[Snyk] Security upgrade axios from 0.21.1 to 1.6.3

[terrorizer1980]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • web-console/package.json
  • web-console/package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	658/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-AXIOS-6124857	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: axios

The new version differs by 250 commits.

• b15b918 chore(release): v1.6.3 (Fix redirect to configuration doc apache/druid#6151)
• b76cce0 chore(ci): added branches filter for notify action; (Add broken test to demonstrate that CI can pass apache/druid#6084)
• 5e7ad38 fix: Regular Expression Denial of Service (ReDoS) ("Kill task" failure when interval data partitioned apache/druid#6132)
• 8befb86 docs: update alloy link ([Backport] Add docs for virtual columns and transform specs apache/druid#6145)
• d18f40d docs: add headline sponsors
• b3be365 chore(release): v1.6.2 (Implement three-valued logic to handle nulls for boolean values.  apache/druid#6082)
• 8739acb chore(ci): removed redundant release action; (Possible bug while making a lot of batch injections. InterruptedException: sleep interrupted apache/druid#6081)
• bfa9c30 chore(docs): fix outdated grunt to npm scripts (Add definition of 'NONE' to queryGranularity in ingestion.index doc apache/druid#6073)
• a2b0fb3 chore(docs): update README.md (Make non-numeric aggregator factories nullable apache/druid#6048)
• b12a608 chore(ci): removed paths-ignore filter; (Accept total rows over Integer.MAX_VALUE. apache/druid#6080)
• 0c9d886 chore(ci): reworked ignoring files logic; (multi datasource occurs 'connection holder is null' apache/druid#6079)
• 30873ee chore(ci): add paths-ignore config to testing action; (Add the '--fail-at-end' option to maven command for 'strictly compiled' part apache/druid#6078)
• cff9967 feat(withXSRFToken): added withXSRFToken option as a workaround to achieve the old `withCredentials` behavior; (allow 'secondary' deep storage to easily allow deep storage migration apache/druid#6046)
• 7009715 chore(ci): fixed release notification action; (Duplicate DataSegmentTest apache/druid#6064)
• 7144f10 chore(ci): fixed release notification action; (FinalizingFieldAccessPostAggregator cannot be deserialized once it gets decorated apache/druid#6063)
• f6d2cf9 chore(ci): fix publish action content permission; (skip travis on doc only changes apache/druid#6061)
• a22f4b9 chore(release): v1.6.1 (Add the correct createdTime to waiting tasks apache/druid#6060)
• cb8bb2b chore(ci): Publish to NPM with provenance (Check and make sure that the files that have been donated have been updated to reflect the new ASF copyright. apache/druid#5835)
• 37cbf92 chore(ci): added labeling and notification for published PRs; (CompactionTask: Reject empty intervals on construction. apache/druid#6059)
• dd465ab fix(formdata): fixed content-type header normalization for non-standard browser environments; ([Backport] Synchronize scheduled poll() calls in SQLMetadataSegmentManager apache/druid#6056)
• 3dc8369 fix(platform): fixed emulated browser detection in node.js environment; ([Backport] Synchronize scheduled poll() calls in SQLMetadataRuleManager to prevent flakiness in SqlMetadataRuleManagerTest apache/druid#6055)
• f7adacd chore(release): v1.6.0 (Remove JDK 7 from build documentation. apache/druid#6031)
• 9917e67 chore(ci): fix release-it arg; (Fix coordinator balancer 'moved' logs and metrics apache/druid#6032)
• 96ee232 fix(CSRF): fixed CSRF vulnerability CVE-2023-45857 (Error in SqlMetadataRuleManagerTest apache/druid#6028)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)

[stale]

This pull request has been marked as stale due to 60 days of inactivity. It will be closed in 4 weeks if no further activity occurs. If you think that's incorrect or this pull request should instead be reviewed, please simply write any comment. Even if closed, you can still revive the PR at any time or discuss it on the dev@druid.apache.org list. Thank you for your contributions.

[stale]

This pull request/issue has been closed due to lack of activity. If you think that is incorrect, or the pull request requires review, you can revive the PR at any time.