chore: upgrade ip-address to 10.2.0 for CVE-2026-42338

[Omar-AlJaljuli]

Description

Upgrade ip-address to 10.2.0 in root and dynamic-plugins to fix GHSA-v2v4-37r5-5v8g.
Upgrading express-rate-limit to 8.5.2 from 8.3.2, From https://express-rate-limit.mintlify.app/reference/changelog there are no breaking changes.

Which issue(s) does this PR fix

• Fixes RHDHBUGS-3388

PR acceptance criteria

Please make sure that the following steps are complete:

• GitHub Actions are completed and successful
• Unit Tests are updated and passing
• E2E Tests are updated and passing
• Documentation is updated if necessary (requirement for new features)
• Add a screenshot if the change is UX/UI related

How to test changes / Special notes to the reviewer

[github-actions]

Image was built and published successfully. It is available at:

• quay.io/rhdh-community/rhdh:pr-4983
• quay.io/rhdh-community/rhdh:pr-4983-8a1bad73

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 54.77%. Comparing base (d8b493f) to head (d94c83a).
⚠️ Report is 1 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #4983      +/-   ##
==========================================
- Coverage   55.39%   54.77%   -0.62%     
==========================================
  Files         122      110      -12     
  Lines        2365     2147     -218     
  Branches      544      514      -30     
==========================================
- Hits         1310     1176     -134     
+ Misses       1049      970      -79     
+ Partials        6        1       -5     

Flag	Coverage Δ
rhdh	54.77% <ø> (-0.62%)	⬇️

---

Continue to review full report in Codecov by Harness.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update d8b493f...d94c83a. Read the comment docs.

🚀 New features to boost your workflow:

• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[github-actions]

This PR is stale because it has been open 7 days with no activity. Remove stale label or comment or this will be closed in 21 days.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[github-actions]

Image was built and published successfully. It is available at:

• quay.io/rhdh-community/rhdh:pr-4983
• quay.io/rhdh-community/rhdh:pr-4983-d94c83a7

[alizard0]

lgtm

[openshift-ci]

@Omar-AlJaljuli: The following tests failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name	Commit	Details	Required	Rerun command
ci/prow/e2e-ocp-helm	d94c83a	link	unknown	/test e2e-ocp-helm
ci/prow/images	d94c83a	link	unknown	/test images

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.