Skip to content

chore(release): v8.10.0#638

Open
github-actions[bot] wants to merge 2 commits intomainfrom
release-v8.10.0
Open

chore(release): v8.10.0#638
github-actions[bot] wants to merge 2 commits intomainfrom
release-v8.10.0

Conversation

@github-actions
Copy link
Contributor

@github-actions github-actions bot commented Mar 6, 2026

🚀 v8.10.0

Make sure to use squash & merge when merging!
Once this is merged, another job will kick off automatically and publish the package.

📝 Changelog

8.10.0 (2026-03-06)

⚠ Security Fixes

  • Upgraded axios from 0.x to ^1.13.5 to fix CSRF, SSRF/credential leakage, and DoS via __proto__ vulnerabilities (#636)
  • Upgraded form-data from ^4.0.0 to ^4.0.4 to fix unsafe random function usage (#636)
  • Upgraded qs from ^6.10.2 to ^6.14.2 to fix DoS vulnerabilities (#636)
  • Added yarn resolution for jws ^3.2.3 to fix HMAC signature verification in jsonwebtoken (#636)

Bug Fixes

  • Fixed TypeScript imports for axios 1.x compatibility in client.ts, files.ts, and images.ts (#636)
  • Skip user flagging tests when moderation is not enabled (#635)

@itsmeadi itsmeadi enabled auto-merge (squash) March 6, 2026 18:40
@github-actions
Copy link
Contributor Author

github-actions bot commented Mar 6, 2026

Size Change: 0 B

Total Size: 109 kB

ℹ️ View Unchanged
Filename Size
dist/js_min/getstream.js 35.5 kB
dist/js/getstream.js 73.9 kB

compressed-size-action

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant