Batch the three remaining clean dependency bumps into one merge

.github/workflows/pages.yml

@@ -34,7 +34,7 @@ jobs:
           cache: npm
           cache-dependency-path: ui/package-lock.json
       - name: Configure Python
-        uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5.6.0
+        uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
         with:
           python-version: "3.13"
       - name: Install hash-locked Python runtime dependencies

.github/workflows/ui.yml

@@ -57,7 +57,7 @@ jobs:
           cache: npm
           cache-dependency-path: ui/package-lock.json
       - name: Configure Python
-        uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.0.0
+        uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v6.0.0
         with:
           python-version: "3.14"
       - name: Install hash-locked native build bootstrap
@@ -170,7 +170,7 @@ jobs:
           cache: npm
           cache-dependency-path: ui/package-lock.json
       - name: Configure Python
-        uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.0.0
+        uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v6.0.0
         with:
           python-version: "3.14"
       - name: Install hash-locked native build bootstrap

.github/workflows/workspace.yml

@@ -25,7 +25,7 @@ jobs:
       - name: Checkout exact source
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
       - name: Configure Python
-        uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6
+        uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
         with:
           python-version: ${{ matrix.python-version }}
       - name: Validate frozen Dummy boundary
@@ -91,7 +91,7 @@ jobs:
       - name: Checkout exact source
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
       - name: Configure Python
-        uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6
+        uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
         with:
           python-version: ${{ matrix.python-version }}
       - name: Install hash-locked runtime and validation tools
@@ -233,7 +233,7 @@ jobs:
           fi
           "$actionlint_root/actionlint" -no-color .github/workflows/*.yml
       - name: Configure Python
-        uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5.6.0
+        uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
         with:
           python-version: "3.13"
       - name: Install hash-locked runtime and validation tools

ui/package.json

@@ -29,15 +29,15 @@
     "postprocessing": "^6.37.3",
     "react": "^19.1.0",
     "react-dom": "^19.1.0",
-    "three": "^0.177.0",
+    "three": "^0.185.1",
     "zustand": "^5.0.5"
   },
   "devDependencies": {
     "@playwright/test": "^1.52.0",
     "@tauri-apps/cli": "2.11.4",
     "@types/react": "^19.1.0",
     "@types/react-dom": "^19.1.0",
-    "@types/three": "^0.177.0",
+    "@types/three": "^0.185.1",
     "@vitejs/plugin-react": "^4.4.1",
     "typescript": "~5.8.3",
     "vite": "^6.3.5",

ui/src-tauri/Cargo.toml

@@ -21,7 +21,7 @@ tauri-build = { version = "2.6.3", features = [] }
 getrandom = "0.4"
 hmac = "0.12"
 log = "0.4"
-reqwest = { version = "0.12", default-features = false, features = ["blocking", "json"] }
+reqwest = { version = "0.13", default-features = false, features = ["blocking", "json"] }
 serde = { version = "1.0", features = ["derive"] }
 serde_json = "1.0"
 sha2 = "0.10"