chore(deps)(deps): bump axios from 1.12.2 to 1.13.1 in /frontend

[dependabot]

Bumps axios from 1.12.2 to 1.13.1.

Release notes

Sourced from axios's releases.

Release v1.13.1

Release notes:

Bug Fixes

• http: fixed a regression that caused the data stream to be interrupted for responses with non-OK HTTP statuses; (#7193) (bcd5581)

Contributors to this release

• Anchal Singh
• Dmitriy Mozgovoy

Release v1.13.0

Release notes:

Bug Fixes

• fetch: prevent TypeError when config.env is undefined (#7155) (015faec)
• resolve issue #7131 (added spacing in mergeConfig.js) (#7133) (9b9ec98)

Features

• http: add HTTP2 support; (#7150) (d676df7)

Contributors to this release

• Dmitriy Mozgovoy
• Noritaka Kobayashi
• Aviraj2929
• prasoon patel
• Samyak Dandge
• Anchal Singh
• Rahul Kumar
• Amit Verma
• Abhishek3880
• Dhvani Maktuporia
• Usama Ayoub
• ikuy1203
• Nikhil Simon Toppo
• Jane Wangari
• Supakorn Ieamgomol
• Kian-Meng Ang
• UTSUMI Keiji

Changelog

Sourced from axios's changelog.

1.13.1 (2025-10-28)

Bug Fixes

• http: fixed a regression that caused the data stream to be interrupted for responses with non-OK HTTP statuses; (#7193) (bcd5581)

Contributors to this release

• Anchal Singh
• Dmitriy Mozgovoy

1.13.0 (2025-10-27)

Bug Fixes

• fetch: prevent TypeError when config.env is undefined (#7155) (015faec)
• resolve issue #7131 (added spacing in mergeConfig.js) (#7133) (9b9ec98)

Features

• http: add HTTP2 support; (#7150) (d676df7)

Contributors to this release

• Dmitriy Mozgovoy
• Noritaka Kobayashi
• Aviraj2929
• prasoon patel
• Samyak Dandge
• Anchal Singh
• Rahul Kumar
• Amit Verma
• Abhishek3880
• Dhvani Maktuporia
• Usama Ayoub
• ikuy1203
• Nikhil Simon Toppo
• Jane Wangari
• Supakorn Ieamgomol
• Kian-Meng Ang
• UTSUMI Keiji

Commits

• 1ef8e72 chore(release): v1.13.1 (#7194)
• bcd5581 fix(http): fixed a regression that caused the data stream to be interrupted f...
• c9b3371 chore: enhance styling and responsiveness in client.html (#7173)
• 9ead04d [Release] v1.13.0 (#7189)
• d000fbf fix(http2): fix possible race condition when handling http2 stream on almost ...
• 08db960 docs: added example for improved network error handling (with Wrapper/Middlew...
• 46e1981 refactor: form data handling in index.html (#7170)
• 889f8ef docs: fix mismatched return type (#7172)
• 7b197ef fix: sandbox ui updated (#7175)
• 6dff629 chore: fix typos in examples (#7166)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Labels

The following labels could not be found: frontend. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[claude]

Pull Request Review: Axios Dependency Update

Overview

This PR updates the axios dependency from version 1.12.2 to 1.13.1 in the frontend package.

---

✅ Positive Aspects

1. Security & Bug Fixes: This update includes important bug fixes:

   • Fixes a regression that caused data stream interruption for non-OK HTTP responses (critical for your API error handling)
   • Fixes TypeError when config.env is undefined
   • These fixes directly benefit the RSSY frontend's API client (src/lib/api.ts)

2. New Features: Adds HTTP/2 support, which could improve performance for API requests if supported by the backend

3. Automated Update: Dependabot properly identified and updated both package.json and package-lock.json consistently

4. Minimal Risk: This is a minor version update (1.12.x → 1.13.x) which should maintain backward compatibility per semver

---

🔍 Testing Recommendations

Before merging, I recommend testing the following areas since axios is critical to your frontend:

1. API Client Functionality (src/lib/api.ts):

   • Test feed operations: GET /api/feeds, POST /api/feeds, DELETE /api/feeds/:id
   • Test post operations: GET /api/posts, PATCH /api/posts/:id/read
   • Verify Reddit feed creation: POST /api/feeds/reddit

2. Error Handling: Especially important given the bug fix for non-OK HTTP responses:

   • Test error responses (404, 400, 500 status codes)
   • Verify error messages still display correctly in the UI
   • Check that the error store (src/lib/stores.ts) receives errors properly

3. Loading States: Ensure loading indicators work correctly during API calls

4. Manual Testing:

   cd frontend
   npm install
   npm run dev
   # Test: Add feed, delete feed, mark post as read, refresh feeds

---

📋 Code Quality Assessment

Changes: ✅ Clean

• Only updates version numbers in package.json and package-lock.json
• No code changes required

Best Practices: ✅ Follows conventions

• Standard dependency update process
• Lock file properly updated

Security: ✅ Improved

• Updates to latest minor version with bug fixes
• No known vulnerabilities introduced

Performance: ✅ Neutral to positive

• HTTP/2 support added (optional feature)
• Bug fixes may improve stream handling performance

---

💡 Recommendation

APPROVE with suggested testing.

This is a low-risk dependency update that includes important bug fixes for HTTP response handling. The changes are minimal (version numbers only) and the update follows semver conventions for backward compatibility.

Suggested merge process:

1. Run make frontend-check to verify TypeScript compilation
2. Perform manual testing of API operations as outlined above
3. Verify error handling still works correctly
4. Merge if all tests pass

---

📝 Additional Notes

• The bug fix for data stream interruption (issue #7193) is particularly relevant since your frontend handles RSS feed data that can be large
• Consider monitoring API response times after merging to see if HTTP/2 support provides any performance benefits
• No breaking changes are expected, but the error handling fix might subtly change behavior for error responses (improvement)

[dependabot]

Superseded by #20.