Fix: Pin Axios to known safe version and enable cooldown (#507)

Author: stevebux

.github/dependabot.yaml

@@ -6,23 +6,34 @@ updates:
     directory: "/"
     schedule:
       interval: "daily"
+    cooldown:
+      default-days: 7
 
   - package-ecosystem: "github-actions"
     directory: "/"
     schedule:
       interval: "daily"
+    cooldown:
+      default-days: 7
 
   - package-ecosystem: "npm"
     directory: "/"
     schedule:
       interval: "daily"
+    cooldown:
+      default-days: 7
+
 
   - package-ecosystem: "pip"
     directory: "/"
     schedule:
       interval: "daily"
+    cooldown:
+      default-days: 7
 
   - package-ecosystem: "terraform"
     directory: "/"
     schedule:
       interval: "daily"
+    cooldown:
+      default-days: 7

package-lock.json

@@ -63,7 +63,7 @@
   },
   "name": "nhs-notify-supplier-api",
   "overrides": {
-    "axios": "^1.13.5",
+    "axios": "1.14.0",
     "fast-xml-parser": "^5.5.6",
     "@isaacs/brace-expansion": "^5.0.1",
     "flatted": "^3.4.0",