fix(deps): integrate all pending DevHire branches (#113)

Consolidates all 23 pending remote branches, applies Spring Boot 4 and ecosystem compatibility fixes, and patches vulnerabilities found by PR image scans. All required checks and the complete Docker/Trivy matrix passed.

Author: JasonTM17

.github/dependabot.yml

@@ -36,6 +36,10 @@ updates:
     labels:
       - portfolio-maintenance
       - needs-runtime-smoke
+    ignore:
+      - dependency-name: typescript
+        update-types:
+          - version-update:semver-major
     groups:
       frontend-platform:
         patterns:

.github/workflows/ai-eval.yml

@@ -16,7 +16,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Validate compose file
         run: docker compose config --quiet
@@ -27,7 +27,7 @@ jobs:
 
       - name: Upload AI eval report
         if: always()
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         with:
           name: ai-eval-summary
           path: reports/ai/eval-summary.json
@@ -39,7 +39,7 @@ jobs:
 
       - name: Store compose logs
         if: failure()
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         with:
           name: compose-ai-eval-log
           path: compose-ai-eval.log

.github/workflows/api-smoke.yml

@@ -15,7 +15,7 @@ jobs:
     timeout-minutes: 35
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Validate compose file
         run: docker compose config --quiet
@@ -30,7 +30,7 @@ jobs:
 
       - name: Store compose logs
         if: failure()
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         with:
           name: compose-api-smoke-log
           path: compose-api-smoke.log

.github/workflows/ci.yml

@@ -19,7 +19,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Set up Java 21
         uses: actions/setup-java@v5
@@ -77,7 +77,7 @@ jobs:
 
       - name: Upload test reports on failure
         if: failure()
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         with:
           name: test-reports
           path: |

.github/workflows/codeql.yml

@@ -29,7 +29,7 @@ jobs:
           - javascript-typescript
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Set up Java 21
         if: matrix.language == 'java-kotlin'

.github/workflows/dependabot-curation.yml

@@ -25,7 +25,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Run curation
         shell: pwsh
@@ -55,7 +55,7 @@ jobs:
 
       - name: Upload curation reports
         if: always()
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         with:
           name: dependabot-curation-reports
           path: |

.github/workflows/dependency-maintenance.yml

@@ -17,7 +17,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Generate inventory
         shell: pwsh
@@ -26,7 +26,7 @@ jobs:
         run: ./scripts/dependabot-inventory.ps1
 
       - name: Upload inventory
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         with:
           name: dependabot-inventory
           path: reports/dependabot/

.github/workflows/docker.yml

@@ -36,7 +36,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v4

.github/workflows/docs.yml

@@ -20,7 +20,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Validate portfolio documentation
         shell: pwsh

.github/workflows/e2e.yml

@@ -21,7 +21,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Set up Node.js
         uses: actions/setup-node@v6
@@ -54,7 +54,7 @@ jobs:
 
       - name: Upload Playwright preview report
         if: always()
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         with:
           name: playwright-preview-report
           path: |
@@ -70,7 +70,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Set up Node.js
         uses: actions/setup-node@v6
@@ -93,7 +93,7 @@ jobs:
 
       - name: Upload Playwright report
         if: always()
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         with:
           name: playwright-report
           path: frontend/playwright-report