Staging by Naseem77 · Pull Request #713 · FalkorDB/QueryWeaver

Naseem77 · 2026-08-18T08:31:39Z

No description provided.

Bumps the uv group with 1 update in the / directory: [mcp](https://github.com/modelcontextprotocol/python-sdk). Updates `mcp` from 1.26.0 to 1.27.2 - [Release notes](https://github.com/modelcontextprotocol/python-sdk/releases) - [Changelog](https://github.com/modelcontextprotocol/python-sdk/blob/main/RELEASE.md) - [Commits](modelcontextprotocol/python-sdk@v1.26.0...v1.27.2) --- updated-dependencies: - dependency-name: mcp dependency-version: 1.27.2 dependency-type: indirect dependency-group: uv ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Combines 11 open Dependabot PRs into one: Python (uv.lock / pyproject.toml): - pylint 4.0.5 -> 4.0.6 (#651) - graphiti-core 0.29.1 -> 0.29.2 (#652) - pydantic 2.12.5 -> 2.13.4 (#653) - falkordb 1.6.1 -> 1.6.2 (#654) - pytest 9.0.3 -> 9.1.1, widen constraint to >=9.0.3,<9.2.0 (#655) Frontend (app/package.json): - npm-minor-patch group: @tailwindcss/vite 4.3.3, postcss 8.5.20, tailwindcss 4.3.3, vite 8.1.5 (#656) - @hookform/resolvers 5.2.2 -> 5.4.0 (#657) - globals 17.3.0 -> 17.7.0 (#658) - @radix-ui/react-slot 1.2.3 -> 1.3.0 (#659) - @radix-ui/react-switch 1.2.5 -> 1.3.3 (#660) CI: - actions/setup-node 6.4.0 -> 7.0.0 (#650) Regenerated uv.lock, app/package-lock.json and root package-lock.json. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

The pin was bumped to the v7.0.0 commit but the inline comment still read # v6. Update the annotation to match (flagged by CodeRabbit and Copilot review). Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

…7-21 chore(deps): combine open Dependabot updates

Combines the following Dependabot updates into a single PR: - Bump mcp from 1.27.2 to 1.28.1 (#663) - Bump actions/setup-python from 6.3.0 to 7.0.0 (#665) - Bump actions/checkout from 7.0.0 to 7.0.1 (#666) - Bump astral-sh/setup-uv from 8.3.2 to 9.0.0 (#667) - Bump openai from 2.45.0 to 2.48.0 (#668) - Bump fastapi from 0.139.0 to 0.140.0 (#669) - Bump sqlglot from 30.12.0 to 30.13.0 (#670) - Bump snowflake-connector-python from 4.6.0 to 4.7.1 (#671) - Bump fastmcp from 3.2.4 to 3.4.4 (#672) - Bump brace-expansion from 5.0.7 to 5.0.9 (latest available) in /app (#674) - Bump rojopolis/spellcheck-github-actions from 0.63.0 to 0.63.1 (#675) - Bump docker/login-action from 4.4.0 to 4.6.0 (#676) - Bump the npm-minor-patch group across 1 directory with 29 updates in /app (#677) Verified locally: uv run pytest (210 passed), uv run pylint (10.00/10), npm run lint and npm run build (in app/), all against a running FalkorDB container. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

The root package.json depends on queryweaver-app via 'file:app', so its lockfile embeds a resolved snapshot of app/'s dependency tree. It was left stale after the app/ dependency bumps, causing 'npm ci' to fail in CI ('lock file does not satisfy...'). Regenerated via 'npm install'. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

…c8h2) react-router-dom's latest release (7.18.2) never received a fix for GHSA-qwww-vcr4-c8h2 (CSRF bypass in unstable RSC mode) — the fix only ships in react-router v8.3.0+, after react-router-dom was folded back into the react-router package. QueryWeaver already meets v8's runtime requirements (React 19.2+, Node 22+) and only uses plain SPA routing (BrowserRouter/Routes/Route/Link/ useNavigate/useLocation) with no loaders, actions, middleware, or meta() usage, so none of v8's actual breaking-change surface applies. Changes: - app/package.json, app/package-lock.json: drop react-router-dom, add react-router@^8.3.0 - app/src/App.tsx, Sidebar.tsx, Settings.tsx, NotFound.tsx: update imports from "react-router-dom" to "react-router" - package-lock.json (root): resync with app/'s file: dependency - e2e: add settings-navigation and unknown-route (404) coverage to sidebar.spec.ts/sidebar POM to exercise the migrated router APIs, plus a small getPageContent() helper on BasePage Verified locally: npm run lint, npm run build (app/), and `npx playwright test --list` all pass; no react-router-dom references remain. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

- publish-docker.yml: fix stale docker/login-action version comment (was still "# v4" after the bump to v4.6.0) - pyproject.toml/uv.lock: bound fastmcp to >=3.4.4,<4.0.0 (was unbounded >=3.2.4), matching the bounded-range convention used by the other server-extra deps in this file - playwright.yml, pylint.yml, tests.yml (x2): explicitly set prune-cache: true on setup-uv steps — astral-sh/setup-uv v9.0.0 (bumped in this PR) silently flipped the prune-cache default from true to false, which would otherwise change cache-retention behavior as a side effect of the version bump Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

…8-03 chore(deps): combine open Dependabot updates

#681) * Remove redundant CODE_OF_CONDUCT.md in favour of the org-wide default * Remove redundant SECURITY.md in favour of the org-wide default

Bumps [rojopolis/spellcheck-github-actions](https://github.com/rojopolis/spellcheck-github-actions) from 0.63.1 to 0.64.0. - [Release notes](https://github.com/rojopolis/spellcheck-github-actions/releases) - [Changelog](https://github.com/rojopolis/spellcheck-github-actions/blob/master/CHANGELOG.md) - [Commits](rojopolis/spellcheck-github-actions@b1a70f1...26a39cd) --- updated-dependencies: - dependency-name: rojopolis/spellcheck-github-actions dependency-version: 0.64.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [tqdm](https://github.com/tqdm/tqdm) from 4.68.4 to 4.70.0. - [Release notes](https://github.com/tqdm/tqdm/releases) - [Commits](tqdm/tqdm@v4.68.4...v4.70.0) --- updated-dependencies: - dependency-name: tqdm dependency-version: 4.70.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Guy Korland <gkorland@gmail.com>

Bumps [fastmcp](https://github.com/PrefectHQ/fastmcp) from 3.4.5 to 3.4.6. - [Release notes](https://github.com/PrefectHQ/fastmcp/releases) - [Changelog](https://github.com/PrefectHQ/fastmcp/blob/main/docs/changelog.mdx) - [Commits](PrefectHQ/fastmcp@v3.4.5...v3.4.6) --- updated-dependencies: - dependency-name: fastmcp dependency-version: 3.4.6 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Guy Korland <gkorland@gmail.com>

Bumps [litellm](https://github.com/BerriAI/litellm) from 1.92.0 to 1.95.0. - [Release notes](https://github.com/BerriAI/litellm/releases) - [Commits](BerriAI/litellm@v1.92.0...v1.95.0) --- updated-dependencies: - dependency-name: litellm dependency-version: 1.95.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Guy Korland <gkorland@gmail.com>

--- updated-dependencies: - dependency-name: aiohttp dependency-version: 3.14.3 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Guy Korland <gkorland@gmail.com>

Bumps [sqlglot](https://github.com/tobymao/sqlglot) from 30.13.0 to 30.15.0. - [Commits](tobymao/sqlglot@v30.13.0...v30.15.0) --- updated-dependencies: - dependency-name: sqlglot dependency-version: 30.15.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Guy Korland <gkorland@gmail.com>

…date (#694) Bumps the npm_and_yarn group with 1 update in the / directory: [brace-expansion](https://github.com/juliangruber/brace-expansion). Updates `brace-expansion` from 1.1.13 to 1.1.18 - [Release notes](https://github.com/juliangruber/brace-expansion/releases) - [Commits](juliangruber/brace-expansion@v1.1.13...v1.1.18) Updates `brace-expansion` from 5.0.7 to 5.0.9 - [Release notes](https://github.com/juliangruber/brace-expansion/releases) - [Commits](juliangruber/brace-expansion@v1.1.13...v1.1.18) --- updated-dependencies: - dependency-name: brace-expansion dependency-version: 1.1.18 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: brace-expansion dependency-version: 5.0.9 dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Guy Korland <gkorland@gmail.com>

Bumps [@radix-ui/react-context-menu](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/context-menu) from 2.2.16 to 2.3.7. - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/context-menu/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/context-menu) --- updated-dependencies: - dependency-name: "@radix-ui/react-context-menu" dependency-version: 2.3.7 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Guy Korland <gkorland@gmail.com>

Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) from 22.19.7 to 26.1.2. - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) --- updated-dependencies: - dependency-name: "@types/node" dependency-version: 26.1.2 dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Guy Korland <gkorland@gmail.com>

…#689) Bumps [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) from 8.63.0 to 8.66.0. - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.66.0/packages/typescript-eslint) --- updated-dependencies: - dependency-name: typescript-eslint dependency-version: 8.66.0 dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Guy Korland <gkorland@gmail.com>

…th 3 updates (#687) Bumps the npm-minor-patch group with 3 updates in the /app directory: [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react), [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) and [postcss](https://github.com/postcss/postcss). Updates `@types/react` from 19.2.17 to 19.2.18 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react) Updates `@types/react-dom` from 19.2.3 to 19.2.4 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom) Updates `postcss` from 8.5.25 to 8.5.26 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.5.25...8.5.26) --- updated-dependencies: - dependency-name: "@types/react" dependency-version: 19.2.18 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-minor-patch - dependency-name: "@types/react-dom" dependency-version: 19.2.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-minor-patch - dependency-name: postcss dependency-version: 8.5.26 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps the uv group with 1 update in the / directory: [cryptography](https://github.com/pyca/cryptography). Updates `cryptography` from 48.0.1 to 50.0.0 - [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst) - [Commits](pyca/cryptography@48.0.1...50.0.0) --- updated-dependencies: - dependency-name: cryptography dependency-version: 50.0.0 dependency-type: indirect dependency-group: uv ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Guy Korland <gkorland@gmail.com>

The root package-lock.json links app/ via "queryweaver-app": "file:app", so it embeds app's dependency tree. Recent Dependabot PRs updated app/package.json and app/package-lock.json only, leaving the root lock stale and breaking the Playwright workflow's "Install root dependencies" step with npm ci EUSAGE (out-of-sync lock file). Regenerated with npm install --package-lock-only. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Unblocks the @eslint/js 9 -> 10 bump (#691), which alone caused an ERESOLVE failure because @eslint/js@10 peers on eslint@^10 while the project pinned eslint@^9. Coordinated bumps: - eslint ^9.32.0 -> ^10.8.1 - @eslint/js ^9.32.0 -> ^10.0.1 - eslint-plugin-react-hooks ^5.2.0 -> ^7.1.1 (v5 peers on eslint <=9) typescript-eslint 8.66 and eslint-plugin-react-refresh 0.4.20 already declare eslint 10 support, so they are unchanged. Root package-lock.json regenerated as well, since it embeds the app workspace tree via "queryweaver-app": "file:app". Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

- Bump litellm ~=1.82.0 → ~=1.83.0 (fixes CVE: auth bypass via OIDC cache key collision, privilege escalation via unrestricted proxy config) - Bump fastmcp >=2.13.1 → >=3.2.0 (fixes CVE: SSRF & path traversal in OpenAPI provider) - Add aiohttp>=3.13.4 constraint (fixes multiple HTTP-level CVEs: duplicate Host headers, header injection, multipart bypass, memory DoS, CRLF injection, cookie leaks, SSRF on Windows) - Add npm override for lodash-es to 4.18.1 (fixes prototype pollution via array path bypass, code injection via template imports) - Update fastmcp import path from deprecated fastmcp.server.openapi to fastmcp.server.providers.openapi Closes #125, #124, #123, #122, #121, #120, #119, #118, #117, #116, #115, #114, #113, #112, #111, #110, #109, #108, #107, #106, #105, #104, #103, #102, #101, #100, #99, #98, #97, #96 Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com> Co-authored-by: galshubeli <124919062+galshubeli@users.noreply.github.com> Co-authored-by: gkorland <753206+gkorland@users.noreply.github.com>

Bumps [litellm](https://github.com/BerriAI/litellm) from 1.95.0 to 1.96.2. - [Release notes](https://github.com/BerriAI/litellm/releases) - [Commits](BerriAI/litellm@v1.95.0...v1.96.2) --- updated-dependencies: - dependency-name: litellm dependency-version: 1.96.2 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>

Bumps [rojopolis/spellcheck-github-actions](https://github.com/rojopolis/spellcheck-github-actions) from 0.64.0 to 0.66.0. - [Release notes](https://github.com/rojopolis/spellcheck-github-actions/releases) - [Changelog](https://github.com/rojopolis/spellcheck-github-actions/blob/master/CHANGELOG.md) - [Commits](rojopolis/spellcheck-github-actions@26a39cd...c1934c5) --- updated-dependencies: - dependency-name: rojopolis/spellcheck-github-actions dependency-version: 0.66.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>

Bumps [pylint](https://github.com/pylint-dev/pylint) from 4.0.6 to 4.0.7. - [Release notes](https://github.com/pylint-dev/pylint/releases) - [Commits](pylint-dev/pylint@v4.0.6...v4.0.7) --- updated-dependencies: - dependency-name: pylint dependency-version: 4.0.7 dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>

Bumps [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) from 9.0.0 to 10.0.0. - [Release notes](https://github.com/astral-sh/setup-uv/releases) - [Commits](astral-sh/setup-uv@c771a70...ae62891) --- updated-dependencies: - dependency-name: astral-sh/setup-uv dependency-version: 10.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>

Bumps [fastmcp](https://github.com/PrefectHQ/fastmcp) from 3.4.6 to 3.4.7. - [Release notes](https://github.com/PrefectHQ/fastmcp/releases) - [Changelog](https://github.com/PrefectHQ/fastmcp/blob/main/docs/changelog.mdx) - [Commits](PrefectHQ/fastmcp@v3.4.6...v3.4.7) --- updated-dependencies: - dependency-name: fastmcp dependency-version: 3.4.7 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>

…core-0.29.3 chore(deps): bump graphiti-core from 0.29.2 to 0.29.3

….4.7 chore(deps): bump fastmcp from 3.4.6 to 3.4.7

…cript-eslint-8.67.0

…ging/typescript-eslint-8.67.0 chore(deps-dev): bump typescript-eslint from 8.66.0 to 8.67.0 in /app

…sh/setup-uv-10.0.0

…ng/astral-sh/setup-uv-10.0.0 chore(deps): bump astral-sh/setup-uv from 9.0.0 to 10.0.0

…is/spellcheck-github-actions-0.66.0

…ng/rojopolis/spellcheck-github-actions-0.66.0 chore(deps): bump rojopolis/spellcheck-github-actions from 0.64.0 to 0.66.0

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

chore(deps-dev): bump pylint from 4.0.6 to 4.0.7

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Bump QueryWeaver version to 0.3.2

overcut-ai · 2026-08-18T08:31:42Z

Completed Working on "Code Review"

✅ Review publishing complete. Posted chunk processing completed and final review submitted with event COMMENT. Total comments: 7 across 6 files.

✅ Workflow completed successfully.

👉 View complete log

coderabbitai · 2026-08-18T08:31:48Z

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: 78f08671-6472-4c42-89ef-92c6bdbc98c0

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

🔍 Trigger review

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands.}

railway-app · 2026-08-18T08:31:58Z

🚅 Deployed to the QueryWeaver-pr-713 environment in queryweaver

Service	Status	Web	Updated (UTC)
QueryWeaver	✅ Success (View Logs)	Web	Aug 18, 2026 at 8:33 am

github-actions · 2026-08-18T08:32:29Z

Dependency Review

The following issues were found:

✅ 0 vulnerable package(s)
✅ 0 package(s) with incompatible licenses
✅ 0 package(s) with invalid SPDX license definitions
⚠️ 1 package(s) with unknown licenses.
⚠️ 8 packages with OpenSSF Scorecard issues.

View full job summary

overcut-ai

Review Summary

Thanks for the update. I reviewed the posted findings and there are 7 MAJOR issues to address before this is in a healthy state. No blocker/critical items were flagged, so this is submitted as a comment-only review.

Findings by severity

BLOCKER: 0
CRITICAL: 0
MAJOR: 7
MINOR: 0
SUGGESTION: 0
PRAISE: 0

Affected files (6)

api/helpers/redaction.py
.github/workflows/pylint.yml
.github/workflows/tests.yml
e2e/tests/sidebar.spec.ts
SECURITY.md
CODE_OF_CONDUCT.md

Key themes

Security/governance regressions: Redaction edge case and removal of repository-level security/conduct policies.
CI reproducibility risk: Floating uv versions in workflows can introduce nondeterministic failures.
E2E reliability/coverage gaps: Router migration tests miss core back-navigation behavior and use brittle 404 assertions.

Next steps

Fix the redaction regex edge case and add unit tests for quoted secret formats.
Pin uv to a fixed version in all affected workflows.
Strengthen sidebar E2E tests to verify back navigation and stable NotFound page selectors.
Restore or replace SECURITY.md and CODE_OF_CONDUCT.md with clear canonical pointers.

dependabot Bot and others added 30 commits July 17, 2026 16:51

ci: correct setup-node version annotation to v7.0.0

e0cac6d

The pin was bumped to the v7.0.0 commit but the inline comment still read # v6. Update the annotation to match (flagged by CodeRabbit and Copilot review). Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Merge pull request #661 from FalkorDB/deps/combined-dependabot-2026-0…

0113633

…7-21 chore(deps): combine open Dependabot updates

Merge pull request #678 from FalkorDB/deps/combined-dependabot-2026-0…

180b407

…8-03 chore(deps): combine open Dependabot updates

Remove redundant community health files in favour of org-wide defaults (

ce2b58c

#681) * Remove redundant CODE_OF_CONDUCT.md in favour of the org-wide default * Remove redundant SECURITY.md in favour of the org-wide default

Naseem77 and others added 15 commits August 17, 2026 13:31

Merge pull request #705 from FalkorDB/dependabot/uv/staging/graphiti-…

f17061a

…core-0.29.3 chore(deps): bump graphiti-core from 0.29.2 to 0.29.3

Merge branch 'staging' into dependabot/uv/staging/fastmcp-3.4.7

130473c

Merge pull request #703 from FalkorDB/dependabot/uv/staging/fastmcp-3…

c7b244a

….4.7 chore(deps): bump fastmcp from 3.4.6 to 3.4.7

Merge branch 'staging' into dependabot/npm_and_yarn/app/staging/types…

f945774

…cript-eslint-8.67.0

Merge pull request #704 from FalkorDB/dependabot/npm_and_yarn/app/sta…

684abf2

…ging/typescript-eslint-8.67.0 chore(deps-dev): bump typescript-eslint from 8.66.0 to 8.67.0 in /app

Merge branch 'staging' into dependabot/github_actions/staging/astral-…

3b232d5

…sh/setup-uv-10.0.0

Merge pull request #701 from FalkorDB/dependabot/github_actions/stagi…

b663b9f

…ng/astral-sh/setup-uv-10.0.0 chore(deps): bump astral-sh/setup-uv from 9.0.0 to 10.0.0

Merge branch 'staging' into dependabot/github_actions/staging/rojopol…

c459d50

…is/spellcheck-github-actions-0.66.0

Merge pull request #699 from FalkorDB/dependabot/github_actions/stagi…

dbe38f5

…ng/rojopolis/spellcheck-github-actions-0.66.0 chore(deps): bump rojopolis/spellcheck-github-actions from 0.64.0 to 0.66.0

Merge branch 'staging' into dependabot/uv/staging/pylint-4.0.7

78382f9

Bump version to 0.3.2

3c479ee

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Merge pull request #700 from FalkorDB/dependabot/uv/staging/pylint-4.0.7

df7fb4c

chore(deps-dev): bump pylint from 4.0.6 to 4.0.7

Synchronize frontend workspace lockfile

2de0e70

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Merge branch 'staging' into bump-version-0-3-2

9b3ad4f

Merge pull request #712 from FalkorDB/bump-version-0-3-2

99411bb

Bump QueryWeaver version to 0.3.2

Copilot AI lite review requested due to automatic review settings August 18, 2026 08:31

railway-app Bot temporarily deployed to queryweaver / QueryWeaver-pr-713 August 18, 2026 08:31 Destroyed

Naseem77 requested review from galshubeli and removed request for Copilot August 18, 2026 08:32

Copilot started reviewing on behalf of Naseem77 August 18, 2026 08:32 View session

Merge branch 'main' into staging

6915561

railway-app Bot temporarily deployed to queryweaver / QueryWeaver-pr-713 August 18, 2026 08:32 Destroyed

railway-app Bot temporarily deployed to queryweaver / staging August 18, 2026 08:32 Inactive

galshubeli approved these changes Aug 18, 2026

View reviewed changes

overcut-ai Bot reviewed Aug 18, 2026

View reviewed changes

galshubeli merged commit 471574c into main Aug 18, 2026
21 checks passed

Navigation Menu

Uh oh!

Staging - #713

Staging#713
galshubeli merged 83 commits into
mainfrom
staging

Naseem77 commented Aug 18, 2026

Uh oh!

overcut-ai Bot commented Aug 18, 2026 •

edited

Loading

Uh oh!

coderabbitai Bot commented Aug 18, 2026 •

edited

Loading

Review skipped

Uh oh!

railway-app Bot commented Aug 18, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Aug 18, 2026 •

edited

Loading

Uh oh!

overcut-ai Bot left a comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants

Uh oh!

Conversation

Naseem77 commented Aug 18, 2026

Uh oh!

overcut-ai Bot commented Aug 18, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Completed Working on "Code Review"

Uh oh!

coderabbitai Bot commented Aug 18, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Review skipped

Uh oh!

railway-app Bot commented Aug 18, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Aug 18, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Dependency Review

Uh oh!

overcut-ai Bot left a comment

Choose a reason for hiding this comment

Review Summary

Findings by severity

Affected files (6)

Key themes

Next steps

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants

overcut-ai Bot commented Aug 18, 2026 •

edited

Loading

coderabbitai Bot commented Aug 18, 2026 •

edited

Loading

railway-app Bot commented Aug 18, 2026 •

edited

Loading

github-actions Bot commented Aug 18, 2026 •

edited

Loading