Merge pull request #156 from ethena-labs/ew/security-vulns-dependabot

chore(deps): patch Dependabot security advisories

Author: ElliotWood13

package.json

@@ -15,7 +15,7 @@
     "@babel/runtime": "^7.26.10",
     "@kamino-finance/klend-sdk": "^3.2.7",
     "@solana/web3.js": "^1.95.2",
-    "axios": "^1.15.0",
+    "axios": "^1.15.2",
     "base-x": "^3.0.11",
     "brace-expansion": "^1.1.13",
     "dotenv": "^16.4.5",
@@ -27,11 +27,13 @@
       "bigint-buffer": "npm:bigint-buffer-fixed@^1.1.5",
       "tar": ">=7.5.11",
       "minimatch": ">=3.1.4",
-      "axios": ">=1.15.0",
-      "axios@1.14.1": "1.15.0",
+      "axios": ">=1.15.2",
+      "axios@1.14.1": "1.15.2",
       "axios@0.30.4": "0.30.3",
       "brace-expansion@<1.1.13": "1.1.13",
-      "brace-expansion@>=4.0.0 <5.0.5": "5.0.5",
+      "brace-expansion@>=4.0.0 <5.0.6": "5.0.6",
+      "ip-address@<=10.1.0": "10.1.1",
+      "uuid@11.1.0": "11.1.1",
       "plain-crypto-js@4.2.1": "0.0.0-security",
       "lodash": ">=4.18.1",
       "bn.js": ">=5.2.3",

pnpm-lock.yaml

@@ -24,6 +24,7 @@ exclude-newer = "10 days"
 override-dependencies = [
     "aiohttp>=3.13.4",
     "Pygments>=2.20.0",
+    "urllib3>=2.7.0",
 ]
 
 [tool.ruff]