Skip to content

Sync/main into develop - #835

Merged
Teasel-Ian merged 67 commits into
mainfrom
sync/main-into-develop
Aug 11, 2026
Merged

Sync/main into develop#835
Teasel-Ian merged 67 commits into
mainfrom
sync/main-into-develop

Conversation

@Teasel-Ian

@Teasel-Ian Teasel-Ian commented Aug 11, 2026

Copy link
Copy Markdown
Member

No description provided.

dependabot Bot and others added 30 commits July 24, 2026 12:35
@dependabot
build(deps): update openai requirement from >=2.44.0 to >=2.48.0
5c1c841 
Updates the requirements on [openai](https://github.com/openai/openai-python) to permit the latest version.
- [Release notes](https://github.com/openai/openai-python/releases)
- [Changelog](https://github.com/openai/openai-python/blob/main/CHANGELOG.md)
- [Commits](openai/openai-python@v2.44.0...v2.48.0)

---
updated-dependencies:
- dependency-name: openai
  dependency-version: 2.48.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
build(deps): update anthropic requirement from >=0.112.0 to >=0.119.0
ac77afa 
Updates the requirements on [anthropic](https://github.com/anthropics/anthropic-sdk-python) to permit the latest version.
- [Release notes](https://github.com/anthropics/anthropic-sdk-python/releases)
- [Changelog](https://github.com/anthropics/anthropic-sdk-python/blob/main/CHANGELOG.md)
- [Commits](anthropics/anthropic-sdk-python@v0.112.0...v0.119.0)

---
updated-dependencies:
- dependency-name: anthropic
  dependency-version: 0.119.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
build(deps-dev): bump @testing-library/jest-dom in /web
97e9410 
Bumps [@testing-library/jest-dom](https://github.com/testing-library/jest-dom) from 6.9.1 to 7.0.0.
- [Release notes](https://github.com/testing-library/jest-dom/releases)
- [Changelog](https://github.com/testing-library/jest-dom/blob/main/CHANGELOG.md)
- [Commits](testing-library/jest-dom@v6.9.1...v7.0.0)

---
updated-dependencies:
- dependency-name: "@testing-library/jest-dom"
  dependency-version: 7.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
build(deps): update pandas requirement
7477b41 
Updates the requirements on [pandas](https://github.com/pandas-dev/pandas) to permit the latest version.
- [Release notes](https://github.com/pandas-dev/pandas/releases)
- [Commits](pandas-dev/pandas@v3.0.3...v3.0.5)

---
updated-dependencies:
- dependency-name: pandas
  dependency-version: 3.0.5
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
build(deps-dev): bump @vitejs/plugin-react
d3bf098 
Bumps the vite group with 1 update in the /web directory: [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react).


Updates `@vitejs/plugin-react` from 6.0.3 to 6.0.4
- [Release notes](https://github.com/vitejs/vite-plugin-react/releases)
- [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite-plugin-react/commits/plugin-react@6.0.4/packages/plugin-react)

---
updated-dependencies:
- dependency-name: "@vitejs/plugin-react"
  dependency-version: 6.0.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: vite
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
build(deps): bump the react group across 1 directory with 2 updates
a69b53c 
Bumps the react group with 2 updates in the /web directory: [react](https://github.com/react/react/tree/HEAD/packages/react) and [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom).


Updates `react` from 19.2.7 to 19.2.8
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.2.8/packages/react)

Updates `react-dom` from 19.2.7 to 19.2.8
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.2.8/packages/react-dom)

---
updated-dependencies:
- dependency-name: react
  dependency-version: 19.2.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: react
- dependency-name: react-dom
  dependency-version: 19.2.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: react
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
build(deps): bump the patch-updates group across 1 directory with 2 u…
0e4f9a2 
…pdates

Bumps the patch-updates group with 2 updates in the / directory: [boto3](https://github.com/boto/boto3) and [pre-commit](https://github.com/pre-commit/pre-commit).


Updates `boto3` from 1.43.51 to 1.43.57
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](boto/boto3@1.43.51...1.43.57)

Updates `pre-commit` from 4.6.0 to 4.6.1
- [Release notes](https://github.com/pre-commit/pre-commit/releases)
- [Changelog](https://github.com/pre-commit/pre-commit/blob/main/CHANGELOG.md)
- [Commits](pre-commit/pre-commit@v4.6.0...v4.6.1)

---
updated-dependencies:
- dependency-name: boto3
  dependency-version: 1.43.55
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-updates
- dependency-name: pre-commit
  dependency-version: 4.6.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: patch-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
build(deps): bump the minor-updates group across 1 directory with 8 u…
4061743 
…pdates

Bumps the minor-updates group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [fastapi](https://github.com/fastapi/fastapi) | `0.138.0` | `0.140.8` |
| [uvicorn](https://github.com/Kludex/uvicorn) | `0.49.0` | `0.51.0` |
| [onnxruntime](https://github.com/microsoft/onnxruntime) | `1.27.0` | `1.28.0` |
| pyroscope-io | `1.0.12` | `1.2.1` |
| [mypy](https://github.com/python/mypy) | `2.1.0` | `2.3.0` |
| [diff-cover](https://github.com/Bachmann1234/diff-cover) | `10.3.0` | `10.4.1` |
| [torch](https://github.com/pytorch/pytorch) | `2.12.1` | `2.13.0` |
| [torchvision](https://github.com/pytorch/vision) | `0.27.1` | `0.28.0` |



Updates `fastapi` from 0.138.0 to 0.140.8
- [Release notes](https://github.com/fastapi/fastapi/releases)
- [Commits](fastapi/fastapi@0.138.0...0.140.8)

Updates `uvicorn` from 0.49.0 to 0.51.0
- [Release notes](https://github.com/Kludex/uvicorn/releases)
- [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md)
- [Commits](Kludex/uvicorn@0.49.0...0.51.0)

Updates `onnxruntime` from 1.27.0 to 1.28.0
- [Release notes](https://github.com/microsoft/onnxruntime/releases)
- [Changelog](https://github.com/microsoft/onnxruntime/blob/main/docs/ReleaseManagement.md)
- [Commits](microsoft/onnxruntime@v1.27.0...v1.28.0)

Updates `pyroscope-io` from 1.0.12 to 1.2.1

Updates `mypy` from 2.1.0 to 2.3.0
- [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md)
- [Commits](python/mypy@v2.1.0...v2.3.0)

Updates `diff-cover` from 10.3.0 to 10.4.1
- [Release notes](https://github.com/Bachmann1234/diff-cover/releases)
- [Changelog](https://github.com/Bachmann1234/diff_cover/blob/main/CHANGELOG)
- [Commits](Bachmann1234/diff_cover@v10.3.0...v10.4.1)

Updates `torch` from 2.12.1 to 2.13.0
- [Release notes](https://github.com/pytorch/pytorch/releases)
- [Changelog](https://github.com/pytorch/pytorch/blob/main/RELEASE.md)
- [Commits](pytorch/pytorch@v2.12.1...v2.13.0)

Updates `torchvision` from 0.27.1 to 0.28.0
- [Release notes](https://github.com/pytorch/vision/releases)
- [Commits](pytorch/vision@v0.27.1...v0.28.0)

---
updated-dependencies:
- dependency-name: fastapi
  dependency-version: 0.140.8
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-updates
- dependency-name: uvicorn
  dependency-version: 0.51.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-updates
- dependency-name: onnxruntime
  dependency-version: 1.28.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-updates
- dependency-name: pyroscope-io
  dependency-version: 1.2.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-updates
- dependency-name: mypy
  dependency-version: 2.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-updates
- dependency-name: diff-cover
  dependency-version: 10.4.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-updates
- dependency-name: torch
  dependency-version: 2.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-updates
- dependency-name: torchvision
  dependency-version: 0.28.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
build(deps): bump the minor-updates group across 1 directory with 8 u…
c37fd90 
…pdates

Bumps the minor-updates group with 7 updates in the /web directory:

| Package | From | To |
| --- | --- | --- |
| [@tiptap/extension-color](https://github.com/ueberdosis/tiptap/tree/HEAD/packages/extension-color) | `3.28.0` | `3.29.2` |
| [@tiptap/extension-link](https://github.com/ueberdosis/tiptap/tree/HEAD/packages/extension-link) | `3.28.0` | `3.29.2` |
| [@tiptap/react](https://github.com/ueberdosis/tiptap/tree/HEAD/packages/react) | `3.28.0` | `3.29.2` |
| [@tiptap/starter-kit](https://github.com/ueberdosis/tiptap/tree/HEAD/packages/starter-kit) | `3.28.0` | `3.29.2` |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.25.0` | `1.27.0` |
| [proj4](https://github.com/proj4js/proj4js) | `2.20.9` | `2.21.0` |
| [globals](https://github.com/sindresorhus/globals) | `17.7.0` | `17.8.0` |



Updates `@tiptap/extension-color` from 3.28.0 to 3.29.2
- [Release notes](https://github.com/ueberdosis/tiptap/releases)
- [Changelog](https://github.com/ueberdosis/tiptap/blob/main/packages/extension-color/CHANGELOG.md)
- [Commits](https://github.com/ueberdosis/tiptap/commits/v3.29.2/packages/extension-color)

Updates `@tiptap/extension-link` from 3.28.0 to 3.29.2
- [Release notes](https://github.com/ueberdosis/tiptap/releases)
- [Changelog](https://github.com/ueberdosis/tiptap/blob/main/packages/extension-link/CHANGELOG.md)
- [Commits](https://github.com/ueberdosis/tiptap/commits/v3.29.2/packages/extension-link)

Updates `@tiptap/extension-text-style` from 3.28.0 to 3.29.2
- [Release notes](https://github.com/ueberdosis/tiptap/releases)
- [Changelog](https://github.com/ueberdosis/tiptap/blob/main/packages/extension-text-style/CHANGELOG.md)
- [Commits](https://github.com/ueberdosis/tiptap/commits/v3.29.2/packages/extension-text-style)

Updates `@tiptap/react` from 3.28.0 to 3.29.2
- [Release notes](https://github.com/ueberdosis/tiptap/releases)
- [Changelog](https://github.com/ueberdosis/tiptap/blob/main/packages/react/CHANGELOG.md)
- [Commits](https://github.com/ueberdosis/tiptap/commits/v3.29.2/packages/react)

Updates `@tiptap/starter-kit` from 3.28.0 to 3.29.2
- [Release notes](https://github.com/ueberdosis/tiptap/releases)
- [Changelog](https://github.com/ueberdosis/tiptap/blob/main/packages/starter-kit/CHANGELOG.md)
- [Commits](https://github.com/ueberdosis/tiptap/commits/v3.29.2/packages/starter-kit)

Updates `lucide-react` from 1.25.0 to 1.27.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.27.0/packages/lucide-react)

Updates `proj4` from 2.20.9 to 2.21.0
- [Release notes](https://github.com/proj4js/proj4js/releases)
- [Changelog](https://github.com/proj4js/proj4js/blob/main/changelog.md)
- [Commits](proj4js/proj4js@v2.20.9...v2.21.0)

Updates `globals` from 17.7.0 to 17.8.0
- [Release notes](https://github.com/sindresorhus/globals/releases)
- [Commits](sindresorhus/globals@v17.7.0...v17.8.0)

---
updated-dependencies:
- dependency-name: "@tiptap/extension-color"
  dependency-version: 3.29.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-updates
- dependency-name: "@tiptap/extension-link"
  dependency-version: 3.29.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-updates
- dependency-name: "@tiptap/extension-text-style"
  dependency-version: 3.29.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-updates
- dependency-name: "@tiptap/react"
  dependency-version: 3.29.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-updates
- dependency-name: "@tiptap/starter-kit"
  dependency-version: 3.29.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-updates
- dependency-name: lucide-react
  dependency-version: 1.27.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-updates
- dependency-name: proj4
  dependency-version: 2.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-updates
- dependency-name: globals
  dependency-version: 17.8.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@Teasel-Ian
Merge pull request #811 from TrigpointingUK/dependabot/npm_and_yarn/w…
ab22d31 
…eb/develop/minor-updates-4e24833536

build(deps): bump the minor-updates group across 1 directory with 8 updates
@Teasel-Ian
Merge pull request #810 from TrigpointingUK/dependabot/pip/develop/mi…
6bd61c4 
…nor-updates-445a7c4a05

build(deps): bump the minor-updates group across 1 directory with 8 updates
@Teasel-Ian
Merge pull request #802 from TrigpointingUK/dependabot/pip/develop/op…
9db532a 
…enai-gte-2.48.0

build(deps): update openai requirement from >=2.44.0 to >=2.48.0
@Teasel-Ian
Merge pull request #796 from TrigpointingUK/dependabot/npm_and_yarn/w…
562e638 
…eb/develop/vite-676b9cd31e

build(deps-dev): bump @vitejs/plugin-react from 6.0.3 to 6.0.4 in /web in the vite group across 1 directory
@Teasel-Ian
Merge pull request #794 from TrigpointingUK/dependabot/npm_and_yarn/w…
aa6ec96 
…eb/develop/react-479fbeca4e

build(deps): bump the react group across 1 directory with 2 updates
@Teasel-Ian
Merge pull request #797 from TrigpointingUK/dependabot/pip/develop/pa…
204afea 
…tch-updates-82af011d7b

build(deps): bump the patch-updates group across 1 directory with 2 updates
@Teasel-Ian
Merge pull request #803 from TrigpointingUK/dependabot/pip/develop/an…
73a3e6b 
…thropic-gte-0.119.0

build(deps): update anthropic requirement from >=0.112.0 to >=0.119.0
@Teasel-Ian
Merge pull request #806 from TrigpointingUK/dependabot/pip/develop/pa…
90f78bd 
…ndas-gte-3.0.5-and-lt-4.0.0

build(deps): update pandas requirement from <4.0.0,>=3.0.3 to >=3.0.5,<4.0.0
@Teasel-Ian
Merge pull request #804 from TrigpointingUK/dependabot/npm_and_yarn/w…
ce96a45 
…eb/develop/testing-library/jest-dom-7.0.0

build(deps-dev): bump @testing-library/jest-dom from 6.9.1 to 7.0.0 in /web
@dependabot
build(deps): bump the patch-updates group across 1 directory with 8 u…
bc22a83 
…pdates

Bumps the patch-updates group with 8 updates in the /web directory:

| Package | From | To |
| --- | --- | --- |
| [@auth0/auth0-react](https://github.com/auth0/auth0-react) | `2.22.0` | `2.22.1` |
| [@tanstack/react-query](https://github.com/TanStack/query/tree/HEAD/packages/react-query) | `5.101.2` | `5.101.4` |
| [@types/leaflet](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/leaflet) | `1.9.21` | `1.9.22` |
| [js-yaml](https://github.com/nodeca/js-yaml) | `5.2.1` | `5.2.3` |
| [react-easy-crop](https://github.com/ValentinH/react-easy-crop) | `6.2.2` | `6.2.3` |
| [react-router-dom](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dom) | `7.18.1` | `7.18.2` |
| [@types/three](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/three) | `0.185.1` | `0.185.3` |
| [postcss](https://github.com/postcss/postcss) | `8.5.20` | `8.5.25` |



Updates `@auth0/auth0-react` from 2.22.0 to 2.22.1
- [Release notes](https://github.com/auth0/auth0-react/releases)
- [Changelog](https://github.com/auth0/auth0-react/blob/main/CHANGELOG.md)
- [Commits](auth0/auth0-react@v2.22.0...v2.22.1)

Updates `@tanstack/react-query` from 5.101.2 to 5.101.4
- [Release notes](https://github.com/TanStack/query/releases)
- [Changelog](https://github.com/TanStack/query/blob/main/packages/react-query/CHANGELOG.md)
- [Commits](https://github.com/TanStack/query/commits/@tanstack/react-query@5.101.4/packages/react-query)

Updates `@types/leaflet` from 1.9.21 to 1.9.22
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/leaflet)

Updates `js-yaml` from 5.2.1 to 5.2.3
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](nodeca/js-yaml@5.2.1...5.2.3)

Updates `react-easy-crop` from 6.2.2 to 6.2.3
- [Release notes](https://github.com/ValentinH/react-easy-crop/releases)
- [Commits](ValentinH/react-easy-crop@v6.2.2...v6.2.3)

Updates `react-router-dom` from 7.18.1 to 7.18.2
- [Release notes](https://github.com/remix-run/react-router/releases)
- [Changelog](https://github.com/remix-run/react-router/blob/react-router-dom@7.18.2/packages/react-router-dom/CHANGELOG.md)
- [Commits](https://github.com/remix-run/react-router/commits/react-router-dom@7.18.2/packages/react-router-dom)

Updates `@types/three` from 0.185.1 to 0.185.3
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/three)

Updates `postcss` from 8.5.20 to 8.5.25
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.5.20...8.5.25)

---
updated-dependencies:
- dependency-name: "@auth0/auth0-react"
  dependency-version: 2.22.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-updates
- dependency-name: "@tanstack/react-query"
  dependency-version: 5.101.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-updates
- dependency-name: "@types/leaflet"
  dependency-version: 1.9.22
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-updates
- dependency-name: js-yaml
  dependency-version: 5.2.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-updates
- dependency-name: react-easy-crop
  dependency-version: 6.2.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-updates
- dependency-name: react-router-dom
  dependency-version: 7.18.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-updates
- dependency-name: "@types/three"
  dependency-version: 0.185.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: patch-updates
- dependency-name: postcss
  dependency-version: 8.5.25
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: patch-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
build(deps): bump the patch-updates group across 1 directory with 2 u…
547a519 
…pdates

Bumps the patch-updates group with 2 updates in the / directory: [boto3](https://github.com/boto/boto3) and [pyinstrument](https://github.com/joerick/pyinstrument).


Updates `boto3` from 1.43.57 to 1.43.62
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](boto/boto3@1.43.57...1.43.62)

Updates `pyinstrument` from 5.1.2 to 5.1.3
- [Release notes](https://github.com/joerick/pyinstrument/releases)
- [Commits](joerick/pyinstrument@v5.1.2...v5.1.3)

---
updated-dependencies:
- dependency-name: boto3
  dependency-version: 1.43.62
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-updates
- dependency-name: pyinstrument
  dependency-version: 5.1.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@Teasel-Ian
Merge pull request #817 from TrigpointingUK/dependabot/npm_and_yarn/w…
bbc9fb1 
…eb/develop/patch-updates-02c2679907

build(deps): bump the patch-updates group across 1 directory with 8 updates
@Teasel-Ian
Merge pull request #818 from TrigpointingUK/dependabot/pip/develop/pa…
4de6540 
…tch-updates-395ede3938

build(deps): bump the patch-updates group across 1 directory with 2 updates
@dependabot
build(deps): bump types-requests from 2.33.0.20260518 to 2.33.0.20260712
c6c6494 
Bumps [types-requests](https://github.com/python/typeshed) from 2.33.0.20260518 to 2.33.0.20260712.
- [Commits](https://github.com/python/typeshed/commits)

---
updated-dependencies:
- dependency-name: types-requests
  dependency-version: 2.33.0.20260712
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
build(deps-dev): bump the typescript-eslint group across 1 directory …
216fd46 
…with 3 updates

Bumps the typescript-eslint group with 3 updates in the /web directory: [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin), [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) and [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint).


Updates `@typescript-eslint/eslint-plugin` from 8.64.0 to 8.65.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.65.0/packages/eslint-plugin)

Updates `@typescript-eslint/parser` from 8.64.0 to 8.65.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.65.0/packages/parser)

Updates `typescript-eslint` from 8.64.0 to 8.65.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.65.0/packages/typescript-eslint)

---
updated-dependencies:
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-version: 8.65.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: typescript-eslint
- dependency-name: "@typescript-eslint/parser"
  dependency-version: 8.65.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: typescript-eslint
- dependency-name: typescript-eslint
  dependency-version: 8.65.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: typescript-eslint
...

Signed-off-by: dependabot[bot] <support@github.com>
@Teasel-Ian
Merge pull request #805 from TrigpointingUK/dependabot/pip/develop/ty…
b1df299 
…pes-requests-2.33.0.20260712

build(deps): bump types-requests from 2.33.0.20260518 to 2.33.0.20260712
@Teasel-Ian
Merge pull request #795 from TrigpointingUK/dependabot/npm_and_yarn/w…
e5a2b54 
…eb/develop/typescript-eslint-235afdbc6b

build(deps-dev): bump the typescript-eslint group across 1 directory with 3 updates
@dependabot
build(deps-dev): bump the react group in /web with 2 updates
c0e581b 
Bumps the react group in /web with 2 updates: [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) and [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom).


Updates `@types/react` from 19.2.17 to 19.2.18
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `@types/react-dom` from 19.2.3 to 19.2.4
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom)

---
updated-dependencies:
- dependency-name: "@types/react"
  dependency-version: 19.2.18
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: react
- dependency-name: "@types/react-dom"
  dependency-version: 19.2.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: react
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
build(deps-dev): bump the vite group in /web with 2 updates
cc1d68d 
Bumps the vite group in /web with 2 updates: [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react) and [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite).


Updates `@vitejs/plugin-react` from 6.0.4 to 6.0.5
- [Release notes](https://github.com/vitejs/vite-plugin-react/releases)
- [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite-plugin-react/commits/plugin-react@6.0.5/packages/plugin-react)

Updates `vite` from 8.1.5 to 8.2.0
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/create-vite@8.2.0/packages/vite)

---
updated-dependencies:
- dependency-name: "@vitejs/plugin-react"
  dependency-version: 6.0.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: vite
- dependency-name: vite
  dependency-version: 8.2.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: vite
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
build(deps): bump the minor-updates group in /web with 2 updates
eafd0eb 
Bumps the minor-updates group in /web with 2 updates: [@react-three/fiber](https://github.com/pmndrs/react-three-fiber) and [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react).


Updates `@react-three/fiber` from 9.6.1 to 9.7.0
- [Release notes](https://github.com/pmndrs/react-three-fiber/releases)
- [Commits](pmndrs/react-three-fiber@v9.6.1...v9.7.0)

Updates `lucide-react` from 1.27.0 to 1.28.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.28.0/packages/lucide-react)

---
updated-dependencies:
- dependency-name: "@react-three/fiber"
  dependency-version: 9.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-updates
- dependency-name: lucide-react
  dependency-version: 1.28.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
build(deps-dev): bump jsdom from 29.1.1 to 30.0.1 in /web
357c3cd 
Bumps [jsdom](https://github.com/jsdom/jsdom) from 29.1.1 to 30.0.1.
- [Release notes](https://github.com/jsdom/jsdom/releases)
- [Commits](jsdom/jsdom@v29.1.1...v30.0.1)

---
updated-dependencies:
- dependency-name: jsdom
  dependency-version: 30.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Teasel-Ian and others added 28 commits August 5, 2026 17:58
@Teasel-Ian
Merge pull request #820 from TrigpointingUK/dependabot/npm_and_yarn/w…
45d4988 
…eb/develop/vite-95f09eec25

build(deps-dev): bump the vite group in /web with 2 updates
@Teasel-Ian
Merge pull request #819 from TrigpointingUK/dependabot/npm_and_yarn/w…
35f5d07 
…eb/develop/react-7c5a0793cf

build(deps-dev): bump the react group in /web with 2 updates
@Teasel-Ian
Merge pull request #822 from TrigpointingUK/dependabot/npm_and_yarn/w…
22e20e8 
…eb/develop/jsdom-30.0.1

build(deps-dev): bump jsdom from 29.1.1 to 30.0.1 in /web
@Teasel-Ian
Merge pull request #825 from TrigpointingUK/dependabot/pip/develop/op…
06daedf 
…enai-gte-2.52.0

build(deps): update openai requirement from >=2.48.0 to >=2.52.0
@Teasel-Ian
Merge pull request #823 from TrigpointingUK/dependabot/npm_and_yarn/w…
dd533fc 
…eb/develop/react-intersection-observer-11.0.0

build(deps): bump react-intersection-observer from 10.1.0 to 11.0.0 in /web
@dependabot
build(deps-dev): bump the typescript-eslint group in /web with 3 updates
075585f 
Bumps the typescript-eslint group in /web with 3 updates: [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin), [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) and [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint).


Updates `@typescript-eslint/eslint-plugin` from 8.65.0 to 8.66.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.66.0/packages/eslint-plugin)

Updates `@typescript-eslint/parser` from 8.65.0 to 8.66.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.66.0/packages/parser)

Updates `typescript-eslint` from 8.65.0 to 8.66.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.66.0/packages/typescript-eslint)

---
updated-dependencies:
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-version: 8.66.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: typescript-eslint
- dependency-name: "@typescript-eslint/parser"
  dependency-version: 8.66.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: typescript-eslint
- dependency-name: typescript-eslint
  dependency-version: 8.66.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: typescript-eslint
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
build(deps-dev): bump @testing-library/user-event
a2ebf95 
Bumps the patch-updates group in /web with 1 update: [@testing-library/user-event](https://github.com/testing-library/user-event).


Updates `@testing-library/user-event` from 14.6.1 to 14.6.3
- [Release notes](https://github.com/testing-library/user-event/releases)
- [Changelog](https://github.com/testing-library/user-event/blob/main/CHANGELOG.md)
- [Commits](testing-library/user-event@v14.6.1...v14.6.3)

---
updated-dependencies:
- dependency-name: "@testing-library/user-event"
  dependency-version: 14.6.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: patch-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
build(deps): bump the patch-updates group with 2 updates
9d0a511 
Bumps the patch-updates group with 2 updates: [uvicorn](https://github.com/Kludex/uvicorn) and [boto3](https://github.com/boto/boto3).


Updates `uvicorn` from 0.52.0 to 0.52.1
- [Release notes](https://github.com/Kludex/uvicorn/releases)
- [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md)
- [Commits](Kludex/uvicorn@0.52.0...0.52.1)

Updates `boto3` from 1.43.62 to 1.43.63
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](boto/boto3@1.43.62...1.43.63)

---
updated-dependencies:
- dependency-name: uvicorn
  dependency-version: 0.52.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-updates
- dependency-name: boto3
  dependency-version: 1.43.63
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
build(deps-dev): bump globals in /web in the minor-updates group
28746bb 
Bumps the minor-updates group in /web with 1 update: [globals](https://github.com/sindresorhus/globals).


Updates `globals` from 17.8.0 to 17.9.0
- [Release notes](https://github.com/sindresorhus/globals/releases)
- [Commits](sindresorhus/globals@v17.8.0...v17.9.0)

---
updated-dependencies:
- dependency-name: globals
  dependency-version: 17.9.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
build(deps): update openai requirement from >=2.52.0 to >=2.53.0
16d69b5 
Updates the requirements on [openai](https://github.com/openai/openai-python) to permit the latest version.
- [Release notes](https://github.com/openai/openai-python/releases)
- [Changelog](https://github.com/openai/openai-python/blob/main/CHANGELOG.md)
- [Commits](openai/openai-python@v2.52.0...v2.53.0)

---
updated-dependencies:
- dependency-name: openai
  dependency-version: 2.53.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Ian @claude
feat(cad): keydriver smooth bend between long bore and short slot
7a243b7 
Carve a quarter-torus fillet tangent to the long-arm bore and the
short-arm slot so the key's rounded bend no longer fouls the sharp inside
corner. Bore + slot + fillet are fused into one void and subtracted once.

The fillet tube is kept 0.05 mm inside the bore (bend_tube_gap): an exact
equal-radius tangency is a valid solid but OCCT can't tessellate it
(~80 open edges / STL leak); the sub-bore tube dodges that with no proud
lip, so the arms keep their visible diameter.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Ian @claude
feat(cad): keydriver rounded bell-mouth funnel + inside-corner bend f…
cb1f5c9 
…illet

Two key-channel refinements:
- Replace the conical mouth chamfer with a revolved concave bell-mouth
  lead-in (funnel_r), tangent to the bore, fused into the channel, to
  guide the key into the entry.
- Replace the swept-torus bend with an inside-corner fillet: a quarter
  circle of radius bend_radius tangent to the long-bore lower wall and
  the short-slot inner wall (centre bend_radius from each), matching the
  key's own inner bend. Renamed the leftover bend_tube_gap -> funnel_gap.

Known limitation (next): the fillet is a flat prism extruded through the
slot height, so where it meets the round bore off the key plane it leaves
two small burrs. To be replaced with a true 3D fillet.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Ian @claude
feat(cad): keydriver swept-tube bend to remove corner burrs
5dc4a77 
Replace the flat prismatic corner fillet with a round tube swept along the
bend arc (Torus). A round cross-section matches the round bore, so the two
meet cleanly with no leftover slivers -- the earlier prism, extruded flat
through the slot height, left burrs where it met the round bore off the key
plane. The short arm's bend now has a rounded surface, matching what the key
would actually cut. bend_radius is now the tube's inner-wall radius; renamed
funnel_gap -> mesh_gap since the bend tube and funnel both use it.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Ian @claude
feat(cad): keydriver flared bore mouth (replaces bell funnel)
1761e2b 
Remove the bell-mouth funnel and replace it with a simple conical flare of
the long bore: over the final flare_len (5 mm) at the -X mouth the bore
widens from bore_dia to flare_dia (7 mm). Like the funnel it is reamed in
from outside (the flare-diameter shaft extends past the rim into air), so
there is no flat mouth face gouging the knurl -- it truncates the crests
cleanly. Much simpler shape, and it behaves on the receding knurled tip
where the funnel did not.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Ian @claude
feat(terraform): add unproxied status.trigpointing.uk CNAME for Checkly
5e0751b 
Points the status subdomain at checkly-dashboards.com. The record must be
unproxied (grey cloud) so Checkly can validate the domain and issue its own
certificate.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Ian @claude
feat(infra): serve photos via CDN and enable S3 access logging
3312d4a 
Photos were handed out as direct S3 URLs and the buckets are anonymously
readable, so CloudFlare never saw that traffic: every image view by every
browser and bot was a billable GetObject plus egress. S3 egress grew from
65.6 GB in January 2026 to 176.7 GB in July, tracking ~300 GB in August.

The apparent fortnightly on/off pattern in Cost Explorer was not a scraper.
Cost Explorer attributes egress to the GetObject operation, and AWS gives
100 GB/month of free internet egress account-wide, resetting on the 1st.
Charges appear only once that is exhausted, which happens earlier each month
as traffic grows. Account egress crossed 100 GB on 2026-08-07, the exact day
S3 charges resumed. Request counts are flat and show no such pattern.

Photo delivery is now browser -> CloudFlare -> CloudFront -> S3. CloudFront is
in the path because S3 resolves the bucket from the Host header, and rewriting
it at the CloudFlare edge needs the Pro-plan Host Header Override; both zones
are on Free. It is also cheaper: S3 -> CloudFront transfer is free and
CloudFront's perpetual free tier is roughly 3x current photo traffic.

Migration c9d0e1f2a3b4 is the switch that actually moves traffic. It rewrites
only the hostname inside server.url, so it is agnostic to whether the stored
value has a trailing slash and its downgrade is byte-for-byte exact. Matching
on bucket hostname rather than server.id makes it correct in both databases,
which share an RDS instance and may each carry rows for either bucket.

Buckets are deliberately left publicly readable so existing direct S3 URLs in
forum posts, wiki pages and third-party sites keep working, and so rollback
needs no infrastructure change. S3 server access logging is enabled on the
five public buckets to reveal how much traffic bypasses the CDN; locking them
to CloudFront-only is a follow-up to take on that evidence.

Log storage is negligible (~1 GB/month, expiring on a configurable lifecycle
rule). The hazard is unbounded accumulation, not volume: the retriangulation
bucket has 8.9M log objects dating to 2013 because nothing ever expired them.

The CloudFlare provider is pinned to exactly 5.12.0 in terraform/common.
Version 5.23.0 cannot read the saved state of the cloudflare_list_item
redirect resources and fails every plan. Since .terraform.lock.hcl is
gitignored, a loose constraint means any fresh clone picks up the break.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Ian
keydriver
3780866
Ian
cloudwatch cost audit
09f2b4c
Ian
Upgrade ALB TLS security policy
52c683f
Ian
cloudwatch cost audit
e63aa21
Ian
gitignore
ed6f2c3
Ian
Stop tracking local Claude settings
198915a
@Teasel-Ian
Merge pull request #831 from TrigpointingUK/dependabot/pip/develop/pa…
5945203 
…tch-updates-74eee52ed7

build(deps): bump the patch-updates group with 2 updates
@Teasel-Ian
Merge pull request #829 from TrigpointingUK/dependabot/npm_and_yarn/w…
e900388 
…eb/develop/typescript-eslint-07435f1a55

build(deps-dev): bump the typescript-eslint group in /web with 3 updates
@Teasel-Ian
Merge pull request #832 from TrigpointingUK/dependabot/npm_and_yarn/w…
c2372fd 
…eb/develop/minor-updates-e972ab8ec9

build(deps-dev): bump globals from 17.8.0 to 17.9.0 in /web in the minor-updates group
@Teasel-Ian
Merge pull request #833 from TrigpointingUK/dependabot/pip/develop/op…
37c81fc 
…enai-gte-2.53.0

build(deps): update openai requirement from >=2.52.0 to >=2.53.0
@Teasel-Ian
Merge pull request #830 from TrigpointingUK/dependabot/npm_and_yarn/w…
c178d18 
…eb/develop/patch-updates-e10155f593

build(deps-dev): bump @testing-library/user-event from 14.6.1 to 14.6.3 in /web in the patch-updates group
Ian
Merge remote-tracking branch 'origin/main' into sync/main-into-develop
c94a7b9
@Teasel-Ian
Teasel-Ian merged commit ab23608 into main Aug 11, 2026
4 checks passed
@codecov

codecov Bot commented Aug 11, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 82.80%. Comparing base (dd73d23) to head (c94a7b9).
⚠️ Report is 101 commits behind head on main.

Additional details and impacted files 
@@           Coverage Diff           @@
##             main     #835   +/-   ##
=======================================
  Coverage   82.80%   82.80%           
=======================================
  Files         125      125           
  Lines       13339    13339           
=======================================
  Hits        11046    11046           
  Misses       2293     2293
Flag Coverage Δ
unittests 82.80% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@Teasel-Ian