adding support for URLSearchParams in node - Remove un-needed code - Update utils.js - Make changes as suggested - Adding table of content (preview) ([#3050](https://github.com/axios/axios/pull/3050)) - add toc (preview) - remove toc in toc Signed-off-by: Moni <usmoni@gmail.com> - fix sublinks - fix indentation - remove redundant table links - update caps and indent - remove axios - Replace 'blacklist' with 'blocklist' ([#3006](https://github.com/axios/axios/pull/3006)) - docs(): Detailed config options environment. ([#2088](https://github.com/axios/axios/pull/2088)) - docs(): Detailed config options environment. - Update README.md - Include axios-data-unpacker in ECOSYSTEM.md ([#2080](https://github.com/axios/axios/pull/2080)) - Allow opening examples in Gitpod ([#1958](https://github.com/axios/axios/pull/1958)) - Remove axios.all() and axios.spread() from Readme.md ([#2727](https://github.com/axios/axios/pull/2727)) - remove axios.all(), axios.spread() - replace example - axios.all() -> Promise.all() - axios.spread(function (acct, perms)) -> function (acct, perms) - add deprecated mark - Update README.md ([#2887](https://github.com/axios/axios/pull/2887)) Small change to the data attribute doc of the config. A request body can also be set for DELETE methods but this wasn't mentioned in the documentation (it only mentioned POST, PUT and PATCH). Took my some 10-20 minutes until I realized that I don't need to manipulate the request body with transformRequest in the case of DELETE. - Include swagger-taxos-codegen in ECOSYSTEM.md ([#2162](https://github.com/axios/axios/pull/2162)) - Add CDNJS version badge in README.md ([#878](https://github.com/axios/axios/pull/878)) This badge will show the version on CDNJS! - Documentation update to clear up ambiguity in code examples ([#2928](https://github.com/axios/axios/pull/2928)) - Made an adjustment to the documentation to clear up any ambiguity around the use of "fs". This should help clear up that the code examples with "fs" cannot be used on the client side. - Update README.md about validateStatus ([#2912](https://github.com/axios/axios/pull/2912)) Rewrote the comment from "Reject only if the status code is greater than or equal to 500" to "Resolve only if the status code is less than 500" - Updating documentation for usage form-data ([#2805](https://github.com/axios/axios/pull/2805)) Closes #2049 - Fixing CHANGELOG.md issue link ([#2784](https://github.com/axios/axios/pull/2784)) - Include axios-hooks in ECOSYSTEM.md ([#2003](https://github.com/axios/axios/pull/2003)) - Added Response header access instructions ([#1901](https://github.com/axios/axios/pull/1901)) - Added Response header access instructions - Added note about using bracket notation - Add `onUploadProgress` and `onDownloadProgress` are browser only ([#2763](https://github.com/axios/axios/pull/2763)) Saw in #928 and #1966 that `onUploadProgress` and `onDownloadProgress` only work in the browser and was missing that from the README. - Update ' sign to ` in proxy spec ([#2778](https://github.com/axios/axios/pull/2778)) - Adding jsDelivr link in README ([#1110](https://github.com/axios/axios/pull/1110)) - Adding jsDelivr link - Add SRI - Remove SRI Huge thanks to everyone who contributed to this release via code (authors listed below) or via reviews and triaging on GitHub: - Alan Wang <wp_scut@163.com> - Alexandru Ungureanu <khakcarot@gmail.com> - Anubhav Srivastava <anubhav.srivastava00@gmail.com> - Benny Neugebauer <bn@bennyn.de> - Cr <631807682@qq.com> - David <cygnidavid@gmail.com> - David Ko <david.ko@pvtmethod.com> - David Tanner <david.tanner@lifeomic.com> - Emily Morehouse <emilyemorehouse@gmail.com> - Felipe Martins <felipewmartins@gmail.com> - Fonger <5862369+Fonger@users.noreply.github.com> - Frostack <soulburn007@gmail.com> - George Cheng <Gerhut@GMail.com> - grumblerchester <grumblerchester@users.noreply.github.com> - Gustavo López <gualopezb@gmail.com> - hexaez <45806662+hexaez@users.noreply.github.com> - huangzuizui <huangzuizui@gmail.com> - Ian Wijma <ian@wij.ma> - Jay <jasonsaayman@gmail.com> - jeffjing <zgayjjf@qq.com> - jennynju <46782518+jennynju@users.noreply.github.com> - Jimmy Liao <52391190+jimmy-liao-gogoro@users.noreply.github.com> - Jonathan Sharpe <j.r.sharpe@gmail.com> - JounQin <admin@1stg.me> - Justin Beckwith <justin.beckwith@gmail.com> - Kamil Posiadała <3dcreator.pl@gmail.com> - Lukas Drgon <lukas.drgon@gmail.com> - marcinx <mail@marcinx.com> - Martti Laine <martti@codeclown.net> - Michał Zarach <michal.m.zarach@gmail.com> - Moni <usmoni@gmail.com> - Motonori Iwata <121048+iwata@users.noreply.github.com> - Nikita Galkin <nikita@galk.in> - Petr Mares <petr@mares.tw> - Philippe Recto <precto1285@gmal.com> - Remco Haszing <remcohaszing@gmail.com> - rockcs1992 <chengshi1219@gmail.com> - Ryan Bown <rbown@niftee.com.au> - Samina Fu <sufuf3@gmail.com> - Simone Busoli <simone.busoli@gmail.com> - Spencer von der Ohe <s.vonderohe40@gmail.com> - Sven Efftinge <sven.efftinge@typefox.io> - Taegyeoung Oh <otk1090@naver.com> - Taemin Shin <cprayer13@gmail.com> - Thibault Ehrhart <1208424+ehrhart@users.noreply.github.com> - Xianming Zhong <chinesedfan@qq.com> - Yasu Flores <carlosyasu91@gmail.com> - Zac Delventhal <delventhalz@gmail.com> ## 0.19.2 (Jan 20, 2020) - Remove unnecessary XSS check ([#2679](https://github.com/axios/axios/pull/2679)) (see ([#2646](https://github.com/axios/axios/issues/2646)) for discussion) ## 0.19.1 (Jan 7, 2020) Fixes and Functionality: - Fixing invalid agent issue ([#1904](https://github.com/axios/axios/pull/1904)) - Fix ignore set withCredentials false ([#2582](https://github.com/axios/axios/pull/2582)) - Delete useless default to hash ([#2458](https://github.com/axios/axios/pull/2458)) - Fix HTTP/HTTPs agents passing to follow-redirect ([#1904](https://github.com/axios/axios/pull/1904)) - Fix ignore set withCredentials false ([#2582](https://github.com/axios/axios/pull/2582)) - Fix CI build failure ([#2570](https://github.com/axios/axios/pull/2570)) - Remove dependency on is-buffer from package.json ([#1816](https://github.com/axios/axios/pull/1816)) - Adding options typings ([#2341](https://github.com/axios/axios/pull/2341)) - Adding Typescript HTTP method definition for LINK and UNLINK. ([#2444](https://github.com/axios/axios/pull/2444)) - Update dist with newest changes, fixes Custom Attributes issue - Change syntax to see if build passes ([#2488](https://github.com/axios/axios/pull/2488)) - Update Webpack + deps, remove now unnecessary polyfills ([#2410](https://github.com/axios/axios/pull/2410)) - Fix to prevent XSS, throw an error when the URL contains a JS script ([#2464](https://github.com/axios/axios/pull/2464)) - Add custom timeout error copy in config ([#2275](https://github.com/axios/axios/pull/2275)) - Add error toJSON example ([#2466](https://github.com/axios/axios/pull/2466)) - Fixing Vulnerability A Fortify Scan finds a critical Cross-Site Scrip… ([#2451](https://github.com/axios/axios/pull/2451)) - Fixing subdomain handling on no_proxy ([#2442](https://github.com/axios/axios/pull/2442)) - Make redirection from HTTP to HTTPS work ([#2426](https://github.com/axios/axios/pull/2426)) and ([#2547](https://github.com/axios/axios/pull/2547)) - Add toJSON property to AxiosError type ([#2427](https://github.com/axios/axios/pull/2427)) - Fixing socket hang up error on node side for slow response. ([#1752](https://github.com/axios/axios/pull/1752)) - Alternative syntax to send data into the body ([#2317](https://github.com/axios/axios/pull/2317)) - Fixing custom config options ([#2207](https://github.com/axios/axios/pull/2207)) - Fixing set `config.method` after mergeConfig for Axios.prototype.request ([#2383](https://github.com/axios/axios/pull/2383)) - Axios create url bug ([#2290](https://github.com/axios/axios/pull/2290)) - Do not modify config.url when using a relative baseURL (resolves [#1628](https://github.com/axios/axios/issues/1098)) ([#2391](https://github.com/axios/axios/pull/2391)) Internal: - Revert "Update Webpack + deps, remove now unnecessary polyfills" ([#2479](https://github.com/axios/axios/pull/2479)) - Order of if/else blocks is causing unit tests mocking XHR. ([#2201](https://github.com/axios/axios/pull/2201)) - Add license badge ([#2446](https://github.com/axios/axios/pull/2446)) - Fix travis CI build [#2386](https://github.com/axios/axios/pull/2386) - Fix cancellation error on build master. #2290 #2207 ([#2407](https://github.com/axios/axios/pull/2407)) Documentation: - Fixing typo in CHANGELOG.md: s/Functionallity/Functionality ([#2639](https://github.com/axios/axios/pull/2639)) - Fix badge, use master branch ([#2538](https://github.com/axios/axios/pull/2538)) - Fix typo in changelog [#2193](https://github.com/axios/axios/pull/2193) - Document fix ([#2514](https://github.com/axios/axios/pull/2514)) - Update docs with no_proxy change, issue #2484 ([#2513](https://github.com/axios/axios/pull/2513)) - Fixing missing words in docs template ([#2259](https://github.com/axios/axios/pull/2259)) - 🐛Fix request finally documentation in README ([#2189](https://github.com/axios/axios/pull/2189)) - updating spelling and adding link to docs ([#2212](https://github.com/axios/axios/pull/2212)) - docs: minor tweak ([#2404](https://github.com/axios/axios/pull/2404)) - Update response interceptor docs ([#2399](https://github.com/axios/axios/pull/2399)) - Update README.md ([#2504](https://github.com/axios/axios/pull/2504)) - Fix word 'sintaxe' to 'syntax' in README.md ([#2432](https://github.com/axios/axios/pull/2432)) - updating README: notes on CommonJS autocomplete ([#2256](https://github.com/axios/axios/pull/2256)) - Fix grammar in README.md ([#2271](https://github.com/axios/axios/pull/2271)) - Doc fixes, minor examples cleanup ([#2198](https://github.com/axios/axios/pull/2198)) ## 0.19.0 (May 30, 2019) Fixes and Functionality: - Added support for no_proxy env variable ([#1693](https://github.com/axios/axios/pull/1693/files)) - Chance Dickson - Unzip response body only for statuses != 204 ([#1129](https://github.com/axios/axios/pull/1129)) - drawski - Destroy stream on exceeding maxContentLength (fixes [#1098](https://github.com/axios/axios/issues/1098)) ([#1485](https://github.com/axios/axios/pull/1485)) - Gadzhi Gadzhiev - Makes Axios error generic to use AxiosResponse ([#1738](https://github.com/axios/axios/pull/1738)) - Suman Lama - Fixing Mocha tests by locking follow-redirects version to 1.5.10 ([#1993](https://github.com/axios/axios/pull/1993)) - grumblerchester - Allow uppercase methods in typings. ([#1781](https://github.com/axios/axios/pull/1781)) - Ken Powers - Fixing building url with hash mark ([#1771](https://github.com/axios/axios/pull/1771)) - Anatoly Ryabov - This commit fix building url with hash map (fragment identifier) when parameters are present: they must not be added after `#`, because client cut everything after `#` - Preserve HTTP method when following redirect ([#1758](https://github.com/axios/axios/pull/1758)) - Rikki Gibson - Add `getUri` signature to TypeScript definition. ([#1736](https://github.com/axios/axios/pull/1736)) - Alexander Trauzzi - Adding isAxiosError flag to errors thrown by axios ([#1419](https://github.com/axios/axios/pull/1419)) - Ayush Gupta Internal: - Fixing .eslintrc without extension ([#1789](https://github.com/axios/axios/pull/1789)) - Manoel - Fix failing SauceLabs tests by updating configuration - Emily Morehouse - Add issue templates - Emily Morehouse Documentation: - Consistent coding style in README ([#1787](https://github.com/axios/axios/pull/1787)