updated axios and axios-ntlm to latest

[vision10]

latest version of axios-ntlm fixes node v18 digital envelope error
Error: error:0308010C:digital envelope routines::unsupported

updated axios to latest: 1.3.2
updated axios-ntlm to latest: 1.4.0 (uses axios 1.3.2)

also 2 tests where failing because of hardcoded response Content-Length

this request needs to be accepted to pass all tests: #1206

[h3llrais3r]

Would like to see this update as well!

[valdiss]

Same here, we're upgrading to node 18 and now need to --force to do any npm install...

[RezaRahmati]

Looking forward to get this changes

[T4kumi-js]

Looking forward to see this update too!

[jsdevel]

@vision10 plz fix the build

[vision10]

@jsdevel I have included changes from #1206
build should be ok

[lsaadeh]

@jsdevel are we happy to merge now?

[vision10]

is there no one able to merge here?
axios is already at 1.4.0 since this pull request
some of the other pull requests can be closed or just need a bit of attention

[T4kumi-js]

idk, this seems like a sleeping law in congress

[colinramsay]

Sorry to be that guy, but could this get merged and released? It's blocking us at the moment.

[RezaRahmati]

We might need to sign a petition for this PR to get merged 😆

[SaundersB]

Agreed it would be great to see this merged

[irothenbaum]

Bump. Is anyone still maintaining this repo?

[Parvenu]

Bump, will this be merged someday ?

[guilhermeledes]

Bump. This is a critical update.

[codersbet]

Any update on this one @vpulim

[SaundersB]

FYI. In order to continue to use this package we all need to now use --force or --legacy-peer-deps until this is merged. Or we will need to find an alternative. Can we maybe delegate somebody to maintain this library since there are many of us who would contribute to resolve things like this?

[salarihamid]

+1

[zindont]

+1

[pedrokaroth]

+1

[DydjyZ]

sdfghujiopm

[kenzik]

What-the... Bump.

[random42]

Hi, why is axios a peer dependency any way? I can't see the reason. If we could move it as a normal dependency we wouldn't be here waiting for using axios 1.0 and this library together.

[RJWerning]

You can solve this issue without waiting for the PR to be merged, seems like this might be a dead project. In your package.json just add the following to overrides:

"dependencies": {
...
},
"overrides": {
"soap": {
"axios": "^1.0.0"
}
},
"devDependencies": {
...
},

[antirek]

+1

[AdrianFahrbach]

Same here!
@vpulim Any chance to get this merged?

[nicolae536]

Any timeline for when this pr will be merged and released ? 🤔

[lukeTheWizard]

Merge please this is ruining the package

[vision10]

We seriously need someone to accept these pull requests that are piling up, not just mine
@vpulim please give someone access to manage this repository if you are too busy

axios version has known vulnerabilities
https://security.snyk.io/vuln/SNYK-JS-AXIOS-6032459

[alfaproject]

@RJWerning can you confirm that the override works? I didn't want to risk it because it's a major version upgrade but now there's this new security vulnerability...

[codersbet]

If I fork this repo and start maintaining it will someone also help out?

I am planning on forking it to a new repo and start maintaining it. Who is in?

[derodero24]

@codersbet Although I may not be able to actively participate in the maintenance, I'm very supportive of the idea if you're willing to take the lead in managing it.

[RishikeshDarandale]

@vpulim , Can you please merge this one?

@codersbet , @rmarfil3 created the fork, but not sure if he is publishing it to npm!

[kevinccbsg]

Hi @vpulim thanks a lot for this package. When do you think it will be ready the new release?

[savez]

Warning.

axios 1.6.1 has an error.

With soap@1.0.1 I have an error in my unit test with this message: 'Cannot use import statement outside a module'.

I have reverted back to version 1.0.0 and have no errors.

[w666]

Hi @savez, could you please add some details, like your environment and logs?
I've tested 1.0.1 release in my project and it worked just fine. We run it in node.js 20.

[w666]

Hi @vpulim thanks a lot for this package. When do you think it will be ready the new release?

New version 1.0.1 has been released.

[savez]

Hi @savez, could you please add some details, like your environment and logs?
I've tested 1.0.1 release in my project and it worked just fine. We run it in node.js 20.

Yes,
I'm using node20.

But when I running jest it show an error.

[w666]

If you can post your jest config and tsconfig that would help to identify the problem.
In my tests I just mock soap requests so don't really use it.
Unfortunately, I am very limited in time and can't setup test project to test it.