v4.1 update

[jkcox]

• Merge pull request Fix wchm crash for units returning non-array API responses and improve UX #314
• Merge pull request v4.1 - wchm - use email alias, fix non-array API responses, loading state UX #311
• dependabot updates
• README update

[Copilot]

Pull request overview

Updates UnityBlocks to v4.1 and improves the WCHM (Who Can Help Me) block’s resilience/UX when API responses are not arrays, alongside dependency bumps and expanded project documentation.

Changes:

• Bump plugin version to 4.1.0 and update DOMPurify (plus lockfile transitive updates).
• Harden WCHM autocomplete/contact fetching against non-array responses; consolidate fetches and add loading/empty states.
• Refresh committed build artifacts and expand README; add repo-specific Copilot instructions.

Reviewed changes

Copilot reviewed 9 out of 10 changed files in this pull request and generated 3 comments.

Show a summary per file

File	Description
unityblocks.php	Plugin header version bump to 4.1.0.
src/wchm/components/autoComplete.js	Adds array guards, consolidated fetching with loading/empty UI, and email rendering changes.
package.json	Bumps dompurify devDependency to ^3.4.0.
package-lock.json	Updates lockfile for DOMPurify and other transitive dependency changes.
build/wchm/index.js	Rebuilt editor bundle reflecting WCHM source updates.
build/wchm/index.asset.php	Updates asset hash/version for rebuilt editor bundle.
build/wchm/frontend.js	Rebuilt frontend bundle reflecting WCHM source updates.
build/wchm/frontend.asset.php	Updates asset hash/version for rebuilt frontend bundle.
README.md	Replaces minimal dev notes with comprehensive repo/build/docs guidance.
.github/copilot-instructions.md	Adds Copilot guidance mirroring repository conventions and build notes.

Comments suppressed due to low confidence (1)

src/wchm/components/autoComplete.js:260

• Officer rendering still uses contactInfo.userID to decide whether to display the title/email vs the fallback. Since the mailto now uses contactInfo.email, records with an email but no userID will render only the name (and the fallback won’t trigger if userID is undefined rather than null). Consider switching these conditions/keys to rely on email (or explicitly handle both null and undefined).

                  key={`officer-${contactInfo.userID || contactInfo.contactFullName || index}`}
                >
                  <h4 className="mb-1">{String(contactInfo.contactFullName || "")}</h4>
                  {contactInfo.userID && (
                    <>
                      <p className="mb-1">{String(contactInfo.title || "")}</p>
                      <p>
                        <a href={`mailto:${String(contactInfo.email || "")}`}>
                          {String(contactInfo.email || "")}
                        </a>
                      </p>
                    </>
                  )}

                  {contactInfo.userID === null && (
                    <>
                      <p>Proposal and PreAward Items </p>