From f7f4ccba3b3c31915a97bfd7ac7023a289ee5ec6 Mon Sep 17 00:00:00 2001
From: Tarik Gul <47201679+TarikGul@users.noreply.github.com>
Date: Tue, 31 Mar 2026 14:33:27 -0400
Subject: [PATCH] Pin axios to safe version (#12220)

* Pin axios to safe version

* Correctly pin multiple versions
---
 package.json |  3 +++
 yarn.lock    | 33 +++++++++++----------------------
 2 files changed, 14 insertions(+), 22 deletions(-)

diff --git a/package.json b/package.json
index 8e3c80008c..146a807662 100644
--- a/package.json
+++ b/package.json
@@ -121,6 +121,9 @@
     "@polkadot/x-textencoder": "^13.5.9",
     "@polkadot/x-ws": "^13.5.9",
     "@zondax/ledger-substrate": "1.1.1",
+    "@pinata/sdk/axios": "0.21.4",
+    "@polkadot/app-files/axios": "1.9.0",
+    "@zondax/ledger-substrate/axios": "1.9.0",
     "typescript": "^5.5.4"
   }
 }
diff --git a/yarn.lock b/yarn.lock
index 36d0766456..73fb41cb2a 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -2959,7 +2959,7 @@ __metadata:
   languageName: node
   linkType: hard
 
-"@polkadot/wasm-util@npm:7.5.3, @polkadot/wasm-util@npm:^7.5.3":
+"@polkadot/wasm-util@npm:7.5.3, @polkadot/wasm-util@npm:^7.4.1, @polkadot/wasm-util@npm:^7.5.3":
   version: 7.5.3
   resolution: "@polkadot/wasm-util@npm:7.5.3"
   dependencies:
@@ -2970,17 +2970,6 @@ __metadata:
   languageName: node
   linkType: hard
 
-"@polkadot/wasm-util@npm:^7.4.1":
-  version: 7.5.1
-  resolution: "@polkadot/wasm-util@npm:7.5.1"
-  dependencies:
-    tslib: "npm:^2.7.0"
-  peerDependencies:
-    "@polkadot/util": "*"
-  checksum: 10/7e96be99a275f6e4a68b92b6439b70aa7d80f1209031d4f7e7f7c00dee65272aabaaee43ec153c969a72a02792c2bf271e266bccd60e83e9a1450c5c5e7b06ee
-  languageName: node
-  linkType: hard
-
 "@polkadot/x-bigint@npm:^13.5.9":
   version: 13.5.9
   resolution: "@polkadot/x-bigint@npm:13.5.9"
@@ -5555,16 +5544,16 @@ __metadata:
   languageName: node
   linkType: hard
 
-"axios@npm:^0.21.1":
-  version: 0.21.1
-  resolution: "axios@npm:0.21.1"
+"axios@npm:0.21.4":
+  version: 0.21.4
+  resolution: "axios@npm:0.21.4"
   dependencies:
-    follow-redirects: "npm:^1.10.0"
-  checksum: 10/271afc61381d285c688f0579eec170b66dc4177219a3f31e67d1fe485be7a2dae4af2c366fdee703a8ec887c52778fdc7f5fec30650a97f61f68c1a7696648b0
+    follow-redirects: "npm:^1.14.0"
+  checksum: 10/da644592cb6f8f9f8c64fdabd7e1396d6769d7a4c1ea5f8ae8beb5c2eb90a823e3a574352b0b934ac62edc762c0f52647753dc54f7d07279127a7e5c4cd20272
   languageName: node
   linkType: hard
 
-"axios@npm:^1.6.2, axios@npm:^1.8.4":
+"axios@npm:1.9.0":
   version: 1.9.0
   resolution: "axios@npm:1.9.0"
   dependencies:
@@ -9497,13 +9486,13 @@ __metadata:
   languageName: node
   linkType: hard
 
-"follow-redirects@npm:^1.0.0, follow-redirects@npm:^1.10.0, follow-redirects@npm:^1.15.6":
-  version: 1.15.6
-  resolution: "follow-redirects@npm:1.15.6"
+"follow-redirects@npm:^1.0.0, follow-redirects@npm:^1.14.0, follow-redirects@npm:^1.15.6":
+  version: 1.15.11
+  resolution: "follow-redirects@npm:1.15.11"
   peerDependenciesMeta:
     debug:
       optional: true
-  checksum: 10/70c7612c4cab18e546e36b991bbf8009a1a41cf85354afe04b113d1117569abf760269409cb3eb842d9f7b03d62826687086b081c566ea7b1e6613cf29030bf7
+  checksum: 10/07372fd74b98c78cf4d417d68d41fdaa0be4dcacafffb9e67b1e3cf090bc4771515e65020651528faab238f10f9b9c0d9707d6c1574a6c0387c5de1042cde9ba
   languageName: node
   linkType: hard