chore: update backend and frontend dependencies (#5900)

Co-authored-by: memoclaw <265580040+memoclaw@users.noreply.github.com>

.github/workflows/backend-tests.yml

@@ -15,7 +15,7 @@ concurrency:
   cancel-in-progress: true
 
 env:
-  GO_VERSION: "1.26.1"
+  GO_VERSION: "1.26.2"
 
 jobs:
   static-checks:

.github/workflows/release.yml

@@ -14,7 +14,7 @@ permissions:
   contents: read
 
 env:
-  GO_VERSION: "1.26.1"
+  GO_VERSION: "1.26.2"
   NODE_VERSION: "24"
   PNPM_VERSION: "10"
   ARTIFACT_RETENTION_DAYS: 60

AGENTS.md

@@ -14,7 +14,7 @@ go test -v ./store/...             # Run store tests (all 3 DB drivers via TestC
 go test -v -race ./server/...      # Run server tests with race detection
 go test -v -race ./internal/...    # Run internal package tests with race detection
 go test -v -run TestFoo ./pkg/...  # Run a single test
-go mod tidy -go=1.26.1             # Match CI tidy check
+go mod tidy -go=1.26.2             # Match CI tidy check
 golangci-lint run                  # Lint (v2, config: .golangci.yaml)
 golangci-lint run --fix            # Auto-fix lint issues (includes goimports)
 
@@ -98,7 +98,7 @@ web/src/
 
 ## CI/CD
 
-- **backend-tests.yml:** Go 1.26.1, `go mod tidy -go=1.26.1`, golangci-lint v2.11.3, tests parallelized by group (store, server, internal, other)
+- **backend-tests.yml:** Go 1.26.2, `go mod tidy -go=1.26.2`, golangci-lint v2.11.3, tests parallelized by group (store, server, internal, other)
 - **build-canary-image.yml:** Builds frontend with `pnpm release`, then publishes canary multi-arch container images for linux/amd64 and linux/arm64
 - **frontend-tests.yml:** Node 24, pnpm 10, lint + build
 - **proto-linter.yml:** buf lint + format check

scripts/Dockerfile

-FROM --platform=$BUILDPLATFORM golang:1.26.1-alpine AS backend
+FROM --platform=$BUILDPLATFORM golang:1.26.2-alpine AS backend
 WORKDIR /backend-build
 
 # Install build dependencies

store/test/containers.go

@@ -13,8 +13,8 @@ import (
 	"testing"
 	"time"
 
-	"github.com/docker/docker/api/types/container"
 	mysqldriver "github.com/go-sql-driver/mysql"
+	"github.com/moby/moby/api/types/container"
 	"github.com/pkg/errors"
 	"github.com/testcontainers/testcontainers-go"
 	"github.com/testcontainers/testcontainers-go/modules/mysql"

web/package.json

@@ -20,7 +20,7 @@
     "@connectrpc/connect-web": "^2.1.1",
     "@emotion/react": "^11.14.0",
     "@emotion/styled": "^11.14.1",
-    "@github/relative-time-element": "^4.5.0",
+    "@github/relative-time-element": "^4.5.1",
     "@radix-ui/react-checkbox": "^1.3.3",
     "@radix-ui/react-dialog": "^1.1.15",
     "@radix-ui/react-dropdown-menu": "^2.1.16",
@@ -32,25 +32,25 @@
     "@radix-ui/react-slot": "^1.2.4",
     "@radix-ui/react-switch": "^1.2.6",
     "@radix-ui/react-tooltip": "^1.2.8",
-    "@tailwindcss/vite": "^4.2.1",
-    "@tanstack/react-query": "^5.90.21",
-    "@tanstack/react-query-devtools": "^5.91.3",
+    "@tailwindcss/vite": "^4.2.4",
+    "@tanstack/react-query": "^5.100.5",
+    "@tanstack/react-query-devtools": "^5.100.5",
     "class-variance-authority": "^0.7.1",
     "clsx": "^2.1.1",
     "copy-to-clipboard": "^3.3.3",
     "dayjs": "^1.11.20",
-    "fuse.js": "^7.1.0",
+    "fuse.js": "^7.3.0",
     "highlight.js": "^11.11.1",
     "html-to-image": "^1.11.13",
-    "i18next": "^25.8.18",
-    "katex": "^0.16.38",
+    "i18next": "^25.10.10",
+    "katex": "^0.16.45",
     "leaflet": "^1.9.4",
     "leaflet.markercluster": "^1.5.3",
-    "lodash-es": "^4.17.23",
+    "lodash-es": "^4.18.1",
     "lucide-react": "^0.577.0",
     "mdast-util-from-markdown": "^2.0.3",
     "mdast-util-gfm": "^3.1.0",
-    "mermaid": "^11.13.0",
+    "mermaid": "^11.14.0",
     "micromark-extension-gfm": "^3.0.0",
     "mime": "^4.1.0",
     "react": "^18.3.1",
@@ -60,7 +60,7 @@
     "react-leaflet": "^4.2.1",
     "react-leaflet-cluster": "^2.1.0",
     "react-markdown": "^10.1.0",
-    "react-router-dom": "^7.13.1",
+    "react-router-dom": "^7.14.2",
     "react-use": "^17.6.0",
     "rehype-katex": "^7.0.1",
     "rehype-raw": "^7.0.0",
@@ -69,14 +69,14 @@
     "remark-gfm": "^4.0.1",
     "remark-math": "^6.0.0",
     "tailwind-merge": "^3.5.0",
-    "tailwindcss": "^4.2.1",
+    "tailwindcss": "^4.2.4",
     "textarea-caret": "^3.1.0",
     "unist-util-visit": "^5.1.0",
     "uuid": "^11.1.0"
   },
   "devDependencies": {
-    "@biomejs/biome": "^2.4.7",
-    "@bufbuild/protobuf": "^2.11.0",
+    "@biomejs/biome": "^2.4.13",
+    "@bufbuild/protobuf": "^2.12.0",
     "@testing-library/jest-dom": "^6.9.1",
     "@testing-library/react": "^16.3.2",
     "@types/d3": "^7.4.3",
@@ -85,22 +85,22 @@
     "@types/leaflet": "^1.9.21",
     "@types/lodash-es": "^4.17.12",
     "@types/mdast": "^4.0.4",
-    "@types/node": "^24.10.1",
+    "@types/node": "^24.12.2",
     "@types/qs": "^6.15.0",
-    "@types/react": "^18.3.27",
+    "@types/react": "^18.3.28",
     "@types/react-dom": "^18.3.7",
     "@types/textarea-caret": "^3.0.4",
     "@types/unist": "^3.0.3",
     "@types/uuid": "^10.0.0",
     "@vitejs/plugin-react": "^4.7.0",
-    "baseline-browser-mapping": "^2.10.8",
-    "jsdom": "^29.0.2",
+    "baseline-browser-mapping": "^2.10.23",
+    "jsdom": "^29.1.0",
     "long": "^5.3.2",
-    "terser": "^5.46.1",
+    "terser": "^5.46.2",
     "tw-animate-css": "^1.4.0",
-    "typescript": "^6.0.2",
-    "vite": "^7.2.4",
-    "vitest": "^4.1.4"
+    "typescript": "^6.0.3",
+    "vite": "^7.3.2",
+    "vitest": "^4.1.5"
   },
   "pnpm": {
     "onlyBuiltDependencies": [