Promise based HTTP client for the browser and node.js
3 Jun 2026 · Newest first
Last checked
Checking sources…
Showing 1 of 1 releases. Full release notes.
This release adds Node HTTP zstd decompression, hardens config and release workflows, and fixes authentication, header, proxy, and type-handling regressions.
socketPath, params, and paramsSerializer reads with own-property checks to prevent inherited prototype values from affecting request behavior, including SSRF-sensitive paths. (, )Signals highlight changes worth reviewing. They cannot determine whether your application is affected.
httpsAgent TLS options when tunneling HTTPS requests through HTTP CONNECT proxies. (#10957)Content-Type for React Native FormData so multipart boundaries can be generated correctly. (#10898)resolveConfig from an arrow default export to a named function export to avoid webpack and Babel transform interop failures. (#10891)AxiosHeaders.toJSON() return types and updated CommonJS isCancel typings to narrow to CanceledError<T>. (#10956, #10952)Authorization header from the GitHub build helper when GITHUB_TOKEN is unset. (#10931)Http2Sessions into its own helper module and added direct unit coverage for session pooling, timeout, and cleanup behavior. (#10861)files allowlist and dropping unneeded unminified bundle source maps. (#10939)fs-extra, qs, docs dependencies, and GitHub Actions dependencies including actions/dependency-review-action and zizmorcore/zizmor-action. (#10871, #10879, #10918, #10919, #10934, #10947, #10954, #10960)We are thrilled to welcome our new contributors. Thank you for helping improve axios: