Merge queue: Consolidate 6 passing dependabot PRs

[Copilot]

Combines all dependabot PRs labeled pick-me into a single PR to reduce CI costs. Applies 6 passing dependency updates across 5 files.

Changes

Python dependencies:

• urllib3: 2.6.0 → 2.6.3 (fixes CVE-2026-21441, 8.9 High severity)

Docker images:

• otel/opentelemetry-collector: 0.142.0 → 0.143.1
• openpolicyagent/opa: 1.11.1-envoy-3-static → 1.12.1-envoy-2-static

JavaScript dependencies (single-page-app/ui):

• vite: 7.3.0 → 7.3.1
• react-router-dom: 7.11.0 → 7.12.0
• framer-motion: 12.24.0 → 12.24.10

Conflict avoidance

Three PRs modified single-page-app/ui/package.json and yarn.lock. Applied in reverse line-number order (vite → react-router-dom → framer-motion) to prevent merge conflicts. All changes auto-merged cleanly.

Source PRs

Commits cherry-picked from: #985, #979, #980, #982, #984, #983

Original prompt

this repo has many pending dependabot prs - some are failing, some are passing

ci is expensive - so rather than landing all the passing ones individually i want you to create a merge queue pr that picks the commits from all the passing dependabot prs

ive labelled the passing ones with pick-me - ONLY pick those

note: if any touch the same file then you should apply in reverse order from their affected line nos - this generally avoids conflicts

if there is conflict skip - you are rubbish at resolving we will get it in the next pass

---

💡 You can make Copilot smarter by setting up custom instructions, customizing its development environment and configuring Model Context Protocol (MCP) servers. Learn more Copilot coding agent tips in the docs.