fix(deps): update weekly-non-major-updates (development)

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence	Type	Update	Pending
@types/node (source)	^25.2.0 → ^25.2.1			devDependencies	patch	25.2.2
@types/react (source)	^19.2.10 → ^19.2.13			devDependencies	patch
anchore/sbom-action	v0.22.1 → v0.22.2			action	patch
anchore/scan-action	v7.3.1 → v7.3.2			action	patch
dotenv	^17.2.3 → ^17.2.4			devDependencies	patch
github/codeql-action (changelog)	6bc82e0 → 45cbd0c			action	digest
github/codeql-action	v4.32.1 → v4.32.2			action	patch
github/codeql-action	f959778 → b13d724			action	digest
go (source)	1.25.6 → 1.25.7			golang	patch
golang	0032c99 → dfdd969			stage	digest
i18next (source)	^25.8.1 → ^25.8.4			dependencies	patch

---

Release Notes

anchore/sbom-action (anchore/sbom-action)

v0.22.2

Compare Source

v0.22.2

⬆️ Dependencies

• chore(deps): bump fast-xml-parser from 5.3.3 to 5.3.4 (#​581) [@​dependabot[bot]]
• chore(deps): update Syft to v1.41.2 (#​582) [@​anchore-actions-token-generator[bot]]
• chore(deps-dev): bump the dev-dependencies group with 2 updates (#​580) [@​dependabot[bot]]
• chore(deps): update Syft to v1.41.1 (#​579) [@​anchore-actions-token-generator[bot]]

anchore/scan-action (anchore/scan-action)

v7.3.2

Compare Source

v7.3.2

• feat: add option to specify one or more grype config files (#​589) [@​sam-super]

⬆️ Dependencies

• chore(deps): bump @​actions/cache from 5.0.3 to 5.0.5 (#​592) [@​dependabot[bot]]
• chore(deps): bump @​actions/tool-cache from 3.0.0 to 3.0.1 (#​593) [@​dependabot[bot]]
• chore(deps): update Grype to v0.107.1 (#​594) [@​anchore-actions-token-generator[bot]]
• chore(deps): bump fast-xml-parser from 5.3.3 to 5.3.4 (#​590) [@​dependabot[bot]]
• chore(deps): update Grype to v0.107.0 (#​588) [@​anchore-actions-token-generator[bot]]
• chore(deps-dev): bump prettier from 3.8.0 to 3.8.1 (#​584) [@​dependabot[bot]]
• chore(deps-dev): bump tar from 7.5.6 to 7.5.7 (#​586) [@​dependabot[bot]]

motdotla/dotenv (dotenv)

v17.2.4

Compare Source

Changed

• Make DotenvPopulateInput accept NodeJS.ProcessEnv type (#​915)

• Give back to dotenv by checking out my newest project vestauth. It is auth for agents. Thank you for using my software.

github/codeql-action (github/codeql-action)

v4.32.2

Compare Source

golang/go (go)

v1.25.7

i18next/i18next (i18next)

v25.8.4

Compare Source

• fix: crashes when backend in backends array has no name property 2386

v25.8.3

Compare Source

• ts: document option to suppress the support message 2385

v25.8.2

Compare Source

• option to suppress the support message 2385

---

Configuration

📅 Schedule: Branch creation - "before 8am on monday" in timezone America/New_York, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: backend/go.sum

Command failed: go get -t ./...
go: downloading github.com/gin-gonic/gin v1.11.0
go: downloading gopkg.in/natefinch/lumberjack.v2 v2.2.1
go: downloading github.com/glebarez/sqlite v1.11.0
go: downloading github.com/google/uuid v1.6.0
go: downloading github.com/sirupsen/logrus v1.9.4
go: downloading gorm.io/gorm v1.31.1
go: downloading github.com/gorilla/websocket v1.5.3
go: downloading golang.org/x/text v0.33.0
go: downloading gorm.io/driver/sqlite v1.6.0
go: downloading github.com/stretchr/testify v1.11.1
go: downloading github.com/gin-contrib/gzip v1.2.5
go: downloading github.com/prometheus/client_golang v1.23.2
go: downloading golang.org/x/crypto v0.47.0
go: downloading github.com/containrrr/shoutrrr v0.8.0
go: downloading github.com/docker/docker v28.5.2+incompatible
go: downloading github.com/golang-jwt/jwt/v5 v5.3.1
go: downloading github.com/oschwald/geoip2-golang/v2 v2.1.0
go: downloading github.com/robfig/cron/v3 v3.0.1
go: downloading golang.org/x/net v0.49.0
go: downloading github.com/gin-contrib/sse v1.1.0
go: downloading github.com/mattn/go-isatty v0.0.20
go: downloading github.com/quic-go/quic-go v0.57.1
go: downloading github.com/glebarez/go-sqlite v1.21.2
go: downloading modernc.org/sqlite v1.23.1
go: downloading golang.org/x/sys v0.40.0
go: downloading github.com/jinzhu/now v1.1.5
go: downloading github.com/mattn/go-sqlite3 v1.14.22
go: downloading github.com/davecgh/go-spew v1.1.1
go: downloading github.com/pmezard/go-difflib v1.0.0
go: downloading github.com/stretchr/objx v0.5.2
go: downloading github.com/beorn7/perks v1.0.1
go: downloading github.com/cespare/xxhash/v2 v2.3.0
go: downloading github.com/prometheus/client_model v0.6.2
go: downloading github.com/prometheus/common v0.66.1
go: downloading github.com/prometheus/procfs v0.16.1
go: downloading google.golang.org/protobuf v1.36.10
go: downloading github.com/kylelemons/godebug v1.1.0
go: downloading github.com/docker/go-connections v0.6.0
go: downloading github.com/docker/go-units v0.5.0
go: downloading github.com/moby/docker-image-spec v1.3.1
go: downloading github.com/opencontainers/image-spec v1.1.1
go: downloading github.com/Microsoft/go-winio v0.6.2
go: downloading github.com/containerd/errdefs v1.0.0
go: downloading github.com/containerd/errdefs/pkg v0.3.0
go: downloading github.com/distribution/reference v0.6.0
go: downloading github.com/opencontainers/go-digest v1.0.0
go: downloading github.com/pkg/errors v0.9.1
go: downloading go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.63.0
go: downloading go.opentelemetry.io/otel/trace v1.38.0
go: downloading go.opentelemetry.io/otel v1.38.0
go: downloading github.com/oschwald/maxminddb-golang/v2 v2.1.1
go: downloading github.com/go-playground/validator/v10 v10.30.1
go: downloading github.com/goccy/go-yaml v1.18.0
go: downloading github.com/pelletier/go-toml/v2 v2.2.4
go: downloading github.com/ugorji/go/codec v1.3.0
go: downloading github.com/bytedance/sonic v1.14.1
go: downloading github.com/goccy/go-json v0.10.5
go: downloading github.com/json-iterator/go v1.1.12
go: downloading github.com/quic-go/qpack v0.6.0
go: downloading modernc.org/libc v1.22.5
go: downloading github.com/jinzhu/inflection v1.0.0
go: downloading gopkg.in/yaml.v3 v3.0.1
go: downloading github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822
go: downloading go.yaml.in/yaml/v2 v2.4.2
go: downloading github.com/felixge/httpsnoop v1.0.4
go: downloading go.opentelemetry.io/otel/metric v1.38.0
go: downloading github.com/gabriel-vasile/mimetype v1.4.12
go: downloading github.com/go-playground/universal-translator v0.18.1
go: downloading github.com/leodido/go-urn v1.4.0
go: downloading github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd
go: downloading github.com/modern-go/reflect2 v1.0.2
go: downloading github.com/dustin/go-humanize v1.0.1
go: downloading modernc.org/mathutil v1.5.0
go: downloading modernc.org/memory v1.5.0
go: downloading github.com/go-logr/logr v1.4.3
go: downloading github.com/go-playground/locales v0.14.1
go: downloading github.com/bytedance/gopkg v0.1.3
go: downloading github.com/cloudwego/base64x v0.1.6
go: downloading golang.org/x/arch v0.22.0
go: downloading github.com/remyoudompheng/bigfft v0.0.0-20230129092748-24d4a6f8daec
go: downloading github.com/fatih/color v1.15.0
go: downloading github.com/go-logr/stdr v1.2.2
go: downloading go.opentelemetry.io/auto/sdk v1.1.0
go: downloading github.com/mattn/go-colorable v0.1.13
go: downloading github.com/klauspost/cpuid/v2 v2.3.0
go: downloading github.com/bytedance/sonic/loader v0.3.0
go: downloading github.com/twitchyliquid64/golang-asm v0.15.1
go: module . listed in go.work file requires go >= 1.25.7, but go.work lists go 1.25.6; to update it:
	go work use

[github-actions]

❌ E2E Test Results: FAILED (Split Browser Jobs)

Some browser tests failed. Each browser runs independently.

Browser Results (Phase 1 Hotfix Active)

Browser	Status	Shards	Execution
Chromium	⚠️ skipped	4	Independent
Firefox	⚠️ skipped	4	Independent
WebKit	⚠️ skipped	4	Independent

Phase 1 Hotfix Active: Each browser runs in a separate job. One browser failure does not block others.

📊 View workflow run & download reports

---

_{🤖 Phase 1 Emergency Hotfix - See docs/plans/browser_alignment_triage.md}