Request for Updated JavaScript Files Compatible with Latest Axios Version in Metronic 8 Theme
I am using the Metronic 8 Demo 60 theme, which I purchased 3 to 4 years ago. Currently, the plugins.bundle.js file is outdated, and there are some vulnerabilities detected, especially related to Axios. The client has requested that I upgrade Axios to version 1.15.0 or later.
Could anyone please advise if I can get the latest JavaScript files or the updated plugins.bundle.js compatible with the newer Axios versions?
Replies (1)
Hi there,
Understanding
You're using Metronic 8 Demo 60 and need to upgrade Axios to version 1.15.0 or later due to security vulnerabilities detected in your current plugins.bundle.js file.
Solution
The latest Metronic v8 release is v8.3.3 (Bootstrap), which includes Axios v1.13.2. We do not currently ship an official Metronic v8 build with Axios 1.15.0 or later.
To upgrade Axios manually:
-
Update to Metronic v8.3.3 if you haven't already - this includes the latest security fixes for our bundled version.
-
For manual Axios upgrade, you'll need to rebuild the plugins bundle:
# Navigate to your Metronic v8 root directory
cd metronic
# Update Axios in package.json
npm install axios@latest
# Rebuild the plugins bundle
npm run build
- Alternative approach - Replace the Axios file directly:
# Download the latest Axios
curl -L https://github.com/axios/axios/releases/download/v1.18.1/axios.min.js -o assets/plugins/global/axios.min.js
# Update the plugins.bundle.js to reference the new file
# (This requires rebuilding the bundle with Gulp)
Important notes:
- Metronic v8 uses Gulp for asset bundling. You'll need Node.js LTS (v14.x recommended) to rebuild.
- The plugins bundle includes many other dependencies. Updating only Axios may cause compatibility issues with other plugins.
- We recommend testing thoroughly after any manual updates to ensure all Metronic features work correctly.
Sources
Next Steps
If you encounter issues after updating, please let us know the specific problems and we'll help troubleshoot. For security-critical applications, we recommend keeping all dependencies updated regularly.
This reply was generated by AI. A human will follow up if needed.