chore(deps-electron)(deps-dev): bump @electron-forge/maker-zip from 7.11.1 to 7.11.2 in /electron by dependabot[bot] · Pull Request #19 · overwrite00/MetaLens

dependabot · 2026-06-11T13:25:42Z

Bumps @electron-forge/maker-zip from 7.11.1 to 7.11.2.

Release notes

Sourced from @electron-forge/maker-zip's releases.

v7.11.2

What's Changed

build(deps): bump actions/cache from 5.0.1 to 5.0.3 by @dependabot[bot] in electron/forge#4135

build(deps): bump electron/github-app-auth-action from 1.1.1 to 2.0.0 by @dependabot[bot] in electron/forge#4137

build(deps): bump actions/setup-node from 6.1.0 to 6.2.0 by @dependabot[bot] in electron/forge#4138

build(deps): bump actions/checkout from 6.0.1 to 6.0.2 by @dependabot[bot] in electron/forge#4139

build(deps): bump actions/stale from 10.1.0 to 10.1.1 by @dependabot[bot] in electron/forge#4136

build(deps): bump lodash from 4.17.21 to 4.17.23 by @dependabot[bot] in electron/forge#4145

build(deps): bump webpack from 5.94.0 to 5.104.1 by @dependabot[bot] in electron/forge#4140

build(deps): bump lodash from 4.17.21 to 4.17.23 by @dependabot[bot] in electron/forge#4146

build(deps): bump actions/setup-python from 6.1.0 to 6.2.0 by @dependabot[bot] in electron/forge#4153

build(deps): bump actions/download-artifact from 7.0.0 to 8.0.0 by @dependabot[bot] in electron/forge#4154

build(deps): bump actions/stale from 10.1.1 to 10.2.0 by @dependabot[bot] in electron/forge#4152

build(deps): bump actions/upload-artifact from 6.0.0 to 7.0.0 by @dependabot[bot] in electron/forge#4151

build(deps): bump rollup from 4.53.3 to 4.59.0 by @dependabot[bot] in electron/forge#4156

build(deps): upgrade aws-sdk in lockfile by @erickzhao in electron/forge#4155

build(deps): bump lodash from 4.17.21 to 4.17.23 by @dependabot[bot] in electron/forge#4157

build: isolate yarn cache when running verdaccio by @erickzhao in electron/forge#4162

build(deps): bump flatted from 3.2.7 to 3.4.1 by @dependabot[bot] in electron/forge#4180

ci: auto-label next PRs by @erickzhao in electron/forge#4187

test: use yarn instead of npx in cli spec by @MarshallOfSound in electron/forge#4193

chore: update funding sources by @erickzhao in electron/forge#4199

ci: fix zizmor audit findings by @MarshallOfSound in electron/forge#4200

build(deps-dev): bump electron from 39.2.6 to 39.8.4 by @dependabot[bot] in electron/forge#4202

chore: replace lodash with eta for config templating by @MarshallOfSound in electron/forge#4208

build(deps): bump axios from 1.12.2 to 1.14.0 by @dependabot[bot] in electron/forge#4211

build(deps): bump dsanders11/github-app-commit-action from 1.5.0 to 2.1.0 by @dependabot[bot] in electron/forge#4197

build(deps): bump axios from 1.14.0 to 1.15.0 by @dependabot[bot] in electron/forge#4216

build(deps): bump @xmldom/xmldom from 0.8.10 to 0.8.12 by @dependabot[bot] in electron/forge#4231

build(deps): bump follow-redirects from 1.15.6 to 1.16.0 by @dependabot[bot] in electron/forge#4233

fix(cli): allow pre-release package manager ranges by @erickzhao in electron/forge#4242

build(deps): bump axios from 1.15.0 to 1.15.2 by @dependabot[bot] in electron/forge#4252

build(deps): bump postcss from 8.5.6 to 8.5.13 by @dependabot[bot] in electron/forge#4253

build(deps): bump @xmldom/xmldom from 0.8.12 to 0.8.13 by @dependabot[bot] in electron/forge#4254

fix(cli): detect TTY for interactive mode instead of hardcoding true by @RobertWHurst in electron/forge#4219

build(deps): bump actions/setup-node from 6.2.0 to 6.4.0 by @dependabot[bot] in electron/forge#4257

build(deps): audit clearing by @erickzhao in electron/forge#4243

build(deps): bump fast-uri from 3.1.0 to 3.1.2 by @dependabot[bot] in electron/forge#4261

build(deps): bump ip-address from 10.0.1 to 10.1.1 by @dependabot[bot] in electron/forge#4246

chore: bump version to 7.11.2 by @erickzhao in electron/forge#4262

New Contributors

@RobertWHurst made their first contribution in electron/forge#4219

Full Changelog: electron/forge@v7.11.1...v7.11.2

Commits

f2a3ec8 chore: bump version to 7.11.2 (#4262)
c57487c build(deps): bump ip-address from 10.0.1 to 10.1.1 (#4246)
aa6e75d build(deps): bump fast-uri from 3.1.0 to 3.1.2 (#4261)
c6d2614 build(deps): audit clearing (#4243)
aacc96d build(deps): bump actions/setup-node from 6.2.0 to 6.4.0 (#4257)
2a8c9ad fix(cli): detect TTY for interactive mode instead of hardcoding true (#4219)
9b4be2d build(deps): bump @xmldom/xmldom from 0.8.12 to 0.8.13 (#4254)
9a6f204 build(deps): bump postcss from 8.5.6 to 8.5.13 (#4253)
a59d64c build(deps): bump axios from 1.15.0 to 1.15.2 (#4252)
0c38d76 fix(cli): allow pre-release package manager ranges (#4242)
Additional commits viewable in compare view

Bumps [@electron-forge/maker-zip](https://github.com/electron/forge) from 7.11.1 to 7.11.2. - [Release notes](https://github.com/electron/forge/releases) - [Changelog](https://github.com/electron/forge/blob/main/CHANGELOG.md) - [Commits](electron/forge@v7.11.1...v7.11.2) --- updated-dependencies: - dependency-name: "@electron-forge/maker-zip" dependency-version: 7.11.2 dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]>

@overwrite00

* Add files via upload * ci: add GitHub automation configuration - Add dependabot.yml for multi-language dependency management (Python, Electron, Frontend) - Add project-automation.yml for issue/PR automation to GitHub Project - Configure labels and workflows aligned with universal schema * feat: add automatic reviewer request to workflow - Request @overwrite00 as reviewer on opened/reopened PRs - Works alongside automatic assignment to streamline PR review process * ci: fail loudly when GH_PROJECT_TOKEN is unavailable in project automation Dependabot-triggered workflows only receive Dependabot secrets, so GH_PROJECT_TOKEN (registered as an Actions secret) was empty and the addProjectV2ItemById mutation failed silently with a false success. - Fail fast with a clear error when the token is empty - Surface GraphQL errors via .errors // .message (401 has no .errors) - Exit 1 when adding to the Project fails * ci(deps)(deps): bump actions/download-artifact from 4 to 8 (#3) Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 4 to 8. - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](actions/download-artifact@v4...v8) --- updated-dependencies: - dependency-name: actions/download-artifact dependency-version: '8' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * fix(tests): use @pytest_asyncio.fixture for async client fixture (#25) * ci(deps)(deps): bump actions/upload-artifact from 4 to 7 (#4) Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4 to 7. - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](actions/upload-artifact@v4...v7) --- updated-dependencies: - dependency-name: actions/upload-artifact dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * ci(deps)(deps): bump softprops/action-gh-release from 2 to 3 (#5) Bumps [softprops/action-gh-release](https://github.com/softprops/action-gh-release) from 2 to 3. - [Release notes](https://github.com/softprops/action-gh-release/releases) - [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md) - [Commits](softprops/action-gh-release@v2...v3) --- updated-dependencies: - dependency-name: softprops/action-gh-release dependency-version: '3' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * ci(deps)(deps): bump actions/checkout from 4 to 6 (#6) Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 6. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@v4...v6) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * ci(deps)(deps): bump actions/setup-node from 4 to 6 (#7) Bumps [actions/setup-node](https://github.com/actions/setup-node) from 4 to 6. - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](actions/setup-node@v4...v6) --- updated-dependencies: - dependency-name: actions/setup-node dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps-frontend)(deps-dev): bump @babel/parser in /frontend (#8) Bumps [@babel/parser](https://github.com/babel/babel/tree/HEAD/packages/babel-parser) from 7.29.2 to 7.29.7. - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.29.7/packages/babel-parser) --- updated-dependencies: - dependency-name: "@babel/parser" dependency-version: 7.29.7 dependency-type: indirect update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps-electron)(deps-dev): bump webpack-sources in /electron (#9) Bumps [webpack-sources](https://github.com/webpack/webpack-sources) from 3.3.4 to 3.5.0. - [Release notes](https://github.com/webpack/webpack-sources/releases) - [Changelog](https://github.com/webpack/webpack-sources/blob/main/CHANGELOG.md) - [Commits](webpack/webpack-sources@v3.3.4...v3.5.0) --- updated-dependencies: - dependency-name: webpack-sources dependency-version: 3.5.0 dependency-type: indirect update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps-frontend)(deps-dev): bump @babel/plugin-transform-react-jsx-source (#10) Bumps [@babel/plugin-transform-react-jsx-source](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-react-jsx-source) from 7.27.1 to 7.29.7. - [Release notes](https://github.com/babel/babel/releases) - [Commits](https://github.com/babel/babel/commits/v7.29.7/packages/babel-plugin-transform-react-jsx-source) --- updated-dependencies: - dependency-name: "@babel/plugin-transform-react-jsx-source" dependency-version: 7.29.7 dependency-type: indirect update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps-electron)(deps-dev): bump tapable in /electron (#11) Bumps [tapable](https://github.com/webpack/tapable) from 2.3.2 to 2.3.3. - [Release notes](https://github.com/webpack/tapable/releases) - [Changelog](https://github.com/webpack/tapable/blob/main/CHANGELOG.md) - [Commits](webpack/tapable@v2.3.2...v2.3.3) --- updated-dependencies: - dependency-name: tapable dependency-version: 2.3.3 dependency-type: indirect update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps-frontend)(deps-dev): bump electron-to-chromium in /frontend (#12) Bumps [electron-to-chromium](https://github.com/Kilian/electron-to-chromium) from 1.5.340 to 1.5.371. - [Changelog](https://github.com/Kilian/electron-to-chromium/blob/main/CHANGELOG.md) - [Commits](Kilian/electron-to-chromium@v1.5.340...v1.5.371) --- updated-dependencies: - dependency-name: electron-to-chromium dependency-version: 1.5.371 dependency-type: indirect update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps-python)(deps): bump uvicorn from 0.34.2 to 0.49.0 in /python (#13) Bumps [uvicorn](https://github.com/Kludex/uvicorn) from 0.34.2 to 0.49.0. - [Release notes](https://github.com/Kludex/uvicorn/releases) - [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md) - [Commits](Kludex/uvicorn@0.34.2...0.49.0) --- updated-dependencies: - dependency-name: uvicorn dependency-version: 0.49.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps-frontend)(deps-dev): bump vite in /frontend (#16) Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) from 6.4.2 to 6.4.3. - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/v6.4.3/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v6.4.3/packages/vite) --- updated-dependencies: - dependency-name: vite dependency-version: 6.4.3 dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps-python)(deps): bump pypdf from 5.4.0 to 5.9.0 in /python (#15) Bumps [pypdf](https://github.com/py-pdf/pypdf) from 5.4.0 to 5.9.0. - [Release notes](https://github.com/py-pdf/pypdf/releases) - [Changelog](https://github.com/py-pdf/pypdf/blob/main/CHANGELOG.md) - [Commits](py-pdf/pypdf@5.4.0...5.9.0) --- updated-dependencies: - dependency-name: pypdf dependency-version: 5.9.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps-electron)(deps-dev): bump @electron-forge/maker-deb (#17) Bumps [@electron-forge/maker-deb](https://github.com/electron/forge) from 7.11.1 to 7.11.2. - [Release notes](https://github.com/electron/forge/releases) - [Changelog](https://github.com/electron/forge/blob/main/CHANGELOG.md) - [Commits](electron/forge@v7.11.1...v7.11.2) --- updated-dependencies: - dependency-name: "@electron-forge/maker-deb" dependency-version: 7.11.2 dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps-python)(deps): bump fastapi in /python (#18) Bumps [fastapi](https://github.com/fastapi/fastapi) from 0.115.12 to 0.136.3. - [Release notes](https://github.com/fastapi/fastapi/releases) - [Commits](fastapi/fastapi@0.115.12...0.136.3) --- updated-dependencies: - dependency-name: fastapi dependency-version: 0.136.3 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps-electron)(deps-dev): bump @electron-forge/maker-zip (#19) Bumps [@electron-forge/maker-zip](https://github.com/electron/forge) from 7.11.1 to 7.11.2. - [Release notes](https://github.com/electron/forge/releases) - [Changelog](https://github.com/electron/forge/blob/main/CHANGELOG.md) - [Commits](electron/forge@v7.11.1...v7.11.2) --- updated-dependencies: - dependency-name: "@electron-forge/maker-zip" dependency-version: 7.11.2 dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps-python)(deps): bump pillow from 11.2.1 to 11.3.0 in /python (#20) Bumps [pillow](https://github.com/python-pillow/Pillow) from 11.2.1 to 11.3.0. - [Release notes](https://github.com/python-pillow/Pillow/releases) - [Changelog](https://github.com/python-pillow/Pillow/blob/main/CHANGES.rst) - [Commits](python-pillow/Pillow@11.2.1...11.3.0) --- updated-dependencies: - dependency-name: pillow dependency-version: 11.3.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps-frontend)(deps-dev): bump @babel/template in /frontend (#21) Bumps [@babel/template](https://github.com/babel/babel/tree/HEAD/packages/babel-template) from 7.28.6 to 7.29.7. - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.29.7/packages/babel-template) --- updated-dependencies: - dependency-name: "@babel/template" dependency-version: 7.29.7 dependency-type: indirect update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps-python)(deps): bump pytest from 8.3.5 to 8.4.2 in /python (#22) Bumps [pytest](https://github.com/pytest-dev/pytest) from 8.3.5 to 8.4.2. - [Release notes](https://github.com/pytest-dev/pytest/releases) - [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst) - [Commits](pytest-dev/pytest@8.3.5...8.4.2) --- updated-dependencies: - dependency-name: pytest dependency-version: 8.4.2 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps-electron)(deps-dev): bump jiti in /electron (#23) Bumps [jiti](https://github.com/unjs/jiti) from 2.6.1 to 2.7.0. - [Release notes](https://github.com/unjs/jiti/releases) - [Changelog](https://github.com/unjs/jiti/blob/main/CHANGELOG.md) - [Commits](unjs/jiti@v2.6.1...v2.7.0) --- updated-dependencies: - dependency-name: jiti dependency-version: 2.7.0 dependency-type: indirect update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --------- Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

@overwrite00

* Add files via upload * ci: add GitHub automation configuration - Add dependabot.yml for multi-language dependency management (Python, Electron, Frontend) - Add project-automation.yml for issue/PR automation to GitHub Project - Configure labels and workflows aligned with universal schema * feat: add automatic reviewer request to workflow - Request @overwrite00 as reviewer on opened/reopened PRs - Works alongside automatic assignment to streamline PR review process * ci: fail loudly when GH_PROJECT_TOKEN is unavailable in project automation Dependabot-triggered workflows only receive Dependabot secrets, so GH_PROJECT_TOKEN (registered as an Actions secret) was empty and the addProjectV2ItemById mutation failed silently with a false success. - Fail fast with a clear error when the token is empty - Surface GraphQL errors via .errors // .message (401 has no .errors) - Exit 1 when adding to the Project fails * ci(deps)(deps): bump actions/download-artifact from 4 to 8 (#3) Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 4 to 8. - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](actions/download-artifact@v4...v8) --- updated-dependencies: - dependency-name: actions/download-artifact dependency-version: '8' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * fix(tests): use @pytest_asyncio.fixture for async client fixture (#25) * ci(deps)(deps): bump actions/upload-artifact from 4 to 7 (#4) Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4 to 7. - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](actions/upload-artifact@v4...v7) --- updated-dependencies: - dependency-name: actions/upload-artifact dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * ci(deps)(deps): bump softprops/action-gh-release from 2 to 3 (#5) Bumps [softprops/action-gh-release](https://github.com/softprops/action-gh-release) from 2 to 3. - [Release notes](https://github.com/softprops/action-gh-release/releases) - [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md) - [Commits](softprops/action-gh-release@v2...v3) --- updated-dependencies: - dependency-name: softprops/action-gh-release dependency-version: '3' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * ci(deps)(deps): bump actions/checkout from 4 to 6 (#6) Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 6. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@v4...v6) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * ci(deps)(deps): bump actions/setup-node from 4 to 6 (#7) Bumps [actions/setup-node](https://github.com/actions/setup-node) from 4 to 6. - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](actions/setup-node@v4...v6) --- updated-dependencies: - dependency-name: actions/setup-node dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps-frontend)(deps-dev): bump @babel/parser in /frontend (#8) Bumps [@babel/parser](https://github.com/babel/babel/tree/HEAD/packages/babel-parser) from 7.29.2 to 7.29.7. - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.29.7/packages/babel-parser) --- updated-dependencies: - dependency-name: "@babel/parser" dependency-version: 7.29.7 dependency-type: indirect update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps-electron)(deps-dev): bump webpack-sources in /electron (#9) Bumps [webpack-sources](https://github.com/webpack/webpack-sources) from 3.3.4 to 3.5.0. - [Release notes](https://github.com/webpack/webpack-sources/releases) - [Changelog](https://github.com/webpack/webpack-sources/blob/main/CHANGELOG.md) - [Commits](webpack/webpack-sources@v3.3.4...v3.5.0) --- updated-dependencies: - dependency-name: webpack-sources dependency-version: 3.5.0 dependency-type: indirect update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps-frontend)(deps-dev): bump @babel/plugin-transform-react-jsx-source (#10) Bumps [@babel/plugin-transform-react-jsx-source](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-react-jsx-source) from 7.27.1 to 7.29.7. - [Release notes](https://github.com/babel/babel/releases) - [Commits](https://github.com/babel/babel/commits/v7.29.7/packages/babel-plugin-transform-react-jsx-source) --- updated-dependencies: - dependency-name: "@babel/plugin-transform-react-jsx-source" dependency-version: 7.29.7 dependency-type: indirect update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps-electron)(deps-dev): bump tapable in /electron (#11) Bumps [tapable](https://github.com/webpack/tapable) from 2.3.2 to 2.3.3. - [Release notes](https://github.com/webpack/tapable/releases) - [Changelog](https://github.com/webpack/tapable/blob/main/CHANGELOG.md) - [Commits](webpack/tapable@v2.3.2...v2.3.3) --- updated-dependencies: - dependency-name: tapable dependency-version: 2.3.3 dependency-type: indirect update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps-frontend)(deps-dev): bump electron-to-chromium in /frontend (#12) Bumps [electron-to-chromium](https://github.com/Kilian/electron-to-chromium) from 1.5.340 to 1.5.371. - [Changelog](https://github.com/Kilian/electron-to-chromium/blob/main/CHANGELOG.md) - [Commits](Kilian/electron-to-chromium@v1.5.340...v1.5.371) --- updated-dependencies: - dependency-name: electron-to-chromium dependency-version: 1.5.371 dependency-type: indirect update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps-python)(deps): bump uvicorn from 0.34.2 to 0.49.0 in /python (#13) Bumps [uvicorn](https://github.com/Kludex/uvicorn) from 0.34.2 to 0.49.0. - [Release notes](https://github.com/Kludex/uvicorn/releases) - [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md) - [Commits](Kludex/uvicorn@0.34.2...0.49.0) --- updated-dependencies: - dependency-name: uvicorn dependency-version: 0.49.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps-frontend)(deps-dev): bump vite in /frontend (#16) Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) from 6.4.2 to 6.4.3. - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/v6.4.3/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v6.4.3/packages/vite) --- updated-dependencies: - dependency-name: vite dependency-version: 6.4.3 dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps-python)(deps): bump pypdf from 5.4.0 to 5.9.0 in /python (#15) Bumps [pypdf](https://github.com/py-pdf/pypdf) from 5.4.0 to 5.9.0. - [Release notes](https://github.com/py-pdf/pypdf/releases) - [Changelog](https://github.com/py-pdf/pypdf/blob/main/CHANGELOG.md) - [Commits](py-pdf/pypdf@5.4.0...5.9.0) --- updated-dependencies: - dependency-name: pypdf dependency-version: 5.9.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps-electron)(deps-dev): bump @electron-forge/maker-deb (#17) Bumps [@electron-forge/maker-deb](https://github.com/electron/forge) from 7.11.1 to 7.11.2. - [Release notes](https://github.com/electron/forge/releases) - [Changelog](https://github.com/electron/forge/blob/main/CHANGELOG.md) - [Commits](electron/forge@v7.11.1...v7.11.2) --- updated-dependencies: - dependency-name: "@electron-forge/maker-deb" dependency-version: 7.11.2 dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps-python)(deps): bump fastapi in /python (#18) Bumps [fastapi](https://github.com/fastapi/fastapi) from 0.115.12 to 0.136.3. - [Release notes](https://github.com/fastapi/fastapi/releases) - [Commits](fastapi/fastapi@0.115.12...0.136.3) --- updated-dependencies: - dependency-name: fastapi dependency-version: 0.136.3 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps-electron)(deps-dev): bump @electron-forge/maker-zip (#19) Bumps [@electron-forge/maker-zip](https://github.com/electron/forge) from 7.11.1 to 7.11.2. - [Release notes](https://github.com/electron/forge/releases) - [Changelog](https://github.com/electron/forge/blob/main/CHANGELOG.md) - [Commits](electron/forge@v7.11.1...v7.11.2) --- updated-dependencies: - dependency-name: "@electron-forge/maker-zip" dependency-version: 7.11.2 dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps-python)(deps): bump pillow from 11.2.1 to 11.3.0 in /python (#20) Bumps [pillow](https://github.com/python-pillow/Pillow) from 11.2.1 to 11.3.0. - [Release notes](https://github.com/python-pillow/Pillow/releases) - [Changelog](https://github.com/python-pillow/Pillow/blob/main/CHANGES.rst) - [Commits](python-pillow/Pillow@11.2.1...11.3.0) --- updated-dependencies: - dependency-name: pillow dependency-version: 11.3.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps-frontend)(deps-dev): bump @babel/template in /frontend (#21) Bumps [@babel/template](https://github.com/babel/babel/tree/HEAD/packages/babel-template) from 7.28.6 to 7.29.7. - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.29.7/packages/babel-template) --- updated-dependencies: - dependency-name: "@babel/template" dependency-version: 7.29.7 dependency-type: indirect update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps-python)(deps): bump pytest from 8.3.5 to 8.4.2 in /python (#22) Bumps [pytest](https://github.com/pytest-dev/pytest) from 8.3.5 to 8.4.2. - [Release notes](https://github.com/pytest-dev/pytest/releases) - [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst) - [Commits](pytest-dev/pytest@8.3.5...8.4.2) --- updated-dependencies: - dependency-name: pytest dependency-version: 8.4.2 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps-electron)(deps-dev): bump jiti in /electron (#23) Bumps [jiti](https://github.com/unjs/jiti) from 2.6.1 to 2.7.0. - [Release notes](https://github.com/unjs/jiti/releases) - [Changelog](https://github.com/unjs/jiti/blob/main/CHANGELOG.md) - [Commits](unjs/jiti@v2.6.1...v2.7.0) --- updated-dependencies: - dependency-name: jiti dependency-version: 2.7.0 dependency-type: indirect update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore: optimize dependabot.yml configuration - Remove redundant entries (separator, allow defaults) - Limit major version ignore to dev-dependencies only - Add dependency groups to consolidate minor/patch updates - Remove major version ignore for GitHub Actions (CI/CD security-critical) * fix: correct dependabot.yml groups schema * fix: correct dependabot.yml ignore schema * chore(deps): bump the npm_and_yarn group across 1 directory with 2 updates (#28) Bumps the npm_and_yarn group with 2 updates in the /electron directory: [fast-uri](https://github.com/fastify/fast-uri) and [ip-address](https://github.com/beaugunderson/ip-address). Updates `fast-uri` from 3.1.0 to 3.1.2 - [Release notes](https://github.com/fastify/fast-uri/releases) - [Commits](fastify/fast-uri@v3.1.0...v3.1.2) Updates `ip-address` from 10.1.0 to 10.2.0 - [Commits](beaugunderson/ip-address@v10.1.0...v10.2.0) --- updated-dependencies: - dependency-name: fast-uri dependency-version: 3.1.2 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ip-address dependency-version: 10.2.0 dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * ci(deps)(deps): bump actions/setup-python from 5 to 6 (#30) Bumps [actions/setup-python](https://github.com/actions/setup-python) from 5 to 6. - [Release notes](https://github.com/actions/setup-python/releases) - [Commits](actions/setup-python@v5...v6) --- updated-dependencies: - dependency-name: actions/setup-python dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps-frontend)(deps): bump the minor-and-patch group (#31) Bumps the minor-and-patch group in /frontend with 2 updates: [react](https://github.com/facebook/react/tree/HEAD/packages/react) and [react-dom](https://github.com/facebook/react/tree/HEAD/packages/react-dom). Updates `react` from 19.2.5 to 19.2.7 - [Release notes](https://github.com/facebook/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/facebook/react/commits/v19.2.7/packages/react) Updates `react-dom` from 19.2.5 to 19.2.7 - [Release notes](https://github.com/facebook/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/facebook/react/commits/v19.2.7/packages/react-dom) --- updated-dependencies: - dependency-name: react dependency-version: 19.2.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: react-dom dependency-version: 19.2.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps-python)(deps): bump xattr (#32) Bumps the minor-and-patch group in /python with 1 update: [xattr](https://github.com/xattr/xattr). Updates `xattr` from 1.1.0 to 1.3.0 - [Release notes](https://github.com/xattr/xattr/releases) - [Changelog](https://github.com/xattr/xattr/blob/main/CHANGES.txt) - [Commits](xattr/xattr@v1.1.0...v1.3.0) --- updated-dependencies: - dependency-name: xattr dependency-version: 1.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps-frontend)(deps-dev): bump postcss (#33) Bumps the development-updates group in /frontend with 1 update: [postcss](https://github.com/postcss/postcss). Updates `postcss` from 8.5.10 to 8.5.15 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.5.10...8.5.15) --- updated-dependencies: - dependency-name: postcss dependency-version: 8.5.15 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-updates ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps-python)(deps): bump pypdf from 5.9.0 to 6.13.2 in /python (#34) Bumps [pypdf](https://github.com/py-pdf/pypdf) from 5.9.0 to 6.13.2. - [Release notes](https://github.com/py-pdf/pypdf/releases) - [Changelog](https://github.com/py-pdf/pypdf/blob/main/CHANGELOG.md) - [Commits](py-pdf/pypdf@5.9.0...6.13.2) --- updated-dependencies: - dependency-name: pypdf dependency-version: 6.13.2 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps-python)(deps): bump pywin32 from 310 to 312 in /python (#35) Bumps [pywin32](https://github.com/mhammond/pywin32) from 310 to 312. - [Release notes](https://github.com/mhammond/pywin32/releases) - [Changelog](https://github.com/mhammond/pywin32/blob/main/CHANGES.md) - [Commits](https://github.com/mhammond/pywin32/commits) --- updated-dependencies: - dependency-name: pywin32 dependency-version: '312' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps-electron)(deps-dev): bump the development-updates group (#38) Bumps the development-updates group in /electron with 4 updates: [@electron-forge/cli](https://github.com/electron/forge), [@electron-forge/maker-rpm](https://github.com/electron/forge), [@electron-forge/maker-squirrel](https://github.com/electron/forge) and [electron](https://github.com/electron/electron). Updates `@electron-forge/cli` from 7.11.1 to 7.11.2 - [Release notes](https://github.com/electron/forge/releases) - [Changelog](https://github.com/electron/forge/blob/main/CHANGELOG.md) - [Commits](electron/forge@v7.11.1...v7.11.2) Updates `@electron-forge/maker-rpm` from 7.11.1 to 7.11.2 - [Release notes](https://github.com/electron/forge/releases) - [Changelog](https://github.com/electron/forge/blob/main/CHANGELOG.md) - [Commits](electron/forge@v7.11.1...v7.11.2) Updates `@electron-forge/maker-squirrel` from 7.11.1 to 7.11.2 - [Release notes](https://github.com/electron/forge/releases) - [Changelog](https://github.com/electron/forge/blob/main/CHANGELOG.md) - [Commits](electron/forge@v7.11.1...v7.11.2) Updates `electron` from 41.2.1 to 41.7.2 - [Release notes](https://github.com/electron/electron/releases) - [Commits](electron/electron@v41.2.1...v41.7.2) --- updated-dependencies: - dependency-name: "@electron-forge/cli" dependency-version: 7.11.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-updates - dependency-name: "@electron-forge/maker-rpm" dependency-version: 7.11.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-updates - dependency-name: "@electron-forge/maker-squirrel" dependency-version: 7.11.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-updates - dependency-name: electron dependency-version: 41.7.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development-updates ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps-python)(deps): bump pillow from 11.3.0 to 12.2.0 in /python (#37) Bumps [pillow](https://github.com/python-pillow/Pillow) from 11.3.0 to 12.2.0. - [Release notes](https://github.com/python-pillow/Pillow/releases) - [Changelog](https://github.com/python-pillow/Pillow/blob/main/CHANGES.rst) - [Commits](python-pillow/Pillow@11.3.0...12.2.0) --- updated-dependencies: - dependency-name: pillow dependency-version: 12.2.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * fix: resolve npm vulnerabilities in frontend - Update vite to 8.0.16 (fixes esbuild RCE vulnerability GHSA-gv7w-rqvm-qjhr) - Update @vitejs/plugin-react to 6.0.2 - Verified build passes with new versions --------- Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

@overwrite00

* Add files via upload * ci: add GitHub automation configuration - Add dependabot.yml for multi-language dependency management (Python, Electron, Frontend) - Add project-automation.yml for issue/PR automation to GitHub Project - Configure labels and workflows aligned with universal schema * feat: add automatic reviewer request to workflow - Request @overwrite00 as reviewer on opened/reopened PRs - Works alongside automatic assignment to streamline PR review process * ci: fail loudly when GH_PROJECT_TOKEN is unavailable in project automation Dependabot-triggered workflows only receive Dependabot secrets, so GH_PROJECT_TOKEN (registered as an Actions secret) was empty and the addProjectV2ItemById mutation failed silently with a false success. - Fail fast with a clear error when the token is empty - Surface GraphQL errors via .errors // .message (401 has no .errors) - Exit 1 when adding to the Project fails * ci(deps)(deps): bump actions/download-artifact from 4 to 8 (#3) Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 4 to 8. - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](actions/download-artifact@v4...v8) --- updated-dependencies: - dependency-name: actions/download-artifact dependency-version: '8' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * fix(tests): use @pytest_asyncio.fixture for async client fixture (#25) * ci(deps)(deps): bump actions/upload-artifact from 4 to 7 (#4) Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4 to 7. - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](actions/upload-artifact@v4...v7) --- updated-dependencies: - dependency-name: actions/upload-artifact dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * ci(deps)(deps): bump softprops/action-gh-release from 2 to 3 (#5) Bumps [softprops/action-gh-release](https://github.com/softprops/action-gh-release) from 2 to 3. - [Release notes](https://github.com/softprops/action-gh-release/releases) - [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md) - [Commits](softprops/action-gh-release@v2...v3) --- updated-dependencies: - dependency-name: softprops/action-gh-release dependency-version: '3' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * ci(deps)(deps): bump actions/checkout from 4 to 6 (#6) Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 6. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@v4...v6) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * ci(deps)(deps): bump actions/setup-node from 4 to 6 (#7) Bumps [actions/setup-node](https://github.com/actions/setup-node) from 4 to 6. - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](actions/setup-node@v4...v6) --- updated-dependencies: - dependency-name: actions/setup-node dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps-frontend)(deps-dev): bump @babel/parser in /frontend (#8) Bumps [@babel/parser](https://github.com/babel/babel/tree/HEAD/packages/babel-parser) from 7.29.2 to 7.29.7. - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.29.7/packages/babel-parser) --- updated-dependencies: - dependency-name: "@babel/parser" dependency-version: 7.29.7 dependency-type: indirect update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps-electron)(deps-dev): bump webpack-sources in /electron (#9) Bumps [webpack-sources](https://github.com/webpack/webpack-sources) from 3.3.4 to 3.5.0. - [Release notes](https://github.com/webpack/webpack-sources/releases) - [Changelog](https://github.com/webpack/webpack-sources/blob/main/CHANGELOG.md) - [Commits](webpack/webpack-sources@v3.3.4...v3.5.0) --- updated-dependencies: - dependency-name: webpack-sources dependency-version: 3.5.0 dependency-type: indirect update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps-frontend)(deps-dev): bump @babel/plugin-transform-react-jsx-source (#10) Bumps [@babel/plugin-transform-react-jsx-source](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-react-jsx-source) from 7.27.1 to 7.29.7. - [Release notes](https://github.com/babel/babel/releases) - [Commits](https://github.com/babel/babel/commits/v7.29.7/packages/babel-plugin-transform-react-jsx-source) --- updated-dependencies: - dependency-name: "@babel/plugin-transform-react-jsx-source" dependency-version: 7.29.7 dependency-type: indirect update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps-electron)(deps-dev): bump tapable in /electron (#11) Bumps [tapable](https://github.com/webpack/tapable) from 2.3.2 to 2.3.3. - [Release notes](https://github.com/webpack/tapable/releases) - [Changelog](https://github.com/webpack/tapable/blob/main/CHANGELOG.md) - [Commits](webpack/tapable@v2.3.2...v2.3.3) --- updated-dependencies: - dependency-name: tapable dependency-version: 2.3.3 dependency-type: indirect update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps-frontend)(deps-dev): bump electron-to-chromium in /frontend (#12) Bumps [electron-to-chromium](https://github.com/Kilian/electron-to-chromium) from 1.5.340 to 1.5.371. - [Changelog](https://github.com/Kilian/electron-to-chromium/blob/main/CHANGELOG.md) - [Commits](Kilian/electron-to-chromium@v1.5.340...v1.5.371) --- updated-dependencies: - dependency-name: electron-to-chromium dependency-version: 1.5.371 dependency-type: indirect update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps-python)(deps): bump uvicorn from 0.34.2 to 0.49.0 in /python (#13) Bumps [uvicorn](https://github.com/Kludex/uvicorn) from 0.34.2 to 0.49.0. - [Release notes](https://github.com/Kludex/uvicorn/releases) - [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md) - [Commits](Kludex/uvicorn@0.34.2...0.49.0) --- updated-dependencies: - dependency-name: uvicorn dependency-version: 0.49.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps-frontend)(deps-dev): bump vite in /frontend (#16) Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) from 6.4.2 to 6.4.3. - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/v6.4.3/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v6.4.3/packages/vite) --- updated-dependencies: - dependency-name: vite dependency-version: 6.4.3 dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps-python)(deps): bump pypdf from 5.4.0 to 5.9.0 in /python (#15) Bumps [pypdf](https://github.com/py-pdf/pypdf) from 5.4.0 to 5.9.0. - [Release notes](https://github.com/py-pdf/pypdf/releases) - [Changelog](https://github.com/py-pdf/pypdf/blob/main/CHANGELOG.md) - [Commits](py-pdf/pypdf@5.4.0...5.9.0) --- updated-dependencies: - dependency-name: pypdf dependency-version: 5.9.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps-electron)(deps-dev): bump @electron-forge/maker-deb (#17) Bumps [@electron-forge/maker-deb](https://github.com/electron/forge) from 7.11.1 to 7.11.2. - [Release notes](https://github.com/electron/forge/releases) - [Changelog](https://github.com/electron/forge/blob/main/CHANGELOG.md) - [Commits](electron/forge@v7.11.1...v7.11.2) --- updated-dependencies: - dependency-name: "@electron-forge/maker-deb" dependency-version: 7.11.2 dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps-python)(deps): bump fastapi in /python (#18) Bumps [fastapi](https://github.com/fastapi/fastapi) from 0.115.12 to 0.136.3. - [Release notes](https://github.com/fastapi/fastapi/releases) - [Commits](fastapi/fastapi@0.115.12...0.136.3) --- updated-dependencies: - dependency-name: fastapi dependency-version: 0.136.3 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps-electron)(deps-dev): bump @electron-forge/maker-zip (#19) Bumps [@electron-forge/maker-zip](https://github.com/electron/forge) from 7.11.1 to 7.11.2. - [Release notes](https://github.com/electron/forge/releases) - [Changelog](https://github.com/electron/forge/blob/main/CHANGELOG.md) - [Commits](electron/forge@v7.11.1...v7.11.2) --- updated-dependencies: - dependency-name: "@electron-forge/maker-zip" dependency-version: 7.11.2 dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps-python)(deps): bump pillow from 11.2.1 to 11.3.0 in /python (#20) Bumps [pillow](https://github.com/python-pillow/Pillow) from 11.2.1 to 11.3.0. - [Release notes](https://github.com/python-pillow/Pillow/releases) - [Changelog](https://github.com/python-pillow/Pillow/blob/main/CHANGES.rst) - [Commits](python-pillow/Pillow@11.2.1...11.3.0) --- updated-dependencies: - dependency-name: pillow dependency-version: 11.3.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps-frontend)(deps-dev): bump @babel/template in /frontend (#21) Bumps [@babel/template](https://github.com/babel/babel/tree/HEAD/packages/babel-template) from 7.28.6 to 7.29.7. - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.29.7/packages/babel-template) --- updated-dependencies: - dependency-name: "@babel/template" dependency-version: 7.29.7 dependency-type: indirect update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps-python)(deps): bump pytest from 8.3.5 to 8.4.2 in /python (#22) Bumps [pytest](https://github.com/pytest-dev/pytest) from 8.3.5 to 8.4.2. - [Release notes](https://github.com/pytest-dev/pytest/releases) - [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst) - [Commits](pytest-dev/pytest@8.3.5...8.4.2) --- updated-dependencies: - dependency-name: pytest dependency-version: 8.4.2 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps-electron)(deps-dev): bump jiti in /electron (#23) Bumps [jiti](https://github.com/unjs/jiti) from 2.6.1 to 2.7.0. - [Release notes](https://github.com/unjs/jiti/releases) - [Changelog](https://github.com/unjs/jiti/blob/main/CHANGELOG.md) - [Commits](unjs/jiti@v2.6.1...v2.7.0) --- updated-dependencies: - dependency-name: jiti dependency-version: 2.7.0 dependency-type: indirect update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore: optimize dependabot.yml configuration - Remove redundant entries (separator, allow defaults) - Limit major version ignore to dev-dependencies only - Add dependency groups to consolidate minor/patch updates - Remove major version ignore for GitHub Actions (CI/CD security-critical) * fix: correct dependabot.yml groups schema * fix: correct dependabot.yml ignore schema * chore(deps): bump the npm_and_yarn group across 1 directory with 2 updates (#28) Bumps the npm_and_yarn group with 2 updates in the /electron directory: [fast-uri](https://github.com/fastify/fast-uri) and [ip-address](https://github.com/beaugunderson/ip-address). Updates `fast-uri` from 3.1.0 to 3.1.2 - [Release notes](https://github.com/fastify/fast-uri/releases) - [Commits](fastify/fast-uri@v3.1.0...v3.1.2) Updates `ip-address` from 10.1.0 to 10.2.0 - [Commits](beaugunderson/ip-address@v10.1.0...v10.2.0) --- updated-dependencies: - dependency-name: fast-uri dependency-version: 3.1.2 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ip-address dependency-version: 10.2.0 dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * ci(deps)(deps): bump actions/setup-python from 5 to 6 (#30) Bumps [actions/setup-python](https://github.com/actions/setup-python) from 5 to 6. - [Release notes](https://github.com/actions/setup-python/releases) - [Commits](actions/setup-python@v5...v6) --- updated-dependencies: - dependency-name: actions/setup-python dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps-frontend)(deps): bump the minor-and-patch group (#31) Bumps the minor-and-patch group in /frontend with 2 updates: [react](https://github.com/facebook/react/tree/HEAD/packages/react) and [react-dom](https://github.com/facebook/react/tree/HEAD/packages/react-dom). Updates `react` from 19.2.5 to 19.2.7 - [Release notes](https://github.com/facebook/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/facebook/react/commits/v19.2.7/packages/react) Updates `react-dom` from 19.2.5 to 19.2.7 - [Release notes](https://github.com/facebook/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/facebook/react/commits/v19.2.7/packages/react-dom) --- updated-dependencies: - dependency-name: react dependency-version: 19.2.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: react-dom dependency-version: 19.2.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps-python)(deps): bump xattr (#32) Bumps the minor-and-patch group in /python with 1 update: [xattr](https://github.com/xattr/xattr). Updates `xattr` from 1.1.0 to 1.3.0 - [Release notes](https://github.com/xattr/xattr/releases) - [Changelog](https://github.com/xattr/xattr/blob/main/CHANGES.txt) - [Commits](xattr/xattr@v1.1.0...v1.3.0) --- updated-dependencies: - dependency-name: xattr dependency-version: 1.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps-frontend)(deps-dev): bump postcss (#33) Bumps the development-updates group in /frontend with 1 update: [postcss](https://github.com/postcss/postcss). Updates `postcss` from 8.5.10 to 8.5.15 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.5.10...8.5.15) --- updated-dependencies: - dependency-name: postcss dependency-version: 8.5.15 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-updates ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps-python)(deps): bump pypdf from 5.9.0 to 6.13.2 in /python (#34) Bumps [pypdf](https://github.com/py-pdf/pypdf) from 5.9.0 to 6.13.2. - [Release notes](https://github.com/py-pdf/pypdf/releases) - [Changelog](https://github.com/py-pdf/pypdf/blob/main/CHANGELOG.md) - [Commits](py-pdf/pypdf@5.9.0...6.13.2) --- updated-dependencies: - dependency-name: pypdf dependency-version: 6.13.2 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps-python)(deps): bump pywin32 from 310 to 312 in /python (#35) Bumps [pywin32](https://github.com/mhammond/pywin32) from 310 to 312. - [Release notes](https://github.com/mhammond/pywin32/releases) - [Changelog](https://github.com/mhammond/pywin32/blob/main/CHANGES.md) - [Commits](https://github.com/mhammond/pywin32/commits) --- updated-dependencies: - dependency-name: pywin32 dependency-version: '312' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps-electron)(deps-dev): bump the development-updates group (#38) Bumps the development-updates group in /electron with 4 updates: [@electron-forge/cli](https://github.com/electron/forge), [@electron-forge/maker-rpm](https://github.com/electron/forge), [@electron-forge/maker-squirrel](https://github.com/electron/forge) and [electron](https://github.com/electron/electron). Updates `@electron-forge/cli` from 7.11.1 to 7.11.2 - [Release notes](https://github.com/electron/forge/releases) - [Changelog](https://github.com/electron/forge/blob/main/CHANGELOG.md) - [Commits](electron/forge@v7.11.1...v7.11.2) Updates `@electron-forge/maker-rpm` from 7.11.1 to 7.11.2 - [Release notes](https://github.com/electron/forge/releases) - [Changelog](https://github.com/electron/forge/blob/main/CHANGELOG.md) - [Commits](electron/forge@v7.11.1...v7.11.2) Updates `@electron-forge/maker-squirrel` from 7.11.1 to 7.11.2 - [Release notes](https://github.com/electron/forge/releases) - [Changelog](https://github.com/electron/forge/blob/main/CHANGELOG.md) - [Commits](electron/forge@v7.11.1...v7.11.2) Updates `electron` from 41.2.1 to 41.7.2 - [Release notes](https://github.com/electron/electron/releases) - [Commits](electron/electron@v41.2.1...v41.7.2) --- updated-dependencies: - dependency-name: "@electron-forge/cli" dependency-version: 7.11.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-updates - dependency-name: "@electron-forge/maker-rpm" dependency-version: 7.11.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-updates - dependency-name: "@electron-forge/maker-squirrel" dependency-version: 7.11.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-updates - dependency-name: electron dependency-version: 41.7.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development-updates ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps-python)(deps): bump pillow from 11.3.0 to 12.2.0 in /python (#37) Bumps [pillow](https://github.com/python-pillow/Pillow) from 11.3.0 to 12.2.0. - [Release notes](https://github.com/python-pillow/Pillow/releases) - [Changelog](https://github.com/python-pillow/Pillow/blob/main/CHANGES.rst) - [Commits](python-pillow/Pillow@11.3.0...12.2.0) --- updated-dependencies: - dependency-name: pillow dependency-version: 12.2.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * fix: resolve npm vulnerabilities in frontend - Update vite to 8.0.16 (fixes esbuild RCE vulnerability GHSA-gv7w-rqvm-qjhr) - Update @vitejs/plugin-react to 6.0.2 - Verified build passes with new versions * chore(deps-frontend)(deps): bump lucide-react in /frontend (#36) Bumps [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) from 0.487.0 to 1.18.0. - [Release notes](https://github.com/lucide-icons/lucide/releases) - [Commits](https://github.com/lucide-icons/lucide/commits/1.18.0/packages/lucide-react) --- updated-dependencies: - dependency-name: lucide-react dependency-version: 1.18.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --------- Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

@overwrite00

* Add files via upload * ci: add GitHub automation configuration - Add dependabot.yml for multi-language dependency management (Python, Electron, Frontend) - Add project-automation.yml for issue/PR automation to GitHub Project - Configure labels and workflows aligned with universal schema * feat: add automatic reviewer request to workflow - Request @overwrite00 as reviewer on opened/reopened PRs - Works alongside automatic assignment to streamline PR review process * ci: fail loudly when GH_PROJECT_TOKEN is unavailable in project automation Dependabot-triggered workflows only receive Dependabot secrets, so GH_PROJECT_TOKEN (registered as an Actions secret) was empty and the addProjectV2ItemById mutation failed silently with a false success. - Fail fast with a clear error when the token is empty - Surface GraphQL errors via .errors // .message (401 has no .errors) - Exit 1 when adding to the Project fails * ci(deps)(deps): bump actions/download-artifact from 4 to 8 (#3) Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 4 to 8. - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](actions/download-artifact@v4...v8) --- updated-dependencies: - dependency-name: actions/download-artifact dependency-version: '8' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * fix(tests): use @pytest_asyncio.fixture for async client fixture (#25) * ci(deps)(deps): bump actions/upload-artifact from 4 to 7 (#4) Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4 to 7. - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](actions/upload-artifact@v4...v7) --- updated-dependencies: - dependency-name: actions/upload-artifact dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * ci(deps)(deps): bump softprops/action-gh-release from 2 to 3 (#5) Bumps [softprops/action-gh-release](https://github.com/softprops/action-gh-release) from 2 to 3. - [Release notes](https://github.com/softprops/action-gh-release/releases) - [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md) - [Commits](softprops/action-gh-release@v2...v3) --- updated-dependencies: - dependency-name: softprops/action-gh-release dependency-version: '3' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * ci(deps)(deps): bump actions/checkout from 4 to 6 (#6) Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 6. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@v4...v6) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * ci(deps)(deps): bump actions/setup-node from 4 to 6 (#7) Bumps [actions/setup-node](https://github.com/actions/setup-node) from 4 to 6. - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](actions/setup-node@v4...v6) --- updated-dependencies: - dependency-name: actions/setup-node dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps-frontend)(deps-dev): bump @babel/parser in /frontend (#8) Bumps [@babel/parser](https://github.com/babel/babel/tree/HEAD/packages/babel-parser) from 7.29.2 to 7.29.7. - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.29.7/packages/babel-parser) --- updated-dependencies: - dependency-name: "@babel/parser" dependency-version: 7.29.7 dependency-type: indirect update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps-electron)(deps-dev): bump webpack-sources in /electron (#9) Bumps [webpack-sources](https://github.com/webpack/webpack-sources) from 3.3.4 to 3.5.0. - [Release notes](https://github.com/webpack/webpack-sources/releases) - [Changelog](https://github.com/webpack/webpack-sources/blob/main/CHANGELOG.md) - [Commits](webpack/webpack-sources@v3.3.4...v3.5.0) --- updated-dependencies: - dependency-name: webpack-sources dependency-version: 3.5.0 dependency-type: indirect update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps-frontend)(deps-dev): bump @babel/plugin-transform-react-jsx-source (#10) Bumps [@babel/plugin-transform-react-jsx-source](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-react-jsx-source) from 7.27.1 to 7.29.7. - [Release notes](https://github.com/babel/babel/releases) - [Commits](https://github.com/babel/babel/commits/v7.29.7/packages/babel-plugin-transform-react-jsx-source) --- updated-dependencies: - dependency-name: "@babel/plugin-transform-react-jsx-source" dependency-version: 7.29.7 dependency-type: indirect update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps-electron)(deps-dev): bump tapable in /electron (#11) Bumps [tapable](https://github.com/webpack/tapable) from 2.3.2 to 2.3.3. - [Release notes](https://github.com/webpack/tapable/releases) - [Changelog](https://github.com/webpack/tapable/blob/main/CHANGELOG.md) - [Commits](webpack/tapable@v2.3.2...v2.3.3) --- updated-dependencies: - dependency-name: tapable dependency-version: 2.3.3 dependency-type: indirect update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps-frontend)(deps-dev): bump electron-to-chromium in /frontend (#12) Bumps [electron-to-chromium](https://github.com/Kilian/electron-to-chromium) from 1.5.340 to 1.5.371. - [Changelog](https://github.com/Kilian/electron-to-chromium/blob/main/CHANGELOG.md) - [Commits](Kilian/electron-to-chromium@v1.5.340...v1.5.371) --- updated-dependencies: - dependency-name: electron-to-chromium dependency-version: 1.5.371 dependency-type: indirect update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps-python)(deps): bump uvicorn from 0.34.2 to 0.49.0 in /python (#13) Bumps [uvicorn](https://github.com/Kludex/uvicorn) from 0.34.2 to 0.49.0. - [Release notes](https://github.com/Kludex/uvicorn/releases) - [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md) - [Commits](Kludex/uvicorn@0.34.2...0.49.0) --- updated-dependencies: - dependency-name: uvicorn dependency-version: 0.49.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps-frontend)(deps-dev): bump vite in /frontend (#16) Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) from 6.4.2 to 6.4.3. - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/v6.4.3/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v6.4.3/packages/vite) --- updated-dependencies: - dependency-name: vite dependency-version: 6.4.3 dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps-python)(deps): bump pypdf from 5.4.0 to 5.9.0 in /python (#15) Bumps [pypdf](https://github.com/py-pdf/pypdf) from 5.4.0 to 5.9.0. - [Release notes](https://github.com/py-pdf/pypdf/releases) - [Changelog](https://github.com/py-pdf/pypdf/blob/main/CHANGELOG.md) - [Commits](py-pdf/pypdf@5.4.0...5.9.0) --- updated-dependencies: - dependency-name: pypdf dependency-version: 5.9.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps-electron)(deps-dev): bump @electron-forge/maker-deb (#17) Bumps [@electron-forge/maker-deb](https://github.com/electron/forge) from 7.11.1 to 7.11.2. - [Release notes](https://github.com/electron/forge/releases) - [Changelog](https://github.com/electron/forge/blob/main/CHANGELOG.md) - [Commits](electron/forge@v7.11.1...v7.11.2) --- updated-dependencies: - dependency-name: "@electron-forge/maker-deb" dependency-version: 7.11.2 dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps-python)(deps): bump fastapi in /python (#18) Bumps [fastapi](https://github.com/fastapi/fastapi) from 0.115.12 to 0.136.3. - [Release notes](https://github.com/fastapi/fastapi/releases) - [Commits](fastapi/fastapi@0.115.12...0.136.3) --- updated-dependencies: - dependency-name: fastapi dependency-version: 0.136.3 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps-electron)(deps-dev): bump @electron-forge/maker-zip (#19) Bumps [@electron-forge/maker-zip](https://github.com/electron/forge) from 7.11.1 to 7.11.2. - [Release notes](https://github.com/electron/forge/releases) - [Changelog](https://github.com/electron/forge/blob/main/CHANGELOG.md) - [Commits](electron/forge@v7.11.1...v7.11.2) --- updated-dependencies: - dependency-name: "@electron-forge/maker-zip" dependency-version: 7.11.2 dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps-python)(deps): bump pillow from 11.2.1 to 11.3.0 in /python (#20) Bumps [pillow](https://github.com/python-pillow/Pillow) from 11.2.1 to 11.3.0. - [Release notes](https://github.com/python-pillow/Pillow/releases) - [Changelog](https://github.com/python-pillow/Pillow/blob/main/CHANGES.rst) - [Commits](python-pillow/Pillow@11.2.1...11.3.0) --- updated-dependencies: - dependency-name: pillow dependency-version: 11.3.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps-frontend)(deps-dev): bump @babel/template in /frontend (#21) Bumps [@babel/template](https://github.com/babel/babel/tree/HEAD/packages/babel-template) from 7.28.6 to 7.29.7. - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.29.7/packages/babel-template) --- updated-dependencies: - dependency-name: "@babel/template" dependency-version: 7.29.7 dependency-type: indirect update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps-python)(deps): bump pytest from 8.3.5 to 8.4.2 in /python (#22) Bumps [pytest](https://github.com/pytest-dev/pytest) from 8.3.5 to 8.4.2. - [Release notes](https://github.com/pytest-dev/pytest/releases) - [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst) - [Commits](pytest-dev/pytest@8.3.5...8.4.2) --- updated-dependencies: - dependency-name: pytest dependency-version: 8.4.2 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps-electron)(deps-dev): bump jiti in /electron (#23) Bumps [jiti](https://github.com/unjs/jiti) from 2.6.1 to 2.7.0. - [Release notes](https://github.com/unjs/jiti/releases) - [Changelog](https://github.com/unjs/jiti/blob/main/CHANGELOG.md) - [Commits](unjs/jiti@v2.6.1...v2.7.0) --- updated-dependencies: - dependency-name: jiti dependency-version: 2.7.0 dependency-type: indirect update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore: optimize dependabot.yml configuration - Remove redundant entries (separator, allow defaults) - Limit major version ignore to dev-dependencies only - Add dependency groups to consolidate minor/patch updates - Remove major version ignore for GitHub Actions (CI/CD security-critical) * fix: correct dependabot.yml groups schema * fix: correct dependabot.yml ignore schema * chore(deps): bump the npm_and_yarn group across 1 directory with 2 updates (#28) Bumps the npm_and_yarn group with 2 updates in the /electron directory: [fast-uri](https://github.com/fastify/fast-uri) and [ip-address](https://github.com/beaugunderson/ip-address). Updates `fast-uri` from 3.1.0 to 3.1.2 - [Release notes](https://github.com/fastify/fast-uri/releases) - [Commits](fastify/fast-uri@v3.1.0...v3.1.2) Updates `ip-address` from 10.1.0 to 10.2.0 - [Commits](beaugunderson/ip-address@v10.1.0...v10.2.0) --- updated-dependencies: - dependency-name: fast-uri dependency-version: 3.1.2 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ip-address dependency-version: 10.2.0 dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * ci(deps)(deps): bump actions/setup-python from 5 to 6 (#30) Bumps [actions/setup-python](https://github.com/actions/setup-python) from 5 to 6. - [Release notes](https://github.com/actions/setup-python/releases) - [Commits](actions/setup-python@v5...v6) --- updated-dependencies: - dependency-name: actions/setup-python dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps-frontend)(deps): bump the minor-and-patch group (#31) Bumps the minor-and-patch group in /frontend with 2 updates: [react](https://github.com/facebook/react/tree/HEAD/packages/react) and [react-dom](https://github.com/facebook/react/tree/HEAD/packages/react-dom). Updates `react` from 19.2.5 to 19.2.7 - [Release notes](https://github.com/facebook/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/facebook/react/commits/v19.2.7/packages/react) Updates `react-dom` from 19.2.5 to 19.2.7 - [Release notes](https://github.com/facebook/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/facebook/react/commits/v19.2.7/packages/react-dom) --- updated-dependencies: - dependency-name: react dependency-version: 19.2.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: react-dom dependency-version: 19.2.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps-python)(deps): bump xattr (#32) Bumps the minor-and-patch group in /python with 1 update: [xattr](https://github.com/xattr/xattr). Updates `xattr` from 1.1.0 to 1.3.0 - [Release notes](https://github.com/xattr/xattr/releases) - [Changelog](https://github.com/xattr/xattr/blob/main/CHANGES.txt) - [Commits](xattr/xattr@v1.1.0...v1.3.0) --- updated-dependencies: - dependency-name: xattr dependency-version: 1.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps-frontend)(deps-dev): bump postcss (#33) Bumps the development-updates group in /frontend with 1 update: [postcss](https://github.com/postcss/postcss). Updates `postcss` from 8.5.10 to 8.5.15 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.5.10...8.5.15) --- updated-dependencies: - dependency-name: postcss dependency-version: 8.5.15 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-updates ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps-python)(deps): bump pypdf from 5.9.0 to 6.13.2 in /python (#34) Bumps [pypdf](https://github.com/py-pdf/pypdf) from 5.9.0 to 6.13.2. - [Release notes](https://github.com/py-pdf/pypdf/releases) - [Changelog](https://github.com/py-pdf/pypdf/blob/main/CHANGELOG.md) - [Commits](py-pdf/pypdf@5.9.0...6.13.2) --- updated-dependencies: - dependency-name: pypdf dependency-version: 6.13.2 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps-python)(deps): bump pywin32 from 310 to 312 in /python (#35) Bumps [pywin32](https://github.com/mhammond/pywin32) from 310 to 312. - [Release notes](https://github.com/mhammond/pywin32/releases) - [Changelog](https://github.com/mhammond/pywin32/blob/main/CHANGES.md) - [Commits](https://github.com/mhammond/pywin32/commits) --- updated-dependencies: - dependency-name: pywin32 dependency-version: '312' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps-electron)(deps-dev): bump the development-updates group (#38) Bumps the development-updates group in /electron with 4 updates: [@electron-forge/cli](https://github.com/electron/forge), [@electron-forge/maker-rpm](https://github.com/electron/forge), [@electron-forge/maker-squirrel](https://github.com/electron/forge) and [electron](https://github.com/electron/electron). Updates `@electron-forge/cli` from 7.11.1 to 7.11.2 - [Release notes](https://github.com/electron/forge/releases) - [Changelog](https://github.com/electron/forge/blob/main/CHANGELOG.md) - [Commits](electron/forge@v7.11.1...v7.11.2) Updates `@electron-forge/maker-rpm` from 7.11.1 to 7.11.2 - [Release notes](https://github.com/electron/forge/releases) - [Changelog](https://github.com/electron/forge/blob/main/CHANGELOG.md) - [Commits](electron/forge@v7.11.1...v7.11.2) Updates `@electron-forge/maker-squirrel` from 7.11.1 to 7.11.2 - [Release notes](https://github.com/electron/forge/releases) - [Changelog](https://github.com/electron/forge/blob/main/CHANGELOG.md) - [Commits](electron/forge@v7.11.1...v7.11.2) Updates `electron` from 41.2.1 to 41.7.2 - [Release notes](https://github.com/electron/electron/releases) - [Commits](electron/electron@v41.2.1...v41.7.2) --- updated-dependencies: - dependency-name: "@electron-forge/cli" dependency-version: 7.11.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-updates - dependency-name: "@electron-forge/maker-rpm" dependency-version: 7.11.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-updates - dependency-name: "@electron-forge/maker-squirrel" dependency-version: 7.11.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-updates - dependency-name: electron dependency-version: 41.7.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development-updates ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps-python)(deps): bump pillow from 11.3.0 to 12.2.0 in /python (#37) Bumps [pillow](https://github.com/python-pillow/Pillow) from 11.3.0 to 12.2.0. - [Release notes](https://github.com/python-pillow/Pillow/releases) - [Changelog](https://github.com/python-pillow/Pillow/blob/main/CHANGES.rst) - [Commits](python-pillow/Pillow@11.3.0...12.2.0) --- updated-dependencies: - dependency-name: pillow dependency-version: 12.2.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * fix: resolve npm vulnerabilities in frontend - Update vite to 8.0.16 (fixes esbuild RCE vulnerability GHSA-gv7w-rqvm-qjhr) - Update @vitejs/plugin-react to 6.0.2 - Verified build passes with new versions * chore(deps-frontend)(deps): bump lucide-react in /frontend (#36) Bumps [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) from 0.487.0 to 1.18.0. - [Release notes](https://github.com/lucide-icons/lucide/releases) - [Commits](https://github.com/lucide-icons/lucide/commits/1.18.0/packages/lucide-react) --- updated-dependencies: - dependency-name: lucide-react dependency-version: 1.18.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * fix: update pypdf to 6.13.2 to resolve 22 CVEs - Resolves CVE-2026-48155 (22 vulnerabilities: memory exhaustion, DoS) - Tested with pytest: all 18 tests pass - Maintains compatibility with existing functionality --------- Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

dependabot Bot added dependencies Full requests that update a dependency file lang:javascript JavaScript-related scope:core Core library/framework changes labels Jun 11, 2026

overwrite00 self-requested a review June 11, 2026 15:10

overwrite00 self-assigned this Jun 11, 2026

dependabot Bot force-pushed the dependabot/npm_and_yarn/electron/develop/electron-forge/maker-zip-7.11.2 branch from 2913131 to dfce92c Compare June 12, 2026 14:29

overwrite00 approved these changes Jun 12, 2026

View reviewed changes

overwrite00 merged commit 472848d into develop Jun 12, 2026
1 check passed

dependabot Bot deleted the dependabot/npm_and_yarn/electron/develop/electron-forge/maker-zip-7.11.2 branch June 12, 2026 14:32

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps-electron)(deps-dev): bump @electron-forge/maker-zip from 7.11.1 to 7.11.2 in /electron - #19

chore(deps-electron)(deps-dev): bump @electron-forge/maker-zip from 7.11.1 to 7.11.2 in /electron#19
overwrite00 merged 1 commit into
developfrom
dependabot/npm_and_yarn/electron/develop/electron-forge/maker-zip-7.11.2

dependabot Bot commented on behalf of github Jun 11, 2026 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Jun 11, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v7.11.2

What's Changed

New Contributors

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot Bot commented on behalf of github Jun 11, 2026 •

edited

Loading