Merge branch 'main' into copilot/add-content-security-policy-error-handling

Author: olgahaha

.github/dependabot.yml

@@ -3,6 +3,13 @@ updates:
   - package-ecosystem: 'npm'
     directory: '/'
     schedule:
-      interval: 'monthly'
+      interval: 'weekly'
     target-branch: 'main'
-    open-pull-requests-limit: 5
+    open-pull-requests-limit: 10
+    groups:
+      patch-updates:
+        update-types:
+          - 'patch'
+      minor-updates:
+        update-types:
+          - 'minor'

.github/workflows/security-audit.yml

@@ -0,0 +1,28 @@
+name: Security Audit
+
+on:
+  schedule:
+    - cron: '0 8 * * 1'
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+jobs:
+  audit:
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Use Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: '22'
+
+      - name: Install dependencies
+        run: npm install
+
+      - name: Security audit
+        run: npm audit --audit-level=high --omit=dev

package-lock.json

@@ -74,7 +74,7 @@
     "ethers": "^6.8.1",
     "hammerjs": "^2.0.8",
     "immutable": "^4.0.0-rc.14",
-    "lodash-es": "^4.17.21",
+    "lodash-es": "^4.18.1",
     "material-design-icons-iconfont": "^6.1.0",
     "ng-circle-progress": "^1.7.1",
     "ngx-joyride": "^2.5.0",