Update dependencies (client pnpm, server Gradle, Docker/CI) and resolve Dependabot alerts

.github/workflows/e2e_tests.yml

@@ -139,7 +139,7 @@ jobs:
       - name: Set up Node.js
         uses: actions/setup-node@v6
         with:
-          node-version: '24.16.0'
+          node-version: '24.17.0'
           cache: 'pnpm'
           cache-dependency-path: client/pnpm-lock.yaml
 

.github/workflows/refresh_sbom.yml

@@ -177,7 +177,7 @@ jobs:
         if: steps.scopes.outputs.client == 'true'
         uses: actions/setup-node@v6
         with:
-          node-version: '24.16.0'
+          node-version: '24.17.0'
 
       - name: Regenerate client SBOM
         if: steps.scopes.outputs.client == 'true'

.github/workflows/run_tests.yml

@@ -57,7 +57,7 @@ jobs:
       - name: Set up Node.js
         uses: actions/setup-node@v6
         with:
-          node-version: '24.16.0'
+          node-version: '24.17.0'
           cache: 'pnpm'
           cache-dependency-path: 'client/pnpm-lock.yaml'
 

client.Dockerfile

@@ -1,4 +1,4 @@
-FROM node:24.16.0-alpine AS build
+FROM node:24.17.0-alpine AS build
 WORKDIR /app
 ENV CI=1
 ENV HUSKY=0

client/package.json

@@ -43,27 +43,27 @@
     "prepare": "cd .. && husky client/.husky"
   },
   "dependencies": {
-    "@mantine/carousel": "9.3.1",
-    "@mantine/core": "9.3.1",
-    "@mantine/dates": "9.3.1",
-    "@mantine/dropzone": "9.3.1",
-    "@mantine/form": "9.3.1",
-    "@mantine/hooks": "9.3.1",
-    "@mantine/notifications": "9.3.1",
-    "@mantine/tiptap": "9.3.1",
+    "@mantine/carousel": "9.3.2",
+    "@mantine/core": "9.3.2",
+    "@mantine/dates": "9.3.2",
+    "@mantine/dropzone": "9.3.2",
+    "@mantine/form": "9.3.2",
+    "@mantine/hooks": "9.3.2",
+    "@mantine/notifications": "9.3.2",
+    "@mantine/tiptap": "9.3.2",
     "@phosphor-icons/react": "2.1.10",
-    "@tiptap/core": "3.26.1",
-    "@tiptap/extension-highlight": "3.26.1",
-    "@tiptap/extension-link": "3.26.1",
-    "@tiptap/extension-subscript": "3.26.1",
-    "@tiptap/extension-superscript": "3.26.1",
-    "@tiptap/extension-text-align": "3.26.1",
-    "@tiptap/extension-text-style": "3.26.1",
-    "@tiptap/extension-underline": "3.26.1",
-    "@tiptap/react": "3.26.1",
-    "@tiptap/starter-kit": "3.26.1",
+    "@tiptap/core": "3.27.1",
+    "@tiptap/extension-highlight": "3.27.1",
+    "@tiptap/extension-link": "3.27.1",
+    "@tiptap/extension-subscript": "3.27.1",
+    "@tiptap/extension-superscript": "3.27.1",
+    "@tiptap/extension-text-align": "3.27.1",
+    "@tiptap/extension-text-style": "3.27.1",
+    "@tiptap/extension-underline": "3.27.1",
+    "@tiptap/react": "3.27.1",
+    "@tiptap/starter-kit": "3.27.1",
     "dayjs": "1.11.21",
-    "dompurify": "3.4.10",
+    "dompurify": "3.4.11",
     "embla-carousel": "8.6.0",
     "embla-carousel-react": "8.6.0",
     "i18n-iso-countries": "7.14.0",

client/pnpm-workspace.yaml

@@ -14,7 +14,7 @@ allowBuilds:
 overrides:
   ajv: 8.20.0
   minimatch: 10.2.5
-  serialize-javascript: 7.0.5
+  serialize-javascript: 7.0.6
   lodash: 4.18.1
   follow-redirects: 1.16.0
   flatted: 3.4.2
@@ -39,3 +39,7 @@ overrides:
   tmp@<0.2.6: 0.2.7
   # GHSA-h67p-54hq-rp68 (js-yaml quadratic-complexity DoS, via cosmiconfig)
   js-yaml@>=4.0.0 <4.2.0: 4.2.0
+  # GHSA-vmh5-mc38-953g / GHSA-hm92-r4w5-c3mj (+4) (undici Set-Cookie / cache / SOCKS5 issues, via jsdom)
+  undici@<7.28.0: 7.28.0
+  # GHSA-64mm-vxmg-q3vj (http-proxy-middleware host+path routing bypass, via webpack-dev-server)
+  http-proxy-middleware@<3.0.6: 3.0.6

client/sbom/.lock-hash

@@ -1 +1 @@
-1423741f3fa45f660fc20b7b2489d26cdafcb1b727ff3998924b4df909de033c
+b6bcaa33938c3994f41a65dc90e42e913439d136b84d7a2570c98bef670d792f