Skip to content

chore: stop pinning the axios dep to a precise version#1150

Merged
wing328 merged 1 commit intoOpenAPITools:masterfrom
pcorpet:feature/pin-axios
Feb 26, 2026
Merged

chore: stop pinning the axios dep to a precise version#1150
wing328 merged 1 commit intoOpenAPITools:masterfrom
pcorpet:feature/pin-axios

Conversation

@pcorpet
Copy link
Contributor

@pcorpet pcorpet commented Feb 25, 2026

Use the recent improvement of lostpebble/generate-package-json-webpack-plugin#49 to propagate a caret version of the axios dep in the released package.

Fixes #796


Summary by cubic

Switch the generated package’s axios dependency from an exact version to a caret range so consumers get minor/patch updates. Update generate-package-json-webpack-plugin to 2.7.0 and set axios: '^' in the generator config to propagate the caret version on release.

Written for commit 0dfd3c7. Summary will update on new commits.

Use the recent improvement of lostpebble/generate-package-json-webpack-plugin#49 to propagate
a caret version of the axios dep in the released package.

Fixes OpenAPITools#796
Copy link
Contributor

@cubic-dev-ai cubic-dev-ai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

No issues found across 3 files

@wing328 wing328 merged commit 82c7205 into OpenAPITools:master Feb 26, 2026
4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[Question] Vulnerability Handling and pinned versions in exposed dependencies

2 participants