dependencies updates

[HardMax71]

Summary by CodeRabbit

• Chores
  • Updated numerous backend and frontend dependencies and build tooling to newer versions (including core Python packages, plotting and HTTP libraries, Rollup tooling, and Tailwind/PostCSS integrations).
  • No changes to public APIs, exported entities, or application behavior.

_{✏️ Tip: You can customize this high-level summary in your review settings.}

[coderabbitai]

Walkthrough

Dependency version updates for both backend and frontend projects. Backend updates multiple Python package versions in backend/pyproject.toml. Frontend upgrades Rollup build tooling, Rollup plugins, a serve plugin, and related frontend tooling in frontend/package.json.

Changes

Cohort / File(s)	Summary
Backend dependencies backend/pyproject.toml	Bumps multiple Python dependency versions (examples: asgiref 3.9.1→3.11.0, urllib3 1.26.20→2.6.2, Werkzeug 3.0.4→3.1.4, matplotlib 3.9.2→3.10.8, markdown-it-py 3.0.0→4.0.0, etc.). No changes to public API declarations.
Frontend tooling upgrades frontend/package.json	Upgrades Rollup and related tooling (rollup ^3.15.0→^4.54.0, @rollup/plugin-commonjs ^24.0.0→^29.0.0, @rollup/plugin-node-resolve ^15.0.0→^16.0.3, rollup-plugin-serve ^1.1.1→^3.0.0), plus @hey-api/openapi-ts and @tailwindcss/postcss version bumps. No functional code changes.

Estimated code review effort

🎯 3 (Moderate) | ⏱️ ~20 minutes

Pre-merge checks and finishing touches

❌ Failed checks (1 inconclusive)

Check name	Status	Explanation	Resolution
Title check	❓ Inconclusive	The title 'dependencies updates' is vague and generic, using non-descriptive language that fails to convey meaningful information about which dependencies were updated or why.	Consider a more specific title such as 'Update Python and Node.js dependencies' or 'Bump backend and frontend dependency versions' to better communicate the scope of changes.

✅ Passed checks (2 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

✨ Finishing touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Post copyable unit tests in a comment
• Commit unit tests in branch dependencies-bump

---

📜 Recent review details

Configuration used: defaults

Review profile: CHILL

Plan: Pro

📥 Commits

Reviewing files that changed from the base of the PR and between 6c1cc77 and 9f11a06.

⛔ Files ignored due to path filters (1)

• backend/uv.lock is excluded by !**/*.lock

📒 Files selected for processing (1)

• backend/pyproject.toml

🚧 Files skipped from review as they are similar to previous changes (1)

• backend/pyproject.toml

⏰ Context from checks skipped due to timeout of 90000ms. You can increase the timeout in your CodeRabbit configuration to a maximum of 15 minutes (900000ms). (3)

• GitHub Check: Scan Backend
• GitHub Check: E2E Tests
• GitHub Check: Integration Tests

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[coderabbitai]

Actionable comments posted: 1

📜 Review details

Configuration used: defaults

Review profile: CHILL

Plan: Pro

📥 Commits

Reviewing files that changed from the base of the PR and between c505216 and 6c1cc77.

⛔ Files ignored due to path filters (2)

• backend/uv.lock is excluded by !**/*.lock
• frontend/package-lock.json is excluded by !**/package-lock.json

📒 Files selected for processing (2)

• backend/pyproject.toml
• frontend/package.json

⏰ Context from checks skipped due to timeout of 90000ms. You can increase the timeout in your CodeRabbit configuration to a maximum of 15 minutes (900000ms). (3)

• GitHub Check: Scan Backend
• GitHub Check: Build Frontend
• GitHub Check: E2E Tests

🔇 Additional comments (5)

frontend/package.json (3)

53-53: Minor version updates look reasonable.

The updates to @hey-api/openapi-ts (patch bump) and @tailwindcss/postcss (patch bump) appear to be minor updates that should be backwards compatible.

Also applies to: 58-58

---

66-66: Remove unused rollup-plugin-serve dependency.

The rollup-plugin-serve package is listed in package.json but is not used in the rollup configuration. The dev server is implemented via a custom HTTPS server in startServer(). Remove this unused dependency.

Likely an incorrect or invalid review comment.

---

27-27: The plugin versions are already compatible with Rollup 4.54.0. Both @rollup/plugin-commonjs 29.0.0 and @rollup/plugin-node-resolve 16.0.3 support Rollup 4.x and exceed the documented minimum version requirements. No verification action needed.

backend/pyproject.toml (2)

140-140: Both versions are available on PyPI and compatible with Python 3.12.

matplotlib 3.10.8 is available on PyPI with CPython 3.12 wheels, and ruff 0.14.10 is available on PyPI with Python 3 wheels.

---

14-14: Dependency versions verified as secure.

asgiref 3.11.0 has no known security vulnerabilities and is safe to use. markdown-it-py had denial of service vulnerabilities before v2.2.0, but version 4.0.0 includes the fix. pyasn1-modules 0.4.2 has no known security issues.

[codecov-commenter]

⚠️ Please install the to ensure uploads and comments are reliably processed by Codecov.

Codecov Report

✅ All modified and coverable lines are covered by tests.
❗ Your organization needs to install the Codecov GitHub app to enable full functionality.

Flag	Coverage Δ
backend	66.80% <ø> (?)
frontend	21.52% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.
see 225 files with indirect coverage changes

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud