From f378cc105539b3512da7391ad3a3619217334eb4 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Fri, 9 Jan 2026 05:54:39 +0000 Subject: [PATCH 1/5] chore(deps): update anchore/sbom-action action to v0.21.1 (#478) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> --- .github/workflows/docker-build.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/docker-build.yml b/.github/workflows/docker-build.yml index cdc1109b..8c9e4040 100644 --- a/.github/workflows/docker-build.yml +++ b/.github/workflows/docker-build.yml @@ -235,7 +235,7 @@ jobs: # Generate SBOM (Software Bill of Materials) for supply chain security - name: Generate SBOM - uses: anchore/sbom-action@a930d0ac434e3182448fe678398ba5713717112a # v0.21.0 + uses: anchore/sbom-action@0b82b0b1a22399a1c542d4d656f70cd903571b5c # v0.21.1 if: github.event_name != 'pull_request' && steps.skip.outputs.skip_build != 'true' with: image: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}@${{ steps.build-and-push.outputs.digest }} From 848172dcc465055c778a0cb9c3c6c30319ec6ad0 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Sat, 10 Jan 2026 03:43:11 +0000 Subject: [PATCH 2/5] chore(deps): update npm minor/patch --- frontend/package-lock.json | 16 ++++++++-------- frontend/package.json | 4 ++-- 2 files changed, 10 insertions(+), 10 deletions(-) diff --git a/frontend/package-lock.json b/frontend/package-lock.json index d28b5f2a..4f8ac911 100644 --- a/frontend/package-lock.json +++ b/frontend/package-lock.json @@ -37,7 +37,7 @@ "@testing-library/jest-dom": "^6.9.1", "@testing-library/react": "^16.3.1", "@testing-library/user-event": "^14.6.1", - "@types/node": "^25.0.3", + "@types/node": "^25.0.5", "@types/react": "^19.2.7", "@types/react-dom": "^19.2.3", "@typescript-eslint/eslint-plugin": "^8.52.0", @@ -51,7 +51,7 @@ "eslint-plugin-react-hooks": "^7.0.1", "eslint-plugin-react-refresh": "^0.4.25", "jsdom": "^27.4.0", - "knip": "^5.80.1", + "knip": "^5.80.2", "postcss": "^8.5.6", "tailwindcss": "^4.1.18", "typescript": "^5.9.3", @@ -3356,9 +3356,9 @@ "dev": true }, "node_modules/@types/node": { - "version": "25.0.3", - "resolved": "https://registry.npmjs.org/@types/node/-/node-25.0.3.tgz", - "integrity": "sha512-W609buLVRVmeW693xKfzHeIV6nJGGz98uCPfeXI1ELMLXVeKYZ9m15fAMSaUPBHYLGFsVRcMmSCksQOrZV9BYA==", + "version": "25.0.5", + "resolved": "https://registry.npmjs.org/@types/node/-/node-25.0.5.tgz", + "integrity": "sha512-FuLxeLuSVOqHPxSN1fkcD8DLU21gAP7nCKqGRJ/FglbCUBs0NYN6TpHcdmyLeh8C0KwGIaZQJSv+OYG+KZz+Gw==", "dev": true, "license": "MIT", "peer": true, @@ -5551,9 +5551,9 @@ } }, "node_modules/knip": { - "version": "5.80.1", - "resolved": "https://registry.npmjs.org/knip/-/knip-5.80.1.tgz", - "integrity": "sha512-aMqGxyoAgLzTd6g3bN7J+Mef0R/WqWKz4zazvKQisprPdszp7X/CHRAPVsVYIkUAIDWCiC/s65JOrva3DwR9yQ==", + "version": "5.80.2", + "resolved": "https://registry.npmjs.org/knip/-/knip-5.80.2.tgz", + "integrity": "sha512-Yt7iF8Uzl7pp3mGA6yvum6PZBcbGhjasZYuqIwcIAX1jsIhGRUAK0icP0qrB6FSPBI3BpIeMHl7n9meCLO6ovg==", "dev": true, "funding": [ { diff --git a/frontend/package.json b/frontend/package.json index d17075cf..6ee257b0 100644 --- a/frontend/package.json +++ b/frontend/package.json @@ -56,7 +56,7 @@ "@testing-library/jest-dom": "^6.9.1", "@testing-library/react": "^16.3.1", "@testing-library/user-event": "^14.6.1", - "@types/node": "^25.0.3", + "@types/node": "^25.0.5", "@types/react": "^19.2.7", "@types/react-dom": "^19.2.3", "@typescript-eslint/eslint-plugin": "^8.52.0", @@ -70,7 +70,7 @@ "eslint-plugin-react-hooks": "^7.0.1", "eslint-plugin-react-refresh": "^0.4.25", "jsdom": "^27.4.0", - "knip": "^5.80.1", + "knip": "^5.80.2", "postcss": "^8.5.6", "tailwindcss": "^4.1.18", "typescript": "^5.9.3", From 8b15016185fc8e8332b29aeb2707178d82235437 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Sun, 11 Jan 2026 00:36:58 +0000 Subject: [PATCH 3/5] fix(deps): update npm minor/patch --- frontend/package-lock.json | 32 ++++++++++++++++---------------- frontend/package.json | 8 ++++---- 2 files changed, 20 insertions(+), 20 deletions(-) diff --git a/frontend/package-lock.json b/frontend/package-lock.json index 4f8ac911..543fb06b 100644 --- a/frontend/package-lock.json +++ b/frontend/package-lock.json @@ -24,9 +24,9 @@ "lucide-react": "^0.562.0", "react": "^19.2.3", "react-dom": "^19.2.3", - "react-hook-form": "^7.70.0", + "react-hook-form": "^7.71.0", "react-hot-toast": "^2.6.0", - "react-i18next": "^16.5.1", + "react-i18next": "^16.5.2", "react-router-dom": "^7.12.0", "tailwind-merge": "^3.4.0", "tldts": "^7.0.19" @@ -37,8 +37,8 @@ "@testing-library/jest-dom": "^6.9.1", "@testing-library/react": "^16.3.1", "@testing-library/user-event": "^14.6.1", - "@types/node": "^25.0.5", - "@types/react": "^19.2.7", + "@types/node": "^25.0.6", + "@types/react": "^19.2.8", "@types/react-dom": "^19.2.3", "@typescript-eslint/eslint-plugin": "^8.52.0", "@typescript-eslint/parser": "^8.52.0", @@ -3356,9 +3356,9 @@ "dev": true }, "node_modules/@types/node": { - "version": "25.0.5", - "resolved": "https://registry.npmjs.org/@types/node/-/node-25.0.5.tgz", - "integrity": "sha512-FuLxeLuSVOqHPxSN1fkcD8DLU21gAP7nCKqGRJ/FglbCUBs0NYN6TpHcdmyLeh8C0KwGIaZQJSv+OYG+KZz+Gw==", + "version": "25.0.6", + "resolved": "https://registry.npmjs.org/@types/node/-/node-25.0.6.tgz", + "integrity": "sha512-NNu0sjyNxpoiW3YuVFfNz7mxSQ+S4X2G28uqg2s+CzoqoQjLPsWSbsFFyztIAqt2vb8kfEAsJNepMGPTxFDx3Q==", "dev": true, "license": "MIT", "peer": true, @@ -3367,9 +3367,9 @@ } }, "node_modules/@types/react": { - "version": "19.2.7", - "resolved": "https://registry.npmjs.org/@types/react/-/react-19.2.7.tgz", - "integrity": "sha512-MWtvHrGZLFttgeEj28VXHxpmwYbor/ATPYbBfSFZEIRK0ecCFLl2Qo55z52Hss+UV9CRN7trSeq1zbgx7YDWWg==", + "version": "19.2.8", + "resolved": "https://registry.npmjs.org/@types/react/-/react-19.2.8.tgz", + "integrity": "sha512-3MbSL37jEchWZz2p2mjntRZtPt837ij10ApxKfgmXCTuHWagYg7iA5bqPw6C8BMPfwidlvfPI/fxOc42HLhcyg==", "devOptional": true, "license": "MIT", "peer": true, @@ -6443,9 +6443,9 @@ } }, "node_modules/react-hook-form": { - "version": "7.70.0", - "resolved": "https://registry.npmjs.org/react-hook-form/-/react-hook-form-7.70.0.tgz", - "integrity": "sha512-COOMajS4FI3Wuwrs3GPpi/Jeef/5W1DRR84Yl5/ShlT3dKVFUfoGiEZ/QE6Uw8P4T2/CLJdcTVYKvWBMQTEpvw==", + "version": "7.71.0", + "resolved": "https://registry.npmjs.org/react-hook-form/-/react-hook-form-7.71.0.tgz", + "integrity": "sha512-oFDt/iIFMV9ZfV52waONXzg4xuSlbwKUPvXVH2jumL1me5qFhBMc4knZxuXiZ2+j6h546sYe3ZKJcg/900/iHw==", "license": "MIT", "engines": { "node": ">=18.0.0" @@ -6476,9 +6476,9 @@ } }, "node_modules/react-i18next": { - "version": "16.5.1", - "resolved": "https://registry.npmjs.org/react-i18next/-/react-i18next-16.5.1.tgz", - "integrity": "sha512-Hks6UIRZWW4c+qDAnx1csVsCGYeIR4MoBGQgJ+NUoNnO6qLxXuf8zu0xdcinyXUORgGzCdRsexxO1Xzv3sTdnw==", + "version": "16.5.2", + "resolved": "https://registry.npmjs.org/react-i18next/-/react-i18next-16.5.2.tgz", + "integrity": "sha512-GG/SBVxx9dvrO1uCs8VYdKfOP8NEBUhNP+2VDQLCifRJ8DL1qPq296k2ACNGyZMDe7iyIlz/LMJTQOs8HXSRvw==", "license": "MIT", "dependencies": { "@babel/runtime": "^7.28.4", diff --git a/frontend/package.json b/frontend/package.json index 6ee257b0..ab7f1d68 100644 --- a/frontend/package.json +++ b/frontend/package.json @@ -43,9 +43,9 @@ "lucide-react": "^0.562.0", "react": "^19.2.3", "react-dom": "^19.2.3", - "react-hook-form": "^7.70.0", + "react-hook-form": "^7.71.0", "react-hot-toast": "^2.6.0", - "react-i18next": "^16.5.1", + "react-i18next": "^16.5.2", "react-router-dom": "^7.12.0", "tailwind-merge": "^3.4.0", "tldts": "^7.0.19" @@ -56,8 +56,8 @@ "@testing-library/jest-dom": "^6.9.1", "@testing-library/react": "^16.3.1", "@testing-library/user-event": "^14.6.1", - "@types/node": "^25.0.5", - "@types/react": "^19.2.7", + "@types/node": "^25.0.6", + "@types/react": "^19.2.8", "@types/react-dom": "^19.2.3", "@typescript-eslint/eslint-plugin": "^8.52.0", "@typescript-eslint/parser": "^8.52.0", From c40932c43010b243a2d1cfcbf75f886cfc4ab11a Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Mon, 12 Jan 2026 06:00:13 +0000 Subject: [PATCH 4/5] chore(deps): update renovatebot/github-action action to v44.2.4 --- .github/workflows/renovate.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/renovate.yml b/.github/workflows/renovate.yml index 40095e99..47024571 100644 --- a/.github/workflows/renovate.yml +++ b/.github/workflows/renovate.yml @@ -24,7 +24,7 @@ jobs: fetch-depth: 1 - name: Run Renovate - uses: renovatebot/github-action@a7e89c349a53ab0c9d8458eb85f4b415e55848e7 # v44.2.3 + uses: renovatebot/github-action@66387ab8c2464d575b933fa44e9e5a86b2822809 # v44.2.4 with: configurationFile: .github/renovate.json token: ${{ secrets.RENOVATE_TOKEN }} From 9d8730f41f9a454299ebf74f499dc8f1403d4308 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Mon, 12 Jan 2026 06:00:24 +0000 Subject: [PATCH 5/5] chore(deps): update actions/checkout action to v5 --- .github/workflows/playwright.yml | 2 +- .github/workflows/supply-chain-verify.yml | 6 +++--- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/playwright.yml b/.github/workflows/playwright.yml index 3a9e089d..62091192 100644 --- a/.github/workflows/playwright.yml +++ b/.github/workflows/playwright.yml @@ -9,7 +9,7 @@ jobs: timeout-minutes: 60 runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5 - uses: actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d79f # v6 with: node-version: lts/* diff --git a/.github/workflows/supply-chain-verify.yml b/.github/workflows/supply-chain-verify.yml index 1790ed2e..3aeefd91 100644 --- a/.github/workflows/supply-chain-verify.yml +++ b/.github/workflows/supply-chain-verify.yml @@ -43,7 +43,7 @@ jobs: github.event.workflow_run.event != 'pull_request')) steps: - name: Checkout - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 + uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1 # Debug: Log workflow_run context for initial validation (can be removed after confidence) - name: Debug Workflow Run Context @@ -628,7 +628,7 @@ jobs: needs: verify-sbom steps: - name: Checkout - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 + uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1 - name: Install Verification Tools run: | @@ -725,7 +725,7 @@ jobs: if: github.event_name == 'release' steps: - name: Checkout - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 + uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1 - name: Install Verification Tools run: |