Skip to content

fix(tests): use @pytest_asyncio.fixture for async client fixture - #25

Merged
overwrite00 merged 1 commit into
developfrom
fix/async-fixture-pytest-asyncio
Jun 12, 2026
Merged

fix(tests): use @pytest_asyncio.fixture for async client fixture#25
overwrite00 merged 1 commit into
developfrom
fix/async-fixture-pytest-asyncio

Conversation

@overwrite00

@overwrite00 overwrite00 commented Jun 12, 2026

Copy link
Copy Markdown
Owner

Fixes the async pytest fixture deprecation warning by using @pytest_asyncio.fixture instead of @pytest.fixture for the client fixture.

Changes

  • Added import for pytest_asyncio
  • Changed @pytest.fixture to @pytest_asyncio.fixture for async client fixture

Testing

  • All 18 tests now pass (previously test_health was failing)"

@overwrite00 overwrite00 self-assigned this Jun 12, 2026
@overwrite00
overwrite00 merged commit cbe873e into develop Jun 12, 2026
1 check passed
@overwrite00
overwrite00 deleted the fix/async-fixture-pytest-asyncio branch June 12, 2026 08:51
overwrite00 added a commit that referenced this pull request Jun 12, 2026
@overwrite00 @dependabot
chore: merge develop into main (#26)
e65f6ec 
* Add files via upload

* ci: add GitHub automation configuration

- Add dependabot.yml for multi-language dependency management (Python, Electron, Frontend)
- Add project-automation.yml for issue/PR automation to GitHub Project
- Configure labels and workflows aligned with universal schema

* feat: add automatic reviewer request to workflow

- Request @overwrite00 as reviewer on opened/reopened PRs
- Works alongside automatic assignment to streamline PR review process

* ci: fail loudly when GH_PROJECT_TOKEN is unavailable in project automation

Dependabot-triggered workflows only receive Dependabot secrets, so
GH_PROJECT_TOKEN (registered as an Actions secret) was empty and the
addProjectV2ItemById mutation failed silently with a false success.

- Fail fast with a clear error when the token is empty
- Surface GraphQL errors via .errors // .message (401 has no .errors)
- Exit 1 when adding to the Project fails

* ci(deps)(deps): bump actions/download-artifact from 4 to 8 (#3)

Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 4 to 8.
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](actions/download-artifact@v4...v8)

---
updated-dependencies:
- dependency-name: actions/download-artifact
  dependency-version: '8'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* fix(tests): use @pytest_asyncio.fixture for async client fixture (#25)

* ci(deps)(deps): bump actions/upload-artifact from 4 to 7 (#4)

Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4 to 7.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@v4...v7)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* ci(deps)(deps): bump softprops/action-gh-release from 2 to 3 (#5)

Bumps [softprops/action-gh-release](https://github.com/softprops/action-gh-release) from 2 to 3.
- [Release notes](https://github.com/softprops/action-gh-release/releases)
- [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md)
- [Commits](softprops/action-gh-release@v2...v3)

---
updated-dependencies:
- dependency-name: softprops/action-gh-release
  dependency-version: '3'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* ci(deps)(deps): bump actions/checkout from 4 to 6 (#6)

Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 6.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v4...v6)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* ci(deps)(deps): bump actions/setup-node from 4 to 6 (#7)

Bumps [actions/setup-node](https://github.com/actions/setup-node) from 4 to 6.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](actions/setup-node@v4...v6)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps-frontend)(deps-dev): bump @babel/parser in /frontend (#8)

Bumps [@babel/parser](https://github.com/babel/babel/tree/HEAD/packages/babel-parser) from 7.29.2 to 7.29.7.
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.29.7/packages/babel-parser)

---
updated-dependencies:
- dependency-name: "@babel/parser"
  dependency-version: 7.29.7
  dependency-type: indirect
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps-electron)(deps-dev): bump webpack-sources in /electron (#9)

Bumps [webpack-sources](https://github.com/webpack/webpack-sources) from 3.3.4 to 3.5.0.
- [Release notes](https://github.com/webpack/webpack-sources/releases)
- [Changelog](https://github.com/webpack/webpack-sources/blob/main/CHANGELOG.md)
- [Commits](webpack/webpack-sources@v3.3.4...v3.5.0)

---
updated-dependencies:
- dependency-name: webpack-sources
  dependency-version: 3.5.0
  dependency-type: indirect
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps-frontend)(deps-dev): bump @babel/plugin-transform-react-jsx-source (#10)

Bumps [@babel/plugin-transform-react-jsx-source](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-react-jsx-source) from 7.27.1 to 7.29.7.
- [Release notes](https://github.com/babel/babel/releases)
- [Commits](https://github.com/babel/babel/commits/v7.29.7/packages/babel-plugin-transform-react-jsx-source)

---
updated-dependencies:
- dependency-name: "@babel/plugin-transform-react-jsx-source"
  dependency-version: 7.29.7
  dependency-type: indirect
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps-electron)(deps-dev): bump tapable in /electron (#11)

Bumps [tapable](https://github.com/webpack/tapable) from 2.3.2 to 2.3.3.
- [Release notes](https://github.com/webpack/tapable/releases)
- [Changelog](https://github.com/webpack/tapable/blob/main/CHANGELOG.md)
- [Commits](webpack/tapable@v2.3.2...v2.3.3)

---
updated-dependencies:
- dependency-name: tapable
  dependency-version: 2.3.3
  dependency-type: indirect
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps-frontend)(deps-dev): bump electron-to-chromium in /frontend (#12)

Bumps [electron-to-chromium](https://github.com/Kilian/electron-to-chromium) from 1.5.340 to 1.5.371.
- [Changelog](https://github.com/Kilian/electron-to-chromium/blob/main/CHANGELOG.md)
- [Commits](Kilian/electron-to-chromium@v1.5.340...v1.5.371)

---
updated-dependencies:
- dependency-name: electron-to-chromium
  dependency-version: 1.5.371
  dependency-type: indirect
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps-python)(deps): bump uvicorn from 0.34.2 to 0.49.0 in /python (#13)

Bumps [uvicorn](https://github.com/Kludex/uvicorn) from 0.34.2 to 0.49.0.
- [Release notes](https://github.com/Kludex/uvicorn/releases)
- [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md)
- [Commits](Kludex/uvicorn@0.34.2...0.49.0)

---
updated-dependencies:
- dependency-name: uvicorn
  dependency-version: 0.49.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps-frontend)(deps-dev): bump vite in /frontend (#16)

Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) from 6.4.2 to 6.4.3.
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/v6.4.3/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v6.4.3/packages/vite)

---
updated-dependencies:
- dependency-name: vite
  dependency-version: 6.4.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps-python)(deps): bump pypdf from 5.4.0 to 5.9.0 in /python (#15)

Bumps [pypdf](https://github.com/py-pdf/pypdf) from 5.4.0 to 5.9.0.
- [Release notes](https://github.com/py-pdf/pypdf/releases)
- [Changelog](https://github.com/py-pdf/pypdf/blob/main/CHANGELOG.md)
- [Commits](py-pdf/pypdf@5.4.0...5.9.0)

---
updated-dependencies:
- dependency-name: pypdf
  dependency-version: 5.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps-electron)(deps-dev): bump @electron-forge/maker-deb (#17)

Bumps [@electron-forge/maker-deb](https://github.com/electron/forge) from 7.11.1 to 7.11.2.
- [Release notes](https://github.com/electron/forge/releases)
- [Changelog](https://github.com/electron/forge/blob/main/CHANGELOG.md)
- [Commits](electron/forge@v7.11.1...v7.11.2)

---
updated-dependencies:
- dependency-name: "@electron-forge/maker-deb"
  dependency-version: 7.11.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps-python)(deps): bump fastapi in /python (#18)

Bumps [fastapi](https://github.com/fastapi/fastapi) from 0.115.12 to 0.136.3.
- [Release notes](https://github.com/fastapi/fastapi/releases)
- [Commits](fastapi/fastapi@0.115.12...0.136.3)

---
updated-dependencies:
- dependency-name: fastapi
  dependency-version: 0.136.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps-electron)(deps-dev): bump @electron-forge/maker-zip (#19)

Bumps [@electron-forge/maker-zip](https://github.com/electron/forge) from 7.11.1 to 7.11.2.
- [Release notes](https://github.com/electron/forge/releases)
- [Changelog](https://github.com/electron/forge/blob/main/CHANGELOG.md)
- [Commits](electron/forge@v7.11.1...v7.11.2)

---
updated-dependencies:
- dependency-name: "@electron-forge/maker-zip"
  dependency-version: 7.11.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps-python)(deps): bump pillow from 11.2.1 to 11.3.0 in /python (#20)

Bumps [pillow](https://github.com/python-pillow/Pillow) from 11.2.1 to 11.3.0.
- [Release notes](https://github.com/python-pillow/Pillow/releases)
- [Changelog](https://github.com/python-pillow/Pillow/blob/main/CHANGES.rst)
- [Commits](python-pillow/Pillow@11.2.1...11.3.0)

---
updated-dependencies:
- dependency-name: pillow
  dependency-version: 11.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps-frontend)(deps-dev): bump @babel/template in /frontend (#21)

Bumps [@babel/template](https://github.com/babel/babel/tree/HEAD/packages/babel-template) from 7.28.6 to 7.29.7.
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.29.7/packages/babel-template)

---
updated-dependencies:
- dependency-name: "@babel/template"
  dependency-version: 7.29.7
  dependency-type: indirect
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps-python)(deps): bump pytest from 8.3.5 to 8.4.2 in /python (#22)

Bumps [pytest](https://github.com/pytest-dev/pytest) from 8.3.5 to 8.4.2.
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pytest@8.3.5...8.4.2)

---
updated-dependencies:
- dependency-name: pytest
  dependency-version: 8.4.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps-electron)(deps-dev): bump jiti in /electron (#23)

Bumps [jiti](https://github.com/unjs/jiti) from 2.6.1 to 2.7.0.
- [Release notes](https://github.com/unjs/jiti/releases)
- [Changelog](https://github.com/unjs/jiti/blob/main/CHANGELOG.md)
- [Commits](unjs/jiti@v2.6.1...v2.7.0)

---
updated-dependencies:
- dependency-name: jiti
  dependency-version: 2.7.0
  dependency-type: indirect
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

---------

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
overwrite00 added a commit that referenced this pull request Jun 13, 2026
@overwrite00 @dependabot
fix: correct dependabot.yml groups schema (#29)
f7349d6 
* Add files via upload

* ci: add GitHub automation configuration

- Add dependabot.yml for multi-language dependency management (Python, Electron, Frontend)
- Add project-automation.yml for issue/PR automation to GitHub Project
- Configure labels and workflows aligned with universal schema

* feat: add automatic reviewer request to workflow

- Request @overwrite00 as reviewer on opened/reopened PRs
- Works alongside automatic assignment to streamline PR review process

* ci: fail loudly when GH_PROJECT_TOKEN is unavailable in project automation

Dependabot-triggered workflows only receive Dependabot secrets, so
GH_PROJECT_TOKEN (registered as an Actions secret) was empty and the
addProjectV2ItemById mutation failed silently with a false success.

- Fail fast with a clear error when the token is empty
- Surface GraphQL errors via .errors // .message (401 has no .errors)
- Exit 1 when adding to the Project fails

* ci(deps)(deps): bump actions/download-artifact from 4 to 8 (#3)

Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 4 to 8.
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](actions/download-artifact@v4...v8)

---
updated-dependencies:
- dependency-name: actions/download-artifact
  dependency-version: '8'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* fix(tests): use @pytest_asyncio.fixture for async client fixture (#25)

* ci(deps)(deps): bump actions/upload-artifact from 4 to 7 (#4)

Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4 to 7.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@v4...v7)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* ci(deps)(deps): bump softprops/action-gh-release from 2 to 3 (#5)

Bumps [softprops/action-gh-release](https://github.com/softprops/action-gh-release) from 2 to 3.
- [Release notes](https://github.com/softprops/action-gh-release/releases)
- [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md)
- [Commits](softprops/action-gh-release@v2...v3)

---
updated-dependencies:
- dependency-name: softprops/action-gh-release
  dependency-version: '3'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* ci(deps)(deps): bump actions/checkout from 4 to 6 (#6)

Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 6.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v4...v6)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* ci(deps)(deps): bump actions/setup-node from 4 to 6 (#7)

Bumps [actions/setup-node](https://github.com/actions/setup-node) from 4 to 6.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](actions/setup-node@v4...v6)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps-frontend)(deps-dev): bump @babel/parser in /frontend (#8)

Bumps [@babel/parser](https://github.com/babel/babel/tree/HEAD/packages/babel-parser) from 7.29.2 to 7.29.7.
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.29.7/packages/babel-parser)

---
updated-dependencies:
- dependency-name: "@babel/parser"
  dependency-version: 7.29.7
  dependency-type: indirect
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps-electron)(deps-dev): bump webpack-sources in /electron (#9)

Bumps [webpack-sources](https://github.com/webpack/webpack-sources) from 3.3.4 to 3.5.0.
- [Release notes](https://github.com/webpack/webpack-sources/releases)
- [Changelog](https://github.com/webpack/webpack-sources/blob/main/CHANGELOG.md)
- [Commits](webpack/webpack-sources@v3.3.4...v3.5.0)

---
updated-dependencies:
- dependency-name: webpack-sources
  dependency-version: 3.5.0
  dependency-type: indirect
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps-frontend)(deps-dev): bump @babel/plugin-transform-react-jsx-source (#10)

Bumps [@babel/plugin-transform-react-jsx-source](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-react-jsx-source) from 7.27.1 to 7.29.7.
- [Release notes](https://github.com/babel/babel/releases)
- [Commits](https://github.com/babel/babel/commits/v7.29.7/packages/babel-plugin-transform-react-jsx-source)

---
updated-dependencies:
- dependency-name: "@babel/plugin-transform-react-jsx-source"
  dependency-version: 7.29.7
  dependency-type: indirect
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps-electron)(deps-dev): bump tapable in /electron (#11)

Bumps [tapable](https://github.com/webpack/tapable) from 2.3.2 to 2.3.3.
- [Release notes](https://github.com/webpack/tapable/releases)
- [Changelog](https://github.com/webpack/tapable/blob/main/CHANGELOG.md)
- [Commits](webpack/tapable@v2.3.2...v2.3.3)

---
updated-dependencies:
- dependency-name: tapable
  dependency-version: 2.3.3
  dependency-type: indirect
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps-frontend)(deps-dev): bump electron-to-chromium in /frontend (#12)

Bumps [electron-to-chromium](https://github.com/Kilian/electron-to-chromium) from 1.5.340 to 1.5.371.
- [Changelog](https://github.com/Kilian/electron-to-chromium/blob/main/CHANGELOG.md)
- [Commits](Kilian/electron-to-chromium@v1.5.340...v1.5.371)

---
updated-dependencies:
- dependency-name: electron-to-chromium
  dependency-version: 1.5.371
  dependency-type: indirect
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps-python)(deps): bump uvicorn from 0.34.2 to 0.49.0 in /python (#13)

Bumps [uvicorn](https://github.com/Kludex/uvicorn) from 0.34.2 to 0.49.0.
- [Release notes](https://github.com/Kludex/uvicorn/releases)
- [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md)
- [Commits](Kludex/uvicorn@0.34.2...0.49.0)

---
updated-dependencies:
- dependency-name: uvicorn
  dependency-version: 0.49.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps-frontend)(deps-dev): bump vite in /frontend (#16)

Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) from 6.4.2 to 6.4.3.
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/v6.4.3/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v6.4.3/packages/vite)

---
updated-dependencies:
- dependency-name: vite
  dependency-version: 6.4.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps-python)(deps): bump pypdf from 5.4.0 to 5.9.0 in /python (#15)

Bumps [pypdf](https://github.com/py-pdf/pypdf) from 5.4.0 to 5.9.0.
- [Release notes](https://github.com/py-pdf/pypdf/releases)
- [Changelog](https://github.com/py-pdf/pypdf/blob/main/CHANGELOG.md)
- [Commits](py-pdf/pypdf@5.4.0...5.9.0)

---
updated-dependencies:
- dependency-name: pypdf
  dependency-version: 5.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps-electron)(deps-dev): bump @electron-forge/maker-deb (#17)

Bumps [@electron-forge/maker-deb](https://github.com/electron/forge) from 7.11.1 to 7.11.2.
- [Release notes](https://github.com/electron/forge/releases)
- [Changelog](https://github.com/electron/forge/blob/main/CHANGELOG.md)
- [Commits](electron/forge@v7.11.1...v7.11.2)

---
updated-dependencies:
- dependency-name: "@electron-forge/maker-deb"
  dependency-version: 7.11.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps-python)(deps): bump fastapi in /python (#18)

Bumps [fastapi](https://github.com/fastapi/fastapi) from 0.115.12 to 0.136.3.
- [Release notes](https://github.com/fastapi/fastapi/releases)
- [Commits](fastapi/fastapi@0.115.12...0.136.3)

---
updated-dependencies:
- dependency-name: fastapi
  dependency-version: 0.136.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps-electron)(deps-dev): bump @electron-forge/maker-zip (#19)

Bumps [@electron-forge/maker-zip](https://github.com/electron/forge) from 7.11.1 to 7.11.2.
- [Release notes](https://github.com/electron/forge/releases)
- [Changelog](https://github.com/electron/forge/blob/main/CHANGELOG.md)
- [Commits](electron/forge@v7.11.1...v7.11.2)

---
updated-dependencies:
- dependency-name: "@electron-forge/maker-zip"
  dependency-version: 7.11.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps-python)(deps): bump pillow from 11.2.1 to 11.3.0 in /python (#20)

Bumps [pillow](https://github.com/python-pillow/Pillow) from 11.2.1 to 11.3.0.
- [Release notes](https://github.com/python-pillow/Pillow/releases)
- [Changelog](https://github.com/python-pillow/Pillow/blob/main/CHANGES.rst)
- [Commits](python-pillow/Pillow@11.2.1...11.3.0)

---
updated-dependencies:
- dependency-name: pillow
  dependency-version: 11.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps-frontend)(deps-dev): bump @babel/template in /frontend (#21)

Bumps [@babel/template](https://github.com/babel/babel/tree/HEAD/packages/babel-template) from 7.28.6 to 7.29.7.
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.29.7/packages/babel-template)

---
updated-dependencies:
- dependency-name: "@babel/template"
  dependency-version: 7.29.7
  dependency-type: indirect
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps-python)(deps): bump pytest from 8.3.5 to 8.4.2 in /python (#22)

Bumps [pytest](https://github.com/pytest-dev/pytest) from 8.3.5 to 8.4.2.
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pytest@8.3.5...8.4.2)

---
updated-dependencies:
- dependency-name: pytest
  dependency-version: 8.4.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps-electron)(deps-dev): bump jiti in /electron (#23)

Bumps [jiti](https://github.com/unjs/jiti) from 2.6.1 to 2.7.0.
- [Release notes](https://github.com/unjs/jiti/releases)
- [Changelog](https://github.com/unjs/jiti/blob/main/CHANGELOG.md)
- [Commits](unjs/jiti@v2.6.1...v2.7.0)

---
updated-dependencies:
- dependency-name: jiti
  dependency-version: 2.7.0
  dependency-type: indirect
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore: optimize dependabot.yml configuration

- Remove redundant entries (separator, allow defaults)
- Limit major version ignore to dev-dependencies only
- Add dependency groups to consolidate minor/patch updates
- Remove major version ignore for GitHub Actions (CI/CD security-critical)

* fix: correct dependabot.yml groups schema

* fix: correct dependabot.yml ignore schema

* chore(deps): bump the npm_and_yarn group across 1 directory with 2 updates (#28)

Bumps the npm_and_yarn group with 2 updates in the /electron directory: [fast-uri](https://github.com/fastify/fast-uri) and [ip-address](https://github.com/beaugunderson/ip-address).


Updates `fast-uri` from 3.1.0 to 3.1.2
- [Release notes](https://github.com/fastify/fast-uri/releases)
- [Commits](fastify/fast-uri@v3.1.0...v3.1.2)

Updates `ip-address` from 10.1.0 to 10.2.0
- [Commits](beaugunderson/ip-address@v10.1.0...v10.2.0)

---
updated-dependencies:
- dependency-name: fast-uri
  dependency-version: 3.1.2
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: ip-address
  dependency-version: 10.2.0
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* ci(deps)(deps): bump actions/setup-python from 5 to 6 (#30)

Bumps [actions/setup-python](https://github.com/actions/setup-python) from 5 to 6.
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](actions/setup-python@v5...v6)

---
updated-dependencies:
- dependency-name: actions/setup-python
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps-frontend)(deps): bump the minor-and-patch group (#31)

Bumps the minor-and-patch group in /frontend with 2 updates: [react](https://github.com/facebook/react/tree/HEAD/packages/react) and [react-dom](https://github.com/facebook/react/tree/HEAD/packages/react-dom).


Updates `react` from 19.2.5 to 19.2.7
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/v19.2.7/packages/react)

Updates `react-dom` from 19.2.5 to 19.2.7
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/v19.2.7/packages/react-dom)

---
updated-dependencies:
- dependency-name: react
  dependency-version: 19.2.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: react-dom
  dependency-version: 19.2.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps-python)(deps): bump xattr (#32)

Bumps the minor-and-patch group in /python with 1 update: [xattr](https://github.com/xattr/xattr).


Updates `xattr` from 1.1.0 to 1.3.0
- [Release notes](https://github.com/xattr/xattr/releases)
- [Changelog](https://github.com/xattr/xattr/blob/main/CHANGES.txt)
- [Commits](xattr/xattr@v1.1.0...v1.3.0)

---
updated-dependencies:
- dependency-name: xattr
  dependency-version: 1.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps-frontend)(deps-dev): bump postcss (#33)

Bumps the development-updates group in /frontend with 1 update: [postcss](https://github.com/postcss/postcss).


Updates `postcss` from 8.5.10 to 8.5.15
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.5.10...8.5.15)

---
updated-dependencies:
- dependency-name: postcss
  dependency-version: 8.5.15
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-updates
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps-python)(deps): bump pypdf from 5.9.0 to 6.13.2 in /python (#34)

Bumps [pypdf](https://github.com/py-pdf/pypdf) from 5.9.0 to 6.13.2.
- [Release notes](https://github.com/py-pdf/pypdf/releases)
- [Changelog](https://github.com/py-pdf/pypdf/blob/main/CHANGELOG.md)
- [Commits](py-pdf/pypdf@5.9.0...6.13.2)

---
updated-dependencies:
- dependency-name: pypdf
  dependency-version: 6.13.2
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps-python)(deps): bump pywin32 from 310 to 312 in /python (#35)

Bumps [pywin32](https://github.com/mhammond/pywin32) from 310 to 312.
- [Release notes](https://github.com/mhammond/pywin32/releases)
- [Changelog](https://github.com/mhammond/pywin32/blob/main/CHANGES.md)
- [Commits](https://github.com/mhammond/pywin32/commits)

---
updated-dependencies:
- dependency-name: pywin32
  dependency-version: '312'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps-electron)(deps-dev): bump the development-updates group (#38)

Bumps the development-updates group in /electron with 4 updates: [@electron-forge/cli](https://github.com/electron/forge), [@electron-forge/maker-rpm](https://github.com/electron/forge), [@electron-forge/maker-squirrel](https://github.com/electron/forge) and [electron](https://github.com/electron/electron).


Updates `@electron-forge/cli` from 7.11.1 to 7.11.2
- [Release notes](https://github.com/electron/forge/releases)
- [Changelog](https://github.com/electron/forge/blob/main/CHANGELOG.md)
- [Commits](electron/forge@v7.11.1...v7.11.2)

Updates `@electron-forge/maker-rpm` from 7.11.1 to 7.11.2
- [Release notes](https://github.com/electron/forge/releases)
- [Changelog](https://github.com/electron/forge/blob/main/CHANGELOG.md)
- [Commits](electron/forge@v7.11.1...v7.11.2)

Updates `@electron-forge/maker-squirrel` from 7.11.1 to 7.11.2
- [Release notes](https://github.com/electron/forge/releases)
- [Changelog](https://github.com/electron/forge/blob/main/CHANGELOG.md)
- [Commits](electron/forge@v7.11.1...v7.11.2)

Updates `electron` from 41.2.1 to 41.7.2
- [Release notes](https://github.com/electron/electron/releases)
- [Commits](electron/electron@v41.2.1...v41.7.2)

---
updated-dependencies:
- dependency-name: "@electron-forge/cli"
  dependency-version: 7.11.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-updates
- dependency-name: "@electron-forge/maker-rpm"
  dependency-version: 7.11.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-updates
- dependency-name: "@electron-forge/maker-squirrel"
  dependency-version: 7.11.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-updates
- dependency-name: electron
  dependency-version: 41.7.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-updates
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps-python)(deps): bump pillow from 11.3.0 to 12.2.0 in /python (#37)

Bumps [pillow](https://github.com/python-pillow/Pillow) from 11.3.0 to 12.2.0.
- [Release notes](https://github.com/python-pillow/Pillow/releases)
- [Changelog](https://github.com/python-pillow/Pillow/blob/main/CHANGES.rst)
- [Commits](python-pillow/Pillow@11.3.0...12.2.0)

---
updated-dependencies:
- dependency-name: pillow
  dependency-version: 12.2.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* fix: resolve npm vulnerabilities in frontend

- Update vite to 8.0.16 (fixes esbuild RCE vulnerability GHSA-gv7w-rqvm-qjhr)
- Update @vitejs/plugin-react to 6.0.2
- Verified build passes with new versions

---------

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
overwrite00 added a commit that referenced this pull request Jun 13, 2026
@overwrite00 @dependabot
chore: merge develop into main with lucide-react update (#40)
7f2b1b5 
* Add files via upload

* ci: add GitHub automation configuration

- Add dependabot.yml for multi-language dependency management (Python, Electron, Frontend)
- Add project-automation.yml for issue/PR automation to GitHub Project
- Configure labels and workflows aligned with universal schema

* feat: add automatic reviewer request to workflow

- Request @overwrite00 as reviewer on opened/reopened PRs
- Works alongside automatic assignment to streamline PR review process

* ci: fail loudly when GH_PROJECT_TOKEN is unavailable in project automation

Dependabot-triggered workflows only receive Dependabot secrets, so
GH_PROJECT_TOKEN (registered as an Actions secret) was empty and the
addProjectV2ItemById mutation failed silently with a false success.

- Fail fast with a clear error when the token is empty
- Surface GraphQL errors via .errors // .message (401 has no .errors)
- Exit 1 when adding to the Project fails

* ci(deps)(deps): bump actions/download-artifact from 4 to 8 (#3)

Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 4 to 8.
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](actions/download-artifact@v4...v8)

---
updated-dependencies:
- dependency-name: actions/download-artifact
  dependency-version: '8'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* fix(tests): use @pytest_asyncio.fixture for async client fixture (#25)

* ci(deps)(deps): bump actions/upload-artifact from 4 to 7 (#4)

Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4 to 7.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@v4...v7)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* ci(deps)(deps): bump softprops/action-gh-release from 2 to 3 (#5)

Bumps [softprops/action-gh-release](https://github.com/softprops/action-gh-release) from 2 to 3.
- [Release notes](https://github.com/softprops/action-gh-release/releases)
- [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md)
- [Commits](softprops/action-gh-release@v2...v3)

---
updated-dependencies:
- dependency-name: softprops/action-gh-release
  dependency-version: '3'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* ci(deps)(deps): bump actions/checkout from 4 to 6 (#6)

Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 6.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v4...v6)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* ci(deps)(deps): bump actions/setup-node from 4 to 6 (#7)

Bumps [actions/setup-node](https://github.com/actions/setup-node) from 4 to 6.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](actions/setup-node@v4...v6)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps-frontend)(deps-dev): bump @babel/parser in /frontend (#8)

Bumps [@babel/parser](https://github.com/babel/babel/tree/HEAD/packages/babel-parser) from 7.29.2 to 7.29.7.
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.29.7/packages/babel-parser)

---
updated-dependencies:
- dependency-name: "@babel/parser"
  dependency-version: 7.29.7
  dependency-type: indirect
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps-electron)(deps-dev): bump webpack-sources in /electron (#9)

Bumps [webpack-sources](https://github.com/webpack/webpack-sources) from 3.3.4 to 3.5.0.
- [Release notes](https://github.com/webpack/webpack-sources/releases)
- [Changelog](https://github.com/webpack/webpack-sources/blob/main/CHANGELOG.md)
- [Commits](webpack/webpack-sources@v3.3.4...v3.5.0)

---
updated-dependencies:
- dependency-name: webpack-sources
  dependency-version: 3.5.0
  dependency-type: indirect
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps-frontend)(deps-dev): bump @babel/plugin-transform-react-jsx-source (#10)

Bumps [@babel/plugin-transform-react-jsx-source](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-react-jsx-source) from 7.27.1 to 7.29.7.
- [Release notes](https://github.com/babel/babel/releases)
- [Commits](https://github.com/babel/babel/commits/v7.29.7/packages/babel-plugin-transform-react-jsx-source)

---
updated-dependencies:
- dependency-name: "@babel/plugin-transform-react-jsx-source"
  dependency-version: 7.29.7
  dependency-type: indirect
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps-electron)(deps-dev): bump tapable in /electron (#11)

Bumps [tapable](https://github.com/webpack/tapable) from 2.3.2 to 2.3.3.
- [Release notes](https://github.com/webpack/tapable/releases)
- [Changelog](https://github.com/webpack/tapable/blob/main/CHANGELOG.md)
- [Commits](webpack/tapable@v2.3.2...v2.3.3)

---
updated-dependencies:
- dependency-name: tapable
  dependency-version: 2.3.3
  dependency-type: indirect
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps-frontend)(deps-dev): bump electron-to-chromium in /frontend (#12)

Bumps [electron-to-chromium](https://github.com/Kilian/electron-to-chromium) from 1.5.340 to 1.5.371.
- [Changelog](https://github.com/Kilian/electron-to-chromium/blob/main/CHANGELOG.md)
- [Commits](Kilian/electron-to-chromium@v1.5.340...v1.5.371)

---
updated-dependencies:
- dependency-name: electron-to-chromium
  dependency-version: 1.5.371
  dependency-type: indirect
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps-python)(deps): bump uvicorn from 0.34.2 to 0.49.0 in /python (#13)

Bumps [uvicorn](https://github.com/Kludex/uvicorn) from 0.34.2 to 0.49.0.
- [Release notes](https://github.com/Kludex/uvicorn/releases)
- [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md)
- [Commits](Kludex/uvicorn@0.34.2...0.49.0)

---
updated-dependencies:
- dependency-name: uvicorn
  dependency-version: 0.49.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps-frontend)(deps-dev): bump vite in /frontend (#16)

Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) from 6.4.2 to 6.4.3.
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/v6.4.3/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v6.4.3/packages/vite)

---
updated-dependencies:
- dependency-name: vite
  dependency-version: 6.4.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps-python)(deps): bump pypdf from 5.4.0 to 5.9.0 in /python (#15)

Bumps [pypdf](https://github.com/py-pdf/pypdf) from 5.4.0 to 5.9.0.
- [Release notes](https://github.com/py-pdf/pypdf/releases)
- [Changelog](https://github.com/py-pdf/pypdf/blob/main/CHANGELOG.md)
- [Commits](py-pdf/pypdf@5.4.0...5.9.0)

---
updated-dependencies:
- dependency-name: pypdf
  dependency-version: 5.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps-electron)(deps-dev): bump @electron-forge/maker-deb (#17)

Bumps [@electron-forge/maker-deb](https://github.com/electron/forge) from 7.11.1 to 7.11.2.
- [Release notes](https://github.com/electron/forge/releases)
- [Changelog](https://github.com/electron/forge/blob/main/CHANGELOG.md)
- [Commits](electron/forge@v7.11.1...v7.11.2)

---
updated-dependencies:
- dependency-name: "@electron-forge/maker-deb"
  dependency-version: 7.11.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps-python)(deps): bump fastapi in /python (#18)

Bumps [fastapi](https://github.com/fastapi/fastapi) from 0.115.12 to 0.136.3.
- [Release notes](https://github.com/fastapi/fastapi/releases)
- [Commits](fastapi/fastapi@0.115.12...0.136.3)

---
updated-dependencies:
- dependency-name: fastapi
  dependency-version: 0.136.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps-electron)(deps-dev): bump @electron-forge/maker-zip (#19)

Bumps [@electron-forge/maker-zip](https://github.com/electron/forge) from 7.11.1 to 7.11.2.
- [Release notes](https://github.com/electron/forge/releases)
- [Changelog](https://github.com/electron/forge/blob/main/CHANGELOG.md)
- [Commits](electron/forge@v7.11.1...v7.11.2)

---
updated-dependencies:
- dependency-name: "@electron-forge/maker-zip"
  dependency-version: 7.11.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps-python)(deps): bump pillow from 11.2.1 to 11.3.0 in /python (#20)

Bumps [pillow](https://github.com/python-pillow/Pillow) from 11.2.1 to 11.3.0.
- [Release notes](https://github.com/python-pillow/Pillow/releases)
- [Changelog](https://github.com/python-pillow/Pillow/blob/main/CHANGES.rst)
- [Commits](python-pillow/Pillow@11.2.1...11.3.0)

---
updated-dependencies:
- dependency-name: pillow
  dependency-version: 11.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps-frontend)(deps-dev): bump @babel/template in /frontend (#21)

Bumps [@babel/template](https://github.com/babel/babel/tree/HEAD/packages/babel-template) from 7.28.6 to 7.29.7.
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.29.7/packages/babel-template)

---
updated-dependencies:
- dependency-name: "@babel/template"
  dependency-version: 7.29.7
  dependency-type: indirect
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps-python)(deps): bump pytest from 8.3.5 to 8.4.2 in /python (#22)

Bumps [pytest](https://github.com/pytest-dev/pytest) from 8.3.5 to 8.4.2.
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pytest@8.3.5...8.4.2)

---
updated-dependencies:
- dependency-name: pytest
  dependency-version: 8.4.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps-electron)(deps-dev): bump jiti in /electron (#23)

Bumps [jiti](https://github.com/unjs/jiti) from 2.6.1 to 2.7.0.
- [Release notes](https://github.com/unjs/jiti/releases)
- [Changelog](https://github.com/unjs/jiti/blob/main/CHANGELOG.md)
- [Commits](unjs/jiti@v2.6.1...v2.7.0)

---
updated-dependencies:
- dependency-name: jiti
  dependency-version: 2.7.0
  dependency-type: indirect
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore: optimize dependabot.yml configuration

- Remove redundant entries (separator, allow defaults)
- Limit major version ignore to dev-dependencies only
- Add dependency groups to consolidate minor/patch updates
- Remove major version ignore for GitHub Actions (CI/CD security-critical)

* fix: correct dependabot.yml groups schema

* fix: correct dependabot.yml ignore schema

* chore(deps): bump the npm_and_yarn group across 1 directory with 2 updates (#28)

Bumps the npm_and_yarn group with 2 updates in the /electron directory: [fast-uri](https://github.com/fastify/fast-uri) and [ip-address](https://github.com/beaugunderson/ip-address).


Updates `fast-uri` from 3.1.0 to 3.1.2
- [Release notes](https://github.com/fastify/fast-uri/releases)
- [Commits](fastify/fast-uri@v3.1.0...v3.1.2)

Updates `ip-address` from 10.1.0 to 10.2.0
- [Commits](beaugunderson/ip-address@v10.1.0...v10.2.0)

---
updated-dependencies:
- dependency-name: fast-uri
  dependency-version: 3.1.2
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: ip-address
  dependency-version: 10.2.0
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* ci(deps)(deps): bump actions/setup-python from 5 to 6 (#30)

Bumps [actions/setup-python](https://github.com/actions/setup-python) from 5 to 6.
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](actions/setup-python@v5...v6)

---
updated-dependencies:
- dependency-name: actions/setup-python
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps-frontend)(deps): bump the minor-and-patch group (#31)

Bumps the minor-and-patch group in /frontend with 2 updates: [react](https://github.com/facebook/react/tree/HEAD/packages/react) and [react-dom](https://github.com/facebook/react/tree/HEAD/packages/react-dom).


Updates `react` from 19.2.5 to 19.2.7
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/v19.2.7/packages/react)

Updates `react-dom` from 19.2.5 to 19.2.7
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/v19.2.7/packages/react-dom)

---
updated-dependencies:
- dependency-name: react
  dependency-version: 19.2.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: react-dom
  dependency-version: 19.2.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps-python)(deps): bump xattr (#32)

Bumps the minor-and-patch group in /python with 1 update: [xattr](https://github.com/xattr/xattr).


Updates `xattr` from 1.1.0 to 1.3.0
- [Release notes](https://github.com/xattr/xattr/releases)
- [Changelog](https://github.com/xattr/xattr/blob/main/CHANGES.txt)
- [Commits](xattr/xattr@v1.1.0...v1.3.0)

---
updated-dependencies:
- dependency-name: xattr
  dependency-version: 1.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps-frontend)(deps-dev): bump postcss (#33)

Bumps the development-updates group in /frontend with 1 update: [postcss](https://github.com/postcss/postcss).


Updates `postcss` from 8.5.10 to 8.5.15
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.5.10...8.5.15)

---
updated-dependencies:
- dependency-name: postcss
  dependency-version: 8.5.15
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-updates
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps-python)(deps): bump pypdf from 5.9.0 to 6.13.2 in /python (#34)

Bumps [pypdf](https://github.com/py-pdf/pypdf) from 5.9.0 to 6.13.2.
- [Release notes](https://github.com/py-pdf/pypdf/releases)
- [Changelog](https://github.com/py-pdf/pypdf/blob/main/CHANGELOG.md)
- [Commits](py-pdf/pypdf@5.9.0...6.13.2)

---
updated-dependencies:
- dependency-name: pypdf
  dependency-version: 6.13.2
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps-python)(deps): bump pywin32 from 310 to 312 in /python (#35)

Bumps [pywin32](https://github.com/mhammond/pywin32) from 310 to 312.
- [Release notes](https://github.com/mhammond/pywin32/releases)
- [Changelog](https://github.com/mhammond/pywin32/blob/main/CHANGES.md)
- [Commits](https://github.com/mhammond/pywin32/commits)

---
updated-dependencies:
- dependency-name: pywin32
  dependency-version: '312'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps-electron)(deps-dev): bump the development-updates group (#38)

Bumps the development-updates group in /electron with 4 updates: [@electron-forge/cli](https://github.com/electron/forge), [@electron-forge/maker-rpm](https://github.com/electron/forge), [@electron-forge/maker-squirrel](https://github.com/electron/forge) and [electron](https://github.com/electron/electron).


Updates `@electron-forge/cli` from 7.11.1 to 7.11.2
- [Release notes](https://github.com/electron/forge/releases)
- [Changelog](https://github.com/electron/forge/blob/main/CHANGELOG.md)
- [Commits](electron/forge@v7.11.1...v7.11.2)

Updates `@electron-forge/maker-rpm` from 7.11.1 to 7.11.2
- [Release notes](https://github.com/electron/forge/releases)
- [Changelog](https://github.com/electron/forge/blob/main/CHANGELOG.md)
- [Commits](electron/forge@v7.11.1...v7.11.2)

Updates `@electron-forge/maker-squirrel` from 7.11.1 to 7.11.2
- [Release notes](https://github.com/electron/forge/releases)
- [Changelog](https://github.com/electron/forge/blob/main/CHANGELOG.md)
- [Commits](electron/forge@v7.11.1...v7.11.2)

Updates `electron` from 41.2.1 to 41.7.2
- [Release notes](https://github.com/electron/electron/releases)
- [Commits](electron/electron@v41.2.1...v41.7.2)

---
updated-dependencies:
- dependency-name: "@electron-forge/cli"
  dependency-version: 7.11.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-updates
- dependency-name: "@electron-forge/maker-rpm"
  dependency-version: 7.11.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-updates
- dependency-name: "@electron-forge/maker-squirrel"
  dependency-version: 7.11.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-updates
- dependency-name: electron
  dependency-version: 41.7.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-updates
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps-python)(deps): bump pillow from 11.3.0 to 12.2.0 in /python (#37)

Bumps [pillow](https://github.com/python-pillow/Pillow) from 11.3.0 to 12.2.0.
- [Release notes](https://github.com/python-pillow/Pillow/releases)
- [Changelog](https://github.com/python-pillow/Pillow/blob/main/CHANGES.rst)
- [Commits](python-pillow/Pillow@11.3.0...12.2.0)

---
updated-dependencies:
- dependency-name: pillow
  dependency-version: 12.2.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* fix: resolve npm vulnerabilities in frontend

- Update vite to 8.0.16 (fixes esbuild RCE vulnerability GHSA-gv7w-rqvm-qjhr)
- Update @vitejs/plugin-react to 6.0.2
- Verified build passes with new versions

* chore(deps-frontend)(deps): bump lucide-react in /frontend (#36)

Bumps [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) from 0.487.0 to 1.18.0.
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.18.0/packages/lucide-react)

---
updated-dependencies:
- dependency-name: lucide-react
  dependency-version: 1.18.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

---------

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
overwrite00 added a commit that referenced this pull request Jun 13, 2026
@overwrite00 @dependabot
fix: resolve pypdf vulnerabilities by updating to 6.13.2 (#41)
debe289 
* Add files via upload

* ci: add GitHub automation configuration

- Add dependabot.yml for multi-language dependency management (Python, Electron, Frontend)
- Add project-automation.yml for issue/PR automation to GitHub Project
- Configure labels and workflows aligned with universal schema

* feat: add automatic reviewer request to workflow

- Request @overwrite00 as reviewer on opened/reopened PRs
- Works alongside automatic assignment to streamline PR review process

* ci: fail loudly when GH_PROJECT_TOKEN is unavailable in project automation

Dependabot-triggered workflows only receive Dependabot secrets, so
GH_PROJECT_TOKEN (registered as an Actions secret) was empty and the
addProjectV2ItemById mutation failed silently with a false success.

- Fail fast with a clear error when the token is empty
- Surface GraphQL errors via .errors // .message (401 has no .errors)
- Exit 1 when adding to the Project fails

* ci(deps)(deps): bump actions/download-artifact from 4 to 8 (#3)

Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 4 to 8.
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](actions/download-artifact@v4...v8)

---
updated-dependencies:
- dependency-name: actions/download-artifact
  dependency-version: '8'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* fix(tests): use @pytest_asyncio.fixture for async client fixture (#25)

* ci(deps)(deps): bump actions/upload-artifact from 4 to 7 (#4)

Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4 to 7.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@v4...v7)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* ci(deps)(deps): bump softprops/action-gh-release from 2 to 3 (#5)

Bumps [softprops/action-gh-release](https://github.com/softprops/action-gh-release) from 2 to 3.
- [Release notes](https://github.com/softprops/action-gh-release/releases)
- [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md)
- [Commits](softprops/action-gh-release@v2...v3)

---
updated-dependencies:
- dependency-name: softprops/action-gh-release
  dependency-version: '3'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* ci(deps)(deps): bump actions/checkout from 4 to 6 (#6)

Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 6.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v4...v6)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* ci(deps)(deps): bump actions/setup-node from 4 to 6 (#7)

Bumps [actions/setup-node](https://github.com/actions/setup-node) from 4 to 6.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](actions/setup-node@v4...v6)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps-frontend)(deps-dev): bump @babel/parser in /frontend (#8)

Bumps [@babel/parser](https://github.com/babel/babel/tree/HEAD/packages/babel-parser) from 7.29.2 to 7.29.7.
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.29.7/packages/babel-parser)

---
updated-dependencies:
- dependency-name: "@babel/parser"
  dependency-version: 7.29.7
  dependency-type: indirect
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps-electron)(deps-dev): bump webpack-sources in /electron (#9)

Bumps [webpack-sources](https://github.com/webpack/webpack-sources) from 3.3.4 to 3.5.0.
- [Release notes](https://github.com/webpack/webpack-sources/releases)
- [Changelog](https://github.com/webpack/webpack-sources/blob/main/CHANGELOG.md)
- [Commits](webpack/webpack-sources@v3.3.4...v3.5.0)

---
updated-dependencies:
- dependency-name: webpack-sources
  dependency-version: 3.5.0
  dependency-type: indirect
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps-frontend)(deps-dev): bump @babel/plugin-transform-react-jsx-source (#10)

Bumps [@babel/plugin-transform-react-jsx-source](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-react-jsx-source) from 7.27.1 to 7.29.7.
- [Release notes](https://github.com/babel/babel/releases)
- [Commits](https://github.com/babel/babel/commits/v7.29.7/packages/babel-plugin-transform-react-jsx-source)

---
updated-dependencies:
- dependency-name: "@babel/plugin-transform-react-jsx-source"
  dependency-version: 7.29.7
  dependency-type: indirect
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps-electron)(deps-dev): bump tapable in /electron (#11)

Bumps [tapable](https://github.com/webpack/tapable) from 2.3.2 to 2.3.3.
- [Release notes](https://github.com/webpack/tapable/releases)
- [Changelog](https://github.com/webpack/tapable/blob/main/CHANGELOG.md)
- [Commits](webpack/tapable@v2.3.2...v2.3.3)

---
updated-dependencies:
- dependency-name: tapable
  dependency-version: 2.3.3
  dependency-type: indirect
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps-frontend)(deps-dev): bump electron-to-chromium in /frontend (#12)

Bumps [electron-to-chromium](https://github.com/Kilian/electron-to-chromium) from 1.5.340 to 1.5.371.
- [Changelog](https://github.com/Kilian/electron-to-chromium/blob/main/CHANGELOG.md)
- [Commits](Kilian/electron-to-chromium@v1.5.340...v1.5.371)

---
updated-dependencies:
- dependency-name: electron-to-chromium
  dependency-version: 1.5.371
  dependency-type: indirect
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps-python)(deps): bump uvicorn from 0.34.2 to 0.49.0 in /python (#13)

Bumps [uvicorn](https://github.com/Kludex/uvicorn) from 0.34.2 to 0.49.0.
- [Release notes](https://github.com/Kludex/uvicorn/releases)
- [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md)
- [Commits](Kludex/uvicorn@0.34.2...0.49.0)

---
updated-dependencies:
- dependency-name: uvicorn
  dependency-version: 0.49.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps-frontend)(deps-dev): bump vite in /frontend (#16)

Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) from 6.4.2 to 6.4.3.
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/v6.4.3/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v6.4.3/packages/vite)

---
updated-dependencies:
- dependency-name: vite
  dependency-version: 6.4.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps-python)(deps): bump pypdf from 5.4.0 to 5.9.0 in /python (#15)

Bumps [pypdf](https://github.com/py-pdf/pypdf) from 5.4.0 to 5.9.0.
- [Release notes](https://github.com/py-pdf/pypdf/releases)
- [Changelog](https://github.com/py-pdf/pypdf/blob/main/CHANGELOG.md)
- [Commits](py-pdf/pypdf@5.4.0...5.9.0)

---
updated-dependencies:
- dependency-name: pypdf
  dependency-version: 5.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps-electron)(deps-dev): bump @electron-forge/maker-deb (#17)

Bumps [@electron-forge/maker-deb](https://github.com/electron/forge) from 7.11.1 to 7.11.2.
- [Release notes](https://github.com/electron/forge/releases)
- [Changelog](https://github.com/electron/forge/blob/main/CHANGELOG.md)
- [Commits](electron/forge@v7.11.1...v7.11.2)

---
updated-dependencies:
- dependency-name: "@electron-forge/maker-deb"
  dependency-version: 7.11.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps-python)(deps): bump fastapi in /python (#18)

Bumps [fastapi](https://github.com/fastapi/fastapi) from 0.115.12 to 0.136.3.
- [Release notes](https://github.com/fastapi/fastapi/releases)
- [Commits](fastapi/fastapi@0.115.12...0.136.3)

---
updated-dependencies:
- dependency-name: fastapi
  dependency-version: 0.136.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps-electron)(deps-dev): bump @electron-forge/maker-zip (#19)

Bumps [@electron-forge/maker-zip](https://github.com/electron/forge) from 7.11.1 to 7.11.2.
- [Release notes](https://github.com/electron/forge/releases)
- [Changelog](https://github.com/electron/forge/blob/main/CHANGELOG.md)
- [Commits](electron/forge@v7.11.1...v7.11.2)

---
updated-dependencies:
- dependency-name: "@electron-forge/maker-zip"
  dependency-version: 7.11.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps-python)(deps): bump pillow from 11.2.1 to 11.3.0 in /python (#20)

Bumps [pillow](https://github.com/python-pillow/Pillow) from 11.2.1 to 11.3.0.
- [Release notes](https://github.com/python-pillow/Pillow/releases)
- [Changelog](https://github.com/python-pillow/Pillow/blob/main/CHANGES.rst)
- [Commits](python-pillow/Pillow@11.2.1...11.3.0)

---
updated-dependencies:
- dependency-name: pillow
  dependency-version: 11.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps-frontend)(deps-dev): bump @babel/template in /frontend (#21)

Bumps [@babel/template](https://github.com/babel/babel/tree/HEAD/packages/babel-template) from 7.28.6 to 7.29.7.
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.29.7/packages/babel-template)

---
updated-dependencies:
- dependency-name: "@babel/template"
  dependency-version: 7.29.7
  dependency-type: indirect
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps-python)(deps): bump pytest from 8.3.5 to 8.4.2 in /python (#22)

Bumps [pytest](https://github.com/pytest-dev/pytest) from 8.3.5 to 8.4.2.
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pytest@8.3.5...8.4.2)

---
updated-dependencies:
- dependency-name: pytest
  dependency-version: 8.4.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps-electron)(deps-dev): bump jiti in /electron (#23)

Bumps [jiti](https://github.com/unjs/jiti) from 2.6.1 to 2.7.0.
- [Release notes](https://github.com/unjs/jiti/releases)
- [Changelog](https://github.com/unjs/jiti/blob/main/CHANGELOG.md)
- [Commits](unjs/jiti@v2.6.1...v2.7.0)

---
updated-dependencies:
- dependency-name: jiti
  dependency-version: 2.7.0
  dependency-type: indirect
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore: optimize dependabot.yml configuration

- Remove redundant entries (separator, allow defaults)
- Limit major version ignore to dev-dependencies only
- Add dependency groups to consolidate minor/patch updates
- Remove major version ignore for GitHub Actions (CI/CD security-critical)

* fix: correct dependabot.yml groups schema

* fix: correct dependabot.yml ignore schema

* chore(deps): bump the npm_and_yarn group across 1 directory with 2 updates (#28)

Bumps the npm_and_yarn group with 2 updates in the /electron directory: [fast-uri](https://github.com/fastify/fast-uri) and [ip-address](https://github.com/beaugunderson/ip-address).


Updates `fast-uri` from 3.1.0 to 3.1.2
- [Release notes](https://github.com/fastify/fast-uri/releases)
- [Commits](fastify/fast-uri@v3.1.0...v3.1.2)

Updates `ip-address` from 10.1.0 to 10.2.0
- [Commits](beaugunderson/ip-address@v10.1.0...v10.2.0)

---
updated-dependencies:
- dependency-name: fast-uri
  dependency-version: 3.1.2
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: ip-address
  dependency-version: 10.2.0
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* ci(deps)(deps): bump actions/setup-python from 5 to 6 (#30)

Bumps [actions/setup-python](https://github.com/actions/setup-python) from 5 to 6.
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](actions/setup-python@v5...v6)

---
updated-dependencies:
- dependency-name: actions/setup-python
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps-frontend)(deps): bump the minor-and-patch group (#31)

Bumps the minor-and-patch group in /frontend with 2 updates: [react](https://github.com/facebook/react/tree/HEAD/packages/react) and [react-dom](https://github.com/facebook/react/tree/HEAD/packages/react-dom).


Updates `react` from 19.2.5 to 19.2.7
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/v19.2.7/packages/react)

Updates `react-dom` from 19.2.5 to 19.2.7
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/v19.2.7/packages/react-dom)

---
updated-dependencies:
- dependency-name: react
  dependency-version: 19.2.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: react-dom
  dependency-version: 19.2.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps-python)(deps): bump xattr (#32)

Bumps the minor-and-patch group in /python with 1 update: [xattr](https://github.com/xattr/xattr).


Updates `xattr` from 1.1.0 to 1.3.0
- [Release notes](https://github.com/xattr/xattr/releases)
- [Changelog](https://github.com/xattr/xattr/blob/main/CHANGES.txt)
- [Commits](xattr/xattr@v1.1.0...v1.3.0)

---
updated-dependencies:
- dependency-name: xattr
  dependency-version: 1.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps-frontend)(deps-dev): bump postcss (#33)

Bumps the development-updates group in /frontend with 1 update: [postcss](https://github.com/postcss/postcss).


Updates `postcss` from 8.5.10 to 8.5.15
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.5.10...8.5.15)

---
updated-dependencies:
- dependency-name: postcss
  dependency-version: 8.5.15
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-updates
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps-python)(deps): bump pypdf from 5.9.0 to 6.13.2 in /python (#34)

Bumps [pypdf](https://github.com/py-pdf/pypdf) from 5.9.0 to 6.13.2.
- [Release notes](https://github.com/py-pdf/pypdf/releases)
- [Changelog](https://github.com/py-pdf/pypdf/blob/main/CHANGELOG.md)
- [Commits](py-pdf/pypdf@5.9.0...6.13.2)

---
updated-dependencies:
- dependency-name: pypdf
  dependency-version: 6.13.2
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps-python)(deps): bump pywin32 from 310 to 312 in /python (#35)

Bumps [pywin32](https://github.com/mhammond/pywin32) from 310 to 312.
- [Release notes](https://github.com/mhammond/pywin32/releases)
- [Changelog](https://github.com/mhammond/pywin32/blob/main/CHANGES.md)
- [Commits](https://github.com/mhammond/pywin32/commits)

---
updated-dependencies:
- dependency-name: pywin32
  dependency-version: '312'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps-electron)(deps-dev): bump the development-updates group (#38)

Bumps the development-updates group in /electron with 4 updates: [@electron-forge/cli](https://github.com/electron/forge), [@electron-forge/maker-rpm](https://github.com/electron/forge), [@electron-forge/maker-squirrel](https://github.com/electron/forge) and [electron](https://github.com/electron/electron).


Updates `@electron-forge/cli` from 7.11.1 to 7.11.2
- [Release notes](https://github.com/electron/forge/releases)
- [Changelog](https://github.com/electron/forge/blob/main/CHANGELOG.md)
- [Commits](electron/forge@v7.11.1...v7.11.2)

Updates `@electron-forge/maker-rpm` from 7.11.1 to 7.11.2
- [Release notes](https://github.com/electron/forge/releases)
- [Changelog](https://github.com/electron/forge/blob/main/CHANGELOG.md)
- [Commits](electron/forge@v7.11.1...v7.11.2)

Updates `@electron-forge/maker-squirrel` from 7.11.1 to 7.11.2
- [Release notes](https://github.com/electron/forge/releases)
- [Changelog](https://github.com/electron/forge/blob/main/CHANGELOG.md)
- [Commits](electron/forge@v7.11.1...v7.11.2)

Updates `electron` from 41.2.1 to 41.7.2
- [Release notes](https://github.com/electron/electron/releases)
- [Commits](electron/electron@v41.2.1...v41.7.2)

---
updated-dependencies:
- dependency-name: "@electron-forge/cli"
  dependency-version: 7.11.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-updates
- dependency-name: "@electron-forge/maker-rpm"
  dependency-version: 7.11.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-updates
- dependency-name: "@electron-forge/maker-squirrel"
  dependency-version: 7.11.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-updates
- dependency-name: electron
  dependency-version: 41.7.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-updates
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps-python)(deps): bump pillow from 11.3.0 to 12.2.0 in /python (#37)

Bumps [pillow](https://github.com/python-pillow/Pillow) from 11.3.0 to 12.2.0.
- [Release notes](https://github.com/python-pillow/Pillow/releases)
- [Changelog](https://github.com/python-pillow/Pillow/blob/main/CHANGES.rst)
- [Commits](python-pillow/Pillow@11.3.0...12.2.0)

---
updated-dependencies:
- dependency-name: pillow
  dependency-version: 12.2.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* fix: resolve npm vulnerabilities in frontend

- Update vite to 8.0.16 (fixes esbuild RCE vulnerability GHSA-gv7w-rqvm-qjhr)
- Update @vitejs/plugin-react to 6.0.2
- Verified build passes with new versions

* chore(deps-frontend)(deps): bump lucide-react in /frontend (#36)

Bumps [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) from 0.487.0 to 1.18.0.
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.18.0/packages/lucide-react)

---
updated-dependencies:
- dependency-name: lucide-react
  dependency-version: 1.18.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* fix: update pypdf to 6.13.2 to resolve 22 CVEs

- Resolves CVE-2026-48155 (22 vulnerabilities: memory exhaustion, DoS)
- Tested with pytest: all 18 tests pass
- Maintains compatibility with existing functionality

---------

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

@overwrite00 overwrite00

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@overwrite00