ICTU · fniessink · Jul 20, 2026 · Jul 20, 2026
diff --git a/components/api_server/pyproject.toml b/components/api_server/pyproject.toml
@@ -31,7 +31,7 @@ dev = [
     "tools",
     "types-ldap3==2.9.13.20260518",
     "types-python-dateutil==2.9.0.20260518",
-    "types-requests==2.33.0.20260518",
+    "types-requests==2.33.0.20260712",
 ]
 
 [tool.uv]

diff --git a/components/api_server/uv.lock b/components/api_server/uv.lock
diff --git a/components/collector/uv.lock b/components/collector/uv.lock
diff --git a/components/frontend/Dockerfile b/components/frontend/Dockerfile
@@ -12,7 +12,7 @@ COPY .env /home/frontend
 RUN npm ci --ignore-scripts && \
     npm run --ignore-scripts build
 
-FROM nginxinc/nginx-unprivileged:1.31.1-alpine3.23-slim@sha256:762e8e4e5e103817c4158400fc3753c8e713ff8153b8c3afbb458ae4572bc9a3
+FROM nginxinc/nginx-unprivileged:1.31.2-alpine3.23-slim@sha256:eed3e4c2f3f9285e80610238e0b18fe1bf311c50559434db1969b1cfabd5518b
 
 LABEL maintainer="Quality-time team <quality-time@ictu.nl>"
 LABEL description="Quality-time frontend"

diff --git a/components/frontend/package-lock.json b/components/frontend/package-lock.json
diff --git a/components/frontend/package.json b/components/frontend/package.json
@@ -30,7 +30,7 @@
         "node": "26.5"
     },
     "devDependencies": {
-        "@eslint-react/eslint-plugin": "^5.14.5",
+        "@eslint-react/eslint-plugin": "^5.14.6",
         "@eslint/js": "^10.0.1",
         "@testing-library/dom": "^10.4.1",
         "@testing-library/jest-dom": "^6.9.1",

diff --git a/components/notifier/uv.lock b/components/notifier/uv.lock
diff --git a/components/proxy/Dockerfile b/components/proxy/Dockerfile
@@ -1,11 +1,11 @@
-FROM nginxinc/nginx-unprivileged:1.31.1-alpine3.23-slim@sha256:762e8e4e5e103817c4158400fc3753c8e713ff8153b8c3afbb458ae4572bc9a3 AS compile-image
+FROM nginxinc/nginx-unprivileged:1.31.2-alpine3.23-slim@sha256:eed3e4c2f3f9285e80610238e0b18fe1bf311c50559434db1969b1cfabd5518b AS compile-image
 
 # hadolint ignore=DL3002
 USER root
 # Add the CAP_NET_BIND_SERVICE to provide backwards compatibility, running on privileged port (80)
 RUN apk add --no-cache libcap=2.78-r0 tzdata=2026b-r0 && setcap CAP_NET_BIND_SERVICE=+eip /usr/sbin/nginx
 
-FROM nginxinc/nginx-unprivileged:1.31.1-alpine3.23-slim@sha256:762e8e4e5e103817c4158400fc3753c8e713ff8153b8c3afbb458ae4572bc9a3
+FROM nginxinc/nginx-unprivileged:1.31.2-alpine3.23-slim@sha256:eed3e4c2f3f9285e80610238e0b18fe1bf311c50559434db1969b1cfabd5518b
 
 LABEL maintainer="Quality-time team <quality-time@ictu.nl>"
 LABEL description="Quality-time proxy"

diff --git a/components/renderer/package-lock.json b/components/renderer/package-lock.json
diff --git a/components/shared_code/uv.lock b/components/shared_code/uv.lock
diff --git a/docs/pyproject.toml b/docs/pyproject.toml
@@ -15,7 +15,7 @@ classifiers = [
 [dependency-groups]
 dev = [
     "furo==2025.12.19",
-    "gitpython==3.1.50",
+    "gitpython==3.1.51",
     "myst-parser==5.1.0",
     "pydantic==2.13.4",     # Needed for generating the reference docs from the data model
     "shared-code",

diff --git a/docs/uv.lock b/docs/uv.lock
diff --git a/tests/application_tests/pyproject.toml b/tests/application_tests/pyproject.toml
@@ -16,7 +16,7 @@ dev = [
     "requests==2.34.2",
     "selenium==4.46.0",
     "tools",
-    "types-requests==2.33.0.20260518",
+    "types-requests==2.33.0.20260712",
 ]
 
 [tool.uv]

diff --git a/tests/application_tests/uv.lock b/tests/application_tests/uv.lock
diff --git a/tests/feature_tests/pyproject.toml b/tests/feature_tests/pyproject.toml
@@ -21,7 +21,7 @@ dev = [
     "requests-sse==0.5.3",
     "tools",
     "types-python-dateutil==2.9.0.20260518",
-    "types-requests==2.33.0.20260518",
+    "types-requests==2.33.0.20260712",
 ]
 
 [tool.uv]

diff --git a/tests/feature_tests/uv.lock b/tests/feature_tests/uv.lock
diff --git a/tests/shared_test_code/uv.lock b/tests/shared_test_code/uv.lock
diff --git a/tools/just/uv.lock b/tools/just/uv.lock
diff --git a/tools/release/pyproject.toml b/tools/release/pyproject.toml
@@ -13,7 +13,7 @@ classifiers = [
 [dependency-groups]
 dev = [
     "bump-my-version==1.4.1",
-    "gitpython==3.1.50",
+    "gitpython==3.1.51",
     "python-dateutil==2.9.0.post0",
     "tools",
     "types-python-dateutil==2.9.0.20260518",