Merge queue: Consolidate 15 passing dependabot PRs

[Copilot]

CI is expensive. Rather than land each passing dependabot PR individually, this consolidates 15 PRs labeled pick-me into a single merge queue.

Applied in reverse line order where conflicts existed (e.g., multiple updates to single-page-app/ui/package.json). Skipped 5 PRs: 4 already in base, 1 superseded by newer version.

Updates

JavaScript (single-page-app/ui)

• @vitejs/plugin-react 5.1.0 → 5.1.2
• react-router-dom 7.9.5 → 7.11.0

Go

• golang-network/simple: envoy 1.36.2 → 1.36.4, protobuf 1.36.10 → 1.36.11
• load-reporting-service: grpc 1.77.0 → 1.78.0
• ext_authz/auth/grpc-service: grpc 1.77.0 → 1.78.0
• golang-http/simple: envoy 1.36.2 → 1.36.3
• grpc-bridge/server: golang.org/x/net 0.46.0 → 0.47.0, grpc 1.76.0 → 1.77.0

Docker

• shared/golang: 1.25.4-bookworm → 1.25.5-bookworm
• shared/jaeger: 1.74.0 → 1.76.0
• opentelemetry: alpine 3.22 → 3.23
• local_ratelimit: nginx digest
• ext_authz: OPA 1.9.0-envoy-5-static → 1.9.0-envoy-6-static

Python

• grpc-bridge/client: grpcio-tools 1.69.0 → 1.76.0, protobuf 5.29.5 → 6.33.2
• shared/python/postgres: psycopg2-binary 2.9.10 → 2.9.11

GitHub Actions

• actions/checkout 5.0.0 → 6.0.0

PRs: #960, #958, #957, #956, #955, #953, #952, #949, #948, #947, #944, #933, #927, #901, #899

Original prompt

this repo has many pending dependabot prs - some are failing, some are passing

ci is expensive - so rather than landing all the passing ones individually i want you to create a merge queue pr that picks the commits from all the passing dependabot prs

ive labelled the passing ones with pick-me - ONLY pick those

note: if any touch the same file then you should apply in reverse order from their affected line nos - this generally avoids conflicts

---

✨ Let Copilot coding agent set things up for you — coding agent works faster and does higher quality work when set up for your repo.