From 2cf09c623f908ab3ffc685b37fbddbab458ac492 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 1 Oct 2026 17:02:48 +0000
Subject: [PATCH 1/2] Bump axios from 1.18.0 to 1.20.0 in /client

Bumps [axios](https://github.com/axios/axios) from 1.18.0 to 1.20.0.
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](https://github.com/axios/axios/compare/v1.18.0...v1.20.0)

---
updated-dependencies:
- dependency-name: axios
  dependency-version: 1.20.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 client/package-lock.json | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/client/package-lock.json b/client/package-lock.json
index 3d40c3e87..20340ceda 100644
--- a/client/package-lock.json
+++ b/client/package-lock.json
@@ -7141,13 +7141,13 @@
       }
     },
     "node_modules/axios": {
-      "version": "1.18.0",
-      "resolved": "https://registry.npmjs.org/axios/-/axios-1.18.0.tgz",
-      "integrity": "sha512-E32NzpYKp++W7XRe52rHiXV2ehxmh3wbdgO7MHeFM+vqxLBYHzt0ElkiImtOBxtOmyp0yoC8C6uESVV84Y2/hw==",
+      "version": "1.20.0",
+      "resolved": "https://registry.npmjs.org/axios/-/axios-1.20.0.tgz",
+      "integrity": "sha512-r8aOh8j9cGKpgQAqpzrUHnSIc6a59Y3Xf/cv8sy1DrHCkZHzQGEuoq1tARk6qSyDdtQGSDgpb9kFlruzPvrgwg==",
       "license": "MIT",
       "dependencies": {
         "follow-redirects": "^1.16.0",
-        "form-data": "^4.0.5",
+        "form-data": "^4.0.6",
         "https-proxy-agent": "^5.0.1",
         "proxy-from-env": "^2.1.0"
       }

From 5f6188cfc2dafbbd5bc2f6296a5f1506379954a1 Mon Sep 17 00:00:00 2001
From: Bryon Lewis <Bryon.Lewis@kitware.com>
Date: Thu, 1 Oct 2026 16:19:09 -0400
Subject: [PATCH 2/2] resolve param type issues with axios 1.20

---
 client/platform/web-girder/api/review.spec.ts | 11 ++++++++---
 1 file changed, 8 insertions(+), 3 deletions(-)

diff --git a/client/platform/web-girder/api/review.spec.ts b/client/platform/web-girder/api/review.spec.ts
index de13de2ae..348966516 100644
--- a/client/platform/web-girder/api/review.spec.ts
+++ b/client/platform/web-girder/api/review.spec.ts
@@ -33,6 +33,11 @@ const parentConfig = {
   customTypeStyling: { fish: { color: '#123456' } },
 };
 
+function folderIdFromRequestOptions(options?: { params?: unknown }): string {
+  const params = options?.params as { folderId?: string } | undefined;
+  return params?.folderId ?? '';
+}
+
 describe('web stereo review through the real platform adapters', () => {
   let review: ReviewService;
   let scope: ReturnType<typeof effectScope>;
@@ -86,7 +91,7 @@ describe('web stereo review through the real platform adapters', () => {
       if (url === 'dive_dataset/rig/media') return { data: { imageData: [] } } as never;
       if (url === 'dive_dataset/rig/configuration') return { data: parentConfig } as never;
       if (url === 'dive_annotation/track') {
-        const folder = options?.params.folderId;
+        const folder = folderIdFromRequestOptions(options);
         if (folder === failCamera) throw new Error('Camera access denied');
         return { data: JSON.parse(JSON.stringify(tracks[folder])) } as never;
       }
@@ -105,7 +110,7 @@ describe('web stereo review through the real platform adapters', () => {
       throw new Error(`Unexpected GET ${url}`);
     });
     vi.mocked(girderRest.patch).mockImplementation(async (_url, body, options) => {
-      const folder = options?.params.folderId;
+      const folder = folderIdFromRequestOptions(options);
       if (folder === failCamera) throw new Error('Write denied');
       const { upsert, delete: deleted } = (body as SaveDetectionsArgs).tracks;
       tracks[folder] = tracks[folder].filter((item) => !deleted.includes(item.id));
@@ -196,7 +201,7 @@ describe('web stereo review through the real platform adapters', () => {
     review.entries.value[0].items.forEach((item) => review.deleteTrack(item));
     await review.save();
     expect(tracks).toEqual({ leftFolder: [], rightFolder: [] });
-    expect(vi.mocked(girderRest.patch).mock.calls.every(([, , options]) => options?.params.folderId !== 'rig')).toBe(true);
+    expect(vi.mocked(girderRest.patch).mock.calls.every(([, , options]) => folderIdFromRequestOptions(options) !== 'rig')).toBe(true);
   });
 
   it('loads each stereo video URL and frame rate without using the parent media', async () => {