build(deps): bump inflect in /backend/python/pydevlake (#9108)

Bumps [inflect](https://github.com/jaraco/inflect) from 6.2.0 to 7.5.0.
- [Release notes](https://github.com/jaraco/inflect/releases)
- [Changelog](https://github.com/jaraco/inflect/blob/main/NEWS.rst)
- [Commits](jaraco/inflect@v6.2.0...v7.5.0)

---
updated-dependencies:
- dependency-name: inflect
  dependency-version: 7.5.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

fix: build image failed

feat: add Kiro commit attribution helper (#9074)

* feat: add Kiro commit attribution helper

Signed-off-by: warren <[email protected]>

* fix: add Apache license headers

Signed-off-by: warren <[email protected]>

---------

Signed-off-by: warren <[email protected]>

fix(jira): change _tool_jira_issues.fix_versions column to text (#8988)

The `fix_versions` field on the jira issue model is declared as
`gorm:"type:text"`, but the original migration
(20250619_add_fix_versions_to_issue) created the column as
`varchar(255)`. Installations that ran the earlier migration therefore
have a `varchar(255)` column that no longer matches the model and
truncates long fix version lists.

This migration alters `_tool_jira_issues.fix_versions` to `text` so the
database schema matches the model definition and can store values longer
than 255 characters.

Signed-off-by: DoDiODev <[email protected]>
Co-authored-by: Klesh Wong <[email protected]>

feat(auth): add OIDC allowlist restrictions (#8984)

fix(security): update nginx-unprivileged to 1.30.3 (#8940)

fix(ci): pin docker/* actions in build.yml to ASF-approved SHAs (#8852)

Signed-off-by: yamoyamoto <[email protected]>

fix: disable API client caching for GitHub App connections (#8850)

GitHub App installation tokens expire after ~1 hour, causing admin APIs
(remote-scopes, test-connection) to fail silently after token expiry.

This fix overrides GetHash() to return empty string for GitHub App connections,
disabling client caching and ensuring fresh tokens are fetched for each admin request.

PAT connections continue to use default caching behavior.

Fixes #8847

fix: throwing on parsing for a 204 response (#8825)

fix: cwe89 sql injection (#8762)