chore: Lock file maintenance

[renovate]

This PR contains the following updates:

Update	Change
lockFileMaintenance	All locks refreshed

🔧 This Pull Request updates lock files to use the latest dependency versions.

---

Configuration

📅 Schedule: (in timezone Etc/UTC)

• Branch creation
  • Between 12:00 AM and 06:59 AM, only on Sunday (* 0-6 * * 0)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

Dependency Review

The following issues were found:

• ✅ 0 vulnerable package(s)
• ✅ 0 package(s) with incompatible licenses
• ✅ 0 package(s) with invalid SPDX license definitions
• ⚠️ 40 package(s) with unknown licenses.

View full job summary

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	npm/​@​types/​grecaptcha@​3.0.9
	npm/​vitest@​4.1.5
	npm/​@​astrojs/​sitemap@​3.7.2
	npm/​@​astrojs/​react@​5.0.4
	npm/​astro@​6.3.1
	npm/​wrangler@​4.90.0

View full report

[codspeed-hq]

Merging this PR will not alter performance

✅ 54 untouched benchmarks

---

_{Comparing renovate/lock-file-maintenance-lock-files (bccdcff) with main (0265ef5)}

[Aureliolo]

Decision: Lockfile-only refresh (Renovate lockFileMaintenance); no package.json / pyproject.toml constraints changed; every refreshed entry is a transitive within an existing pin range. Merging on user override while substantive CI checks (Test Python 3.14, Type Check, Dashboard Test/Build/Lint, CodSpeed, Lighthouse, CodeQL Python/Go/JS, Build Backend Base apko) were still IN_PROGRESS; all checks that had completed at merge time were SUCCESS / SKIPPED / NEUTRAL (Lint, Schema Validation, Doc Drift Gate, Dashboard Lint, Dashboard Storybook Build, Dashboard Security Audit, Python Security Audit, OpenAPI Liveness, Dependency Review, Gitleaks, Socket Security, CodeQL actions).

Changelog digest:

• Covered three lockfiles: uv.lock (15 transitive bumps), web/package-lock.json (~17 transitive bumps incl. resolver restructuring around the pinned typescript-eslint@8.59.2 meta), site/package-lock.json (~14 transitive bumps incl. rolldown / @rolldown/* RC→1.0.1 GA).
• Reviewed but not relevant: every bumped package is transitive in this repo (no direct dependency in pyproject.toml [project].dependencies or in web/package.json / site/package.json direct deps); the single direct-dep adjacency is typescript-eslint (pinned 8.59.2) which the resolver keeps at 8.59.2 by creating nested copies under typescript-eslint/node_modules/, @typescript-eslint/parser/node_modules/, and @typescript-eslint/eslint-plugin/node_modules/ while floating unpinned top-level @typescript-eslint/* peers to 8.59.3 for other consumers; Dashboard Lint already returned SUCCESS on this head so the lint chain still resolves consistently.
• Relevant for downstream awareness only: qs 6.14.2 → 6.15.1 (top-level subsumes the previously-nested body-parser/node_modules/qs copy); rolldown rc.18 → 1.0.1 (first GA on the site bundler, used at build time only); devalue 5.8.1 will also satisfy the open Dependabot site/devalue-5.8.1 sibling PR, which Renovate/Dependabot will rebase or close on its next cycle.

Follow-ups: none.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 85.06%. Comparing base (0265ef5) to head (bccdcff).
⚠️ Report is 1 commits behind head on main.
✅ All tests successful. No failed tests found.

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #1913      +/-   ##
==========================================
- Coverage   85.06%   85.06%   -0.01%     
==========================================
  Files        1834     1834              
  Lines      107149   107149              
  Branches     9241     9241              
==========================================
- Hits        91146    91145       -1     
  Misses      13772    13772              
- Partials     2231     2232       +1     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.