Align to NPM 2.14.0 (React/TS frontend port)

.gitattributes

@@ -0,0 +1,60 @@
+# Force LF line endings for files that must be Unix-format inside containers.
+# Without this, a clone on Windows with default core.autocrlf=true silently
+# converts these to CRLF, which breaks `#!/bin/bash` shebangs and s6 service
+# scripts at container runtime.
+
+# Docker build context (Dockerfiles, scripts, runtime configs, init scripts)
+docker/**          text eol=lf
+Dockerfile         text eol=lf
+Dockerfile.*       text eol=lf
+
+# Backend shell helpers and CI scripts
+scripts/**         text eol=lf
+*.sh               text eol=lf
+
+# Deployment manifests
+deployment/**      text eol=lf
+
+# NGINX & service configs
+*.conf             text eol=lf
+*.ini              text eol=lf
+*.yaml             text eol=lf
+*.yml              text eol=lf
+
+# Backend / migrations / schema (no need for CRLF anywhere on Unix builds)
+backend/**         text eol=lf
+
+# Frontend sources can be LF too (Vite/Biome are LF-native)
+frontend/**        text eol=lf
+
+# Binary files — never touch
+*.so               binary
+*.png              binary
+*.jpg              binary
+*.jpeg             binary
+*.gif              binary
+*.ico              binary
+*.woff             binary
+*.woff2            binary
+*.ttf              binary
+*.pdf              binary
+*.gz               binary
+*.zip              binary
+*.tar              binary
+*.tgz              binary
+*.tbz              binary
+*.bz2              binary
+*.7z               binary
+*.rar              binary
+*.jar              binary
+*.exe              binary
+*.dll              binary
+*.dylib            binary
+*.a                binary
+*.o                binary
+*.class            binary
+*.bin              binary
+*.dat              binary
+*.db               binary
+*.sqlite           binary
+*.sqlite3          binary

.github/dependabot.yml

@@ -0,0 +1,104 @@
+version: 2
+updates:
+  - package-ecosystem: "npm"
+    directory: "/backend"
+    schedule:
+      interval: "weekly"
+    groups:
+      dev-patch-updates:
+        dependency-type: "development"
+        update-types:
+          - "patch"
+      dev-minor-updates:
+        dependency-type: "development"
+        update-types:
+          - "minor"
+      prod-patch-updates:
+        dependency-type: "production"
+        update-types:
+          - "patch"
+      prod-minor-updates:
+        dependency-type: "production"
+        update-types:
+          - "minor"
+
+  - package-ecosystem: "npm"
+    directory: "/frontend"
+    schedule:
+      interval: "weekly"
+    groups:
+      dev-patch-updates:
+        dependency-type: "development"
+        update-types:
+          - "patch"
+      dev-minor-updates:
+        dependency-type: "development"
+        update-types:
+          - "minor"
+      prod-patch-updates:
+        dependency-type: "production"
+        update-types:
+          - "patch"
+      prod-minor-updates:
+        dependency-type: "production"
+        update-types:
+          - "minor"
+
+  - package-ecosystem: "npm"
+    directory: "/docs"
+    schedule:
+      interval: "weekly"
+    groups:
+      dev-patch-updates:
+        dependency-type: "development"
+        update-types:
+          - "patch"
+      dev-minor-updates:
+        dependency-type: "development"
+        update-types:
+          - "minor"
+      prod-patch-updates:
+        dependency-type: "production"
+        update-types:
+          - "patch"
+      prod-minor-updates:
+        dependency-type: "production"
+        update-types:
+          - "minor"
+
+  - package-ecosystem: "npm"
+    directory: "/test"
+    schedule:
+      interval: "weekly"
+    groups:
+      dev-patch-updates:
+        dependency-type: "development"
+        update-types:
+          - "patch"
+      dev-minor-updates:
+        dependency-type: "development"
+        update-types:
+          - "minor"
+      prod-patch-updates:
+        dependency-type: "production"
+        update-types:
+          - "patch"
+      prod-minor-updates:
+        dependency-type: "production"
+        update-types:
+          - "minor"
+
+  - package-ecosystem: "docker"
+    directory: "/docker"
+    schedule:
+      interval: "weekly"
+    groups:
+      updates:
+        update-types:
+          - "patch"
+          - "minor"
+
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"

.github/workflows/stale.yml

@@ -8,7 +8,7 @@ jobs:
   stale:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/stale@v9
+      - uses: actions/stale@v10
         with:
           stale-issue-label: 'stale'
           stale-pr-label: 'stale'

.gitignore

@@ -1,9 +1,11 @@
 .DS_Store
 .idea
+.qodo
 ._*
 .vscode
 certbot-help.txt
 test/node_modules
 */node_modules
 docker/dev/dnsrouter-config.json.tmp
 docker/dev/resolv.conf
+/.port-assets/

.version

@@ -1 +1 @@
-2.12.3
+2.14.0-appsec.1