[Snyk] Upgrade axios from 1.9.0 to 1.13.2

[Sunwuyuan]

Snyk has created this PR to upgrade axios from 1.9.0 to 1.13.2.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 8 versions ahead of your current version.

• The recommended version was released 3 months ago.

Issues fixed by the recommended upgrade:

	Issue	Score	Exploit Maturity
	Allocation of Resources Without Limits or Throttling SNYK-JS-AXIOS-12613773	666	Proof of Concept

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• This PR was automatically created by Snyk using the credentials of a real user.
• Max score is 1000. Note that the real score may have changed since the PR was raised.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

• 🧐 View latest project report
• 📜 Customise PR templates
• 🛠 Adjust upgrade PR settings
• 🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
our-world	Error		Feb 11, 2026 9:44am

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	axios@​1.9.0 ⏵ 1.13.5	-1	+22

View full report

[Copilot]

Pull request overview

This PR updates the project’s HTTP client dependency (axios) to a newer minor version as recommended by Snyk, bringing along the corresponding lockfile updates for axios and its transitive dependencies.

Changes:

• Bump axios dependency in package.json from ^1.9.0 to ^1.13.2.
• Update pnpm-lock.yaml to resolve axios to 1.13.5 and refresh related transitive dependencies (follow-redirects, form-data).

Reviewed changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated 2 comments.

File	Description
package.json	Updates the declared axios version range to the recommended newer version.
pnpm-lock.yaml	Updates resolved versions/integrities for axios and transitive deps (follow-redirects, form-data).

Files not reviewed (1)

• pnpm-lock.yaml: Language not supported

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

pnpm-lock.yaml is out of sync with package.json: the importer specifier for axios is ^1.13.5 but package.json declares ^1.13.2. This will likely cause pnpm install --frozen-lockfile (or CI lockfile checks) to fail. Regenerate the lockfile from the current package.json (or align the specifiers) so the importer specifier matches the manifest.

Suggested change

	specifier: ^1.13.5
	specifier: ^1.13.2

[Copilot]

The PR description/title says the upgrade is to axios 1.13.2, but the lockfile currently resolves axios to 1.13.5 (and even records the specifier as ^1.13.5). Please ensure the intended target version/range is consistent across package.json, pnpm-lock.yaml, and the PR metadata to avoid confusion and lockfile drift.

[wuyuancat]

测试

[wuyuancat]

此拉取请求已在 Kernyr 上被提及。那里可能有相关详细信息：

http://kernyr.wuyuan.dev/t/topic/110/1