chore(deps): update dependency dayjs to v1.11.20

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
dayjs (source)	1.11.19 → 1.11.20

---

Release Notes

iamkun/dayjs (dayjs)

v1.11.20

Compare Source

Bug Fixes

• Update locale km.js to support meridiem (#​3017) (9d2b6a1)
• update updateLocale plugin to merge nested object properties instead of replacing (#​3012) (99691c5), closes #​1118

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[codacy-production]

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

🟢 Metrics 0 duplication

Metric	Results
Duplication	0

View in Codacy

_{TIP This summary will be updated as you push new changes. Give us feedback}

[cursor]

Security review (automation): PR #3699

Scope: Diff updates web/package-lock.json only—dayjs 1.11.19 → 1.11.20 with matching npm resolved URL and Subresource Integrity hash.

Findings: No medium, high, or critical issues identified in this change.

• Application security: No added or modified application code; no new attacker-controlled sinks, auth paths, or escaping surfaces introduced by the diff.
• Supply chain: Same official registry artifact pattern (registry.npmjs.org); integrity field updated for the new tarball, which supports verification on install.
• Advisory check: Public databases (e.g. Snyk) list no direct CVEs for dayjs@1.11.20; release notes describe bug fixes (locale / updateLocale merge behavior), not security advisories.

Conclusion: No high-confidence vulnerability introduced or exposed by this PR. Prior automation assessment threads are cleared in favor of this review.

  

_{Sent by Cursor Automation: Find vulnerabilities}