From f9a2a0ad6c89b8916ecdcfc3258cced08ed882fe Mon Sep 17 00:00:00 2001
From: Antoine Clausse <antoine.clausse@overleaf.com>
Date: Thu, 23 Jul 2026 17:01:54 +0200
Subject: [PATCH] Merge pull request #35733 from
 overleaf/lg-axios-security-upgrade

[Security upgrade] bump axios from 1.16.0 to 1.18.1 in services/web

GitOrigin-RevId: 9c413da00f137873b964b956364b742d366869eb
---
 yarn.lock | 9 +++++----
 1 file changed, 5 insertions(+), 4 deletions(-)

diff --git a/yarn.lock b/yarn.lock
index 10d48fa7d0..b874568540 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -13551,13 +13551,14 @@ __metadata:
   linkType: hard
 
 "axios@npm:>=0.27, axios@npm:^1.15.0, axios@npm:^1.6.3, axios@npm:^1.6.7, axios@npm:^1.8.3":
-  version: 1.16.0
-  resolution: "axios@npm:1.16.0"
+  version: 1.18.1
+  resolution: "axios@npm:1.18.1"
   dependencies:
     follow-redirects: "npm:^1.16.0"
     form-data: "npm:^4.0.5"
+    https-proxy-agent: "npm:^5.0.1"
     proxy-from-env: "npm:^2.1.0"
-  checksum: 10c0/1c91a5221b77b76072026b4cc95ecdf38f7c3e33e63423abec09a85e6e9a12279637dcc9ac2ba1fc333e0c447fb3b0f46d7965acb5d7cea02d188e9c6d425c0b
+  checksum: 10c0/9d9378a3af0d0ad730a52ad9d15ec7201f3926ad6e7e8bbffc5ae21ca2835ad11d1d9598698f5dd9718917486039f55ea1d7dc23d8e44fa827a55cc3262c02fc
   languageName: node
   linkType: hard
 
@@ -20791,7 +20792,7 @@ __metadata:
   languageName: node
   linkType: hard
 
-"https-proxy-agent@npm:^5.0.0":
+"https-proxy-agent@npm:^5.0.0, https-proxy-agent@npm:^5.0.1":
   version: 5.0.1
   resolution: "https-proxy-agent@npm:5.0.1"
   dependencies: