🚀 axios/axios - Release Notes

## Release notes:

### Bug Fixes
* fix: modify log while request is aborted by @mori5321 in https://github.com/axios/axios/pull/4917
* fix: update CHANGELOG.md for v0.x by @TehZarathustra in https://github.com/axios/axios/pull/6271
* fix: modify upgrade guide for 0.28.1's breaking change by @nafeger in https://github.com/axios/axios/pull/6787
* fix: backport allowAbsoluteUrls vulnerability fix to v0.x by @thatguyinabeanie in https://github.com/axios/axios/pull/6829
* fix: add allowAbsoluteUrls type by @thatguyinabeanie in https://github.com/axios/axios/pull/6849

### Contributors to this release
* @mori5321 made their first contribution in https://github.com/axios/axios/pull/4917
* @TehZarathustra made their first contribution in https://github.com/axios/axios/pull/6271
* @nafeger made their first contribution in https://github.com/axios/axios/pull/6787
* @thatguyinabeanie made their first contribution in https://github.com/axios/axios/pull/6829

**Full Changelog**: https://github.com/axios/axios/compare/v0.29.0...v0.30.0

## Release notes:
### Bug Fixes

* **buildFullPath:** handle `allowAbsoluteUrls: false` without `baseURL` ([#6833](https://github.com/axios/axios/issues/6833)) ([f10c2e0](https://github.com/axios/axios/commit/f10c2e0de7fde0051f848609a29c2906d0caa1d9))

### Contributors to this release

-  [Marc Hassan](https://github.com/mhassan1 "+5/-1 (#6833 )")

## Release notes:
### Bug Fixes

* add missing type for allowAbsoluteUrls ([#6818](https://github.com/axios/axios/issues/6818)) ([10fa70e](https://github.com/axios/axios/commit/10fa70ef14fe39558b15a179f0e82f5f5e5d11b2))
* **xhr/fetch:** pass `allowAbsoluteUrls` to `buildFullPath` in `xhr` and `fetch` adapters ([#6814](https://github.com/axios/axios/issues/6814)) ([ec159e5](https://github.com/axios/axios/commit/ec159e507bdf08c04ba1a10fe7710094e9e50ec9))

### Contributors to this release

-  [Ashcon Partovi](https://github.com/Electroid "+6/-0 (#6811 )")
-  [StefanBRas](https://github.com/StefanBRas "+4/-0 (#6818 )")
-  [Marc Hassan](https://github.com/mhassan1 "+2/-2 (#6814 )")

## Release notes:
### Bug Fixes

* **http-adapter:** add allowAbsoluteUrls to path building ([#6810](https://github.com/axios/axios/issues/6810)) ([fb8eec2](https://github.com/axios/axios/commit/fb8eec214ce7744b5ca787f2c3b8339b2f54b00f))

### Contributors to this release

-  [Fasoro-Joseph Alexander](https://github.com/lexcorp16 "+1/-1 (#6810 )")

## Release notes:
### Bug Fixes

* **utils:** move `generateString` to platform utils to avoid importing crypto module into client builds; ([#6789](https://github.com/axios/axios/issues/6789)) ([36a5a62](https://github.com/axios/axios/commit/36a5a620bec0b181451927f13ac85b9888b86cec))

### Contributors to this release

-  [Dmitriy Mozgovoy](https://github.com/DigitalBrainJS "+51/-47 (#6789 )")

## Release notes:
### Bug Fixes

* **examples:** application crashed when navigating examples in browser ([#5938](https://github.com/axios/axios/issues/5938)) ([1260ded](https://github.com/axios/axios/commit/1260ded634ec101dd5ed05d3b70f8e8f899dba6c))
* missing word in SUPPORT_QUESTION.yml ([#6757](https://github.com/axios/axios/issues/6757)) ([1f890b1](https://github.com/axios/axios/commit/1f890b13f2c25a016f3c84ae78efb769f244133e))
* **utils:** replace getRandomValues with crypto module ([#6788](https://github.com/axios/axios/issues/6788)) ([23a25af](https://github.com/axios/axios/commit/23a25af0688d1db2c396deb09229d2271cc24f6c))


### Features

* Add config for ignoring absolute URLs ([#5902](https://github.com/axios/axios/issues/5902)) ([#6192](https://github.com/axios/axios/issues/6192)) ([32c7bcc](https://github.com/axios/axios/commit/32c7bcc0f233285ba27dec73a4b1e81fb7a219b3))


### Reverts

* Revert "chore: expose fromDataToStream to be consumable (#6731)" (#6732) ([1317261](https://github.com/axios/axios/commit/1317261125e9c419fe9f126867f64d28f9c1efda)), closes [#6731](https://github.com/axios/axios/issues/6731) [#6732](https://github.com/axios/axios/issues/6732)


### BREAKING CHANGES

* code relying on the above will now combine the URLs instead of prefer request URL

* feat: add config option for allowing absolute URLs

* fix: add default value for allowAbsoluteUrls in buildFullPath

* fix: typo in flow control when setting allowAbsoluteUrls

### Contributors to this release

-  [Michael Toscano](https://github.com/GethosTheWalrus "+42/-8 (#6192 )")
-  [Willian Agostini](https://github.com/WillianAgostini "+26/-3 (#6788 #6777 )")
-  [Naron](https://github.com/naronchen "+27/-0 (#5901 )")
-  [shravan || श्रvan](https://github.com/shravan20 "+7/-3 (#6116 )")
-  [Justin Dhillon](https://github.com/justindhillon "+0/-7 (#6312 )")
-  [yionr](https://github.com/yionr "+5/-1 (#6129 )")
-  [Shin'ya Ueoka](https://github.com/ueokande "+3/-3 (#5935 )")
-  [Dan Dascalescu](https://github.com/dandv "+3/-3 (#5908 #6757 )")
-  [Nitin Ramnani](https://github.com/NitinRamnani "+2/-2 (#5938 )")
-  [Shay Molcho](https://github.com/shaymolcho "+2/-2 (#6770 )")
-  [Jay](https://github.com/jasonsaayman "+0/-3 (#6732 )")
- fancy45daddy
-  [Habip Akyol](https://github.com/habipakyol "+1/-1 (#6030 )")
-  [Bailey Lissington](https://github.com/llamington "+1/-1 (#6771 )")
-  [Bernardo da Eira Duarte](https://github.com/bernardoduarte "+1/-1 (#6480 )")
-  [Shivam Batham](https://github.com/Shivam-Batham "+1/-1 (#5949 )")
-  [Lipin Kariappa](https://github.com/lipinnnnn "+1/-1 (#5936 )")

## Release notes:
### Reverts

* Revert "fix(types): export CJS types from ESM (#6218)" (#6729) ([c44d2f2](https://github.com/axios/axios/commit/c44d2f2316ad289b38997657248ba10de11deb6c)), closes [#6218](https://github.com/axios/axios/issues/6218) [#6729](https://github.com/axios/axios/issues/6729)

### Contributors to this release

-  [Jay](https://github.com/jasonsaayman "+596/-108 (#6729 )")

## Release notes:
### Bug Fixes

* allow passing a callback as paramsSerializer to buildURL ([#6680](https://github.com/axios/axios/issues/6680)) ([eac4619](https://github.com/axios/axios/commit/eac4619fe2e0926e876cd260ee21e3690381dbb5))
* **core:** fixed config merging bug ([#6668](https://github.com/axios/axios/issues/6668)) ([5d99fe4](https://github.com/axios/axios/commit/5d99fe4491202a6268c71e5dcc09192359d73cea))
* fixed width form to not shrink after 'Send Request' button is clicked ([#6644](https://github.com/axios/axios/issues/6644)) ([7ccd5fd](https://github.com/axios/axios/commit/7ccd5fd42402102d38712c32707bf055be72ab54))
* **http:** add support for File objects as payload in http adapter ([#6588](https://github.com/axios/axios/issues/6588)) ([#6605](https://github.com/axios/axios/issues/6605)) ([6841d8d](https://github.com/axios/axios/commit/6841d8d18ddc71cc1bd202ffcfddb3f95622eef3))
* **http:** fixed proxy-from-env module import ([#5222](https://github.com/axios/axios/issues/5222)) ([12b3295](https://github.com/axios/axios/commit/12b32957f1258aee94ef859809ed39f8f88f9dfa))
* **http:** use `globalThis.TextEncoder` when available ([#6634](https://github.com/axios/axios/issues/6634)) ([df956d1](https://github.com/axios/axios/commit/df956d18febc9100a563298dfdf0f102c3d15410))
* ios11 breaks when build ([#6608](https://github.com/axios/axios/issues/6608)) ([7638952](https://github.com/axios/axios/commit/763895270f7b50c7c780c3c9807ae8635de952cd))
* **types:** add missing types for mergeConfig function ([#6590](https://github.com/axios/axios/issues/6590)) ([00de614](https://github.com/axios/axios/commit/00de614cd07b7149af335e202aef0e076c254f49))
* **types:** export CJS types from ESM ([#6218](https://github.com/axios/axios/issues/6218)) ([c71811b](https://github.com/axios/axios/commit/c71811b00f2fcff558e4382ba913bdac4ad7200e))
* updated stream aborted error message to be more clear ([#6615](https://github.com/axios/axios/issues/6615)) ([cc3217a](https://github.com/axios/axios/commit/cc3217a612024d83a663722a56d7a98d8759c6d5))
* use URL API instead of DOM to fix a potential vulnerability warning; ([#6714](https://github.com/axios/axios/issues/6714)) ([0a8d6e1](https://github.com/axios/axios/commit/0a8d6e19da5b9899a2abafaaa06a75ee548597db))

### Contributors to this release

-  [Remco Haszing](https://github.com/remcohaszing "+108/-596 (#6218 )")
-  [Jay](https://github.com/jasonsaayman "+281/-19 (#6640 #6619 )")
-  [Aayush Yadav](https://github.com/aayushyadav020 "+124/-111 (#6617 )")
-  [Dmitriy Mozgovoy](https://github.com/DigitalBrainJS "+12/-65 (#6714 )")
-  [Ell Bradshaw](https://github.com/cincodenada "+29/-0 (#6489 )")
-  [Amit Saini](https://github.com/amitsainii "+13/-3 (#5237 )")
-  [Tommaso Paulon](https://github.com/guuido "+14/-1 (#6680 )")
-  [Akki](https://github.com/Aakash-Rana "+5/-5 (#6668 )")
-  [Sampo Silvennoinen](https://github.com/stscoundrel "+3/-3 (#6633 )")
-  [Kasper Isager Dalsgarð](https://github.com/kasperisager "+2/-2 (#6634 )")
-  [Christian Clauss](https://github.com/cclauss "+4/-0 (#6683 )")
-  [Pavan Welihinda](https://github.com/pavan168 "+2/-2 (#5222 )")
-  [Taylor Flatt](https://github.com/taylorflatt "+2/-2 (#6615 )")
-  [Kenzo Wada](https://github.com/Kenzo-Wada "+2/-2 (#6608 )")
-  [Ngole Lawson](https://github.com/echelonnought "+3/-0 (#6644 )")
-  [Haven](https://github.com/Baoyx007 "+3/-0 (#6590 )")
-  [Shrivali Dutt](https://github.com/shrivalidutt "+1/-1 (#6637 )")
-  [Henco Appel](https://github.com/hencoappel "+1/-1 (#6605 )")

## Release notes:
### Bug Fixes
* fix(backport): backport security fixes in commits #6167 and #6163 to v0.x by @Sean-Powell in https://github.com/axios/axios/pull/6402
* fix: omit nulls in params by @Willshaw in https://github.com/axios/axios/pull/6394
* fix(backport): fix paramsSerializer function validation by @solonzhu in https://github.com/axios/axios/pull/6361
* fix: Regular Expression Denial of Service (ReDoS) by @qiongshusheng in https://github.com/axios/axios/pull/6708

### Contributors to this release
* @Sean-Powell made their first contribution in https://github.com/axios/axios/pull/6402
* @Willshaw made their first contribution in https://github.com/axios/axios/pull/6394
* @solonzhu made their first contribution in https://github.com/axios/axios/pull/6361
* @qiongshusheng made their first contribution in https://github.com/axios/axios/pull/6708

## Release notes:
### Bug Fixes

* **fetch:** fix stream handling in Safari by fallback to using a stream reader instead of an async iterator; ([#6584](https://github.com/axios/axios/issues/6584)) ([d198085](https://github.com/axios/axios/commit/d1980854fee1765cd02fa0787adf5d6e34dd9dcf))
* **http:** fixed support for IPv6 literal strings in url ([#5731](https://github.com/axios/axios/issues/5731)) ([364993f](https://github.com/axios/axios/commit/364993f0d8bc6e0e06f76b8a35d2d0a35cab054c))

### Contributors to this release

-  [Rishi556](https://github.com/Rishi556 "+39/-1 (#5731 )")
-  [Dmitriy Mozgovoy](https://github.com/DigitalBrainJS "+27/-7 (#6584 )")

## Release notes:
### Bug Fixes

* **fetch:** fix content length calculation for FormData payload; ([#6524](https://github.com/axios/axios/issues/6524)) ([085f568](https://github.com/axios/axios/commit/085f56861a83e9ac02c140ad9d68dac540dfeeaa))
* **fetch:** optimize signals composing logic; ([#6582](https://github.com/axios/axios/issues/6582)) ([df9889b](https://github.com/axios/axios/commit/df9889b83c2cc37e9e6189675a73ab70c60f031f))

### Contributors to this release

-  [Dmitriy Mozgovoy](https://github.com/DigitalBrainJS "+98/-46 (#6582 )")
-  [Jacques Germishuys](https://github.com/jacquesg "+5/-1 (#6524 )")
-  [kuroino721](https://github.com/kuroino721 "+3/-1 (#6575 )")

## Release notes:
### Bug Fixes

* **adapter:** fix undefined reference to hasBrowserEnv ([#6572](https://github.com/axios/axios/issues/6572)) ([7004707](https://github.com/axios/axios/commit/7004707c4180b416341863bd86913fe4fc2f1df1))
* **core:** add the missed implementation of AxiosError#status property; ([#6573](https://github.com/axios/axios/issues/6573)) ([6700a8a](https://github.com/axios/axios/commit/6700a8adac06942205f6a7a21421ecb36c4e0852))
* **core:** fix `ReferenceError: navigator is not defined` for custom environments; ([#6567](https://github.com/axios/axios/issues/6567)) ([fed1a4b](https://github.com/axios/axios/commit/fed1a4b2d78ed4a588c84e09d32749ed01dc2794))
* **fetch:** fix credentials handling in Cloudflare workers ([#6533](https://github.com/axios/axios/issues/6533)) ([550d885](https://github.com/axios/axios/commit/550d885eb90fd156add7b93bbdc54d30d2f9a98d))

### Contributors to this release

-  [Dmitriy Mozgovoy](https://github.com/DigitalBrainJS "+187/-83 (#6573 #6567 #6566 #6564 #6563 #6557 #6556 #6555 #6554 #6552 )")
-  [Antonin Bas](https://github.com/antoninbas "+6/-6 (#6572 )")
-  [Hans Otto Wirtz](https://github.com/hansottowirtz "+4/-1 (#6533 )")

## Release notes:
### Bug Fixes

* **sec:** CVE-2024-39338 ([#6539](https://github.com/axios/axios/issues/6539)) ([#6543](https://github.com/axios/axios/issues/6543)) ([6b6b605](https://github.com/axios/axios/commit/6b6b605eaf73852fb2dae033f1e786155959de3a))
* **sec:** disregard protocol-relative URL to remediate SSRF ([#6539](https://github.com/axios/axios/issues/6539)) ([07a661a](https://github.com/axios/axios/commit/07a661a2a6b9092c4aa640dcc7f724ec5e65bdda))

### Contributors to this release

-  [Lev Pachmanov](https://github.com/levpachmanov "+47/-11 (#6543 )")
-  [Đỗ Trọng Hải](https://github.com/hainenber "+49/-4 (#6539 )")

## Release notes:
### Bug Fixes

* **adapter:** fix progress event emitting; ([#6518](https://github.com/axios/axios/issues/6518)) ([e3c76fc](https://github.com/axios/axios/commit/e3c76fc9bdd03aa4d98afaf211df943e2031453f))
* **fetch:** fix withCredentials request config ([#6505](https://github.com/axios/axios/issues/6505)) ([85d4d0e](https://github.com/axios/axios/commit/85d4d0ea0aae91082f04e303dec46510d1b4e787))
* **xhr:** return original config on errors from XHR adapter ([#6515](https://github.com/axios/axios/issues/6515)) ([8966ee7](https://github.com/axios/axios/commit/8966ee7ea62ecbd6cfb39a905939bcdab5cf6388))

### Contributors to this release

-  [Dmitriy Mozgovoy](https://github.com/DigitalBrainJS "+211/-159 (#6518 #6519 )")
-  [Valerii Sidorenko](https://github.com/ValeraS "+3/-3 (#6515 )")
-  [prianYu](https://github.com/prianyu "+2/-2 (#6505 )")

## Release notes:
### Bug Fixes

* **fetch:** enhance fetch API detection; ([#6413](https://github.com/axios/axios/issues/6413)) ([4f79aef](https://github.com/axios/axios/commit/4f79aef81b7c4644328365bfc33acf0a9ef595bc))

### Contributors to this release

-  [Dmitriy Mozgovoy](https://github.com/DigitalBrainJS "+3/-3 (#6413 )")

## Release notes:
### Bug Fixes

* **fetch:** fixed ReferenceError issue when TextEncoder is not available in the environment; ([#6410](https://github.com/axios/axios/issues/6410)) ([733f15f](https://github.com/axios/axios/commit/733f15fe5bd2d67e1fadaee82e7913b70d45dc5e))

### Contributors to this release

-  [Dmitriy Mozgovoy](https://github.com/DigitalBrainJS "+14/-9 (#6410 )")

## Release notes:
### Features

* **adapter:** add fetch adapter; ([#6371](https://github.com/axios/axios/issues/6371)) ([a3ff99b](https://github.com/axios/axios/commit/a3ff99b59d8ec2ab5dd049e68c043617a4072e42))

### Bug Fixes

* **core/axios:** handle un-writable error stack ([#6362](https://github.com/axios/axios/issues/6362)) ([81e0455](https://github.com/axios/axios/commit/81e0455b7b57fbaf2be16a73ebe0e6591cc6d8f9))  

### Contributors to this release

-  [Dmitriy Mozgovoy](https://github.com/DigitalBrainJS "+1015/-127 (#6371 )")
-  [Jay](https://github.com/jasonsaayman "+30/-14 ()")
-  [Alexandre ABRIOUX](https://github.com/alexandre-abrioux "+56/-6 (#6362 )")

## Release notes:
### Bug Fixes

* **fetch:** capitalize HTTP method names; ([#6395](https://github.com/axios/axios/issues/6395)) ([ad3174a](https://github.com/axios/axios/commit/ad3174a3515c3c2573f4bcb94818d582826f3914))
* **fetch:** fix & optimize progress capturing for cases when the request data has a nullish value or zero data length ([#6400](https://github.com/axios/axios/issues/6400)) ([95a3e8e](https://github.com/axios/axios/commit/95a3e8e346cfd6a5548e171f2341df3235d0e26b))
* **fetch:** fix headers getting from a stream response; ([#6401](https://github.com/axios/axios/issues/6401)) ([870e0a7](https://github.com/axios/axios/commit/870e0a76f60d0094774a6a63fa606eec52a381af))

### Contributors to this release

-  [Dmitriy Mozgovoy](https://github.com/DigitalBrainJS "+99/-46 (#6405 #6404 #6401 #6400 #6395 )")

## Release notes:
### Bug Fixes

* **core/axios:** handle un-writable error stack ([#6362](https://github.com/axios/axios/issues/6362)) ([81e0455](https://github.com/axios/axios/commit/81e0455b7b57fbaf2be16a73ebe0e6591cc6d8f9))
* **fetch:** fix cases when ReadableStream or Response.body are not available; ([#6377](https://github.com/axios/axios/issues/6377)) ([d1d359d](https://github.com/axios/axios/commit/d1d359da347704e8b28d768e61515a3e96c5b072))
* **fetch:** treat fetch-related TypeError as an AxiosError.ERR_NETWORK error; ([#6380](https://github.com/axios/axios/issues/6380)) ([bb5f9a5](https://github.com/axios/axios/commit/bb5f9a5ab768452de9e166dc28d0ffc234245ef1))

### Contributors to this release

-  [Alexandre ABRIOUX](https://github.com/alexandre-abrioux "+56/-6 (#6362 )")
-  [Dmitriy Mozgovoy](https://github.com/DigitalBrainJS "+42/-17 (#6380 #6377 )")

### Install
```
npm i axios@next
```

## Release notes:
### Features

* **adapter:** add fetch adapter; ([#6371](https://github.com/axios/axios/issues/6371)) ([a3ff99b](https://github.com/axios/axios/commit/a3ff99b59d8ec2ab5dd049e68c043617a4072e42))

### Contributors to this release

-  [Dmitriy Mozgovoy](https://github.com/DigitalBrainJS "+1015/-127 (#6371 )")
-  [Jay](https://github.com/jasonsaayman "+30/-14 ()")

### Install
```
npm i axios@next
```

## Release notes:
## Release notes:
### Bug Fixes

* fix(backport): custom params serializer support (#6263)
* fix(backport): uncaught ReferenceError `req` is not defined (#6307)

## Release notes:
### Bug Fixes

* **AxiosHeaders:** fix AxiosHeaders conversion to an object during config merging ([#6243](https://github.com/axios/axios/issues/6243)) ([2656612](https://github.com/axios/axios/commit/2656612bc10fe2757e9832b708ed773ab340b5cb))
* **import:** use named export for EventEmitter; ([7320430](https://github.com/axios/axios/commit/7320430aef2e1ba2b89488a0eaf42681165498b1))
* **vulnerability:** update follow-redirects to 1.15.6 ([#6300](https://github.com/axios/axios/issues/6300)) ([8786e0f](https://github.com/axios/axios/commit/8786e0ff55a8c68d4ca989801ad26df924042e27))

### Contributors to this release

-  [Jay](https://github.com/jasonsaayman "+4572/-3446 (#6238 )")
-  [Dmitriy Mozgovoy](https://github.com/DigitalBrainJS "+30/-0 (#6231 )")
-  [Mitchell](https://github.com/Creaous "+9/-9 (#6300 )")
-  [Emmanuel](https://github.com/mannoeu "+2/-2 (#6196 )")
-  [Lucas Keller](https://github.com/ljkeller "+3/-0 (#6194 )")
-  [Aditya Mogili](https://github.com/ADITYA-176 "+1/-1 ()")
-  [Miroslav Petrov](https://github.com/petrovmiroslav "+1/-1 (#6243 )")

## Release notes:
### Bug Fixes

* fix(security): fixed CVE-2023-45857 by backporting `withXSRFToken` option to v0.x (#6091)

### Backports from v1.x:

* Allow null indexes on formSerializer and paramsSerializer v0.x (#4961)
* Fixing content-type header repeated #4745
* Fixed timeout error message for HTTP 4738
* Added `axios.formToJSON` method (#4735)
* URL params serializer (#4734)
* Fixed toFormData Blob issue on node>v17 #4728
* Adding types for progress event callbacks #4675
* Fixed max body length defaults #4731
* Added data URL support for node.js (#4725)
* Added isCancel type assert (#4293)
* Added the ability for the `url-encoded-form` serializer to respect the `formSerializer` config (#4721)
* Add `string[]` to `AxiosRequestHeaders` type (#4322)
* Allow type definition for axios instance methods (#4224)
* Fixed `AxiosError` stack capturing; (#4718)
* Fixed `AxiosError` status code type; (#4717)
* Adding Canceler parameters config and request (#4711)
* fix(types): allow to specify partial default headers for instance creation (#4185)
* Added `blob` to the list of protocols supported by the browser (#4678)
* Fixing Z_BUF_ERROR when no content (#4701)
* Fixed race condition on immediate requests cancellation (#4261)
* Added a clear() function to the request and response interceptors object so a user can ensure that all interceptors have been removed from an Axios instance https://github.com/axios/axios/pull/4248
* Added generic AxiosAbortSignal TS interface to avoid importing AbortController polyfill (#4229)
* Fix TS definition for AxiosRequestTransformer (#4201)
* Use type alias instead of interface for AxiosPromise (#4505)
* Include request and config when creating a CanceledError instance (#4659)
* Added generic TS types for the exposed toFormData helper (#4668)
* Optimized the code that checks cancellation (#4587)
* Replaced webpack with rollup (#4596)
* Added stack trace to AxiosError (#4624)
* Updated AxiosError.config to be optional in the type definition (#4665)
* Removed incorrect argument for NetworkError constructor (#4656)

## Release notes:
### Bug Fixes

* capture async stack only for rejections with native error objects; ([#6203](https://github.com/axios/axios/issues/6203)) ([1a08f90](https://github.com/axios/axios/commit/1a08f90f402336e4d00e9ee82f211c6adb1640b0))

### Contributors to this release

-  [Dmitriy Mozgovoy](https://github.com/DigitalBrainJS "+30/-26 (#6203 )")
-  [zhoulixiang](https://github.com/zh-lx "+0/-3 (#6186 )")

## Release notes:
### Bug Fixes

* fixed missed dispatchBeforeRedirect argument ([#5778](https://github.com/axios/axios/issues/5778)) ([a1938ff](https://github.com/axios/axios/commit/a1938ff073fcb0f89011f001dfbc1fa1dc995e39))
* wrap errors to improve async stack trace ([#5987](https://github.com/axios/axios/issues/5987)) ([123f354](https://github.com/axios/axios/commit/123f354b920f154a209ea99f76b7b2ef3d9ebbab))

### Contributors to this release

-  [Ilya Priven](https://github.com/ikonst "+91/-8 (#5987 )")
-  [Zao Soula](https://github.com/zaosoula "+6/-6 (#5778 )")

## Release notes:
### Bug Fixes

* **ci:** refactor notify action as a job of publish action; ([#6176](https://github.com/axios/axios/issues/6176)) ([0736f95](https://github.com/axios/axios/commit/0736f95ce8776366dc9ca569f49ba505feb6373c))
* **dns:** fixed lookup error handling; ([#6175](https://github.com/axios/axios/issues/6175)) ([f4f2b03](https://github.com/axios/axios/commit/f4f2b039dd38eb4829e8583caede4ed6d2dd59be))

### Contributors to this release

-  [Dmitriy Mozgovoy](https://github.com/DigitalBrainJS "+41/-6 (#6176 #6175 )")
-  [Jay](https://github.com/jasonsaayman "+6/-1 ()")

## Release notes:
### Bug Fixes

* **security:** fixed formToJSON prototype pollution vulnerability; ([#6167](https://github.com/axios/axios/issues/6167)) ([3c0c11c](https://github.com/axios/axios/commit/3c0c11cade045c4412c242b5727308cff9897a0e))
* **security:** fixed security vulnerability in follow-redirects ([#6163](https://github.com/axios/axios/issues/6163)) ([75af1cd](https://github.com/axios/axios/commit/75af1cdff5b3a6ca3766d3d3afbc3115bb0811b8))

### Contributors to this release

-  [Jay](https://github.com/jasonsaayman "+34/-6 ()")
-  [Dmitriy Mozgovoy](https://github.com/DigitalBrainJS "+34/-3 (#6172 #6167 )")
-  [Guy Nesher](https://github.com/gnesher "+10/-10 (#6163 )")

## Release notes:
### Bug Fixes

* Regular Expression Denial of Service (ReDoS) ([#6132](https://github.com/axios/axios/issues/6132)) ([5e7ad38](https://github.com/axios/axios/commit/5e7ad38fb0f819fceb19fb2ee5d5d38f56aa837d))

### Contributors to this release

-  [Jay](https://github.com/jasonsaayman "+15/-6 (#6145 )")
-  [Willian Agostini](https://github.com/WillianAgostini "+17/-2 (#6132 )")
-  [Dmitriy Mozgovoy](https://github.com/DigitalBrainJS "+3/-0 (#6084 )")

## Release notes:
### Features

* **withXSRFToken:** added withXSRFToken option as a workaround to achieve the old `withCredentials` behavior; ([#6046](https://github.com/axios/axios/issues/6046)) ([cff9967](https://github.com/axios/axios/commit/cff996779b272a5e94c2b52f5503ccf668bc42dc))

### PRs
- feat(withXSRFToken): added withXSRFToken option as a workaround to achieve the old `withCredentials` behavior; ( [#6046](https://api.github.com/repos/axios/axios/pulls/6046) )
```

📢 This PR added 'withXSRFToken' option as a replacement for old withCredentials behaviour. 
You should now use withXSRFToken along with withCredential to get the old behavior.
This functionality is considered as a fix.
```

### Contributors to this release

-  [Dmitriy Mozgovoy](https://github.com/DigitalBrainJS "+271/-146 (#6081 #6080 #6079 #6078 #6046 #6064 #6063 )")
-  [Ng Choon Khon (CK)](https://github.com/ckng0221 "+4/-4 (#6073 )")
-  [Muhammad Noman](https://github.com/mnomanmemon "+2/-2 (#6048 )")

## Release notes:
### Bug Fixes

* **formdata:** fixed content-type header normalization for non-standard browser environments; ([#6056](https://github.com/axios/axios/issues/6056)) ([dd465ab](https://github.com/axios/axios/commit/dd465ab22bbfa262c6567be6574bf46a057d5288))
* **platform:** fixed emulated browser detection in node.js environment; ([#6055](https://github.com/axios/axios/issues/6055)) ([3dc8369](https://github.com/axios/axios/commit/3dc8369e505e32a4e12c22f154c55fd63ac67fbb))

### Contributors to this release

-  [Dmitriy Mozgovoy](https://github.com/DigitalBrainJS "+432/-65 (#6059 #6056 #6055 )")
-  [Fabian Meyer](https://github.com/meyfa "+5/-2 (#5835 )")