●Change8

Migrating to Axios v0.32.0

Version v0.32.0 introduces 1 breaking change. This guide details how to update your code.

Released: 5/4/2026

1
Breaking Changes
1
Migration Steps
11
Affected Symbols

⚠️ Check Your Code

If you use any of these symbols, you need to read this guide:

mergeConfigAxiosError.toJSONdefaults.redactwithXSRFTokenNO_PROXYProxy-AuthorizationsocketPathallowedSocketPathsAxiosURLSearchParamsformDataHeaderPolicyredact

Breaking Changes

●Issue #1

mergeConfig and header merging now return objects with a null prototype to block prototype-pollution gadgets. Consumers must use Object.prototype.hasOwnProperty.call(obj, key) and avoid implicit string coercion against merged config or header objects.

Migration Steps

  1. 1
    When accessing properties on objects returned by mergeConfig or header merging, use Object.prototype.hasOwnProperty.call(obj, key) instead of direct property access or implicit string coercion.

Release Summary

This release backports comprehensive security and hardening fixes from the v1.x branch into v0.x, including prototype-pollution protections and stricter handling of sensitive data and network configurations. A key breaking change involves merged config and header objects now having null prototypes.

Need More Details?

View the full release notes and all changes for Axios v0.32.0.

View Full Changelog