Lock file maintenance

[renovate]

This PR contains the following updates:

Update	Change
lockFileMaintenance	All locks refreshed

🔧 This Pull Request updates lock files to use the latest dependency versions.

---

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) in timezone US/Eastern, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[sentry]

Bug: The updated follow-redirects dependency (v1.15.11) has a known bug causing POST requests that receive a 303 redirect to fail with a 401 Unauthorized error.
_{Severity: HIGH}

Suggested Fix

Pin the version of follow-redirects to 1.15.7 to avoid the regression. This can be done by adding an overrides or resolutions block in the package.json file, like: "resolutions": { "follow-redirects": "1.15.7" }. This will force yarn to use the non-buggy version while allowing other dependency updates.

Prompt for AI Agent

Review the code at the location below. A potential bug has been identified by an AI
agent.
Verify if this is a real issue. If it is, propose a fix; if not, explain why it's not
valid.

Location: src/typescript/mitxonline-api-axios/yarn.lock#L229-L235

Potential issue: The update to `axios` brings in `follow-redirects@1.15.11` as a
transitive dependency. Versions of `follow-redirects` greater than or equal to `1.15.8`
contain a known regression that causes issues with authentication headers during
redirects. Specifically, if a `POST` request receives a 303 redirect, the library fails
to preserve the `Authorization` header on the subsequent `GET` request, leading to a
`401 Unauthorized` error. Since this API client is used for critical operations like
enrollments and checkouts which use `POST`, this bug could break core functionality for
authenticated users if any of those endpoints use 303 redirects.

_{Did we get this right? 👍 / 👎 to inform future reviews.}