fix: Update form-data to 4.0.4 and add dependency overrides#77
fix: Update form-data to 4.0.4 and add dependency overrides#77Harshi-Shah-CS merged 2 commits intostagingfrom
Conversation
Update form-data to 4.0.4 and add dependency overrides
There was a problem hiding this comment.
Pull request overview
This PR updates the form-data package to version 4.0.4 and introduces a new overrides section to enforce specific versions of transitive dependencies across the entire dependency tree. The changes address dependency version consistency by pinning form-data to 4.0.4 and constraining axios to the 1.10.x series.
Key changes:
- Updated
form-datafrom^4.0.0to exact version4.0.4in direct dependencies - Added
overridessection to forceaxiosto~1.10.0andform-datato4.0.4across all nested packages - Updated package-lock.json to reflect the new dependency resolution with axios 1.10.0 installed in nested locations
Reviewed changes
Copilot reviewed 1 out of 2 changed files in this pull request and generated 1 comment.
| File | Description |
|---|---|
| package.json | Updated form-data to exact version 4.0.4 and added overrides section to enforce specific versions of axios (~1.10.0) and form-data (4.0.4) across transitive dependencies |
| package-lock.json | Reflects the new dependency resolution with form-data updated from 4.0.3 to 4.0.4, axios upgraded from 1.9.0 to 1.10.0 and relocated to nested node_modules for @contentstack packages |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
| "prepare": "husky" | ||
| }, | ||
| "overrides": { | ||
| "axios": "~1.10.0", |
There was a problem hiding this comment.
The axios override uses a tilde range (~1.10.0) while form-data uses an exact version (4.0.4). This creates an inconsistency in versioning strategy within the overrides section. Consider using a consistent approach - either both should use exact versions for maximum predictability, or both should use ranges. Given that form-data is pinned to an exact version elsewhere in the file (line 40), it would be more consistent to use an exact version for axios as well (e.g., "1.10.0" instead of "~1.10.0").
| "axios": "~1.10.0", | |
| "axios": "1.10.0", |
Update form-data to 4.0.4 and add dependency overrides