Dependabot 待处理任务: 47 个开放 PR, 15 个已被主分支替代, 1 个可访问的 CVE

Hi maintainers. I ran a reachability-based triage of the open Dependabot backlog against main (govulncheck for Go, osv-scanner plus the committed UI source map for the React app). Summary and proposed actions below. The two PRs I could do without maintainer coordination are open (#9015, #9016); happy to do the batch bumps and the closes too if you want them.