Merge branch 'main' into dependabot/uv/api/azure-mgmt-compute-38.0.0

Author: dadmobile

.github/dependabot.yml

@@ -14,17 +14,41 @@ updates:
           - "patch"
 
   # Docs site (Docusaurus, managed with yarn classic — dependabot's npm ecosystem auto-detects yarn.lock)
+  # Build is pinned to Node 18 via transformerlab-docs/netlify.toml. Major bumps are ignored across
+  # the board (manual coordination needed); packages that drop Node 18 support in a minor or patch
+  # bump are listed individually under `ignore` below. Revisit when the build moves to Node 20+.
   - package-ecosystem: "npm"
     directory: "/transformerlab-docs"
     schedule:
       interval: "weekly"
       day: "monday"
     open-pull-requests-limit: 5
+    commit-message:
+      prefix: "docs-deps"
+      include: "scope"
+    labels:
+      - "dependencies"
+      - "docs"
     groups:
+      docusaurus:
+        patterns:
+          - "@docusaurus/*"
+          - "@mdx-js/*"
+      react:
+        patterns:
+          - "react"
+          - "react-dom"
       minor-and-patch:
         update-types:
           - "minor"
           - "patch"
+    ignore:
+      # mermaid >= 11.12 requires Node 20+; we're pinned to Node 18 in Netlify.
+      - dependency-name: "mermaid"
+        versions: [">=11.12"]
+      # Major bumps on docs deps need manual coordination; minor/patch is enough for security.
+      - dependency-name: "*"
+        update-types: ["version-update:semver-major"]
 
   # API (FastAPI, managed with uv)
   - package-ecosystem: "uv"

.github/workflows/check-cli-version.yml

@@ -18,7 +18,7 @@ jobs:
         working-directory: cli
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
       - name: Ensure version is set in pyproject.toml
         run: |

.github/workflows/check-lab-sdk-version.yml

@@ -12,7 +12,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Compare lab-sdk and API transformerlab versions
         run: |

.github/workflows/check-sdk-version.yml

@@ -21,7 +21,7 @@ jobs:
         working-directory: lab-sdk
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
       - name: Check if version already exists on PyPI
         run: |

.github/workflows/codeql.yml

@@ -36,7 +36,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Initialize CodeQL
         uses: github/codeql-action/init@v3

.github/workflows/docker-release.yml

@@ -14,13 +14,13 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@v4
 
       - name: Log in to Docker Hub
-        uses: docker/login-action@v3
+        uses: docker/login-action@v4
         with:
           username: ${{ secrets.DOCKERHUB_USERNAME }}
           password: ${{ secrets.DOCKERHUB_TOKEN }}

.github/workflows/gallery-channel-bundles.yml

@@ -19,11 +19,11 @@ jobs:
       run:
         working-directory: api
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           fetch-depth: 0
       - name: Set up Python 3.11
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v6
         with:
           python-version: "3.11"
       - name: Require stable/beta bundle update for source changes

.github/workflows/lint.yml

@@ -10,9 +10,9 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - name: Install Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version: 22
           cache: npm

.github/workflows/playwright.yml

@@ -30,9 +30,9 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 10
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@v6
         with:
           node-version: 22
           cache: npm
@@ -80,9 +80,9 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 20
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@v6
         with:
           node-version: 22
           cache: npm

.github/workflows/prettier.yml

@@ -16,10 +16,10 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Setup Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version: "22"