Dependency updates for March 2025

[briehl]

Description of PR purpose/changes

Combines and annotates dependabot suggestions for Python and JS updates.

• Please include a summary of the change and which issue is fixed.
• Please also include relevant motivation and context.
• List any dependencies that are required for this change.

Jira Ticket / Issue

Related Jira ticket: https://kbase-jira.atlassian.net/browse/DATAUP-X

• Added the Jira Ticket to the title of the PR (e.g. DATAUP-69 Adds a PR template)

Testing Instructions

• Details for how to test the PR:

• Tests pass locally and in GitHub Actions
• Changes available by spinning up a local narrative and navigating to X to see Y

Dev Checklist:

• My code follows the guidelines at https://sites.google.com/lbl.gov/trussresources/home?authuser=0
• I have performed a self-review of my own code
• I have commented my code, particularly in hard-to-understand areas
• I have made corresponding changes to the documentation
• My changes generate no new warnings
• I have added tests that prove my fix is effective or that my feature works
• New and existing unit tests pass locally with my changes
• (JavaScript) I have run Prettier and ESLint on changed code manually or with a git precommit hook
• (Python) I have run Ruff format and check on changed Python code manually or with a git precommit hook
• Any dependent changes have been merged and published in downstream modules

Updating Version and Release Notes (if applicable)

• Version has been bumped for each release
• Release notes have been updated for each release (and during the merge of feature branches)

[ialarmedalien]

You are doing God's work.

ETA: Didn't notice the bit about the JS changes. I will recheck the PR when they are in place.

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 25.89%. Comparing base (533b609) to head (bed85bb).
Report is 6 commits behind head on develop.

Additional details and impacted files

@@             Coverage Diff             @@
##           develop    #3684      +/-   ##
===========================================
- Coverage    25.90%   25.89%   -0.01%     
===========================================
  Files          461      461              
  Lines        46653    46653              
===========================================
- Hits         12085    12082       -3     
- Misses       34568    34571       +3     

see 3 files with indirect coverage changes

---

Continue to review full report in Codecov by Sentry.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 1e360ac...bed85bb. Read the comment docs.

🚀 New features to boost your workflow:

• ❄ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[briehl]

@ialarmedalien and I think it works now.

[briehl]

These were wrong and causing headless chrome to fail when run as root, like in the test container.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud