Update dependencies across Python, npm, and pre-commit

[stevejalim]

Dep bump sweep using our /update-deps Claude skill

Local verification Results

• Pre-commit hooks: All pass (including ruff 0.16.0, prettier 3.9.6, django-upgrade 1.32.0)
• Jasmine tests: 624 specs, 0 failures
• Python tests: 1202 passed, 1 pre-existing failure (unrelated)
• npm lint: pre-existing failure (generated dirs not excluded from eslint)

Changes Made

requirements/prod.in:

• google-cloud-storage 3.13.0 → 3.13.1
• Markdown 3.10.2 → 3.10.3
• sentry-sdk 2.66.1 → 2.67.1

requirements/dev.in:

• pyquery 2.0.1 → 2.1.0
• pytest-django 4.12.0 → 4.14.0
• ruff 0.15.18 → 0.16.0
• selenium 4.46.0 → 4.47.0
• translate-toolkit 3.19.15 → 3.19.17
• uv 0.11.23 → 0.12.0

package.json:

• jasmine-browser-runner ^4.0.0 → ^5.0.0
• jasmine-core ^6.1.0 → ^7.0.1

package.json (npm update, within range):

• @sentry/browser 10.56.0 → 10.70.0
• caniuse-lite, concurrently, globals, prettier, sinon,
  svgo, webpack, webpack-cli — all updated within semver range

.pre-commit-config.yaml:

• ruff-pre-commit v0.15.18 → v0.16.0
• django-upgrade 1.30.0 → 1.32.0
• prettier @3.3.3 → @3.9.6

Prettier formatting fix:

• media/js/cms/wagtailadmin-locale-badges.js (minor reformatting)

Skipped

• eslint ecosystem (9.x → 10.x) — deferred
• stylelint ecosystem — deferred
• granian 2.7.9 → 2.8.1 — deferred
• wagtail 7.3.3 → 7.4.2 — deferred
• wagtail-localize-smartling 0.12.2 → 0.13.0 — deferred
• webpack-dev-server 5.2.5 → 6.0.0 — deferred
• glob 7.2.3 → 13.0.6 — deferred
• Django 5.2.16 → 6.1 — deferred
• glean-parser 14.5.0 → 20.2.0 — deferred
• justhtml 1.18.0 → 3.11.1 — deferred

Could not update (too new for 7-day freshness filter)

• django-silk 5.5.0 → 5.5.2
• pytest-rerunfailures 16.4 → 16.6
• sentry-sdk 2.68.0 (fell back to 2.67.1)
• ruff 0.16.3 (fell back to 0.16.0)
• uv 0.12.5 (fell back to 0.12.0)

Denied

• sass >1.91.0 — still denied (Go all-in on CSS custom properties for themes, remove Sass variables protocol#982 still open)

Testing

• Unit tests running below - test-python-more includes running npm build and collectstatic
• Running integration tests: here

[Copilot]

Pull request overview

This PR performs a broad dependency bump sweep across Bedrock’s Python (pip-compile output), npm dev dependencies (including Jasmine tooling), and pre-commit hooks, plus a small Prettier-driven reformat in one Wagtail admin JS helper.

Changes:

• Update pinned/compiled Python dependencies in production, development, and docs requirement sets.
• Upgrade npm Jasmine tooling (jasmine-browser-runner and jasmine-core) and refresh package-lock.json accordingly.
• Bump pre-commit hook versions (Ruff, Prettier, django-upgrade) and apply a minor JS formatting adjustment.

Reviewed changes

Copilot reviewed 8 out of 9 changed files in this pull request and generated no comments.

Show a summary per file

File	Description
requirements/prod.txt	Refresh compiled production pins/hashes after dependency updates.
requirements/prod.in	Bump top-level production pins (e.g., google-cloud-storage, Markdown, sentry-sdk).
requirements/docs.txt	Refresh compiled docs requirements to align with updated transitive pins.
requirements/dev.txt	Refresh compiled dev pins/hashes including tooling (ruff/uv/etc).
requirements/dev.in	Bump top-level dev tooling pins (ruff/uv/pytest-django/etc).
package.json	Upgrade Jasmine runner/core versions used by JS unit tests.
package-lock.json	Lockfile refresh to reflect npm dependency updates within declared ranges.
media/js/cms/wagtailadmin-locale-badges.js	Prettier-driven reformat (no functional logic change intended).
.pre-commit-config.yaml	Update hook revisions/deps for Ruff, Prettier, and django-upgrade.

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

[janriokrause]

LGTM!