From cc31f3e570fb5423cbf4024df77f7b3a3aac56c3 Mon Sep 17 00:00:00 2001
From: Thomas <thomas.whyyou@gmail.com>
Date: Tue, 31 Mar 2026 00:07:02 -0400
Subject: [PATCH 1/3] pin axios to 1.14.0

---
 packages/client/package.json |  5 ++++-
 yarn.lock                    | 40 ++++++++++++++++++------------------
 2 files changed, 24 insertions(+), 21 deletions(-)

diff --git a/packages/client/package.json b/packages/client/package.json
index ee9a1fd70..be55bf715 100644
--- a/packages/client/package.json
+++ b/packages/client/package.json
@@ -44,6 +44,9 @@
     "build:cjs": "BUILD_TARGET=cjs;  vite build",
     "prepublishOnly": "npm run build"
   },
+  "resolutions": {
+    "axios": "1.14.0"
+  },
   "devDependencies": {
     "@babel/cli": "^7.27.2",
     "@babel/core": "^7.28.0",
@@ -72,7 +75,7 @@
     "@knocklabs/types": "workspace:^",
     "@tanstack/store": "^0.7.2",
     "@types/phoenix": "^1.6.7",
-    "axios": "^1.11.0",
+    "axios": "1.14.0",
     "axios-retry": "^4.5.0",
     "eventemitter2": "^6.4.5",
     "jwt-decode": "^4.0.0",
diff --git a/yarn.lock b/yarn.lock
index 5de5bd5fd..e725bec28 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -4305,7 +4305,7 @@ __metadata:
     "@types/phoenix": "npm:^1.6.7"
     "@typescript-eslint/eslint-plugin": "npm:^8.32.0"
     "@typescript-eslint/parser": "npm:^8.39.1"
-    axios: "npm:^1.11.0"
+    axios: "npm:1.14.0"
     axios-retry: "npm:^4.5.0"
     cross-env: "npm:^7.0.3"
     crypto: "npm:^1.0.1"
@@ -9791,14 +9791,14 @@ __metadata:
   languageName: node
   linkType: hard
 
-"axios@npm:^1.11.0":
-  version: 1.11.0
-  resolution: "axios@npm:1.11.0"
+"axios@npm:1.14.0":
+  version: 1.14.0
+  resolution: "axios@npm:1.14.0"
   dependencies:
-    follow-redirects: "npm:^1.15.6"
-    form-data: "npm:^4.0.4"
-    proxy-from-env: "npm:^1.1.0"
-  checksum: 10c0/5de273d33d43058610e4d252f0963cc4f10714da0bfe872e8ef2cbc23c2c999acc300fd357b6bce0fc84a2ca9bd45740fa6bb28199ce2c1266c8b1a393f2b36e
+    follow-redirects: "npm:^1.15.11"
+    form-data: "npm:^4.0.5"
+    proxy-from-env: "npm:^2.1.0"
+  checksum: 10c0/2541f4aa215a7d1842429dad006fc682d82bc0e74bd14500823f7d8cce3bbae0e0a8c328c8538946718f366ab8ce5a4c12e9ad40e5a0f3482ff8bff0cd115d45
   languageName: node
   linkType: hard
 
@@ -13409,13 +13409,13 @@ __metadata:
   languageName: node
   linkType: hard
 
-"follow-redirects@npm:^1.15.6":
-  version: 1.15.9
-  resolution: "follow-redirects@npm:1.15.9"
+"follow-redirects@npm:^1.15.11":
+  version: 1.15.11
+  resolution: "follow-redirects@npm:1.15.11"
   peerDependenciesMeta:
     debug:
       optional: true
-  checksum: 10c0/5829165bd112c3c0e82be6c15b1a58fa9dcfaede3b3c54697a82fe4a62dd5ae5e8222956b448d2f98e331525f05d00404aba7d696de9e761ef6e42fdc780244f
+  checksum: 10c0/d301f430542520a54058d4aeeb453233c564aaccac835d29d15e050beb33f339ad67d9bddbce01739c5dc46a6716dbe3d9d0d5134b1ca203effa11a7ef092343
   languageName: node
   linkType: hard
 
@@ -13445,16 +13445,16 @@ __metadata:
   languageName: node
   linkType: hard
 
-"form-data@npm:^4.0.4":
-  version: 4.0.4
-  resolution: "form-data@npm:4.0.4"
+"form-data@npm:^4.0.5":
+  version: 4.0.5
+  resolution: "form-data@npm:4.0.5"
   dependencies:
     asynckit: "npm:^0.4.0"
     combined-stream: "npm:^1.0.8"
     es-set-tostringtag: "npm:^2.1.0"
     hasown: "npm:^2.0.2"
     mime-types: "npm:^2.1.12"
-  checksum: 10c0/373525a9a034b9d57073e55eab79e501a714ffac02e7a9b01be1c820780652b16e4101819785e1e18f8d98f0aee866cc654d660a435c378e16a72f2e7cac9695
+  checksum: 10c0/dd6b767ee0bbd6d84039db12a0fa5a2028160ffbfaba1800695713b46ae974a5f6e08b3356c3195137f8530dcd9dfcb5d5ae1eeff53d0db1e5aad863b619ce3b
   languageName: node
   linkType: hard
 
@@ -17569,10 +17569,10 @@ __metadata:
   languageName: node
   linkType: hard
 
-"proxy-from-env@npm:^1.1.0":
-  version: 1.1.0
-  resolution: "proxy-from-env@npm:1.1.0"
-  checksum: 10c0/fe7dd8b1bdbbbea18d1459107729c3e4a2243ca870d26d34c2c1bcd3e4425b7bcc5112362df2d93cc7fb9746f6142b5e272fd1cc5c86ddf8580175186f6ad42b
+"proxy-from-env@npm:^2.1.0":
+  version: 2.1.0
+  resolution: "proxy-from-env@npm:2.1.0"
+  checksum: 10c0/ed01729fd4d094eab619cd7e17ce3698b3413b31eb102c4904f9875e677cd207392795d5b4adee9cec359dfd31c44d5ad7595a3a3ad51c40250e141512281c58
   languageName: node
   linkType: hard
 

From c87656884502652add1afe72fe3a867924b98492 Mon Sep 17 00:00:00 2001
From: Thomas <thomas.whyyou@gmail.com>
Date: Tue, 31 Mar 2026 00:07:52 -0400
Subject: [PATCH 2/3] changeset

---
 .changeset/warm-falcons-report.md | 5 +++++
 1 file changed, 5 insertions(+)
 create mode 100644 .changeset/warm-falcons-report.md

diff --git a/.changeset/warm-falcons-report.md b/.changeset/warm-falcons-report.md
new file mode 100644
index 000000000..bb9069e1a
--- /dev/null
+++ b/.changeset/warm-falcons-report.md
@@ -0,0 +1,5 @@
+---
+"@knocklabs/client": patch
+---
+
+pin axios to 1.14.0

From 72894e6df9465e971b43093af29fa3cfc8297bf3 Mon Sep 17 00:00:00 2001
From: Thomas <thomas.whyyou@gmail.com>
Date: Tue, 31 Mar 2026 00:16:41 -0400
Subject: [PATCH 3/3] cursor review feedback

---
 package.json                 | 3 +++
 packages/client/package.json | 3 ---
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/package.json b/package.json
index 369e536ca..4bda6fd92 100644
--- a/package.json
+++ b/package.json
@@ -40,6 +40,9 @@
       "INTERNAL_MISMATCH"
     ]
   },
+  "resolutions": {
+    "axios": "1.14.0"
+  },
   "devDependencies": {
     "@changesets/cli": "^2.29.2",
     "@knocklabs/eslint-config": "workspace:^",
diff --git a/packages/client/package.json b/packages/client/package.json
index be55bf715..9e15e1613 100644
--- a/packages/client/package.json
+++ b/packages/client/package.json
@@ -44,9 +44,6 @@
     "build:cjs": "BUILD_TARGET=cjs;  vite build",
     "prepublishOnly": "npm run build"
   },
-  "resolutions": {
-    "axios": "1.14.0"
-  },
   "devDependencies": {
     "@babel/cli": "^7.27.2",
     "@babel/core": "^7.28.0",