Axios dependency security vulnerability

[ricardograca-scratch]

Summary

npm audit indicates there's a security vulnerability in the version of Axios used here: GHSA-8hc4-vh64-cxmj

Expected Behavior

No security vulnerabilities.

Current Behavior

# npm audit report

axios  1.3.2 - 1.7.3
Severity: high
Server-Side Request Forgery in axios - https://github.com/advisories/GHSA-8hc4-vh64-cxmj
fix available via `npm audit fix`
node_modules/@lob/lob-typescript-sdk/node_modules/axios

Possible Solution

Upgrade axios to version 1.7.4.

Steps to Reproduce

1. Add @lob/lob-typescript-sdk as a dependency to your project
2. Run npm install && npm audit

I can provide a PR if that's acceptable.

[prescottprue]

Second this - also as part of this want to ask: Is there any reason not to be using native fetch instead of axios?

[erichasinternet]

@bamohan - can you please take a look at this issue?

Dependabot attempted to update axios in PR #284 but failed.

I bumped axios to 1.9.0 locally, and it passed all unit tests.

I am happy to help with any additional testing or integration if needed.