From 1c3242049c2845973dfe4bdca92bb1670359e453 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 27 Jul 2026 19:48:34 +0000 Subject: [PATCH 1/8] chore(deps-dev): bump @vitejs/plugin-react in /frontend Bumps [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react) from 6.0.3 to 6.0.4. - [Release notes](https://github.com/vitejs/vite-plugin-react/releases) - [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite-plugin-react/commits/plugin-react@6.0.4/packages/plugin-react) --- updated-dependencies: - dependency-name: "@vitejs/plugin-react" dependency-version: 6.0.4 dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- frontend/package.json | 2 +- frontend/yarn.lock | 10 +++++----- 2 files changed, 6 insertions(+), 6 deletions(-) diff --git a/frontend/package.json b/frontend/package.json index 85ba285..89db1df 100644 --- a/frontend/package.json +++ b/frontend/package.json @@ -46,7 +46,7 @@ "@testing-library/jest-dom": "^6.9.1", "@testing-library/react": "^16.3.2", "@testing-library/user-event": "^14.6.1", - "@vitejs/plugin-react": "^6.0.3", + "@vitejs/plugin-react": "^6.0.4", "@vitest/coverage-v8": "^4.1.10", "eslint": "^10.7.0", "eslint-plugin-react": "^7.37.5", diff --git a/frontend/yarn.lock b/frontend/yarn.lock index 22f975b..276110a 100644 --- a/frontend/yarn.lock +++ b/frontend/yarn.lock @@ -3153,9 +3153,9 @@ __metadata: languageName: node linkType: hard -"@vitejs/plugin-react@npm:^6.0.3": - version: 6.0.3 - resolution: "@vitejs/plugin-react@npm:6.0.3" +"@vitejs/plugin-react@npm:^6.0.4": + version: 6.0.4 + resolution: "@vitejs/plugin-react@npm:6.0.4" dependencies: "@rolldown/pluginutils": "npm:^1.0.1" peerDependencies: @@ -3167,7 +3167,7 @@ __metadata: optional: true babel-plugin-react-compiler: optional: true - checksum: 10c0/592a93178c0eec420759d529a2c964a7103860808f549f72993b96a38c287c929a0d371cacbd932c37ee2118b830348db752cc01a31d688c71d19d74567251fa + checksum: 10c0/38446b54f51760b97d81abfa2fb9130bdc7a545183c97b26cfc7a5982fbcbeef431f482a3d44ef8225ca3e8c37e852a0843f8f84d0834391cab49b36a172dbf8 languageName: node linkType: hard @@ -3818,7 +3818,7 @@ __metadata: "@testing-library/react": "npm:^16.3.2" "@testing-library/user-event": "npm:^14.6.1" "@visx/geo": "npm:^4.0.0" - "@vitejs/plugin-react": "npm:^6.0.3" + "@vitejs/plugin-react": "npm:^6.0.4" "@vitest/coverage-v8": "npm:^4.1.10" axios: "npm:1.18.1" d3-scale-chromatic: "npm:^3.1.0" From 0da0ea1aaeab07311a42dc170aa378cd0780de8d Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 27 Jul 2026 19:49:27 +0000 Subject: [PATCH 2/8] chore(deps): bump react-i18next from 17.0.10 to 17.0.11 in /frontend Bumps [react-i18next](https://github.com/i18next/react-i18next) from 17.0.10 to 17.0.11. - [Changelog](https://github.com/i18next/react-i18next/blob/master/CHANGELOG.md) - [Commits](https://github.com/i18next/react-i18next/compare/v17.0.10...v17.0.11) --- updated-dependencies: - dependency-name: react-i18next dependency-version: 17.0.11 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- frontend/package.json | 2 +- frontend/yarn.lock | 29 ++++++++++------------------- 2 files changed, 11 insertions(+), 20 deletions(-) diff --git a/frontend/package.json b/frontend/package.json index 85ba285..fbb9305 100644 --- a/frontend/package.json +++ b/frontend/package.json @@ -23,7 +23,7 @@ "react-country-flag": "^3.1.0", "react-dom": "^19.2.7", "react-dropzone": "^15.0.0", - "react-i18next": "^17.0.10", + "react-i18next": "^17.0.11", "react-markdown": "^10.1.0", "react-router-dom": "^7.18.1", "react-syntax-highlighter": "^16.1.1", diff --git a/frontend/yarn.lock b/frontend/yarn.lock index 22f975b..850c4fc 100644 --- a/frontend/yarn.lock +++ b/frontend/yarn.lock @@ -3836,7 +3836,7 @@ __metadata: react-country-flag: "npm:^3.1.0" react-dom: "npm:^19.2.7" react-dropzone: "npm:^15.0.0" - react-i18next: "npm:^17.0.10" + react-i18next: "npm:^17.0.11" react-markdown: "npm:^10.1.0" react-router-dom: "npm:^7.18.1" react-syntax-highlighter: "npm:^16.1.1" @@ -5182,12 +5182,10 @@ __metadata: languageName: node linkType: hard -"html-parse-stringify@npm:^3.0.1": - version: 3.0.1 - resolution: "html-parse-stringify@npm:3.0.1" - dependencies: - void-elements: "npm:3.1.0" - checksum: 10c0/159292753d48b84d216d61121054ae5a33466b3db5b446e2ffc093ac077a411a99ce6cbe0d18e55b87cf25fa3c5a86c4d8b130b9719ec9b66623259000c72c15 +"html-parse-stringify@npm:^4.0.1": + version: 4.0.1 + resolution: "html-parse-stringify@npm:4.0.1" + checksum: 10c0/8d7267acbc8b70a50096176e28ba491af89fb31613b6a062bce4b8201b2703fd652bedfbe0db6efe90145379c89524a3319b1b58b8c96a72779b0f49e4c2c180 languageName: node linkType: hard @@ -7301,12 +7299,12 @@ __metadata: languageName: node linkType: hard -"react-i18next@npm:^17.0.10": - version: 17.0.10 - resolution: "react-i18next@npm:17.0.10" +"react-i18next@npm:^17.0.11": + version: 17.0.11 + resolution: "react-i18next@npm:17.0.11" dependencies: "@babel/runtime": "npm:^7.29.2" - html-parse-stringify: "npm:^3.0.1" + html-parse-stringify: "npm:^4.0.1" use-sync-external-store: "npm:^1.6.0" peerDependencies: i18next: ">= 26.2.0" @@ -7319,7 +7317,7 @@ __metadata: optional: true typescript: optional: true - checksum: 10c0/0ec5dea59e4b136c026136334bf0d1eccc445db173b07d4ccefd2ce842db95bd64ae7e90809041c9022e31060fdb8eb3f6529b8ddd394bed84e5edaeb9d4ab52 + checksum: 10c0/f49e83e377f56d8f6a198a00539925edbc77370b68a51ad8b1829b581abcd22dd57843118a8e541c2284f58899d8035d255c41e246cfc64e9c0ca42df071ed81 languageName: node linkType: hard @@ -8698,13 +8696,6 @@ __metadata: languageName: node linkType: hard -"void-elements@npm:3.1.0": - version: 3.1.0 - resolution: "void-elements@npm:3.1.0" - checksum: 10c0/0b8686f9f9aa44012e9bd5eabf287ae0cde409b9a2854c5a2335cb83920c957668ac5876e3f0d158dd424744ac411a7270e64128556b451ed3bec875ef18534d - languageName: node - linkType: hard - "w3c-keyname@npm:^2.2.4": version: 2.2.8 resolution: "w3c-keyname@npm:2.2.8" From 3e0fb6a5fddd097a2f801af83df1270b94fa8a8f Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 27 Jul 2026 19:51:01 +0000 Subject: [PATCH 3/8] chore(deps): bump astral-sh/setup-uv from 8.3.2 to 9.0.0 Bumps [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) from 8.3.2 to 9.0.0. - [Release notes](https://github.com/astral-sh/setup-uv/releases) - [Commits](https://github.com/astral-sh/setup-uv/compare/11f9893b081a58869d3b5fccaea48c9e9e46f990...c771a70e6277c0a99b617c7a806ffedaca235ff9) --- updated-dependencies: - dependency-name: astral-sh/setup-uv dependency-version: 9.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/ci.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index a6816d3..baa67aa 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -36,7 +36,7 @@ jobs: sudo apt-get install -y build-essential libxml2-dev libxslt-dev liblzma-dev zlib1g-dev - name: Install uv - uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2 + uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0 with: enable-cache: true cache-dependency-glob: backend/requirements.txt From 96fbfbc77ae9c7d0502cc16e901ee53baa5733ed Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 27 Jul 2026 19:51:05 +0000 Subject: [PATCH 4/8] chore(deps): bump ossf/scorecard-action from 2.4.3 to 2.4.4 Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action) from 2.4.3 to 2.4.4. - [Release notes](https://github.com/ossf/scorecard-action/releases) - [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md) - [Commits](https://github.com/ossf/scorecard-action/compare/4eaacf0543bb3f2c246792bd56e8cdeffafb205a...2d1146689b8cda280b9bc96326124645441f03bc) --- updated-dependencies: - dependency-name: ossf/scorecard-action dependency-version: 2.4.4 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- .github/workflows/ci.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index a6816d3..970988c 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -238,7 +238,7 @@ jobs: persist-credentials: false - name: Run analysis - uses: ossf/scorecard-action@4eaacf0543bb3f2c246792bd56e8cdeffafb205a # v2.4.3 + uses: ossf/scorecard-action@2d1146689b8cda280b9bc96326124645441f03bc # v2.4.4 with: results_file: results.sarif results_format: sarif From ced05261d0f1b74ffd518c1ff48121815d528df8 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 27 Jul 2026 19:51:12 +0000 Subject: [PATCH 5/8] chore(deps): bump codecov/codecov-action from 5.5.5 to 7.0.0 Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 5.5.5 to 7.0.0. - [Release notes](https://github.com/codecov/codecov-action/releases) - [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/codecov/codecov-action/compare/v5.5.5...fb8b3582c8e4def4969c97caa2f19720cb33a72f) --- updated-dependencies: - dependency-name: codecov/codecov-action dependency-version: 7.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/ci.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index a6816d3..44e7661 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -57,7 +57,7 @@ jobs: run: pytest -v --cov=app --cov-report=xml - name: Upload coverage to Codecov - uses: codecov/codecov-action@0fb7174895f61a3b6b78fc075e0cd60383518dac # v5 + uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f # v7.0.0 with: token: ${{ secrets.CODECOV_TOKEN }} files: backend/coverage.xml From a5448f23a0db3b4a82600339b664cfd8e9ddfa94 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 27 Jul 2026 19:52:24 +0000 Subject: [PATCH 6/8] chore(deps): bump github/codeql-action/init from 4.37.0 to 4.37.3 Bumps [github/codeql-action/init](https://github.com/github/codeql-action) from 4.37.0 to 4.37.3. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/99df26d4f13ea111d4ec1a7dddef6063f76b97e9...e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81) --- updated-dependencies: - dependency-name: github/codeql-action/init dependency-version: 4.37.3 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- .github/workflows/ci.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index a6816d3..5a0fc5c 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -193,7 +193,7 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 - - uses: github/codeql-action/init@99df26d4f13ea111d4ec1a7dddef6063f76b97e9 # v4.37.0 + - uses: github/codeql-action/init@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 # v4.37.3 with: languages: ${{ matrix.language }} From 5447b80d337ed64e9cbec97d5b7756616bbab06f Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 27 Jul 2026 19:52:30 +0000 Subject: [PATCH 7/8] chore(deps): bump actions/upload-artifact from 4.6.2 to 7.0.1 Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4.6.2 to 7.0.1. - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/v4.6.2...043fb46d1a93c77aae656e7c1c64a875d1fc6a0a) --- updated-dependencies: - dependency-name: actions/upload-artifact dependency-version: 7.0.1 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/ci.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index a6816d3..c3a6f20 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -245,7 +245,7 @@ jobs: publish_results: true - name: Upload SARIF results as artifact - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4 + uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 with: name: scorecard-sarif path: results.sarif From e60b301b0bef5d71184c0e25ae01a40c91e00227 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 27 Jul 2026 19:53:52 +0000 Subject: [PATCH 8/8] chore(deps): bump react-dom from 19.2.7 to 19.2.8 in /frontend Bumps [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) from 19.2.7 to 19.2.8. - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.2.8/packages/react-dom) --- updated-dependencies: - dependency-name: react-dom dependency-version: 19.2.8 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- frontend/package.json | 2 +- frontend/yarn.lock | 12 ++++++------ 2 files changed, 7 insertions(+), 7 deletions(-) diff --git a/frontend/package.json b/frontend/package.json index 6495d23..4976926 100644 --- a/frontend/package.json +++ b/frontend/package.json @@ -21,7 +21,7 @@ "jotai": "^2.20.2", "react": "^19.2.7", "react-country-flag": "^3.1.0", - "react-dom": "^19.2.7", + "react-dom": "^19.2.8", "react-dropzone": "^15.0.0", "react-i18next": "^17.0.10", "react-markdown": "^10.1.0", diff --git a/frontend/yarn.lock b/frontend/yarn.lock index e156e3e..cf0e3db 100644 --- a/frontend/yarn.lock +++ b/frontend/yarn.lock @@ -3834,7 +3834,7 @@ __metadata: jsdom: "npm:^29.1.1" react: "npm:^19.2.7" react-country-flag: "npm:^3.1.0" - react-dom: "npm:^19.2.7" + react-dom: "npm:^19.2.8" react-dropzone: "npm:^15.0.0" react-i18next: "npm:^17.0.10" react-markdown: "npm:^10.1.0" @@ -7257,14 +7257,14 @@ __metadata: languageName: node linkType: hard -"react-dom@npm:^19.2.7": - version: 19.2.7 - resolution: "react-dom@npm:19.2.7" +"react-dom@npm:^19.2.8": + version: 19.2.8 + resolution: "react-dom@npm:19.2.8" dependencies: scheduler: "npm:^0.27.0" peerDependencies: - react: ^19.2.7 - checksum: 10c0/970ff600f6e80d47d39e2f226f12f226173b3cba3382efc97c5f0cd663de9af38c7a4c11c213fb936094faeac83060d660247accaa96b752180d5b951b9cfecb + react: ^19.2.8 + checksum: 10c0/41ba2247b76f687fcfe5bbc99f514d6b851d8c8041c2f5ded36ed05bd7fdc5208cacbac9de51e3e6633e77f96f44cec9f0d4a5a55184dba4e00738f224439134 languageName: node linkType: hard