chore(deps): bump react and @types/react in /frontend

.github/workflows/ci.yml

@@ -11,9 +11,11 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v7
+        with:
+          lfs: true
 
       - name: Set up Python
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v6
         with:
           python-version: "3.11"
 
@@ -46,7 +48,7 @@ jobs:
       - uses: actions/checkout@v7
 
       - name: Set up Node
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version: "20"
           cache: "npm"

frontend/package.json

@@ -10,15 +10,15 @@
   },
   "dependencies": {
     "@react-google-maps/api": "^2.20.8",
-    "framer-motion": "^12.35.0",
+    "framer-motion": "^12.42.0",
     "lucide-react": "^1.17.0",
-    "react": "^18.2.0",
+    "react": "^19.2.7",
     "react-dom": "^18.2.0",
     "react-router-dom": "^7.16.0",
     "recharts": "^3.7.0"
   },
   "devDependencies": {
-    "@types/react": "^18.2.55",
+    "@types/react": "^19.2.17",
     "@types/react-dom": "^18.2.19",
     "@vitejs/plugin-react": "^4.2.1",
     "autoprefixer": "^10.4.17",

requirements-install.txt

@@ -13,7 +13,7 @@ pyproj>=3.4.0
 # Computer Vision
 opencv-python>=4.5.0
 pillow>=9.0.0
-albumentations>=1.3.0
+albumentations>=2.0.8
 
 # Visualization
 matplotlib>=3.5.0

requirements.txt

@@ -15,7 +15,7 @@ fiona>=1.9.0
 # Computer Vision
 opencv-python>=4.5.0
 pillow>=9.0.0
-albumentations>=1.3.0
+albumentations>=2.0.8
 
 # Visualization
 matplotlib>=3.5.0
@@ -39,7 +39,7 @@ dask[complete]>=2023.1.0
 fastapi>=0.95.0
 uvicorn[standard]>=0.20.0
 pydantic>=2.0.0
-email-validator>=2.0.0
+email-validator>=2.3.0
 python-multipart>=0.0.20
 
 # MLOps (optional)

tests/test_api.py

@@ -25,8 +25,15 @@ def test_predict_json_rejects_missing_auth(client: TestClient) -> None:
     assert "API key required" in response.json()["detail"]
 
 
-def test_predict_json_accepts_dev_key(client: TestClient) -> None:
-    """POST /api/predict should accept the cv_dev development key."""
+def test_predict_json_accepts_dev_key(
+    client: TestClient, monkeypatch: pytest.MonkeyPatch
+) -> None:
+    """POST /api/predict should accept the cv_dev development key.
+
+    The dev bypass is gated behind CLIMATEVISION_ALLOW_DEV_KEY, so enable it
+    explicitly for this test (production leaves it unset/disabled).
+    """
+    monkeypatch.setenv("CLIMATEVISION_ALLOW_DEV_KEY", "1")
     payload = {
         "bbox": [-60.0, -15.0, -45.0, -5.0],
         "start_date": "2023-01-01",