chore(deps): patch Dependabot security advisories

npm (pnpm-lock.yaml):
- axios: bump direct dep ^1.15.0 -> ^1.15.2; override >=1.15.0 -> >=1.15.2
- brace-expansion: refresh override >=4.0.0 <5.0.5:5.0.5 -> <5.0.6:5.0.6
- ip-address: add <=10.1.0:10.1.1 (new advisory)
- uuid: add 11.1.0:11.1.1 (new advisory)

pip (uv.lock):
- urllib3: add >=2.7.0 to tool.uv override-dependencies (was 2.6.3)

Author: ElliotWood13

package.json

@@ -15,7 +15,7 @@
     "@babel/runtime": "^7.26.10",
     "@kamino-finance/klend-sdk": "^3.2.7",
     "@solana/web3.js": "^1.95.2",
-    "axios": "^1.15.0",
+    "axios": "^1.15.2",
     "base-x": "^3.0.11",
     "brace-expansion": "^1.1.13",
     "dotenv": "^16.4.5",
@@ -27,11 +27,13 @@
       "bigint-buffer": "npm:bigint-buffer-fixed@^1.1.5",
       "tar": ">=7.5.11",
       "minimatch": ">=3.1.4",
-      "axios": ">=1.15.0",
-      "axios@1.14.1": "1.15.0",
+      "axios": ">=1.15.2",
+      "axios@1.14.1": "1.15.2",
       "axios@0.30.4": "0.30.3",
       "brace-expansion@<1.1.13": "1.1.13",
-      "brace-expansion@>=4.0.0 <5.0.5": "5.0.5",
+      "brace-expansion@>=4.0.0 <5.0.6": "5.0.6",
+      "ip-address@<=10.1.0": "10.1.1",
+      "uuid@11.1.0": "11.1.1",
       "plain-crypto-js@4.2.1": "0.0.0-security",
       "lodash": ">=4.18.1",
       "bn.js": ">=5.2.3",

pnpm-lock.yaml

@@ -23,6 +23,7 @@ dev = [
 override-dependencies = [
     "aiohttp>=3.13.4",
     "Pygments>=2.20.0",
+    "urllib3>=2.7.0",
 ]
 
 [tool.ruff]