chore: bump axios from 0.17.1 to 1.6.7

[dfdeagle47]

Checks

• [x] My branch can be merged to the target branch without conflicts
• [x] Closes https://github.com/algolia/youtube-captions-scraper/issues/26

Context

As explained in the GitHub issue, the axios package has a number of CVEs, the latest of which is fixed in versions > 1.6.0.

Description

This PR updates the axios package to the latest version (1.6.7) to address the open CVEs.

The use of axios in this library is fairly basic, it only uses axios.get here. I checked the following documentation:

• https://axios-http.com/docs/api_intro
• https://axios-http.com/docs/res_schema

I did not detect a breaking change that would affect the use of axios here:

• the instance method axios.get(url[, config]) still exists with the same API
• the response schema still contains the data object

Testing notes

I ran the test using npm run test and they still work fine:

> npm run test

> youtube-captions-scraper@2.0.2 test
> ava

  2 passed

I also built the package locally (npm run build), and used the output to run the following script:

const { getSubtitles } = require('./dist/index');

async function main() {
  const subtitles = await getSubtitles({ videoID: 'dQw4w9WgXcQ' });

  console.log(subtitles);
}

main();

and the result is as expected:

Misc

Some dependencies in yarn.lock file are also updated, mostly because they're sub-dependencies of axios.