chore(deps): bump 6 nuget packages and fix the dependabot schedule

[dependabot]

Summary

NuGet group update. Six patch/minor bumps across web/Viper.csproj and test/Viper.test.csproj:

Package	From	To
AWSSDK.Core	4.0.100.8	4.0.100.9
HtmlSanitizer	9.0.967	9.1.973
Microsoft.Testing.Platform	2.3.2	2.3.3
QuestPDF	2026.7.1	2026.7.2
SonarAnalyzer.CSharp	10.30.0.144632	10.31.0.145097
SQLitePCLRaw.bundle_e_sqlite3	3.0.4	3.0.5

NSubstitute stays pinned at 5.3.0, per the ignore rule from #291.

Dependabot schedule. Removes day: monday from all four ecosystem entries. schedule.day only applies to interval: weekly and is silently ignored under monthly, so it never took effect: recent runs landed on Saturday Aug 1 and Wednesday Jul 1. interval: monthly already runs on the first of the month, which is the intent.

Testing

Clean rebuild with the build cache cleared, so SonarAnalyzer 10.31 ran against the source: no new warnings. npm run test:backend: 2708 passed, 0 failed.

Dependabot release notes

Pinned AWSSDK.Core at 4.0.100.9.

Release notes

Sourced from AWSSDK.Core's releases.

No release notes found for this version range.

Commits viewable in compare view.

Pinned HtmlSanitizer at 9.1.973.

Release notes

Sourced from HtmlSanitizer's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Testing.Platform from 2.3.2 to 2.3.3.

Release notes

Sourced from Microsoft.Testing.Platform's releases.

No release notes found for this version range.

Commits viewable in compare view.

Pinned QuestPDF at 2026.7.2.

Release notes

Sourced from QuestPDF's releases.

2026.7.2

• Fixed a rare Windows x64 concurrency issue where generated PDF documents appeared correct in viewers, but selected and copied text was corrupted.
• Improved text rendering representation to resolve rare compatibility issues in certain PDF viewers that could cause incorrect results when selecting or copying text.
• Improved compatibility for complex glyphs, such as ligatures, by annotating them with the /ActualText tag. This improves text selection, copying, extraction, and screen-reader accessibility. Ligatures remain disabled by default.
• Added support for the AllowModification permission in DocumentOperations when encrypting PDF documents with 128-bit or 256-bit keys.
• Added minor fixes and expanded test coverage for the DocumentOperations API.

Commits viewable in compare view.

Updated SonarAnalyzer.CSharp from 10.30.0.144632 to 10.31.0.145097.

Release notes

Sourced from SonarAnalyzer.CSharp's releases.

10.31.0.145097

Release notes - .NET Analyzers - 10.31

Feature

NET-3865 Implement S8733: Potential Cartesian Explosion
NET-3875 Implement rule S8718: Client-evaluated default values should use database functions
NET-4087 Use shared secret exclusion patterns in hardcoded secrets rules
NET-4211 Update RSPEC before 10.31 release

False Positive

NET-1922 S1144 FP: When registering a service with Microsoft.Extensions.DependencyInjecion framework
NET-3928 Fix S3267 FP: Should not raise on EntityFramework IQueryables
NET-4205 Fix S1244 FP: should not raise on NaN check via x.Equals(double.NaN)

Commits viewable in compare view.

Updated SQLitePCLRaw.bundle_e_sqlite3 from 3.0.4 to 3.0.5.

Release notes

Sourced from SQLitePCLRaw.bundle_e_sqlite3's releases.

3.0.5

Update the lib dependency for SQLitePCLRaw.bundle_e_sqlite3 to package ID SQLite version 3.53.4.

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[codecov-commenter]

Bundle Report

Bundle size has no change ✅

[codecov-commenter]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 41.88%. Comparing base (8b2a8c7) to head (38e407b).
⚠️ Report is 2 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff             @@
##             main     #293      +/-   ##
==========================================
- Coverage   50.11%   41.88%   -8.24%     
==========================================
  Files        1000      986      -14     
  Lines       58432    49490    -8942     
  Branches     5867     5842      -25     
==========================================
- Hits        29286    20727    -8559     
+ Misses      28237    27854     -383     
  Partials      909      909              

Flag	Coverage Δ
backend	39.94% <ø> (-9.33%)	⬇️
frontend	58.15% <ø> (-0.48%)	⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.
see 14 files with indirect coverage changes