security: pin axios override to <1.14.1 (supply chain fix)

[andriy-sudo]

Summary

Tightens the axios override in examples/js/package.json from >=1.13.5 to >=1.13.5 <1.14.1 to exclude the compromised version.

• axios@1.14.1 was published March 30–31, 2026 with a Remote Access Trojan (postinstall hook delivering a RAT that beacons to C2 every 60s)
• The lockfile is already resolved to 1.13.6 (safe) — no lockfile change needed
• The new constraint prevents any future npm install from resolving to 1.14.1

Ref: ENG-13585 / ENG-13581

Test plan

• npm install in examples/js/ resolves axios to a version satisfying >=1.13.5 <1.14.1
• No axios 1.14.1 appears in the generated lockfile

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: 08cca6a1-2f26-49cc-a9de-4355b2e68032

📥 Commits

Reviewing files that changed from the base of the PR and between ed1967c and 3bde783.

📒 Files selected for processing (1)

• examples/js/package.json

---

📝 Walkthrough

Walkthrough

The npm overrides constraint for the axios dependency in examples/js/package.json was updated. The version range was modified from >=1.13.5 to >=1.13.5 <1.14.1, adding an upper bound that excludes versions 1.14.1 and above. No other dependencies or package configurations were altered.

🚥 Pre-merge checks | ✅ 2

✅ Passed checks (2 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title clearly and accurately summarizes the main change: pinning axios to exclude a compromised version for security reasons.
Description check	✅ Passed	The description is directly related to the changeset, explaining the security rationale, impact, and test plan for the axios override constraint update.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch andriy/eng-13585-pin-axios-to-safe-version-in-agentql-and-tinyfish-cookbook

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}