fix dependabot alerts

[tahminator]

Description of changes

• Cleared Dependabot alerts across all packages (JS, Cargo, Maven)
• Migrated js/ react-router v6 → v7
• Fixed/triaged code-scanning alerts

Checklist before review

• I have done a thorough self-review of the PR
• Copilot has reviewed my latest changes, and all comments have been fixed and/or closed.
• If I have made database changes, I have made sure I followed all the db repo rules listed in the wiki here. (check if no db changes)
• All tests have passed
• I have successfully deployed this PR to staging
• I have done manual QA in both dev (and staging if possible) and attached screenshots below.

Screenshots

Dev

Staging

[github-actions]

Available PR Commands

• /ai - Triggers all AI review commands at once
• /review - AI review of the PR changes
• /describe - AI-powered description of the PR
• /improve - AI-powered suggestions
• /deploy - Deploy to staging

See: https://github.com/tahminator/codebloom/wiki/CI-Commands

[pat-agent]

The image has been uploaded to https://hub.docker.com/r/patinanetwork/codebloom-standup-bot/tags under the following tags:

• codebloom-standup-bot:latest
• codebloom-standup-bot:2026.09.05-23.15.08
• codebloom-standup-bot:b0d32b8

[pat-agent]

The image has been uploaded to https://hub.docker.com/r/patinanetwork/codebloom/tags under the following tags:

• codebloom:staging-latest
• codebloom:staging-2026.09.05-23.18.27
• codebloom:staging-b0d32b8

[pat-agent]

The image has been uploaded to https://hub.docker.com/r/patinanetwork/codebloom-standup-bot/tags under the following tags:

• codebloom-standup-bot:staging-latest
• codebloom-standup-bot:staging-2026.09.06-13.54.16
• codebloom-standup-bot:staging-3fdc7eb

[pat-agent]

The image has been uploaded to https://hub.docker.com/r/patinanetwork/codebloom/tags under the following tags:

• codebloom:staging-latest
• codebloom:staging-2026.09.06-13.58.35
• codebloom:staging-3fdc7eb

[pat-agent]

The image has been uploaded to https://hub.docker.com/r/patinanetwork/codebloom-standup-bot/tags under the following tags:

• codebloom-standup-bot:staging-latest
• codebloom-standup-bot:staging-2026.09.11-09.22.29
• codebloom-standup-bot:staging-bbd15a9

[pat-agent]

The image has been uploaded to https://hub.docker.com/r/patinanetwork/codebloom/tags under the following tags:

• codebloom:staging-latest
• codebloom:staging-2026.09.11-09.26.47
• codebloom:staging-bbd15a9

[sonarqubecloud]

Quality Gate passed for 'codebloom_frontend'

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[pat-agent]

The image has been uploaded to https://hub.docker.com/r/patinanetwork/codebloom-standup-bot/tags under the following tags:

• codebloom-standup-bot:staging-latest
• codebloom-standup-bot:staging-2026.09.12-18.22.26
• codebloom-standup-bot:staging-f41bfda

[sonarqubecloud]

Quality Gate passed for 'codebloom_backend'

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[pat-agent]

The image has been uploaded to https://hub.docker.com/r/patinanetwork/codebloom/tags under the following tags:

• codebloom:staging-latest
• codebloom:staging-2026.09.12-18.50.39
• codebloom:staging-f41bfda