Snyk Automation: Snyk

nathan-hansberry · nathan-hansberry · commit b84f30c64cbc · 2026-07-06T12:48:35.000+01:00
diff --git a/package-lock.json b/package-lock.json
diff --git a/package.json b/package.json
@@ -63,7 +63,7 @@
   },
   "dependencies": {
     "@babel/runtime": "^7.9.2",
-    "axios": "^1.15.2",
+    "axios": "^1.16.0",
     "date-fns": "^2.29.3",
     "exponential-backoff": "^3.1.0",
     "safe-json-stringify": "^1.2.0",
diff --git a/webpack.config.js b/webpack.config.js
@@ -50,8 +50,11 @@ module.exports = (env) => {
     module: {
       rules: [
         {
+          // exclude node_modules/bower_components except axios, whose fetch
+          // adapter (as of 1.16.0, SNYK-JS-AXIOS-17111062/17111079/17172681)
+          // uses syntax webpack 4's parser can't handle unless babel-transpiled
           test: /\.js$/,
-          exclude: /(node_modules|bower_components)/,
+          exclude: /(node_modules|bower_components)(?!.*[/\\]axios[/\\])/,
           loader: 'babel-loader',
           query: {
             presets: ['@babel/preset-env']
