chore: merge staging into fix/dependabot-security-alerts to resolve conflicts

- Resolved package-lock.json conflict by taking staging's version
  (staging already has lodash-es 4.18.1 without needing root overrides)
- Removed redundant root package.json overrides for lodash-es
- Retained all security fixes: litellm~=1.83.0, fastmcp>=3.2.0, aiohttp>=3.13.4
- Updated fastmcp import path (already resolved in staging)

Co-authored-by: galshubeli <124919062+galshubeli@users.noreply.github.com>

Author: Copilot

.github/wordlist.txt

@@ -117,4 +117,5 @@ PRs
 pylint
 pytest
 Radix
-Zod
+Zod
+Dependabot

.github/workflows/playwright.yml

@@ -19,6 +19,10 @@ env:
 
 jobs:
   test:
+    # Skip for Dependabot PRs — the LLM-dependent E2E tests require Azure OpenAI
+    # secrets that are not available in Dependabot PR runs. Full E2E coverage runs
+    # on the merge-to-staging/main push event where secrets are accessible.
+    if: github.event_name != 'pull_request' || github.event.pull_request.user.login != 'dependabot[bot]'
     timeout-minutes: 60
     runs-on: ubuntu-latest
 

AGENTS.md

@@ -135,7 +135,7 @@ See `.env.example` for the full list.
 
 GitHub Actions workflows (`.github/workflows/`):
 - **tests.yml** — unit tests + lint on push/PR to main/staging
-- **playwright.yml** — dedicated Playwright E2E suite
+- **playwright.yml** — dedicated Playwright E2E suite (skipped for Dependabot PRs; secrets unavailable)
 - **pylint.yml** — Python linting
 - **spellcheck.yml** — docs spellcheck
 - **publish-docker.yml** — build & push Docker image to DockerHub

app/package-lock.json

@@ -11,7 +11,7 @@
     "preview": "vite preview"
   },
   "dependencies": {
-    "@falkordb/canvas": "^0.0.44",
+    "@falkordb/canvas": "^0.0.45",
     "@hookform/resolvers": "^5.2.2",
     "@radix-ui/react-accordion": "^1.2.11",
     "@radix-ui/react-alert-dialog": "^1.1.14",
@@ -57,7 +57,7 @@
     "react-dom": "^18.3.1",
     "react-hook-form": "^7.71.2",
     "react-resizable-panels": "^2.1.9",
-    "react-router-dom": "^7.13.1",
+    "react-router-dom": "^7.13.2",
     "recharts": "^2.15.4",
     "sonner": "^1.7.4",
     "tailwind-merge": "^2.6.0",