fix(core): bump axios to 1.13.5 to resolve CVE-2026-25639

Fixes #35145

Author: robert-sidzinka

nx-dev/nx-dev/package.json

@@ -38,7 +38,7 @@
     "@yarnpkg/lockfile": "1.1.0",
     "@yarnpkg/parsers": "3.0.2",
     "ai": "3.0.19",
-    "axios": "1.12.0",
+    "axios": "1.13.5",
     "classnames": "2.5.1",
     "cliui": "8.0.1",
     "enquirer": "2.3.6",

package.json

@@ -372,7 +372,7 @@
     "@types/three": "^0.166.0",
     "@yarnpkg/lockfile": "^1.1.0",
     "@yarnpkg/parsers": "3.0.2",
-    "axios": "1.12.0",
+    "axios": "1.13.5",
     "classnames": "^2.5.1",
     "cliui": "^8.0.1",
     "clsx": "^2.0.0",

packages/create-nx-workspace/package.json

@@ -30,7 +30,7 @@
   },
   "homepage": "https://nx.dev",
   "dependencies": {
-    "axios": "1.12.0",
+    "axios": "1.13.5",
     "chalk": "catalog:",
     "enquirer": "catalog:",
     "flat": "^5.0.2",

packages/nx/package.json

@@ -55,7 +55,7 @@
     "@yarnpkg/lockfile": "^1.1.0",
     "@yarnpkg/parsers": "3.0.2",
     "@zkochan/js-yaml": "catalog:",
-    "axios": "1.12.0",
+    "axios": "1.13.5",
     "picocolors": "catalog:",
     "cli-cursor": "3.1.0",
     "cli-spinners": "2.6.1",