chore: batch Dependabot dependency updates

[corrin]

Description

Batch Dependabot dependency maintenance after the production release.

Supersedes Dependabot PRs #423, #424, #425, #426, #427, #428, #429, #430, #431, and #432.

Related Jira Work Item

N/A - dependency maintenance.

Changes

• Updates backend dependencies: certifi 2026.6.17, xero-python 14.0.0, google-genai 2.10.0, jsonpath-python 1.1.6, and reportlab 5.0.0.
• Updates frontend dependencies: @internationalized/date 3.12.2 and vue 3.5.39.
• Updates frontend dev tooling: codesight 1.18.0, vite 8.1.3, and vite-plugin-vue-devtools 8.1.5.
• Regenerates poetry.lock, requirements.txt, frontend/package-lock.json, and package manifests.

Validation

• scripts/check_requirements.sh
• poetry check (existing Poetry metadata deprecation warnings only)
• Commit/pre-push hooks passed, including frontend unit tests, lint, type-check, build, typed router check, workflow formatting, and backend mypy baseline check.

Checklist

Dependency-only maintenance PR. The feature workflow checklist items in the default template do not apply.

Summary by CodeRabbit

• Chores
  • Updated several frontend and backend dependencies to newer compatible versions.
  • Broadened version ranges for a couple of Python packages to allow future minor and major updates within supported limits.
  • Refreshed locked package versions to keep the app and build tooling current.

[coderabbitai]

📝 Walkthrough

Walkthrough

This PR updates dependency version constraints and pinned versions across three files: frontend/package.json (internationalized/date, vue, codesight, vite, vite-plugin-vue-devtools), pyproject.toml (reportlab, google-genai constraint widening), and requirements.txt (certifi, google-genai, jsonpath-python, reportlab, xero-python pin updates).

Changes

Dependency version updates

Layer / File(s)	Summary
Frontend dependency bumps frontend/package.json	Version constraints updated for @internationalized/date, vue, codesight, vite, and vite-plugin-vue-devtools.
Python dependency constraint and lockfile updates pyproject.toml, requirements.txt	reportlab and google-genai constraints widened in pyproject.toml; corresponding and additional pins (certifi, jsonpath-python, xero-python) updated in requirements.txt.

Estimated code review effort: 1 (Trivial) | ~5 minutes

🚥 Pre-merge checks | ✅ 4 | ❌ 1

❌ Failed checks (1 warning)

Check name	Status	Explanation	Resolution
Description check	⚠️ Warning	The PR body covers changes and validation, but it omits the required Jira key and doesn't fully satisfy the template.	Add the uppercase Jira key in the title or body, and keep the description aligned with the required template sections.

✅ Passed checks (4 passed)

Check name	Status	Explanation
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Title check	✅ Passed	The title is concise and accurately summarizes the dependency update batch.

✨ Finishing Touches

📝 Generate docstrings

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch chore/dependabot-batch-2026-07-06

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}