chore(deps): combine Dependabot minor/patch + actions bumps

Python (uv):
- falkordb ~=1.6.1 (FalkorDB#568)
- pymysql ~=1.2.0 (FalkorDB#586)
- graphiti-core >=0.29.1 (FalkorDB#589)
- python-multipart ~=0.0.29 (FalkorDB#588)
- pytest-playwright ~=0.8.0 (FalkorDB#585)
- urllib3 2.7.0 transitive (FalkorDB#573)

GitHub Actions (SHA pins):
- docker/login-action v4 (FalkorDB#579)
- docker/metadata-action v6 (FalkorDB#577)
- docker/build-push-action v7 (FalkorDB#578)
- astral-sh/setup-uv v8.1.0 (FalkorDB#565)
- actions/dependency-review-action v4 (FalkorDB#564)

npm (app):
- @vitejs/plugin-react-swc ^4.3.1, postcss ^8.5.15 (FalkorDB#587)

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Author: barakb

.github/workflows/dependency-review.yml

@@ -31,7 +31,7 @@ jobs:
       - name: 'Checkout repository'
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
       - name: 'Dependency Review'
-        uses: actions/dependency-review-action@2031cfc080254a8a887f58cffee85186f0e49e48 # v4
+        uses: actions/dependency-review-action@a1d282b36b6f3519aa1f3fc636f609c47dddb294 # v4
         # Commonly enabled options, see https://github.com/actions/dependency-review-action#configuration-options for all available options.
         with:
           comment-summary-in-pr: always

.github/workflows/publish-docker.yml

@@ -15,19 +15,19 @@ jobs:
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
 
       - name: Log in to Docker Hub
-        uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4
+        uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4
         with:
           username: ${{ secrets.DOCKER_USERNAME }}
           password: ${{ secrets.DOCKER_PASSWORD }}
 
       - name: Extract metadata (tags, labels) for Docker
         id: meta
-        uses: docker/metadata-action@030e881283bb7a6894de51c315a6bfe6a94e05cf # v6
+        uses: docker/metadata-action@80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9 # v6
         with:
           images: falkordb/queryweaver
 
       - name: Build and push Docker image
-        uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v7
+        uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf # v7
         with:
           context: .
           push: true

.github/workflows/tests.yml

@@ -119,7 +119,7 @@ jobs:
         python-version: '3.12'
 
     - name: Install uv
-      uses: astral-sh/setup-uv@d4b2f3b6ecc6e67c4457f6d3e41ec42d3d0fcb86 # v5.4.2
+      uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0
       with:
         version: "latest"
 

app/package-lock.json

@@ -71,13 +71,13 @@
     "@types/node": "^22.16.5",
     "@types/react": "^18.3.23",
     "@types/react-dom": "^18.3.7",
-    "@vitejs/plugin-react-swc": "^4.3.0",
+    "@vitejs/plugin-react-swc": "^4.3.1",
     "autoprefixer": "^10.4.27",
     "eslint": "^9.32.0",
     "eslint-plugin-react-hooks": "^5.2.0",
     "eslint-plugin-react-refresh": "^0.4.20",
     "globals": "^17.3.0",
-    "postcss": "^8.5.14",
+    "postcss": "^8.5.15",
     "tailwindcss": "^3.4.17",
     "typescript": "^5.8.3",
     "typescript-eslint": "^8.57.0",

app/package.json

@@ -26,9 +26,9 @@ classifiers = [
 # not optional. redis is provided transitively by falkordb.
 dependencies = [
     "litellm>=1.83.0",
-    "falkordb~=1.6.0",
+    "falkordb~=1.6.1",
     "psycopg2-binary~=2.9.12",
-    "pymysql~=1.1.0",
+    "pymysql~=1.2.0",
     "jsonschema~=4.26.0",
     "tqdm~=4.67.3",
     "pydantic>=2.0",
@@ -40,7 +40,7 @@ dependencies = [
 # queries are run with use_memory=True. Lazily imported by the SDK.
 memory = [
     "openai>=1.0.0",
-    "graphiti-core>=0.28.1",
+    "graphiti-core>=0.29.1",
 ]
 
 # Server dependencies (FastAPI, auth, etc.). Used to run the full app from a
@@ -50,10 +50,10 @@ server = [
     "uvicorn~=0.46.0",
     "authlib~=1.7.0",
     "itsdangerous~=2.2.0",
-    "python-multipart~=0.0.27",
+    "python-multipart~=0.0.29",
     "jinja2~=3.1.4",
     "fastmcp>=3.2.4",
-    "graphiti-core>=0.28.1",
+    "graphiti-core>=0.29.1",
     "snowflake-connector-python~=4.4.0",
     "aiohttp>=3.13.5",
 ]
@@ -64,7 +64,7 @@ dev = [
     "pytest-asyncio~=1.3.0",
     "pylint~=4.0.3",
     "playwright~=1.59.0",
-    "pytest-playwright~=0.7.1",
+    "pytest-playwright~=0.8.0",
 ]
 
 # All dependencies (server + dev)
@@ -84,7 +84,7 @@ dev = [
     "pytest~=9.0.3",
     "pylint~=4.0.3",
     "playwright~=1.59.0",
-    "pytest-playwright~=0.7.1",
+    "pytest-playwright~=0.8.0",
     "pytest-asyncio~=1.3.0",
 ]