Deps/update and bump main

[wp99cp]

No description provided.

[Copilot]

Pull request overview

This PR bumps the monorepo version to 0.60.1, updates a set of JS dependencies/lockfiles, and makes a few targeted robustness and maintenance changes across the CLI, backend seed tooling, frontend dialogs, and dependency automation.

Changes:

• Bump package versions to 0.60.1 across workspace packages and apps, and refresh pnpm-lock.yaml with dependency upgrades.
• Improve backend seed test-data generation portability by discovering the repo root and using a local CLI venv Python when present.
• Update Dependabot configuration (add /cli pip updates, and group updates per app) and add minimumReleaseAge policy to pnpm-workspace.yaml.

Reviewed changes

Copilot reviewed 18 out of 19 changed files in this pull request and generated 2 comments.

Show a summary per file

File	Description
queueConsumer/package.json	Bumps app version and refreshes a few runtime dependency versions.
pnpm-workspace.yaml	Adds minimumReleaseAge / exclude list and retains build/override policies.
pnpm-lock.yaml	Updates lockfile entries to reflect dependency bumps across the workspace.
packages/validation/package.json	Bumps internal package version to 0.60.1.
packages/shared/package.json	Bumps internal package version to 0.60.1.
packages/backend-common/src/seeds/user/seed-files.ts	Makes test-data generation path + Python executable resolution more portable.
packages/backend-common/package.json	Bumps internal package version to 0.60.1.
packages/api-dto/package.json	Bumps internal package version to 0.60.1.
package.json	Bumps monorepo root version to 0.60.1.
frontend/src/dialogs/modify-mission-location-dialog.vue	Updates DTO import path and removes now-unneeded eslint suppressions.
frontend/src/dialogs/modify-file-location-dialog.vue	Updates DTO import path and removes now-unneeded eslint suppressions.
frontend/src/components/configure-access-rights/access-rights-manager.vue	Adds a file-level eslint disable for no-unsafe-* rules and removes an unnecessary-condition suppression.
frontend/package.json	Bumps app version and upgrades selected frontend dependencies.
docs/package.json	Bumps app version and upgrades docs tooling deps (node types, mermaid, vue).
cli/setup.cfg	Bumps CLI package version to 0.60.1.
cli/kleinkram/api/deser.py	Makes file category deserialization tolerate dict-vs-string category shapes (but needs a small robustness tweak).
backend/package.json	Bumps app version and upgrades selected backend deps (AWS SDK, Nest TypeORM, node types, eslint plugin, vue).
.github/dependabot.yml	Adds pip updates for /cli and groups updates per ecosystem/directory.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[greptile-apps]

Greptile Summary

This PR updates dependency automation and refreshes several build and frontend paths. The main changes are:

• Adds a scheduled workflow for dependency updates and version bumps.
• Updates Dependabot grouping and package versions across the workspace.
• Adjusts Docker builds to include workspace configuration before dependency fetches.
• Updates mission/file move dialog imports and related TypeScript cleanup.
• Makes CLI file category parsing and seed test-data path lookup more flexible.

Confidence Score: 5/5

This looks safe to merge.

• No blocking issues found in the changed code.

Important Files Changed

Filename	Overview
.github/workflows/automated-dependency-update.yml	Adds the scheduled dependency update workflow and pull request creation path.
.github/dependabot.yml	Updates Dependabot ecosystems and groups dependency updates by workspace area.
frontend/src/dialogs/modify-mission-location-dialog.vue	Updates the mission DTO import and removes local lint suppressions.
frontend/src/dialogs/modify-file-location-dialog.vue	Updates the mission DTO import used by the file move dialog.
cli/kleinkram/api/deser.py	Normalizes file categories when the API returns category objects or omits the field.
packages/backend-common/src/seeds/user/seed-files.ts	Locates the test-data generator and generated files from either the container path or a local checkout.
docker/backend.Dockerfile	Includes workspace configuration before dependency fetch and disables the pnpm release-age delay during image builds.
docker/base.Dockerfile	Updates the shared Docker dependency install path to include workspace configuration.
docker/frontend.Dockerfile	Applies the same workspace-aware dependency fetch flow to frontend image builds.
docker/queue-consumer.Dockerfile	Applies the same workspace-aware dependency fetch flow to queue consumer image builds.

_{Reviews (4): Last reviewed commit: "fix(ci): bypass minimumReleaseAge check ..." | Re-trigger Greptile}

[greptile-apps]

Human Dependency Branch Deletion

When this scheduled job sees any open PR older than seven days with a deps/* branch, it closes the PR and deletes that branch even if the author is not automation. A developer working from deps/my-update can lose their branch because the delete condition is dependabot[bot] author or deps/* branch name.

Prompt To Fix With AI

This is a comment left during a code review.
Path: .github/workflows/automated-dependency-update.yml
Line: 31-32

Comment:
**Human Dependency Branch Deletion**

When this scheduled job sees any open PR older than seven days with a `deps/*` branch, it closes the PR and deletes that branch even if the author is not automation. A developer working from `deps/my-update` can lose their branch because the delete condition is `dependabot[bot]` author or `deps/*` branch name.

How can I resolve this? If you propose a fix, please make it concise.

[greptile-apps]

Project Guard Removed

When the dialog receives a mission payload without a loaded project relation, properties.mission?.project.uuid still dereferences project and throws before the dialog can render. The previous ?.project?.uuid path produced undefined, which matches the template's existing handling of missing project data.

Suggested change

	const selectedProjectUuid = ref<string | undefined>(
	// eslint-disable-next-line @typescript-eslint/no-unsafe-argument, @typescript-eslint/no-unsafe-member-access
	properties.mission?.project?.uuid,
	properties.mission?.project.uuid,
	);
	const selectedProjectUuid = ref<string | undefined>(
	properties.mission?.project?.uuid,
	);

Prompt To Fix With AI

This is a comment left during a code review.
Path: frontend/src/dialogs/modify-mission-location-dialog.vue
Line: 56-58

Comment:
**Project Guard Removed**

When the dialog receives a mission payload without a loaded `project` relation, `properties.mission?.project.uuid` still dereferences `project` and throws before the dialog can render. The previous `?.project?.uuid` path produced `undefined`, which matches the template's existing handling of missing project data.

```suggestion
const selectedProjectUuid = ref<string | undefined>(
    properties.mission?.project?.uuid,
);
```

How can I resolve this? If you propose a fix, please make it concise.