[Snyk] Fix for 2 vulnerabilities

[bozza-man]

Snyk has created this PR to fix 2 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

• Watcher/package.json
• Watcher/package-lock.json

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Prototype Pollution SNYK-JS-AXIOS-15252993	225
	Regular Expression Denial of Service (ReDoS) SNYK-JS-AJV-15274295	157

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)
🦉 Prototype Pollution

---

Note

Medium Risk
Dependency major-version upgrades for axios and style-loader may introduce subtle runtime/build behavior changes despite being a targeted security fix.

Overview
Updates frontend npm dependencies to remediate Snyk-reported vulnerabilities by upgrading axios from 0.21.x to 1.13.5 and style-loader from 1.3.0 to 3.0.0.

Regenerates package-lock.json accordingly, pulling in new transitive packages (e.g., form-data, proxy-from-env) and updating versions/metadata for related dependencies.

^{Written by Cursor Bugbot for commit b6a5acb. This will update automatically on new commits. Configure here.}

[coderabbitai]

Important

Review skipped

Ignore keyword(s) in the title.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

✨ Finishing touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Post copyable unit tests in a comment
• Commit unit tests in branch snyk-fix-1c96c89e9136ffc79f4e7cc9433b9b67

Tip

Issue Planner is now in beta. Read the docs and try it out! Share your feedback on Discord.

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: b6a5acb7e0

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[chatgpt-codex-connector]

Rebuild frontend bundle after upgrading npm dependencies

Updating axios/style-loader in package.json without committing a regenerated Watcher/frontend/static/frontend/main.js means the shipped UI code does not actually pick up these upgrades in this repo’s production path: the template serves the checked-in bundle (Watcher/frontend/templates/frontend/index.html, line 20) and the Docker image only does npm install + collectstatic (Dockerfile, lines 22-31) with no webpack build step. As a result, this security fix commit can leave deployed frontend code unchanged.

Useful? React with 👍 / 👎.