fix(deps): patch frontend CVEs via pnpm.overrides (js-cookie, brace-expansion, qs), version 1.12.13

fix(deps): bump samgis-web==1.3.8 (starlette PYSEC-2026-161, idna GHSA-65pc-fj4g-8rjx), version 1.12.12

fix(deps): bump samgis-web==1.3.8 (starlette PYSEC-2026-161, idna GHSA-65pc-fj4g-8rjx), version 1.12.12

fix(deps,security): bump samgis 1.12.9→1.12.11, update full dep stack

ci: update .gitignore

fix(deps): bump urllib3 2.6.3→2.7.0, fix fast-uri/postcss CVEs in frontend

fix(deps): drop pip-audit, bump mistune 3.2.1, cap pyright <2.0.0

chore(pre-commit): add uv-pre-commit hooks and freeze refs to SHA

fix(deps): bump pillow 12.1.1 → 12.2.0, release 1.12.9

chore: bump version to 1.12.8, update frontend deps

chore: add .pnpm-store/ to .gitignore

docs(supply-chain): add hardening TODO with current baseline

chore: bump version to 1.12.7, pnpm 10.32.1 → 10.33.0

fix(deps): update frontend deps, fix picomatch ReDoS (GHSA-c2c7-rcm5-vvqj)

chore: bump version to 1.12.6

chore(deps): add pip-audit as dev dependency

fix(deps): upgrade requests 2.32.5 → 2.33.0 (CVE-2026-25645)

docs: add sam2_onnx API docs, update OpenAPI spec, remove dead links

docs: update Sphinx RST stubs, replace sam-quantized refs with SAM2 ONNX

docs: update changelog and README for 1.12.5 Docker build fixes

chore: bump version to 1.12.5

docs: document e2e smoke test commands and changelog for 1.12.4

fix(test): smoke tests auto-skip when backend is unreachable

chore: bump version to 1.12.4

test: add Playwright smoke test for production build

fix(frontend): Vite 8 Rolldown UMD compatibility for Leaflet plugins

feat: migrate from Poetry to uv as package manager

ci: update .gitignore

fix: harden supply chain and patch CVE-2026-33228

fix(frontend): replace non-null assertions with guards in map callbacks

test: fix env leak in test_resolve_model_folder, add MODEL_FOLDER tests

docs: document Alpine Dockerfile as POC in CLAUDE.md

fix(frontend): convert map variable to ref to fix Vue prop type warning

style(frontend): add section headers to helpers.ts for readability

test: mark real inference test as integration with auto-skip

test(frontend): add sendMLRequest unit tests and PagePredictionMap conditional rendering tests

test: add unit tests for resolve_model_folder, download_models, and client_health error paths

feat(frontend): display SAM2 model variant in map description

docs(frontend): document driver.js fork history in input.css

chore(frontend): remove dead env vars and add .env.example

style(frontend): replace inline z-index with Tailwind z-[9999]

fix(frontend): remove debug console.log from setGeomanControls

refactor(frontend): extract driverSteps to tour.ts

refactor(frontend): remove unused htmlStatusMessages from constants

chore: remove sam-quantized git submodule

fix(tests): update mock target from removed get_url_tile alias to get_source_tile

refactor: migrate model resolution from sam-quantized submodule to SAM2 HF registry

build: migrate Docker images to Docker Hardened Images (DHI)

refactor: apply Python and TypeScript code quality improvements

chore(deps): bump samgis-web to 1.3.5 and add typescript-eslint