Address CVEs

This updates:
- Jinja2 (Python) (CVE-2024-56201)
- nanoid (JavaScript) (CVE-2024-55565)
- path-to-regexp (JavaScript) (CVE-2024-52798)
- golang.org/x/net (Go) (CVE-2024-45338)

Signed-off-by: mprahl <mprahl@users.noreply.github.com>

Author: mprahl

.github/workflows/frontend.yml

@@ -20,9 +20,9 @@ jobs:
       uses: actions/checkout@v2
 
     - name: Set up Node.js
-      uses: actions/setup-node@v3
+      uses: actions/setup-node@v4
       with:
-        node-version: '14'
+        node-version: '22'
 
     - name: Clean npm cache
       run: npm cache clean --force

backend/src/apiserver/visualization/requirements.in

@@ -4,7 +4,7 @@ google-api-python-client==1.7.*
 itables==0.1.0
 ipykernel==5.1.1
 ipython==7.12.0
-jinja2==2.11.3
+Jinja2>=3.1.2,<4
 jupyter_client==5.3.*
 markupsafe==2.0.1
 nbconvert==5.5.0