Dependabot updates for August 2024

[imnasnainaec]

This change is 

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 74.58%. Comparing base (3ccc159) to head (595ab51).
Report is 34 commits behind head on master.

Additional details and impacted files

@@            Coverage Diff             @@
##           master    #3289      +/-   ##
==========================================
- Coverage   74.63%   74.58%   -0.05%     
==========================================
  Files         279      279              
  Lines       10683    10683              
  Branches     1289     1289              
==========================================
- Hits         7973     7968       -5     
- Misses       2349     2353       +4     
- Partials      361      362       +1     

Flag	Coverage Δ
backend	83.87% <ø> (-0.11%)	⬇️
frontend	66.43% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[github-actions]

⚠️ Commit Message Format Issues ⚠️
commit bc9fffb105:
3: B1 Line exceeds max length (94>80): "Bumps codecov/codecov-action from 4.3.0 to 4.5.0."
6: B1 Line exceeds max length (146>80): "- Commits"

commit 0c9b1fe400:
3: B1 Line exceeds max length (90>80): "Bumps actions/setup-python from 5.1.0 to 5.1.1."
5: B1 Line exceeds max length (144>80): "- Commits"

commit bd926d96e1:
3: B1 Line exceeds max length (158>80): "Bumps sillsdev/FieldWorks from 53b16bd9d629a65054d424cb059e4e2ce943ba97 to 1841598026f41661ed53c3072589dbfed5c14a12."
5: B1 Line exceeds max length (143>80): "- Commits"

commit c688262bb6:
3: B1 Line exceeds max length (96>80): "Bumps actions/upload-artifact from 4.3.3 to 4.3.4."
5: B1 Line exceeds max length (147>80): "- Commits"

commit 57aae5b5d1:
3: B1 Line exceeds max length (114>80): "Bumps actions/dependency-review-action from 4.3.3 to 4.3.4."
5: B1 Line exceeds max length (156>80): "- Commits"

commit 46a7ae0436:
3: B1 Line exceeds max length (95>80): "Bumps ansible from 10.1.0 to 10.2.0."
4: B1 Line exceeds max length (104>80): "- Changelog"
5: B1 Line exceeds max length (92>80): "- Commits"

commit 63718b9737:
3: B1 Line exceeds max length (93>80): "Bumps MongoDB.Driver from 2.27.0 to 2.28.0."
5: B1 Line exceeds max length (85>80): "- Commits"

commit 337bee4385:
3: B1 Line exceeds max length (110>80): "Bumps Swashbuckle.AspNetCore from 6.6.2 to 6.7.0."
4: B1 Line exceeds max length (85>80): "- Release notes"
5: B1 Line exceeds max length (94>80): "- Commits"

commit c3604e1f1e:
3: B1 Line exceeds max length (138>80): "Bumps @typescript-eslint/parser from 7.14.1 to 7.18.0."
4: B1 Line exceeds max length (82>80): "- Release notes"
5: B1 Line exceeds max length (108>80): "- Changelog"
6: B1 Line exceeds max length (99>80): "- Commits"

commit 28e4910a4e:
3: B1 Line exceeds max length (111>80): "Bumps @testing-library/react from 14.3.1 to 16.0.0."
4: B1 Line exceeds max length (84>80): "- Release notes"
5: B1 Line exceeds max length (94>80): "- Changelog"
6: B1 Line exceeds max length (95>80): "- Commits"

commit 9d7468c08b:
3: B1 Line exceeds max length (92>80): "Bumps icu.net from 2.10.1-beta.4 to 2.10.1-beta.5."

commit 6562b3b654:
3: B1 Line exceeds max length (85>80): "Bumps certifi from 2024.6.2 to 2024.7.4."
4: B1 Line exceeds max length (86>80): "- Commits"

commit fdc260f116:
3: B1 Line exceeds max length (85>80): "Bumps certifi from 2024.6.2 to 2024.7.4."
4: B1 Line exceeds max length (86>80): "- Commits"

commit 55797fb56b:
3: B1 Line exceeds max length (85>80): "Bumps certifi from 2024.6.2 to 2024.7.4."
4: B1 Line exceeds max length (86>80): "- Commits"

[jmgrady]

Reviewed 9 of 14 files at r1, 3 of 4 files at r2, 5 of 5 files at r3, all commit messages.
Reviewable status: all files reviewed, 3 unresolved discussions (waiting on @imnasnainaec)

---

Dockerfile line 19 at r3 (raw file):

# Frontend build environment.
FROM node:22.5.1-bookworm-slim AS frontend_builder

We should stick with node 20, the latest LTS release. There may be a more recent minor rev that we should consider.

Code quote:

node:22.5.1

---

package.json line 164 at r3 (raw file):

  },
  "volta": {
    "node": "22.5.1"

This should be reverted as well.

Code quote:

22.5.1"

---

README.md line 93 at r3 (raw file):

2. [Chocolatey][chocolatey] (Windows only): a Windows package manager.
3. [Node.js 22 (Current)](https://nodejs.org/en/download/)

This should be reverted as well.

Code quote:

22 (Current

---

.github/workflows/frontend.yml line 58 at r3 (raw file):

            api.github.com:443
            github.com:443
            objects.githubusercontent.com:443

Why are these endpoints changed? Has the GitHub api changed? I presume that this is for the update of the User Guide, correct?

Code quote:

objects.githubusercontent.com:443

[imnasnainaec]

Reviewable status: 12 of 17 files reviewed, 3 unresolved discussions (waiting on @jmgrady)

---

package.json line 164 at r3 (raw file):

Previously, jmgrady (Jim Grady) wrote…

This should be reverted as well.

Done.

---

.github/workflows/frontend.yml line 58 at r3 (raw file):

Previously, jmgrady (Jim Grady) wrote…

Why are these endpoints changed? Has the GitHub api changed? I presume that this is for the update of the User Guide, correct?

The node fetching failed (see https://github.com/sillsdev/TheCombine/actions/runs/10200380752), so I updated to match the newer StepSecurity recommendation.

---

Dockerfile line 19 at r3 (raw file):

Previously, jmgrady (Jim Grady) wrote…

We should stick with node 20, the latest LTS release. There may be a more recent minor rev that we should consider.

Done.

---

README.md line 93 at r3 (raw file):

Previously, jmgrady (Jim Grady) wrote…

This should be reverted as well.

Done.

[jmgrady]

Reviewed 5 of 5 files at r4, all commit messages.
Reviewable status: complete! all files reviewed, all discussions resolved (waiting on @imnasnainaec)