chore(deps): Bump react-dropzone from 14.4.0 to 15.0.0 in /frontend

[dependabot]

Bumps react-dropzone from 14.4.0 to 15.0.0.

Release notes

Sourced from react-dropzone's releases.

v15.0.0

15.0.0 (2026-02-10)

• fix!: reset isDragReject after drop (c9d1c31)

BREAKING CHANGES

• isDragReject only reflects active drag state and is cleared after drop. Use fileRejections or onDropRejected/onDrop for post-drop rejection UI.

v14.4.1

14.4.1 (2026-02-10)

Bug Fixes

• prevent tarball from being included in published package (7919a23)

Commits

• 7f17a88 style: remove trailing newline in index.js
• aad0135 chore: remove .rebase-note
• ec9467b chore: apply semantic commit format to all commits
• e60a016 chore: finalize semantic commit rebase
• ac76751 chore: rebase commits to use semantic commit format
• ea137b3 chore: remove CHANGELOG.md in favor of semantic commits
• 1dc5ef3 docs: clarify isDragReject post-drop behavior
• c9d1c31 fix!: reset isDragReject after drop
• 9247d71 chore: add *.tgz to .gitignore
• 7919a23 fix: prevent tarball from being included in published package
• See full diff in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

[github-actions]

Dependency Update Analysis

Update Type: major
Security Update: false
Risk Level: high
Auto-merge Eligible: false

Analysis Details

• PR Title: chore(deps): Bump react-dropzone from 14.4.0 to 15.0.0 in /frontend
• Updated by: dependabot[bot]
• Branch: dependabot/npm_and_yarn/frontend/react-dropzone-15.0.0

Security Audit Results

Frontend (npm audit)

INFO - Unable to parse npm audit results

Backend (safety check)

INFO - Unable to parse safety check results

[github-actions]

Manual Review Required

This dependency update requires manual review:

Reason:

• Update Type: major
• Risk Level: high
• Auto-merge Eligible: false

Review Checklist:

• Review changelog for breaking changes
• Test critical application paths
• Verify security implications
• Check for API compatibility
• Validate configuration changes

Next Steps:

1. Review the changes thoroughly
2. Test locally if needed
3. Approve and merge when ready

cc: @maintainers

[github-actions]

Dependency Update Analysis

Update Type: major
Security Update: false
Risk Level: high
Auto-merge Eligible: false

Analysis Details

• PR Title: chore(deps): Bump react-dropzone from 14.4.0 to 15.0.0 in /frontend
• Updated by: dependabot[bot]
• Branch: dependabot/npm_and_yarn/frontend/react-dropzone-15.0.0

Security Audit Results

Frontend (npm audit)

INFO - Unable to parse npm audit results

Backend (safety check)

INFO - Unable to parse safety check results

[github-actions]

Manual Review Required

This dependency update requires manual review:

Reason:

• Update Type: major
• Risk Level: high
• Auto-merge Eligible: false

Review Checklist:

• Review changelog for breaking changes
• Test critical application paths
• Verify security implications
• Check for API compatibility
• Validate configuration changes

Next Steps:

1. Review the changes thoroughly
2. Test locally if needed
3. Approve and merge when ready

cc: @maintainers

[github-actions]

Dependency Update Analysis

Update Type: major
Security Update: false
Risk Level: high
Auto-merge Eligible: false

Analysis Details

• PR Title: chore(deps): Bump react-dropzone from 14.4.0 to 15.0.0 in /frontend
• Updated by: dependabot[bot]
• Branch: dependabot/npm_and_yarn/frontend/react-dropzone-15.0.0

Security Audit Results

Frontend (npm audit)

INFO - Unable to parse npm audit results

Backend (safety check)

INFO - Unable to parse safety check results

[github-actions]

Manual Review Required

This dependency update requires manual review:

Reason:

• Update Type: major
• Risk Level: high
• Auto-merge Eligible: false

Review Checklist:

• Review changelog for breaking changes
• Test critical application paths
• Verify security implications
• Check for API compatibility
• Validate configuration changes

Next Steps:

1. Review the changes thoroughly
2. Test locally if needed
3. Approve and merge when ready

cc: @maintainers

[github-actions]

Dependency Update Analysis

Update Type: major
Security Update: false
Risk Level: high
Auto-merge Eligible: false

Analysis Details

• PR Title: chore(deps): Bump react-dropzone from 14.4.0 to 15.0.0 in /frontend
• Updated by: dependabot[bot]
• Branch: dependabot/npm_and_yarn/frontend/react-dropzone-15.0.0

Security Audit Results

Frontend (npm audit)

INFO - Unable to parse npm audit results

Backend (safety check)

INFO - Unable to parse safety check results

[github-actions]

Manual Review Required

This dependency update requires manual review:

Reason:

• Update Type: major
• Risk Level: high
• Auto-merge Eligible: false

Review Checklist:

• Review changelog for breaking changes
• Test critical application paths
• Verify security implications
• Check for API compatibility
• Validate configuration changes

Next Steps:

1. Review the changes thoroughly
2. Test locally if needed
3. Approve and merge when ready

cc: @maintainers

[github-actions]

Dependency Update Analysis

Update Type: major
Security Update: false
Risk Level: high
Auto-merge Eligible: false

Analysis Details

• PR Title: chore(deps): Bump react-dropzone from 14.4.0 to 15.0.0 in /frontend
• Updated by: dependabot[bot]
• Branch: dependabot/npm_and_yarn/frontend/react-dropzone-15.0.0

Security Audit Results

Frontend (npm audit)

INFO - Unable to parse npm audit results

Backend (safety check)

INFO - Unable to parse safety check results

[github-actions]

Manual Review Required

This dependency update requires manual review:

Reason:

• Update Type: major
• Risk Level: high
• Auto-merge Eligible: false

Review Checklist:

• Review changelog for breaking changes
• Test critical application paths
• Verify security implications
• Check for API compatibility
• Validate configuration changes

Next Steps:

1. Review the changes thoroughly
2. Test locally if needed
3. Approve and merge when ready

cc: @maintainers

[github-actions]

Dependency Update Analysis

Update Type: major
Security Update: false
Risk Level: high
Auto-merge Eligible: false

Analysis Details

• PR Title: chore(deps): Bump react-dropzone from 14.4.0 to 15.0.0 in /frontend
• Updated by: dependabot[bot]
• Branch: dependabot/npm_and_yarn/frontend/react-dropzone-15.0.0

Security Audit Results

Frontend (npm audit)

INFO - Unable to parse npm audit results

Backend (safety check)

INFO - Unable to parse safety check results

[github-actions]

Manual Review Required

This dependency update requires manual review:

Reason:

• Update Type: major
• Risk Level: high
• Auto-merge Eligible: false

Review Checklist:

• Review changelog for breaking changes
• Test critical application paths
• Verify security implications
• Check for API compatibility
• Validate configuration changes

Next Steps:

1. Review the changes thoroughly
2. Test locally if needed
3. Approve and merge when ready

cc: @maintainers

[remyluslosius]

Closing as Dependabot queue cleanup: this individual PR predates the grouped Dependabot config and is months behind main. Dependabot will re-propose any still-outstanding update for this package at its current version in the next grouped run (see #489 production / #488 development). Closing avoids the stale-version + package-lock conflict cascade.

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.