xuang7 opened a new pull request, #8706: URL: https://github.com/apache/texera/pull/8706
### What changes were proposed in this PR? Backport of #7587 and #7588 to release/v1.2: two lockfile-only bumps of transitive frontend dependencies, hono 4.12.31 -> 4.13.1 and js-yaml 4.2.0 -> 4.3.1, matching the versions main has used since 2026-08-12. Both originals are Dependabot security updates. They merged with the release/v1.2 label before the direct-backport automation went live (its first run was 2026-09-04), so no backport was ever pushed or drafted. ### Any related issues, documentation, discussions? Backport of #7587 and #7588. ### How was this PR tested? Both cherry-picks applied cleanly; release-branch CI runs on this PR. ### Was this PR authored or co-authored using generative AI tooling? Generated-by: Claude Fable 5 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
