diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index f7f6259..0009ba3 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -36,7 +36,7 @@ jobs: sudo apt-get install -y build-essential libxml2-dev libxslt-dev liblzma-dev zlib1g-dev - name: Install uv - uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2 + uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0 with: enable-cache: true cache-dependency-glob: backend/requirements.txt @@ -57,7 +57,7 @@ jobs: run: pytest -v --cov=app --cov-report=xml - name: Upload coverage to Codecov - uses: codecov/codecov-action@0fb7174895f61a3b6b78fc075e0cd60383518dac # v5 + uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f # v7.0.0 with: token: ${{ secrets.CODECOV_TOKEN }} files: backend/coverage.xml @@ -193,7 +193,7 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 - - uses: github/codeql-action/init@99df26d4f13ea111d4ec1a7dddef6063f76b97e9 # v4.37.0 + - uses: github/codeql-action/init@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 # v4.37.3 with: languages: ${{ matrix.language }} @@ -238,14 +238,14 @@ jobs: persist-credentials: false - name: Run analysis - uses: ossf/scorecard-action@4eaacf0543bb3f2c246792bd56e8cdeffafb205a # v2.4.3 + uses: ossf/scorecard-action@2d1146689b8cda280b9bc96326124645441f03bc # v2.4.4 with: results_file: results.sarif results_format: sarif publish_results: true - name: Upload SARIF results as artifact - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4 + uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 with: name: scorecard-sarif path: results.sarif diff --git a/frontend/package.json b/frontend/package.json index 6495d23..57bde95 100644 --- a/frontend/package.json +++ b/frontend/package.json @@ -21,9 +21,9 @@ "jotai": "^2.20.2", "react": "^19.2.7", "react-country-flag": "^3.1.0", - "react-dom": "^19.2.7", + "react-dom": "^19.2.8", "react-dropzone": "^15.0.0", - "react-i18next": "^17.0.10", + "react-i18next": "^17.0.11", "react-markdown": "^10.1.0", "react-router-dom": "^7.18.1", "react-syntax-highlighter": "^16.1.1", @@ -46,7 +46,7 @@ "@testing-library/jest-dom": "^6.9.1", "@testing-library/react": "^16.3.2", "@testing-library/user-event": "^14.6.1", - "@vitejs/plugin-react": "^6.0.3", + "@vitejs/plugin-react": "^6.0.4", "@vitest/coverage-v8": "^4.1.10", "eslint": "^10.7.0", "eslint-plugin-react": "^7.37.5", diff --git a/frontend/yarn.lock b/frontend/yarn.lock index e156e3e..0b42bb3 100644 --- a/frontend/yarn.lock +++ b/frontend/yarn.lock @@ -3153,9 +3153,9 @@ __metadata: languageName: node linkType: hard -"@vitejs/plugin-react@npm:^6.0.3": - version: 6.0.3 - resolution: "@vitejs/plugin-react@npm:6.0.3" +"@vitejs/plugin-react@npm:^6.0.4": + version: 6.0.4 + resolution: "@vitejs/plugin-react@npm:6.0.4" dependencies: "@rolldown/pluginutils": "npm:^1.0.1" peerDependencies: @@ -3167,7 +3167,7 @@ __metadata: optional: true babel-plugin-react-compiler: optional: true - checksum: 10c0/592a93178c0eec420759d529a2c964a7103860808f549f72993b96a38c287c929a0d371cacbd932c37ee2118b830348db752cc01a31d688c71d19d74567251fa + checksum: 10c0/38446b54f51760b97d81abfa2fb9130bdc7a545183c97b26cfc7a5982fbcbeef431f482a3d44ef8225ca3e8c37e852a0843f8f84d0834391cab49b36a172dbf8 languageName: node linkType: hard @@ -3818,7 +3818,7 @@ __metadata: "@testing-library/react": "npm:^16.3.2" "@testing-library/user-event": "npm:^14.6.1" "@visx/geo": "npm:^4.0.0" - "@vitejs/plugin-react": "npm:^6.0.3" + "@vitejs/plugin-react": "npm:^6.0.4" "@vitest/coverage-v8": "npm:^4.1.10" axios: "npm:1.18.1" d3-scale-chromatic: "npm:^3.1.0" @@ -3834,9 +3834,9 @@ __metadata: jsdom: "npm:^29.1.1" react: "npm:^19.2.7" react-country-flag: "npm:^3.1.0" - react-dom: "npm:^19.2.7" + react-dom: "npm:^19.2.8" react-dropzone: "npm:^15.0.0" - react-i18next: "npm:^17.0.10" + react-i18next: "npm:^17.0.11" react-markdown: "npm:^10.1.0" react-router-dom: "npm:^7.18.1" react-syntax-highlighter: "npm:^16.1.1" @@ -5182,12 +5182,10 @@ __metadata: languageName: node linkType: hard -"html-parse-stringify@npm:^3.0.1": - version: 3.0.1 - resolution: "html-parse-stringify@npm:3.0.1" - dependencies: - void-elements: "npm:3.1.0" - checksum: 10c0/159292753d48b84d216d61121054ae5a33466b3db5b446e2ffc093ac077a411a99ce6cbe0d18e55b87cf25fa3c5a86c4d8b130b9719ec9b66623259000c72c15 +"html-parse-stringify@npm:^4.0.1": + version: 4.0.1 + resolution: "html-parse-stringify@npm:4.0.1" + checksum: 10c0/8d7267acbc8b70a50096176e28ba491af89fb31613b6a062bce4b8201b2703fd652bedfbe0db6efe90145379c89524a3319b1b58b8c96a72779b0f49e4c2c180 languageName: node linkType: hard @@ -7257,14 +7255,14 @@ __metadata: languageName: node linkType: hard -"react-dom@npm:^19.2.7": - version: 19.2.7 - resolution: "react-dom@npm:19.2.7" +"react-dom@npm:^19.2.8": + version: 19.2.8 + resolution: "react-dom@npm:19.2.8" dependencies: scheduler: "npm:^0.27.0" peerDependencies: - react: ^19.2.7 - checksum: 10c0/970ff600f6e80d47d39e2f226f12f226173b3cba3382efc97c5f0cd663de9af38c7a4c11c213fb936094faeac83060d660247accaa96b752180d5b951b9cfecb + react: ^19.2.8 + checksum: 10c0/41ba2247b76f687fcfe5bbc99f514d6b851d8c8041c2f5ded36ed05bd7fdc5208cacbac9de51e3e6633e77f96f44cec9f0d4a5a55184dba4e00738f224439134 languageName: node linkType: hard @@ -7301,12 +7299,12 @@ __metadata: languageName: node linkType: hard -"react-i18next@npm:^17.0.10": - version: 17.0.10 - resolution: "react-i18next@npm:17.0.10" +"react-i18next@npm:^17.0.11": + version: 17.0.11 + resolution: "react-i18next@npm:17.0.11" dependencies: "@babel/runtime": "npm:^7.29.2" - html-parse-stringify: "npm:^3.0.1" + html-parse-stringify: "npm:^4.0.1" use-sync-external-store: "npm:^1.6.0" peerDependencies: i18next: ">= 26.2.0" @@ -7319,7 +7317,7 @@ __metadata: optional: true typescript: optional: true - checksum: 10c0/0ec5dea59e4b136c026136334bf0d1eccc445db173b07d4ccefd2ce842db95bd64ae7e90809041c9022e31060fdb8eb3f6529b8ddd394bed84e5edaeb9d4ab52 + checksum: 10c0/f49e83e377f56d8f6a198a00539925edbc77370b68a51ad8b1829b581abcd22dd57843118a8e541c2284f58899d8035d255c41e246cfc64e9c0ca42df071ed81 languageName: node linkType: hard @@ -8698,13 +8696,6 @@ __metadata: languageName: node linkType: hard -"void-elements@npm:3.1.0": - version: 3.1.0 - resolution: "void-elements@npm:3.1.0" - checksum: 10c0/0b8686f9f9aa44012e9bd5eabf287ae0cde409b9a2854c5a2335cb83920c957668ac5876e3f0d158dd424744ac411a7270e64128556b451ed3bec875ef18534d - languageName: node - linkType: hard - "w3c-keyname@npm:^2.2.4": version: 2.2.8 resolution: "w3c-keyname@npm:2.2.8"