chore(deps): bump axios from 0.25.0 to 1.6.5 in /functions

[dependabot]

Bumps axios from 0.25.0 to 1.6.5.

Release notes

Sourced from axios's releases.

Release v1.6.5

Release notes:

Bug Fixes

• ci: refactor notify action as a job of publish action; (#6176) (0736f95)
• dns: fixed lookup error handling; (#6175) (f4f2b03)

Contributors to this release

• Dmitriy Mozgovoy
• Jay

Release v1.6.4

Release notes:

Bug Fixes

• security: fixed formToJSON prototype pollution vulnerability; (#6167) (3c0c11c)
• security: fixed security vulnerability in follow-redirects (#6163) (75af1cd)

Contributors to this release

• Jay
• Dmitriy Mozgovoy
• Guy Nesher

Release v1.6.3

Release notes:

Bug Fixes

• Regular Expression Denial of Service (ReDoS) (#6132) (5e7ad38)

Contributors to this release

• Jay
• Willian Agostini
• Dmitriy Mozgovoy

Release v1.6.2

Release notes:

Features

• withXSRFToken: added withXSRFToken option as a workaround to achieve the old withCredentials behavior; (#6046) (cff9967)

PRs

• feat(withXSRFToken): added withXSRFToken option as a workaround to achieve the old `withCredentials` behavior; ( #6046 )

📢 This PR added 'withXSRFToken' option as a replacement for old withCredentials behaviour. 
You should now use withXSRFToken along with withCredential to get the old behavior.
This functionality is considered as a fix.
</tr></table> 

... (truncated)

Changelog

Sourced from axios's changelog.

1.6.5 (2024-01-05)

Bug Fixes

• ci: refactor notify action as a job of publish action; (#6176) (0736f95)
• dns: fixed lookup error handling; (#6175) (f4f2b03)

Contributors to this release

• Dmitriy Mozgovoy
• Jay

1.6.4 (2024-01-03)

Bug Fixes

• security: fixed formToJSON prototype pollution vulnerability; (#6167) (3c0c11c)
• security: fixed security vulnerability in follow-redirects (#6163) (75af1cd)

Contributors to this release

• Jay
• Dmitriy Mozgovoy
• Guy Nesher

1.6.3 (2023-12-26)

Bug Fixes

• Regular Expression Denial of Service (ReDoS) (#6132) (5e7ad38)

Contributors to this release

• Jay
• Willian Agostini
• Dmitriy Mozgovoy

1.6.2 (2023-11-14)

Features

• withXSRFToken: added withXSRFToken option as a workaround to achieve the old withCredentials behavior; (#6046) (cff9967)

PRs

• feat(withXSRFToken): added withXSRFToken option as a workaround to achieve the old `withCredentials` behavior; ( #6046 )

</tr></table> 

... (truncated)

Commits

• 6d4c421 chore(release): v1.6.5 (#6177)
• 0736f95 fix(ci): refactor notify action as a job of publish action; (#6176)
• f4f2b03 fix(dns): fixed lookup error handling; (#6175)
• 1f73dcb docs: update sponsor links
• 8790b8e chore(release): v1.6.4 (#6173)
• 0ad520d chore(ci): fix notify action; (#6172)
• 3c0c11c fix(security): fixed formToJSON prototype pollution vulnerability; (#6167)
• 75af1cd fix(security): fixed security vulnerability in follow-redirects (#6163)
• 90864b3 docs: update logos
• 1542719 docs: updated headline sponsors
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[guardrails]

⚠️ We detected 6 security issues in this pull request:

Insecure File Management (1)

Severity	Details	Docs
High	Title: Path Traversal from user input Spot-the-Hole/functions/index.js Line 562 in 7a8f62d path.join(os.tmpdir(), path.basename(req.files.file[0].fieldname)),	📚

More info on how to fix Insecure File Management in JavaScript.

---

Insecure Use of Crypto (1)

Severity	Details	Docs
Medium	Title: Insecure use of random generator Spot-the-Hole/functions/index.js Line 204 in 7a8f62d result += characters.charAt(Math.floor(Math.random() * charactersLength));	📚

More info on how to fix Insecure Use of Crypto in JavaScript.

---

Vulnerable Libraries (4)

Severity	Details
Critical	pkg:npm/[email protected] upgrade to: > 11.3.0
High	pkg:npm/[email protected] upgrade to: > 0.3.1
High	pkg:npm/[email protected] upgrade to: > 4.2.1
Critical	pkg:npm/@tensorflow/[email protected] upgrade to: > 3.14.0

More info on how to fix Vulnerable Libraries in JavaScript.

---

👉 Go to the dashboard for detailed results.

📥 Happy? Share your feedback with us.

[sonarqubecloud]

Quality Gate passed

Kudos, no new issues were introduced!

0 New issues
0 Security Hotspots
No data about Coverage
0.0% Duplication on New Code

See analysis details on SonarCloud

[stale]

Automatically marked as stale due to lack of recent activity. Will be closed if no further activity occurs. Thank you for your contributions.

[dependabot]

Superseded by #491.