Nest 2026.6.20

What's Changed

• Require pip hashes by @arkid15r in #4920
• Address backend video target issues by @arkid15r in #4923
• chore(deps): bump docker/setup-buildx-action from 4.0.0 to 4.1.0 in the version-updates group across 1 directory by @dependabot[bot] in #4928
• Migrate lighthouse workflow to arm64 by @hassaansaleem28 in #4929
• chore(deps): bump https://github.com/tox-dev/pyproject-fmt in / by @dependabot[bot] in #4926
• chore(deps): bump zaproxy/zap-stable from 2ec1d5d to 7c2f8af in /docker/zap in the version-updates group across 1 directory by @dependabot[bot] in #4927
• Mitigate multiple vulnerabilities in dependencies by @arkid15r in #4947
• chore(deps): bump aws-actions/configure-aws-credentials from 6.1.1 to 6.1.2 in the version-updates group across 1 directory by @dependabot[bot] in #4942
• chore(deps): bump strawberry-graphql-django in / by @dependabot[bot] in #4925
• fix: add DJANGO_SECRET_KEY documentation for local setup by @abhaybansal16 in #4915
• chore(deps): bump dayjs in /e2e by @dependabot[bot] in #4941
• feat: add cacheSeconds parameters to some dynamic badges by @devnchill in #4954
• chore(deps): bump @sentry/nextjs in /frontend by @dependabot[bot] in #4957
• Bump Playwright to 1.61.0 by @Mr-Rahul-Paul in #4960
• chore(deps): bump https://github.com/igorshubovych/markdownlint-cli in / by @dependabot[bot] in #4955
• chore(deps): bump aquasec/trivy from 0.71.0 to 0.71.1 in /docker/trivy in the version-updates group across 1 directory by @dependabot[bot] in #4963
• Add missing CI/CD timeouts by @arkid15r in #4964
• stabilize chapter E2E tests by blocking external resources by @Mr-Rahul-Paul in #4967
• fix(frontend): fix TypeScript errors from apexcharts 5.13.0 type narrowing by @Adarshkumar0509 in #4937
• Bump pnpm to 11.7.0 by @arkid15r in #4965
• chore(deps): bump date-fns in /frontend by @dependabot[bot] in #4972
• chore(deps): bump aws-actions/configure-aws-credentials from 6.1.2 to 6.1.3 in the version-updates group across 1 directory by @dependabot[bot] in #4971
• chore(deps): bump semgrep/semgrep from 1.165.0 to 1.166.0 in /docker/semgrep in the version-updates group across 1 directory by @dependabot[bot] in #4970
• chore(deps): bump the version-updates group across 3 directories with 1 update by @dependabot[bot] in #4969
• Mitigate GHSA-vmh5-mc38-953g by @arkid15r in #4976
• Bump aiohttp to v3.14.1 by @arkid15r in #4977
• chore(deps): bump the npm_and_yarn group across 1 directory with 2 updates by @dependabot[bot] in #4950
• chore(deps): bump the version-updates group across 2 directories with 1 update by @dependabot[bot] in #4981
• fix: read Slack credentials from .env in local build by @Mr-Rahul-Paul in #4956
• Mitigate GHSA-h67p-54hq-rp68 by @arkid15r in #4986
• chore(deps): bump @sentry/nextjs in /frontend by @dependabot[bot] in #4982
• chore(deps): bump isomorphic-dompurify in /frontend by @dependabot[bot] in #4983
• Split CodeQL workflows by @arkid15r in #4991
• Pin msgpack to v1.2.1 by @arkid15r in #4992
• Add ability to add past deadlines to issues in mentorship portal by @kasya in #4989
• Bump dompurify to v3.4.11 by @arkid15r in #4993
• Bump langsmith to v0.8.18 by @arkid15r in #4997
• Update CodeQL workflow triggers by @arkid15r in #4998
• Pin opentelemetry/core to v2.8.0 by @arkid15r in #5000

New Contributors

• @abhaybansal16 made their first contribution in #4915

Full Changelog: 2026.6.13...2026.6.20