diff --git a/.github/workflows/security-pr.yml b/.github/workflows/security-pr.yml
index 2f80282c..7e05d9de 100644
--- a/.github/workflows/security-pr.yml
+++ b/.github/workflows/security-pr.yml
@@ -385,7 +385,7 @@ jobs:
       - name: Upload Trivy SARIF to GitHub Security
         if: always() && steps.trivy-sarif-check.outputs.exists == 'true'
         # github/codeql-action v4
-        uses: github/codeql-action/upload-sarif@72c0b0efb7def5141326c5e13760acdda431379d
+        uses: github/codeql-action/upload-sarif@eedab83377f873ae39009d167a89b7a5aab4638b
         with:
           sarif_file: 'trivy-binary-results.sarif'
           category: ${{ steps.pr-info.outputs.is_push == 'true' && format('security-scan-{0}', github.event_name == 'workflow_run' && github.event.workflow_run.head_branch || github.ref_name) || format('security-scan-pr-{0}', steps.pr-info.outputs.pr_number) }}
diff --git a/frontend/package-lock.json b/frontend/package-lock.json
index c1ed87a5..eca9373a 100644
--- a/frontend/package-lock.json
+++ b/frontend/package-lock.json
@@ -19,14 +19,14 @@
         "class-variance-authority": "^0.7.1",
         "clsx": "^2.1.1",
         "date-fns": "^4.1.0",
-        "i18next": "^25.10.5",
+        "i18next": "^25.10.8",
         "i18next-browser-languagedetector": "^8.2.1",
         "lucide-react": "^1.0.1",
         "react": "^19.2.4",
         "react-dom": "^19.2.4",
         "react-hook-form": "^7.72.0",
         "react-hot-toast": "^2.6.0",
-        "react-i18next": "^16.6.2",
+        "react-i18next": "^16.6.5",
         "react-router-dom": "^7.13.2",
         "tailwind-merge": "^3.5.0",
         "tldts": "^7.0.27"
@@ -65,7 +65,7 @@
         "eslint-plugin-react-refresh": "^0.5.2",
         "eslint-plugin-security": "^4.0.0",
         "eslint-plugin-sonarjs": "^4.0.2",
-        "eslint-plugin-testing-library": "^7.16.1",
+        "eslint-plugin-testing-library": "^7.16.2",
         "eslint-plugin-unicorn": "^63.0.0",
         "eslint-plugin-unused-imports": "^4.4.1",
         "jsdom": "29.0.1",
@@ -6159,9 +6159,9 @@
       }
     },
     "node_modules/eslint-plugin-testing-library": {
-      "version": "7.16.1",
-      "resolved": "https://registry.npmjs.org/eslint-plugin-testing-library/-/eslint-plugin-testing-library-7.16.1.tgz",
-      "integrity": "sha512-/pCFzJuro/wOq6FCp43DwS3fpCr0hM2gByJAxi8bPdL7DXKdmH3p3BEpVKQkneUxT6T2XbUXG4J+c5GSAm12lA==",
+      "version": "7.16.2",
+      "resolved": "https://registry.npmjs.org/eslint-plugin-testing-library/-/eslint-plugin-testing-library-7.16.2.tgz",
+      "integrity": "sha512-8gleGnQXK2ZA3hHwjCwpYTZvM+9VsrJ+/9kDI8CjqAQGAdMQOdn/rJNu7ZySENuiWlGKQWyZJ4ZjEg2zamaRHw==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
@@ -7043,9 +7043,9 @@
       }
     },
     "node_modules/i18next": {
-      "version": "25.10.5",
-      "resolved": "https://registry.npmjs.org/i18next/-/i18next-25.10.5.tgz",
-      "integrity": "sha512-jRnF7eRNsdcnh7AASSgaU3lj/8lJZuHkfsouetnLEDH0xxE1vVi7qhiJ9RhdSPUyzg4ltb7P7aXsFlTk9sxL2w==",
+      "version": "25.10.9",
+      "resolved": "https://registry.npmjs.org/i18next/-/i18next-25.10.9.tgz",
+      "integrity": "sha512-hQY9/bFoQKGlSKMlaCuLR8w1h5JjieqrsnZvEmj1Ja6Ec7fbyc4cTrCsY9mb9Sd8YQ/swsrKz1S9M8AcvVI70w==",
       "funding": [
         {
           "type": "individual",
@@ -7065,7 +7065,7 @@
         "@babel/runtime": "^7.29.2"
       },
       "peerDependencies": {
-        "typescript": "^5"
+        "typescript": "^5 || ^6"
       },
       "peerDependenciesMeta": {
         "typescript": {
@@ -9774,9 +9774,9 @@
       }
     },
     "node_modules/react-i18next": {
-      "version": "16.6.2",
-      "resolved": "https://registry.npmjs.org/react-i18next/-/react-i18next-16.6.2.tgz",
-      "integrity": "sha512-/S/GPzElTqEi5o2kzd0/O2627hPDmE6OGhJCCwCfUaQ3syyu+kaYH8/PYFtZeWc25NzfxTN/2fD1QjvrTgrFfA==",
+      "version": "16.6.5",
+      "resolved": "https://registry.npmjs.org/react-i18next/-/react-i18next-16.6.5.tgz",
+      "integrity": "sha512-bfdJhmyjQCXtU9CLcGMn3a1V5/jTeUX/x29cOhlS1Lolm/epRtm24gnYsltxArsc29ow3klSJEijjfYXc5kxjg==",
       "license": "MIT",
       "dependencies": {
         "@babel/runtime": "^7.29.2",
@@ -9786,7 +9786,7 @@
       "peerDependencies": {
         "i18next": ">= 25.6.2",
         "react": ">= 16.8.0",
-        "typescript": "^5"
+        "typescript": "^5 || ^6"
       },
       "peerDependenciesMeta": {
         "react-dom": {
diff --git a/frontend/package.json b/frontend/package.json
index fbab3f7e..e18a45f6 100644
--- a/frontend/package.json
+++ b/frontend/package.json
@@ -38,14 +38,14 @@
     "class-variance-authority": "^0.7.1",
     "clsx": "^2.1.1",
     "date-fns": "^4.1.0",
-    "i18next": "^25.10.5",
+    "i18next": "^25.10.8",
     "i18next-browser-languagedetector": "^8.2.1",
     "lucide-react": "^1.0.1",
     "react": "^19.2.4",
     "react-dom": "^19.2.4",
     "react-hook-form": "^7.72.0",
     "react-hot-toast": "^2.6.0",
-    "react-i18next": "^16.6.2",
+    "react-i18next": "^16.6.5",
     "react-router-dom": "^7.13.2",
     "tailwind-merge": "^3.5.0",
     "tldts": "^7.0.27"
@@ -84,7 +84,7 @@
     "eslint-plugin-react-refresh": "^0.5.2",
     "eslint-plugin-security": "^4.0.0",
     "eslint-plugin-sonarjs": "^4.0.2",
-    "eslint-plugin-testing-library": "^7.16.1",
+    "eslint-plugin-testing-library": "^7.16.2",
     "eslint-plugin-unicorn": "^63.0.0",
     "eslint-plugin-unused-imports": "^4.4.1",
     "jsdom": "29.0.1",