fix(deps): patch frontend pnpm audit findings

fix(api): send array query params as repeated keys (#13457 )
#### Description - The generated API client now sends array query params as repeated keys (`states=firing&states=pending`) instead of axios' default `states[]=`. The backend binds only repeated keys, so a `states` filter sent through a generated hook was ignored and every rule came back. - The alert list page and the home page alerts card drop their own requests that worked around this. - `states` on `GET /api/v3/rules` is the only array query param in the generated and AI assistant clients today, so no other request changes. #### Issues closed by this PR Closes https://github.com/SigNoz/pulse-pod/issues/719
2026-11-13 20:01:05 +00:00 · 2026-11-12 17:16:40 -03:00 · 2026-11-12 16:50:41 +00:00 · 2026-11-12 15:46:37 +00:00
7 changed files with 81 additions and 87 deletions
--- a/frontend/package.json
+++ b/frontend/package.json
@@ -70,7 +70,7 @@
    "antd": "5.11.0",
    "antd-table-saveas-excel": "2.2.1",
    "antlr4": "4.13.2",
-    "axios": "1.21.0",
+    "axios": "1.21.1",
    "babel-jest": "^29.6.4",
    "chart.js": "3.9.1",
    "chartjs-adapter-date-fns": "^2.0.0",
@@ -88,7 +88,7 @@
    "http-status-codes": "2.3.0",
    "i18next": "^21.6.12",
    "i18next-browser-languagedetector": "^6.1.3",
-    "i18next-http-backend": "^4.0.0",
+    "i18next-http-backend": "^4.0.4",
    "immer": "11.1.3",
    "jest": "30.2.0",
    "js-base64": "^3.7.2",
@@ -135,7 +135,7 @@
    "uplot": "1.6.31",
    "uuid": "14.0.1",
    "vite": "npm:rolldown-vite@7.3.1",
-    "zod": "4.3.6",
+    "zod": "4.6.7",
    "zustand": "5.0.11"
  },
  "browserslist": {
--- a/frontend/pnpm-lock.yaml
+++ b/frontend/pnpm-lock.yaml
@@ -15,15 +15,19 @@ overrides:
  cookie@<0.7.0: '>=0.7.1 <1'
  dompurify@<=3.4.16: '>=3.4.17 <4'
  esbuild@>=0.27.3 <0.28.1: '>=0.28.1 <0.29.0'
-  fast-uri@<3.1.6: '>=3.1.6 <4'
+  fast-uri@<3.1.9: '>=3.1.9 <4'
  fflate@<0.4.9: '>=0.4.9 <0.5'
  immutable@<5.1.8: '>=5.1.8 <6'
+  joi@<17.13.9: '>=17.13.9 <18'
  js-cookie@<=3.0.5: '>=3.0.7 <4'
  js-yaml@>=4.0.0 <4.3.2: '>=4.3.2 <5'
+  markdown-it@<14.3.3: '>=14.3.3 <15'
+  moment@<2.31.0: '>=2.31.0 <3'
  prismjs@<1.30.0: '>=1.30.0 <2'
  postcss-selector-parser@>=7.1.0 <7.1.3: '>=7.1.3 <8'
  react-router@>=6.7.0 <6.30.6: '>=6.30.6 <7'
  tmp@<0.2.6: '>=0.2.6 <0.3.0'
+  uuid@<11.1.1: '>=11.1.1 <12'
  yaml@>=1.0.0 <1.10.3: '>=1.10.3 <2'
  '@types/node': ^22.20.5

@@ -117,7 +121,7 @@ importers:
        version: 0.7.2
      antd:
        specifier: 5.11.0
-        version: 5.11.0(date-fns@4.1.0)(moment@2.30.1)(react-dom@18.2.0(react@18.2.0))(react@18.2.0)
+        version: 5.11.0(date-fns@4.1.0)(moment@2.31.0)(react-dom@18.2.0(react@18.2.0))(react@18.2.0)
      antd-table-saveas-excel:
        specifier: 2.2.1
        version: 2.2.1
@@ -125,8 +129,8 @@ importers:
        specifier: 4.13.2
        version: 4.13.2
      axios:
-        specifier: 1.21.0
-        version: 1.21.0
+        specifier: 1.21.1
+        version: 1.21.1
      babel-jest:
        specifier: ^29.6.4
        version: 29.6.4(@babel/core@7.29.7)
@@ -179,8 +183,8 @@ importers:
        specifier: ^6.1.3
        version: 6.1.8
      i18next-http-backend:
-        specifier: ^4.0.0
-        version: 4.0.0
+        specifier: ^4.0.4
+        version: 4.0.10
      immer:
        specifier: 11.1.3
        version: 11.1.3
@@ -320,8 +324,8 @@ importers:
        specifier: npm:rolldown-vite@7.3.1
        version: rolldown-vite@7.3.1(@types/node@22.20.5)(esbuild@0.28.1)(jiti@2.6.1)(less@4.9.1)(sass@1.97.3)(stylus@0.62.0)(terser@5.46.2)(yaml@2.9.1)
      zod:
-        specifier: 4.3.6
-        version: 4.3.6
+        specifier: 4.6.7
+        version: 4.6.7
      zustand:
        specifier: 5.0.11
        version: 5.0.11(@types/react@18.0.26)(immer@11.1.3)(react@18.2.0)(use-sync-external-store@1.6.0(react@18.2.0))
@@ -4588,8 +4592,8 @@ packages:
    resolution: {integrity: sha512-UzGt8zg7Ny8djbYMhxl2zuEevVa7r2gJjYY5Lwr1xM7+XU2nd6CkIWFTVcCIbAP63vSz71NaVyyuSk9lHKcy0A==}
    engines: {node: '>=4'}

-  axios@1.21.0:
-    resolution: {integrity: sha512-YCzXMB53Q9PZBsh7yN7wtapit4WepwcHS2fP8QhGsBxSz5YtgYobV7GGlWlAJi+RxfU77GQTQi2DSLUma42EYA==}
+  axios@1.21.1:
+    resolution: {integrity: sha512-6eI5Q/Y4u/Um9dDlsRoq5pY2rxnUTv+L4PpLitnbk/i4jb3MxLZ5CsN5Ih3IysbeRYK4pR+P7qfMsOQl9fwwFQ==}

  babel-jest@29.6.4:
    resolution: {integrity: sha512-meLj23UlSLddj6PC+YTOFRgDAtjnZom8w/ACsrx0gtPtv5cJZk0A5Unk5bV4wixD7XaPCN1fQvpww8czkZURmw==}
@@ -5720,8 +5724,8 @@ packages:
  fast-shallow-equal@1.0.0:
    resolution: {integrity: sha512-HPtaa38cPgWvaCFmRNhlc6NG7pv6NUHqjPgVAkWGoB9mQMwYB27/K0CvOM5Czy+qpT3e8XJ6Q4aPAnzpNpzNaw==}

-  fast-uri@3.1.7:
-    resolution: {integrity: sha512-dOvZVzjdZdz7phd9v6jCbwxrBW3fK6n8Rc0CtdmM4bumzMnxywBYhuph6J819RRw/ku+rLbelwfMunktuzVVHg==}
+  fast-uri@3.1.9:
+    resolution: {integrity: sha512-hS/0Wt3Ya043oKXs0sIxrMpKQITXhMLIrVAKKXi4gozGC9v7YRWVnXIZzjNPTO02M9BdxLCWqK1yRXgNziVyJQ==}

  fast_array_intersect@1.1.0:
    resolution: {integrity: sha512-/DCilZlUdz2XyNDF+ASs0PwY+RKG9Y4Silp/gbS72Cvbg4oibc778xcecg+pnNyiNHYgh/TApsiDTjpdniyShw==}
@@ -5818,8 +5822,8 @@ packages:
    resolution: {integrity: sha512-/kXzuDnnBqyyWyhDMH7+PfP8J/oXiAavGzcRxASOMRHFuReDtofizLLJsf7nnDLAfEaMW4pVWaXrAjtnglpEkg==}
    engines: {node: '>=12'}

-  follow-redirects@1.16.0:
-    resolution: {integrity: sha512-y5rN/uOsadFT/JfYwhxRS5R7Qce+g3zG97+JrtFZlC9klX/W5hD7iiLzScI4nZqUS7DNUdhPgw4xI8W2LuXlUw==}
+  follow-redirects@1.16.3:
+    resolution: {integrity: sha512-toOSoqN6d51Wjf1aOFJYcoVv1aND9rj/CwjLU0Vz40oDuSpWDayCeKe4JpL5NL0WdFvoOOCI3BRo69HahjbR1A==}
    engines: {node: '>=4.0'}
    peerDependencies:
      debug: '*'
@@ -6182,8 +6186,8 @@ packages:
  i18next-browser-languagedetector@6.1.8:
    resolution: {integrity: sha512-Svm+MduCElO0Meqpj1kJAriTC6OhI41VhlT/A0UPjGoPZBhAHIaGE5EfsHlTpgdH09UVX7rcc72pSDDBeKSQQA==}

-  i18next-http-backend@4.0.0:
-    resolution: {integrity: sha512-EgSjO3Q1G6f2Q5oy7u9mmxuesE0oSfzAD97NFBjC8EmkK4guBSYLljM0Fng3DarMWIIkU70jfo4+mUzmyVISTA==}
+  i18next-http-backend@4.0.10:
+    resolution: {integrity: sha512-CfdQuwIVijbrS/fmiTAQYcYyje4nMbH9aIjKYhhm5bgVmWKWLOM1F7qrA1o63Jl1JxQcRjdtWhKlvDzyqV9aPg==}
    engines: {node: '>=18'}

  i18next@21.10.0:
@@ -6762,8 +6766,8 @@ packages:
    resolution: {integrity: sha512-ekilCSN1jwRvIbgeg/57YFh8qQDNbwDb9xT/qu2DAHbFFZUicIl4ygVaAvzveMhMVr3LnpSKTNnwt8PoOfmKhQ==}
    hasBin: true

-  joi@17.13.7:
-    resolution: {integrity: sha512-MF80Dm5Y2veNy8QWVx9Bj3ui4mo7+VPSPsR1M+oaHXV0Gx6zGX9a2F+OZG3Blby9tOlzU9Rs5FUimlEhbKtfnQ==}
+  joi@17.13.9:
+    resolution: {integrity: sha512-llFCT2rVtfwgBCaIqxtjim+iHqrgss4ONiGSYiiGH9jnjWq90ppSRffqmqKvwpa8W+YfILyQV6XyGcegXX2T4g==}

  js-base64@3.7.5:
    resolution: {integrity: sha512-3MEt5DTINKqfScXKfJFrRbxkrnk2AxPWGBL/ycjz4dK8iqiSJ06UxD8jh8xuh6p10TX4t2+7FsBYVxxQbMg+qA==}
@@ -7094,8 +7098,8 @@ packages:
  mapbox-to-css-font@2.4.5:
    resolution: {integrity: sha512-VJ6nB8emkO9VODI0Fk+TQ/0zKBTqmf/Pkt8Xv0kHstoc0iXRajA00DAid4Kc3K5xeFIOoiZrVxijEzj0GLVO2w==}

-  markdown-it@14.3.0:
-    resolution: {integrity: sha512-RCEsPjR+sr0x+AuYp601tKTkgFG4YEPLCzHST3cQ/fhlJkqAkz1L2/Qbp1j9qw5SBwQHFBoW8+hoN5xssOF0Tw==}
+  markdown-it@14.3.3:
+    resolution: {integrity: sha512-L//tDAkjTjJCU6pBUSBTgs3Kg4InVaZuUZog/b6V12UKhcDQ7S78877ibbCanRExwPuYP1CZD7Gd2dxSy1GXRg==}
    hasBin: true

  markdown-table@3.0.4:
@@ -7352,8 +7356,8 @@ packages:
  moment-timezone@0.5.47:
    resolution: {integrity: sha512-UbNt/JAWS0m/NJOebR0QMRHBk0hu03r5dx9GK8Cs0AS3I81yDcOc9k+DytPItgVvBP7J6Mf6U2n3BPAacAV9oA==}

-  moment@2.30.1:
-    resolution: {integrity: sha512-uEmtNhbDOrWPFS+hdjFCBfy9f2YoyzRpwcl+DqpC6taX21FzsTLQVbMV/W7PzNSX6x/bhC1zA3c2UQ5NzH6how==}
+  moment@2.31.0:
+    resolution: {integrity: sha512-0acOTfMiWOheYS4eoWb80yYMb/JLvVv9SHbs2PehaDzfUG0Bw855SKyk0IKTnPGa5+U2bmi3W68l1+sGLX/pvw==}

  monaco-editor@0.55.1:
    resolution: {integrity: sha512-jz4x+TJNFHwHtwuV9vA9rMujcZRb0CEilTEwG2rRSpe/A7Jdkuj8xPKttCgOh+v/lkHy7HsZ64oj+q3xoAFl9A==}
@@ -8116,7 +8120,7 @@ packages:
      date-fns: '>= 2.x'
      dayjs: '>= 1.x'
      luxon: '>= 3.x'
-      moment: '>= 2.x'
+      moment: '>=2.31.0 <3'
      react: '>=16.9.0'
      react-dom: '>=16.9.0'
    peerDependenciesMeta:
@@ -9553,13 +9557,12 @@ packages:
  util@0.12.5:
    resolution: {integrity: sha512-kZf/K6hEIrWHI6XqOFUiiMa+79wE/D8Q+NCNAWclkyg3b4d2k7s0QGepNjiABc+aR3N1PAyHL7p6UcLY6LmrnA==}

-  uuid@14.0.1:
-    resolution: {integrity: sha512-6ZxzVpzDXDa3bJWaHilVayA+BH/1zmxCJoVgvmqJnid/gPoKHxUrS/aC/T6LGQtNHT+XHG9fXPJB4d+IrU30Ew==}
+  uuid@11.1.1:
+    resolution: {integrity: sha512-vIYxrBCC/N/K+Js3qSN88go7kIfNPssr/hHCesKCQNAjmgvYS2oqr69kIufEG+O4+PfezOH4EbIeHCfFov8ZgQ==}
    hasBin: true

-  uuid@8.3.2:
-    resolution: {integrity: sha512-+NYs2QeMWy+GWFOEm9xnn6HCDp0l7QBD7ml8zLUmJ+93Q5NF0NocErnwkTkXVFNiX3/fpC6afS8Dhb/gz7R7eg==}
-    deprecated: uuid@10 and below is no longer supported.  For ESM codebases, update to uuid@latest.  For CommonJS codebases, use uuid@11 (but be aware this version will likely be deprecated in 2028).
+  uuid@14.0.1:
+    resolution: {integrity: sha512-6ZxzVpzDXDa3bJWaHilVayA+BH/1zmxCJoVgvmqJnid/gPoKHxUrS/aC/T6LGQtNHT+XHG9fXPJB4d+IrU30Ew==}
    hasBin: true

  uvu@0.5.6:
@@ -9907,8 +9910,8 @@ packages:
    resolution: {integrity: sha512-CzhO+pFNo8ajLM2d2IW/R93ipy99LWjtwblvC1RsoSUMZgyLbYFr221TnSNT7GjGdYui6P459mw9JH/g/zW2ug==}
    engines: {node: '>=18'}

-  zod@4.3.6:
-    resolution: {integrity: sha512-rftlrkhHZOcjDwkGlnUtZZkvaPHCsDATp4pGpuOOMDaTdDDXF91wuVDJoWoPsKX/3YPQ5fHuF3STjcYyKr+Qhg==}
+  zod@4.6.7:
+    resolution: {integrity: sha512-g8W2D2kU6a8untc053fX1uVBKzM7yqAxW/3zwk83+6RyF2+SKOuV+c0wBDhUwzV1PaGapmZH+rmcUzPf+3CGwg==}

  zstddec@0.1.0:
    resolution: {integrity: sha512-w2NTI8+3l3eeltKAdK8QpiLo/flRAr2p8AGeakfMZOXBxOg9HIu4LVDxBi81sYgVhFhdJjv1OrB5ssI8uFPoLg==}
@@ -11383,7 +11386,7 @@ snapshots:
      lodash: 4.18.1
      marked: 15.0.6
      marked-mangle: 1.1.10(marked@15.0.6)
-      moment: 2.30.1
+      moment: 2.31.0
      moment-timezone: 0.5.47
      ol: 7.4.0
      papaparse: 5.5.2
@@ -13333,7 +13336,7 @@ snapshots:
      playwright-core: 1.57.0
      rimraf: 3.0.2
      storybook: 10.6.3(@types/react@18.0.26)(prettier@3.8.3)(react@18.2.0)
-      uuid: 8.3.2
+      uuid: 11.1.1
    transitivePeerDependencies:
      - '@swc/helpers'
      - '@types/node'
@@ -14121,7 +14124,7 @@ snapshots:
  ajv@8.18.0:
    dependencies:
      fast-deep-equal: 3.1.3
-      fast-uri: 3.1.7
+      fast-uri: 3.1.9
      json-schema-traverse: 1.0.0
      require-from-string: 2.0.2

@@ -14161,7 +14164,7 @@ snapshots:
      better-xlsx: 0.7.6
      file-saver: 2.0.5

-  antd@5.11.0(date-fns@4.1.0)(moment@2.30.1)(react-dom@18.2.0(react@18.2.0))(react@18.2.0):
+  antd@5.11.0(date-fns@4.1.0)(moment@2.31.0)(react-dom@18.2.0(react@18.2.0))(react@18.2.0):
    dependencies:
      '@ant-design/colors': 7.0.0
      '@ant-design/cssinjs': 1.17.2(react-dom@18.2.0(react@18.2.0))(react@18.2.0)
@@ -14192,7 +14195,7 @@ snapshots:
      rc-motion: 2.9.0(react-dom@18.2.0(react@18.2.0))(react@18.2.0)
      rc-notification: 5.3.0(react-dom@18.2.0(react@18.2.0))(react@18.2.0)
      rc-pagination: 3.7.0(react-dom@18.2.0(react@18.2.0))(react@18.2.0)
-      rc-picker: 3.14.6(date-fns@4.1.0)(dayjs@1.11.20)(moment@2.30.1)(react-dom@18.2.0(react@18.2.0))(react@18.2.0)
+      rc-picker: 3.14.6(date-fns@4.1.0)(dayjs@1.11.20)(moment@2.31.0)(react-dom@18.2.0(react@18.2.0))(react@18.2.0)
      rc-progress: 3.5.1(react-dom@18.2.0(react@18.2.0))(react@18.2.0)
      rc-rate: 2.12.0(react-dom@18.2.0(react@18.2.0))(react@18.2.0)
      rc-resize-observer: 1.4.0(react-dom@18.2.0(react@18.2.0))(react@18.2.0)
@@ -14275,9 +14278,9 @@ snapshots:

  axe-core@4.13.0: {}

-  axios@1.21.0:
+  axios@1.21.1:
    dependencies:
-      follow-redirects: 1.16.0
+      follow-redirects: 1.16.3
      form-data: 4.0.6
      https-proxy-agent: 5.0.1
      proxy-from-env: 2.1.0
@@ -15514,7 +15517,7 @@ snapshots:

  fast-shallow-equal@1.0.0: {}

-  fast-uri@3.1.7: {}
+  fast-uri@3.1.9: {}

  fast_array_intersect@1.1.0: {}

@@ -15617,7 +15620,7 @@ snapshots:
      kapsule: 1.16.3
      preact: 10.28.4

-  follow-redirects@1.16.0: {}
+  follow-redirects@1.16.3: {}

  for-each@0.3.5:
    dependencies:
@@ -16037,7 +16040,7 @@ snapshots:
    dependencies:
      '@babel/runtime': 7.28.2

-  i18next-http-backend@4.0.0: {}
+  i18next-http-backend@4.0.10: {}

  i18next@21.10.0:
    dependencies:
@@ -16340,7 +16343,7 @@ snapshots:
      istanbul-lib-coverage: 3.2.0
      p-map: 3.0.0
      rimraf: 3.0.2
-      uuid: 8.3.2
+      uuid: 11.1.1

  istanbul-lib-report@3.0.0:
    dependencies:
@@ -16562,7 +16565,7 @@ snapshots:
    dependencies:
      mkdirp: 1.0.4
      strip-ansi: 6.0.1
-      uuid: 8.3.2
+      uuid: 11.1.1
      xml: 1.0.1

  jest-leak-detector@30.2.0:
@@ -16896,7 +16899,7 @@ snapshots:

  jiti@2.6.1: {}

-  joi@17.13.7:
+  joi@17.13.9:
    dependencies:
      '@hapi/hoek': 9.3.0
      '@hapi/topo': 5.1.0
@@ -17219,7 +17222,7 @@ snapshots:

  mapbox-to-css-font@2.4.5: {}

-  markdown-it@14.3.0:
+  markdown-it@14.3.3:
    dependencies:
      argparse: 2.0.1
      entities: 4.5.0
@@ -17630,9 +17633,9 @@ snapshots:

  moment-timezone@0.5.47:
    dependencies:
-      moment: 2.30.1
+      moment: 2.31.0

-  moment@2.30.1: {}
+  moment@2.31.0: {}

  monaco-editor@0.55.1:
    dependencies:
@@ -18527,7 +18530,7 @@ snapshots:
      react: 18.2.0
      react-dom: 18.2.0(react@18.2.0)

-  rc-picker@3.14.6(date-fns@4.1.0)(dayjs@1.11.20)(moment@2.30.1)(react-dom@18.2.0(react@18.2.0))(react@18.2.0):
+  rc-picker@3.14.6(date-fns@4.1.0)(dayjs@1.11.20)(moment@2.31.0)(react-dom@18.2.0(react@18.2.0))(react@18.2.0):
    dependencies:
      '@babel/runtime': 7.28.2
      '@rc-component/trigger': 1.18.1(react-dom@18.2.0(react@18.2.0))(react@18.2.0)
@@ -18538,7 +18541,7 @@ snapshots:
    optionalDependencies:
      date-fns: 4.1.0
      dayjs: 1.11.20
-      moment: 2.30.1
+      moment: 2.31.0

  rc-progress@3.5.1(react-dom@18.2.0(react@18.2.0))(react@18.2.0):
    dependencies:
@@ -19999,7 +20002,7 @@ snapshots:
    dependencies:
      '@gerrit0/mini-shiki': 3.23.0
      lunr: 2.3.9
-      markdown-it: 14.3.0
+      markdown-it: 14.3.3
      minimatch: 10.2.5
      typescript: 5.9.3
      yaml: 2.8.4
@@ -20198,9 +20201,9 @@ snapshots:
      is-typed-array: 1.1.15
      which-typed-array: 1.1.20

-  uuid@14.0.1: {}
+  uuid@11.1.1: {}

-  uuid@8.3.2: {}
+  uuid@14.0.1: {}

  uvu@0.5.6:
    dependencies:
@@ -20307,8 +20310,8 @@ snapshots:

  wait-on@7.2.0:
    dependencies:
-      axios: 1.21.0
-      joi: 17.13.7
+      axios: 1.21.1
+      joi: 17.13.9
      lodash: 4.18.1
      minimist: 1.2.8
      rxjs: 7.8.1
@@ -20549,7 +20552,7 @@ snapshots:

  yoctocolors@2.1.2: {}

-  zod@4.3.6: {}
+  zod@4.6.7: {}

  zstddec@0.1.0: {}

--- a/frontend/pnpm-workspace.yaml
+++ b/frontend/pnpm-workspace.yaml
@@ -45,14 +45,17 @@ overrides:
 #         orval >=8.20.0 and ts-jest >=29.4.11 already fixed on their side
 esbuild@>=0.27.3 <0.28.1: '>=0.28.1 <0.29.0'
 # via: @commitlint/cli > @commitlint/config-validator > ajv@8 (fast-uri ^3.0.1)
- # remove: blocked — ajv@8 caps fast-uri at ^3, and only 3.1.6 carries the fix
- fast-uri@<3.1.6: '>=3.1.6 <4'
+ # remove: blocked — ajv@8 caps fast-uri at ^3, and only 3.1.9 carries the fix
+ fast-uri@<3.1.9: '>=3.1.9 <4'
 # via: direct dep posthog-js@1.298.0 (fflate ^0.4.8)
 # remove: blocked, posthog-js 1.430.2 (latest) is still on ^0.4.8
 fflate@<0.4.9: '>=0.4.9 <0.5'
 # via: direct devDep sass@1.97.3 (immutable ^5.0.2)
 # remove: blocked — plain sass bumps stay within ^5, so the floor is what pulls 5.1.8
 immutable@<5.1.8: '>=5.1.8 <6'
+ # via: @storybook/test-runner > jest-process-manager > wait-on@7.2.0 (joi ^17.11.0)
+ # remove: blocked, the range is open, so the floor is what pulls the fix
+ joi@<17.13.9: '>=17.13.9 <18'
 # via: react-use@17.5.1 (direct, js-cookie ^2.2.1); @grafana/data > react-use@17.6.0
 # remove: bump react-use to >=17.6.1 (js-cookie ^3); @grafana/data side blocked
 js-cookie@<=3.0.5: '>=3.0.7 <4'
@@ -60,6 +63,12 @@ overrides:
 #      @commitlint/cli > @commitlint/load > cosmiconfig@9 (^4.1.0)
 # remove: blocked, both consumers cap js-yaml at ^4 and only 4.3.2 carries the fix
 'js-yaml@>=4.0.0 <4.3.2': '>=4.3.2 <5'
+ # via: orval > typedoc@0.28.19 (markdown-it ^14.1.1)
+ # remove: blocked, typedoc 0.28.20 (latest) only widens to ^14.3.0, still vulnerable
+ markdown-it@<14.3.3: '>=14.3.3 <15'
+ # via: @grafana/data@11.6.15 (moment 2.30.1 exact)
+ # remove: bump @grafana/data to >=13, which drops the exact moment pin
+ moment@<2.31.0: '>=2.31.0 <3'
 # via: react-syntax-highlighter@15.5.0 (prismjs ^1.27.0 + refractor@3 ~1.27.0 tilde-pinned)
 # remove: bump react-syntax-highlighter to >=16.1.1 (prismjs ^1.30.0, refractor@5)
 prismjs@<1.30.0: '>=1.30.0 <2'
@@ -75,6 +84,10 @@ overrides:
 # via: msw@1.3.2 (devDep) > inquirer@8 > external-editor@3.1.0 (tmp ^0.0.33)
 # remove: upgrade msw to >=2 (drops the inquirer/external-editor chain)
 tmp@<0.2.6: '>=0.2.6 <0.3.0'
+ # via: @storybook/test-runner (uuid ^8.3.2)
+ # remove: blocked, test-runner (latest) still depends on uuid ^8.3.2. Forces a
+ # major: 11.x keeps the CJS build and the v4 export the runner imports
+ uuid@<11.1.1: '>=11.1.1 <12'
 # via: jest > babel-plugin-macros > cosmiconfig@7 (yaml ^1.10.0);
 #      typescript-plugin-css-modules > postcss-load-config@3 (^1.10.2)
 # remove: blocked — babel-plugin-macros 3.1.0 (latest) still uses cosmiconfig@7
--- a/frontend/src/api/generatedAPIInstance.ts
+++ b/frontend/src/api/generatedAPIInstance.ts
@@ -11,6 +11,8 @@ import axios, { AxiosError, AxiosRequestConfig } from 'axios';
 // generated API Instance
 const generatedAPIAxiosInstance = axios.create({
 	baseURL: ENVIRONMENT.baseURL,
+	// The backend binds repeated keys (`states=a&states=b`); axios' default sends `states[]=`.
+	paramsSerializer: { indexes: null },
 });

 let generatedAPIQueryKeyHeaderContext: Record<string, unknown> | undefined;
--- a/frontend/src/container/Home/AlertRules/useHomeAlertRules.ts
+++ b/frontend/src/container/Home/AlertRules/useHomeAlertRules.ts
@@ -1,12 +1,10 @@
 import { useMemo } from 'react';
 import { useListRulesV3 } from 'api/generated/services/rules';
 import {
-	type ListRulesV3200,
 	type ListRulesV3Params,
 	RuletypesAlertStateDTO,
 	type RuletypesListableRuleDTO,
 } from 'api/generated/services/sigNoz.schemas';
-import { GeneratedAPIInstance } from 'api/generatedAPIInstance';

 const HOME_ALERT_RULES_LIMIT = 5;

@@ -23,18 +21,7 @@ interface HomeAlertRules {

 export function useHomeAlertRules(): HomeAlertRules {
 	const firing = useListRulesV3(FIRING_RULES_PARAMS, {
-		query: {
-			cacheTime: 0,
-			// The backend binds repeated `states=` keys; axios' default sends `states[]=`.
-			queryFn: ({ signal }) =>
-				GeneratedAPIInstance<ListRulesV3200>({
-					url: '/api/v3/rules',
-					method: 'GET',
-					params: FIRING_RULES_PARAMS,
-					paramsSerializer: { indexes: null },
-					signal,
-				}),
-		},
+		query: { cacheTime: 0 },
 	});
 	const firingRules = firing.data?.data.rules;
 	const latest = useListRulesV3(
--- a/frontend/src/container/ListAlertRules/tests/ListAlertRules.views.test.tsx
+++ b/frontend/src/container/ListAlertRules/tests/ListAlertRules.views.test.tsx
@@ -31,6 +31,8 @@ jest.mock('@floating-ui/dom', () => ({
 		Promise.resolve({ x: 0, y: 0, placement, strategy, middlewareData: {} }),
 }));

+jest.setTimeout(15_000);
+
 const VIEW_1_ORDER_BY = JSON.stringify({ columnName: 'name', order: 'asc' });
 const VIEW_1_QUERY = "severity = 'critical'";

--- a/frontend/src/container/ListAlertRules/useAlertRulesData.ts
+++ b/frontend/src/container/ListAlertRules/useAlertRulesData.ts
@@ -3,13 +3,11 @@ import logEvent from 'api/common/logEvent';
 import { convertToApiError } from 'api/ErrorResponseHandlerForGeneratedAPIs';
 import { useListRulesV3 } from 'api/generated/services/rules';
 import type {
-	ListRulesV3200,
 	ListRulesV3Params,
 	RenderErrorResponseDTO,
 	RuletypesLabelPairDTO,
 } from 'api/generated/services/sigNoz.schemas';
 import type { AxiosError } from 'axios';
-import { GeneratedAPIInstance } from 'api/generatedAPIInstance';
 import { isUndefined } from 'lodash-es';

 import type { AlertRule } from './types';
@@ -35,18 +33,7 @@ export function useAlertRulesData(
 	const hasLoggedEvent = useRef(false);

 	const rulesResponse = useListRulesV3(params, {
-		query: {
-			keepPreviousData: true,
-			// The backend binds repeated `states=` keys; axios' default sends `states[]=`.
-			queryFn: ({ signal }) =>
-				GeneratedAPIInstance<ListRulesV3200>({
-					url: '/api/v3/rules',
-					method: 'GET',
-					params,
-					paramsSerializer: { indexes: null },
-					signal,
-				}),
-		},
+		query: { keepPreviousData: true },
 	});

 	const rules = useMemo(