From 317a9920cba9db6a2f52d7e7d6be6e439de5821a Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sat, 17 Jan 2026 20:28:04 +0000
Subject: [PATCH 1/3] Bump werkzeug from 3.1.4 to 3.1.5

Bumps [werkzeug](https://github.com/pallets/werkzeug) from 3.1.4 to 3.1.5.
- [Release notes](https://github.com/pallets/werkzeug/releases)
- [Changelog](https://github.com/pallets/werkzeug/blob/main/CHANGES.rst)
- [Commits](https://github.com/pallets/werkzeug/compare/3.1.4...3.1.5)

---
updated-dependencies:
- dependency-name: werkzeug
  dependency-version: 3.1.5
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 Pipfile.lock | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/Pipfile.lock b/Pipfile.lock
index 331f830..41014d4 100644
--- a/Pipfile.lock
+++ b/Pipfile.lock
@@ -693,12 +693,12 @@
         },
         "werkzeug": {
             "hashes": [
-                "sha256:2ad50fb9ed09cc3af22c54698351027ace879a0b60a3b5edf5730b2f7d876905",
-                "sha256:cd3cd98b1b92dc3b7b3995038826c68097dcb16f9baa63abe35f20eafeb9fe5e"
+                "sha256:5111e36e91086ece91f93268bb39b4a35c1e6f1feac762c9c822ded0a4e322dc",
+                "sha256:6a548b0e88955dd07ccb25539d7d0cc97417ee9e179677d22c7041c8f078ce67"
             ],
             "index": "pypi",
             "markers": "python_version >= '3.9'",
-            "version": "==3.1.4"
+            "version": "==3.1.5"
         },
         "yarl": {
             "hashes": [

From ea0fdc044291c7221de4ad9d49c56adc034b08a8 Mon Sep 17 00:00:00 2001
From: petruki <31597636+petruki@users.noreply.github.com>
Date: Sat, 17 Jan 2026 12:48:53 -0800
Subject: [PATCH 2/3] chore(deps): updated Pipfile

---
 .github/workflows/master.yml | 2 +-
 .github/workflows/sonar.yml  | 1 -
 Pipfile                      | 2 +-
 Pipfile.lock                 | 2 +-
 4 files changed, 3 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/master.yml b/.github/workflows/master.yml
index 5262a5b..ea58fa2 100644
--- a/.github/workflows/master.yml
+++ b/.github/workflows/master.yml
@@ -39,7 +39,7 @@ jobs:
         uses: sonarsource/sonarqube-scan-action@v7.0.0
         env:
           SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
-        if: env.SONAR_TOKEN != ''
+        if: ${{ secrets.SONAR_TOKEN }}
   
   docker:
     name: Publish Docker Image
diff --git a/.github/workflows/sonar.yml b/.github/workflows/sonar.yml
index ec68a81..a85fd7f 100644
--- a/.github/workflows/sonar.yml
+++ b/.github/workflows/sonar.yml
@@ -54,7 +54,6 @@ jobs:
         uses: sonarsource/sonarqube-scan-action@v7.0.0
         env:
           SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
-        if: env.SONAR_TOKEN != ''
         with:
           args: >
             -Dsonar.pullrequest.key=${{ inputs.pr_id }}
diff --git a/Pipfile b/Pipfile
index 1c73b77..62eb560 100644
--- a/Pipfile
+++ b/Pipfile
@@ -15,7 +15,7 @@ gql = "==4.0.0"
 # Managed dependencies and security patches
 requests-toolbelt = "==1.0.0"
 certifi = ">=2026.1.4"
-werkzeug = ">=3.1.4"
+werkzeug = ">=3.1.5"
 urllib3 = ">=2.6.3"
 jinja2 = ">=3.1.6"
 idna = ">=3.11"
diff --git a/Pipfile.lock b/Pipfile.lock
index 41014d4..6469195 100644
--- a/Pipfile.lock
+++ b/Pipfile.lock
@@ -1,7 +1,7 @@
 {
     "_meta": {
         "hash": {
-            "sha256": "7ed88826be8d7fc455556cc16576980a01d4ee372df80dfe8b13ad353b97c5af"
+            "sha256": "5dae7b583b3953fffcf351458dcc6b070fd2e085a1abd7a16ed60ca9f3e13335"
         },
         "pipfile-spec": 6,
         "requires": {

From 5d5dda5b92778f8777239cf2c7c8dfc0bb0daa39 Mon Sep 17 00:00:00 2001
From: petruki <31597636+petruki@users.noreply.github.com>
Date: Sat, 17 Jan 2026 12:54:52 -0800
Subject: [PATCH 3/3] chore: reverted SONAR action constraints

---
 .github/workflows/master.yml | 2 +-
 .github/workflows/sonar.yml  | 1 +
 2 files changed, 2 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/master.yml b/.github/workflows/master.yml
index ea58fa2..5262a5b 100644
--- a/.github/workflows/master.yml
+++ b/.github/workflows/master.yml
@@ -39,7 +39,7 @@ jobs:
         uses: sonarsource/sonarqube-scan-action@v7.0.0
         env:
           SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
-        if: ${{ secrets.SONAR_TOKEN }}
+        if: env.SONAR_TOKEN != ''
   
   docker:
     name: Publish Docker Image
diff --git a/.github/workflows/sonar.yml b/.github/workflows/sonar.yml
index a85fd7f..ec68a81 100644
--- a/.github/workflows/sonar.yml
+++ b/.github/workflows/sonar.yml
@@ -54,6 +54,7 @@ jobs:
         uses: sonarsource/sonarqube-scan-action@v7.0.0
         env:
           SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
+        if: env.SONAR_TOKEN != ''
         with:
           args: >
             -Dsonar.pullrequest.key=${{ inputs.pr_id }}