Bump axios and acme-client

[dependabot]

Bumps axios to 1.13.5 and updates ancestor dependency acme-client. These dependencies need to be updated together.

Updates axios from 0.26.1 to 1.13.5

Release notes

Sourced from axios's releases.

v1.13.5

Release 1.13.5

Highlights

• Security: Fixed a potential Denial of Service issue involving the __proto__ key in mergeConfig. (PR #7369)
• Bug fix: Resolved an issue where AxiosError could be missing the status field on and after v1.13.3. (PR #7368)

Changes

Security

• Fix Denial of Service via __proto__ key in mergeConfig. (PR #7369)

Fixes

• Fix/5657. (PR #7313)
• Ensure status is present in AxiosError on and after v1.13.3. (PR #7368)

Features / Improvements

• Add input validation to isAbsoluteURL. (PR #7326)
• Refactor: bump minor package versions. (PR #7356)

Documentation

• Clarify object-check comment. (PR #7323)
• Fix deprecated Buffer constructor usage and README formatting. (PR #7371)

CI / Maintenance

• Chore: fix issues with YAML. (PR #7355)
• CI: update workflow YAMLs. (PR #7372)
• CI: fix run condition. (PR #7373)
• Dev deps: bump karma-sourcemap-loader from 0.3.8 to 0.4.0. (PR #7360)
• Chore(release): prepare release 1.13.5. (PR #7379)

New Contributors

• @​sachin11063 (first contribution — PR #7323)
• @​asmitha-16 (first contribution — PR #7326)

Full Changelog: axios/axios@v1.13.4...v1.13.5

v1.13.4

Overview

The release addresses issues discovered in v1.13.3 and includes significant CI/CD improvements.

Full Changelog: v1.13.3...v1.13.4

What's New in v1.13.4

Bug Fixes

• fix: issues with version 1.13.3 (#7352) (ee90dfc)
  • Fixed issues discovered in v1.13.3 release

... (truncated)

Commits

• 29f7542 chore(release): prepare release 1.13.5 (#7379)
• 431c3a3 ci: fix run condition (#7373)
• 9ff3a78 ci: update ymls (#7372)
• 265b712 docs: fix deprecated Buffer constructor and formatting issues in README (#7371)
• 475e75a feat: add input validation to isAbsoluteURL (#7326)
• 28c7215 fix: Denial of Service via proto Key in mergeConfig (#7369)
• 04cf019 docs: clarify object check comment (#7323)
• 696fa75 fix: status is missing in AxiosError on and after v1.13.3 (#7368)
• 569f028 fix: added a option to choose between legacy and the new request/response int...
• 44b7c9f chore(deps-dev): bump karma-sourcemap-loader (#7360)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for axios since your current version.

Updates acme-client from 4.2.5 to 5.4.0

Changelog

Sourced from acme-client's changelog.

v5.4.0 (2024-07-16)

• added Directory URLs for Google ACME provider
• fixed Invalidate ACME provider directory cache after 24 hours
• fixed Retry HTTP requests on server errors or when rate limited - #89

v5.3.1 (2024-05-22)

• fixed Allow client.auto() being called with an empty CSR common name
• fixed Bug when calling updateAccountKey() with external account binding

v5.3.0 (2024-02-05)

• added Support and tests for satisfying tls-alpn-01 challenges
• changed Replace jsrsasign with @peculiar/x509 for certificate and CSR handling
• changed Method getChallengeKeyAuthorization() now returns $token.$thumbprint when called with a tls-alpn-01 challenge
  • Previously returned base64url encoded SHA256 digest of $token.$thumbprint erroneously
  • This change is not considered breaking since the previous behavior was incorrect

v5.2.0 (2024-01-22)

• fixed Allow self-signed or invalid certs when validating http-01 challenges that redirect to HTTPS - #65
• fixed Wait for all challenge promises to settle before rejecting client.auto() - #75

v5.1.0 (2024-01-20)

• fixed Upgrade jsrsasign@11.0.0 - GHSA-rh63-9qcf-83gf
• fixed Upgrade axios@1.6.5 - CVE-2023-45857

v5.0.0 (2022-07-28)

• Upgrade guide here
• added New native crypto interface, ECC/ECDSA support
• breaking Remove support for Node v10, v12 and v14
• breaking Prioritize issuer closest to root during preferred chain selection - #46
• changed Replace bluebird dependency with native promise APIs
• changed Replace backo2 dependency with internal utility

Commits

• 9f293d2 Bump v5.4.0
• 1785acd Bump dependencies
• e4e8bde Retry HTTP requests on server errors or when rate limited
• c291190 Forgot to refresh directory timestamp after successful get
• 0038bd6 Add utility method tests
• 91db7d1 Temp remove Node v22 from matrix, broke CNAME tests
• 85d6eb2 Invalidate ACME directory cache after 24 hours
• 217df2a Directory URLs for Google ACME provider
• e611651 Bump Pebble v2.6.0
• b024e7e Small crypto docs fix 2
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.