chore: pin secure axios version (#3304)

* chore: pin correct axios version

* format tweak

Author: dreamwasp

.yarnrc.yml

@@ -1,3 +1,5 @@
 nodeLinker: node-modules
 enableScripts: false
-npmMinimalAgeGate: 7d
+npmMinimalAgeGate: 7d
+# Allow axios 1.14.0 through the age gate until it’s older than 7d - this is the secure version.
+npmPreapprovedPackages: ["axios@1.14.0", "@codecademy/*"]

package.json

@@ -116,6 +116,7 @@
     "@types/react": "18.3.27",
     "@types/react-dom": "18.3.1",
     "@typescript-eslint/utils": "^5.15.0",
+    "axios": "1.14.0",
     "error-ex": "1.3.4",
     "react": "18.3.1",
     "react-dom": "18.3.1"

yarn.lock

@@ -9191,14 +9191,14 @@ __metadata:
   languageName: node
   linkType: hard
 
-"axios@npm:^1.12.0, axios@npm:^1.13.5, axios@npm:^1.6.0, axios@npm:^1.6.1":
-  version: 1.13.6
-  resolution: "axios@npm:1.13.6"
+"axios@npm:1.14.0":
+  version: 1.14.0
+  resolution: "axios@npm:1.14.0"
   dependencies:
     follow-redirects: "npm:^1.15.11"
     form-data: "npm:^4.0.5"
-    proxy-from-env: "npm:^1.1.0"
-  checksum: 10c0/51fb5af055c3b85662fa97df17d986ae2c37d13bf86d50b6bb36b6b3a2dec6966a1d3a14ab3774b71707b155ae3597ed9b7babdf1a1a863d1a31840cb8e7ec71
+    proxy-from-env: "npm:^2.1.0"
+  checksum: 10c0/2541f4aa215a7d1842429dad006fc682d82bc0e74bd14500823f7d8cce3bbae0e0a8c328c8538946718f366ab8ce5a4c12e9ad40e5a0f3482ff8bff0cd115d45
   languageName: node
   linkType: hard
 
@@ -19085,10 +19085,10 @@ __metadata:
   languageName: node
   linkType: hard
 
-"proxy-from-env@npm:^1.1.0":
-  version: 1.1.0
-  resolution: "proxy-from-env@npm:1.1.0"
-  checksum: 10c0/fe7dd8b1bdbbbea18d1459107729c3e4a2243ca870d26d34c2c1bcd3e4425b7bcc5112362df2d93cc7fb9746f6142b5e272fd1cc5c86ddf8580175186f6ad42b
+"proxy-from-env@npm:^2.1.0":
+  version: 2.1.0
+  resolution: "proxy-from-env@npm:2.1.0"
+  checksum: 10c0/ed01729fd4d094eab619cd7e17ce3698b3413b31eb102c4904f9875e677cd207392795d5b4adee9cec359dfd31c44d5ad7595a3a3ad51c40250e141512281c58
   languageName: node
   linkType: hard