[sh16011993]

Summary

Round 2 of the Release 4.5 npm package upgrades for the web and backend packages.

Packages upgraded

Web (sources/packages/web)

Package	From	To
axios	^1.21.0	^1.21.1
tslib	^2.8.1	^2.9.1
vue	^3.5.44	^3.5.45
vuetify	^4.3.1	^4.3.3
sass	^1.107.0	^1.108.1
vite	^8.3.5	^8.3.7
eslint	^10.13.0	^10.14.0
eslint-plugin-vue	(transitive only)	^10.12.0 (added explicitly)

Backend (sources/packages/backend)

Package	From	To
@aws-sdk/client-s3	^3.1159.0	^3.1165.0
@aws-sdk/types	^3.975.0	^3.975.1
@bull-board/api, express, nestjs, ui	9.10.5	9.12.0
@camunda8/sdk	^8.8.18	^8.8.20
@nestjs/bull, bull-shared, bullmq, mapped-types, passport	^12.0.0	^12.0.1
@nestjs/common, core, microservices, platform-express, testing	^12.3.2	^12.4.2
@nestjs/jwt	^12.0.3	^12.0.4
@nestjs/swagger	^12.0.5	^12.1.1
@nestjs/typeorm	^12.0.2	^12.0.3
@nestjs/cli	^12.0.11	^12.0.12
@nestjs/schematics	^12.0.12	^12.0.13
axios	^1.21.0	^1.21.1
bullmq	^6.5.1	^6.7.2
cron-parser	^5.10.2	^5.10.4
dotenv	^18.0.9	^18.0.10
qs	^6.17.0	^6.17.1
tslib	^2.8.1	^2.9.1
eslint	^10.13.0	^10.14.0
globals	^17.13.0	^17.14.0
supertest	^7.3.1	^7.3.2
typescript-eslint	^8.72.1	^8.72.2

Web ESLint peer dependency fix

• npm audit fix failed because the transitive eslint-plugin-vue@10.2.0 only accepts eslint@^8.57.0 || ^9.0.0, while the project uses ESLint 10.
• Added eslint-plugin-vue@^10.3.0 explicitly, which accepts ESLint 10.
• ESLint stays on 10.x and is aligned with the backend.

Known issues

• npm audit reports 11 moderate vulnerabilities. They are all minimatch (GHSA-g3hv-75wg-m249) in the dev-only @typescript-eslint/* lint tooling and do not ship in the bundle.
• The only fix npm offers is a breaking downgrade, so it is not applied.
• npm run lint reports 2 no-unused-vars errors on FormSubmissionItems, in FormSubmission.vue and FormSubmissionView.vue. The component is used in the template, so they look like false positives. They are not yet confirmed as new or pre-existing.

Validation

• npm install and npm audit fix run without ERESOLVE.
• npm run build passes (web).
• npm run lint (web) has 2 errors, noted above.

Impacted apps

SIMS Web, SIMS Api, Workers and Queue-Consumers (dependency updates).

[Copilot]

🟢 Approval recommended

No active review issues are reported for the frontend and backend dependency refresh.

No open issues 🎉

1 file not reviewed

• sources/packages/web/package-lock.json: Generated file

What changed in this PR

Refreshes dependencies for the SIMS Vue frontend and NestJS backend without changing application code.

Changes:

• Updates frontend runtime and build packages, including Vue, Vuetify, Axios, Sass, and Vite.
• Moves frontend ESLint from v10 to v9 and explicitly adds eslint-plugin-vue.
• Upgrades backend framework, integration, queue, and development packages, with corresponding lockfile updates.

File	Description
sources/​packages/​web/​package.json	Updates frontend dependencies and adjusts lint tooling.
sources/​packages/​web/​package-lock.json	Records updated frontend dependency resolutions.
sources/​packages/​backend/​package.json	Updates backend runtime and development dependencies.
sources/​packages/​backend/​package-lock.json	Records updated backend dependency resolutions.

_{Review effort: Balanced}

[andrewsignori-aot]

Is there a problem with changing this one to a more up-to-date version, like 10.12.0? This is the same as what is already present in the lock file.

[andrewsignori-aot]

Nice work, thanks for moving this forward, one minor comment only.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[github-actions]

Backend Unit Tests Coverage Report

Totals
Statements:	19.95% ( 5103 / 25581 )
Methods:	9.53% ( 298 / 3128 )
Lines:	24.4% ( 4369 / 17904 )
Branches:	9.58% ( 436 / 4549 )

[github-actions]

E2E Workflow Workers Coverage Report

Totals
Statements:	48.61% ( 3016 / 6205 )
Methods:	38.49% ( 316 / 821 )
Lines:	55.41% ( 2279 / 4113 )
Branches:	33.12% ( 421 / 1271 )

[andrewsignori-aot]

👍

[github-actions]

E2E Queue Consumers Coverage Report

Totals
Statements:	82.2% ( 10417 / 12673 )
Methods:	81.44% ( 1356 / 1665 )
Lines:	85.68% ( 7776 / 9076 )
Branches:	66.51% ( 1285 / 1932 )

[github-actions]

E2E SIMS API Coverage Report

Totals
Statements:	71.59% ( 16032 / 22394 )
Methods:	69.44% ( 1927 / 2775 )
Lines:	74.55% ( 11387 / 15275 )
Branches:	62.57% ( 2718 / 4344 )