Bump postcss-selector-parser, tailwind-scrollbar and tailwindcss in /web

Removes [postcss-selector-parser](https://github.com/postcss/postcss-selector-parser). It's no longer used after updating ancestor dependencies [postcss-selector-parser](https://github.com/postcss/postcss-selector-parser), [tailwind-scrollbar](https://github.com/adoxography/tailwind-scrollbar) and [tailwindcss](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/tailwindcss). These dependencies need to be updated together.


Removes `postcss-selector-parser`

Updates `tailwind-scrollbar` from 3.1.0 to 4.0.2
- [Release notes](https://github.com/adoxography/tailwind-scrollbar/releases)
- [Commits](https://github.com/adoxography/tailwind-scrollbar/compare/v3.1.0...v4.0.2)

Updates `tailwindcss` from 3.4.19 to 4.3.3
- [Release notes](https://github.com/tailwindlabs/tailwindcss/releases)
- [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md)
- [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.3/packages/tailwindcss)

---
updated-dependencies:
- dependency-name: postcss-selector-parser
  dependency-version:
  dependency-type: indirect
- dependency-name: tailwind-scrollbar
  dependency-version: 4.0.2
  dependency-type: direct:production
- dependency-name: tailwindcss
  dependency-version: 4.3.3
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>

.github/actions/setup/action.yml

@@ -34,15 +34,15 @@ runs:
       run: sudo systemctl start docker
       shell: bash
     - id: lowercaseRepo
-      uses: ASzc/change-string-case-action@v8
+      uses: ASzc/change-string-case-action@v5
       with:
         string: ${{ github.repository }}
     - name: Set up QEMU
-      uses: docker/setup-qemu-action@v4
+      uses: docker/setup-qemu-action@v3
     - name: Set up Docker Buildx
-      uses: docker/setup-buildx-action@v4
+      uses: docker/setup-buildx-action@v3
     - name: Log in to the Container registry
-      uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f
+      uses: docker/login-action@465a07811f14bebb1938fbed4728c6a1ff8901fc
       with:
         registry: ghcr.io
         username: ${{ github.actor }}

.github/dependabot.yml

@@ -1,157 +1,40 @@
 version: 2
 updates:
   - package-ecosystem: "github-actions"
-    # Local composite actions are only scanned when their directory is listed
-    directories:
-      - "/"
-      - "/.github/actions/setup"
+    directory: "/"
     schedule:
-      interval: weekly
-    cooldown:
-      default-days: 3
-    open-pull-requests-limit: 5
-    groups:
-      actions:
-        patterns: ["*"]
-      actions-security:
-        applies-to: security-updates
-        patterns: ["*"]
-
+      interval: daily
+    open-pull-requests-limit: 10
+    target-branch: dev
+  - package-ecosystem: "docker"
+    directory: "/docker"
+    schedule:
+      interval: daily
+    open-pull-requests-limit: 10
+    target-branch: dev
   - package-ecosystem: "pip"
     directory: "/docker/main"
     schedule:
-      interval: weekly
-    cooldown:
-      default-days: 3
-    open-pull-requests-limit: 5
-    groups:
-      # Sets that fail pip resolution unless they move together
-      peewee:
-        patterns: ["peewee", "peewee-migrate"]
-      crypto:
-        patterns: ["cryptography", "joserfc", "pywebpush", "py-vapid"]
-      pydantic-genai:
-        patterns: ["pydantic", "google-genai"]
-      pip-main-minor-patch:
-        patterns: ["*"]
-        update-types: ["minor", "patch"]
-      pip-main-security:
-        applies-to: security-updates
-        patterns: ["*"]
-    ignore:
-      # numpy 2.5 needs Python 3.12; norfair, tflite_runtime and rknn-toolkit2
-      # cap numpy below 2
-      - dependency-name: "numpy"
-        versions: [">=2"]
-      # Every OpenCV wheel from 4.12 requires numpy 2
-      - dependency-name: "opencv-python-headless"
-        versions: [">=4.12"]
-      - dependency-name: "opencv-contrib-python"
-        versions: [">=4.12"]
-      # aarch64 only. Rockchip rknn-toolkit2 caps protobuf at 4.25.4 and
-      # TensorFlow 2.21 needs protobuf 6.31 or newer.
-      - dependency-name: "tensorflow"
-        versions: [">=2.20"]
-      # Needs Python 3.12 and numpy 2
-      - dependency-name: "librosa"
-        versions: [">=1.0"]
-      # Needs Python 3.12
-      - dependency-name: "scipy"
-        versions: [">=1.18"]
-      # Newer stubs report false errors against peewee 4
-      - dependency-name: "types-peewee"
-        versions: [">=4.1"]
-      # sdist only and imported by HailoRT; needs a Hailo device to test
-      - dependency-name: "netifaces"
-        versions: [">=0.11"]
-
+      interval: daily
+    open-pull-requests-limit: 10
+    target-branch: dev
   - package-ecosystem: "pip"
     directory: "/docker/tensorrt"
     schedule:
-      interval: weekly
-    # No pull request check builds these images, so version updates are off.
-    # Security updates still open.
-    open-pull-requests-limit: 0
-    groups:
-      pip-trt-security:
-        applies-to: security-updates
-        patterns: ["*"]
-    ignore:
-      # onnx 1.17 and newer write a newer IR and opset than TensorRT 8.6 on
-      # JetPack 6 is known to parse
-      - dependency-name: "onnx"
-        versions: [">=1.17"]
-      # 1.27 moved to CUDA 13, and the image ships the CUDA 12.8 wheel set
-      - dependency-name: "onnxruntime-gpu"
-        versions: [">=1.27"]
-      # Hand-matched CUDA 12.8 set (2c9a25e67); move as a block
-      - dependency-name: "nvidia-*"
-      # Must match the JetPack CUDA runtime
-      - dependency-name: "cuda-python"
-        versions: [">=12.9"]
-
+      interval: daily
+    open-pull-requests-limit: 10
+    target-branch: dev
   - package-ecosystem: "npm"
     directory: "/web"
     schedule:
-      interval: weekly
-    cooldown:
-      default-days: 3
-    open-pull-requests-limit: 5
-    groups:
-      radix:
-        patterns: ["@radix-ui/*"]
-      rjsf:
-        patterns: ["@rjsf/*"]
-      web-minor-patch:
-        patterns: ["*"]
-        update-types: ["minor", "patch"]
-      web-security:
-        applies-to: security-updates
-        patterns: ["*"]
-    ignore:
-      # typescript-eslint peers typescript below 6.1
-      - dependency-name: "typescript"
-        versions: [">=6.1"]
-      # Tailwind 4 is a config rewrite; scrollbar 4 and merge 3 depend on it
-      - dependency-name: "tailwindcss"
-        update-types: ["version-update:semver-major"]
-      - dependency-name: "tailwind-scrollbar"
-        update-types: ["version-update:semver-major"]
-      - dependency-name: "tailwind-merge"
-        update-types: ["version-update:semver-major"]
-      # Intermittent failure in the UI settings import spec, cause not found
-      - dependency-name: "zod"
-        update-types: ["version-update:semver-major"]
-      # Needs an on-device pinch test before moving
-      - dependency-name: "react-zoom-pan-pinch"
-        update-types: ["version-update:semver-major"]
-      # Build fails until monaco-worker-manager releases its PR 4
-      - dependency-name: "monaco-editor"
-        versions: [">=0.55.0"]
-      # Later versions need Node 22 and extract false keys
-      - dependency-name: "i18next-cli"
-        versions: [">1.5.11"]
-      # 6.11.0 refills the saved model in the GenAI settings form
-      - dependency-name: "@rjsf/*"
-        versions: ["6.11.0"]
-
+      interval: daily
+    open-pull-requests-limit: 10
+    target-branch: dev
   - package-ecosystem: "npm"
     directory: "/docs"
     schedule:
-      interval: weekly
-    cooldown:
-      default-days: 3
-    open-pull-requests-limit: 5
+      interval: daily
     allow:
       - dependency-name: "@docusaurus/*"
-    groups:
-      docusaurus:
-        patterns: ["@docusaurus/*"]
-      docs-security:
-        applies-to: security-updates
-        patterns: ["*"]
-    ignore:
-      # A Docusaurus major needs the openapi plugin and theme moved in the
-      # same commit
-      - dependency-name: "@docusaurus/*"
-        update-types: ["version-update:semver-major"]
+    open-pull-requests-limit: 10
+    target-branch: dev

.github/workflows/ci.yml

@@ -586,7 +586,7 @@ jobs:
       - arm64_build
     steps:
       - id: lowercaseRepo
-        uses: ASzc/change-string-case-action@v8
+        uses: ASzc/change-string-case-action@v6
         with:
           string: ${{ github.repository }}
       - name: Log in to the Container registry

.github/workflows/release.yml

@@ -14,7 +14,7 @@ jobs:
         with:
           persist-credentials: false
       - id: lowercaseRepo
-        uses: ASzc/change-string-case-action@v8
+        uses: ASzc/change-string-case-action@v6
         with:
           string: ${{ github.repository }}
       - name: Log in to the Container registry

web/package.json

@@ -89,7 +89,7 @@
     "sonner": "^2.0.8",
     "swr": "^2.5.1",
     "tailwind-merge": "^2.4.0",
-    "tailwind-scrollbar": "^3.1.0",
+    "tailwind-scrollbar": "^4.0.2",
     "tailwindcss-animate": "^1.0.7",
     "use-long-press": "^3.3.0",
     "vaul": "^1.1.2",
@@ -120,7 +120,7 @@
     "postcss": "^8.5.29",
     "prettier": "^3.9.9",
     "prettier-plugin-tailwindcss": "^0.8.1",
-    "tailwindcss": "^3.4.19",
+    "tailwindcss": "^4.3.3",
     "typescript": "^6.0.3",
     "typescript-eslint": "^8.71.1",
     "vite": "^8.3.3"