v1.6.40

[andrebolina]

Summary

• Security updates

Type of change

• New feature
• Bug fix
• Minor change
• Security issue

Validation

• Backend lockfile check: cd backend && uv lock --check
• Backend lint: cd backend && uv run ruff check app tests
• Backend type check: cd backend && uv run mypy
• Backend tests: cd backend && uv run pytest
• Frontend lint: cd frontend && npm run lint
• Frontend tests: cd frontend && npm run test:run
• Frontend build: cd frontend && npm run build

Checklist

• I did not include secrets or private data.
• I added/updated tests for behavior changes.
• I updated version in VERSION, CHANGELOG.md, and README.md.
• I updated docs where needed.

[Copilot]

Pull request overview

This PR bumps the project release to v1.6.40 and applies frontend dependency lockfile updates consistent with a security updates release.

Changes:

• Bumped release version from 1.6.39 → 1.6.40 in VERSION and the README badge.
• Added a 1.6.40 entry to CHANGELOG.md.
• Updated frontend lockfile dependencies (notably js-yaml, nanoid, and postcss) in frontend/package-lock.json.

Reviewed changes

Copilot reviewed 3 out of 4 changed files in this pull request and generated no comments.

File	Description
VERSION	Updates the canonical project version to 1.6.40.
README.md	Updates the displayed version badge to 1.6.40.
CHANGELOG.md	Adds a 1.6.40 release section indicating a security update.
frontend/package-lock.json	Applies dependency resolution updates for security-related dependency bumps.

Files not reviewed (1)

• frontend/package-lock.json: Generated file

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.