fix(deps): update dependency @apollo/client to v4

Faro reported the app as `Shiny Frontend` (copied from Shiny). Dancefinder's browser logs and traces would then mix with Shiny's in VictoriaLogs/VictoriaTraces once shiny/frontend#3778 moves to faro.unbound.se.

- `app.name`: `Shiny Frontend` → `dancefinder-app`. This follows the backend convention, where the OTel `service.name` is the repo name (`dancefinder`).
- `version` (`1.0.0`, the same as package.json) and `environment` (`config.name`) are unchanged.

`npm run lint` passes.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

https://claude.ai/code/session_01VSC7dLAgao1afzL5DQfH8F
Reviewed-on: #3107

.gitea/workflows/ci.yaml

@@ -18,16 +18,30 @@ jobs:
       - name: Build and push
         run: unset GITEA_TOKEN && build && push
 
-  deploy-prod:
+  deploy-prod-frostmoln:
     needs: build
     if: gitea.ref == 'refs/heads/main'
     runs-on: ubuntu-latest
     env:
-      BUILDTOOLS_CONTENT: ${{ secrets.BUILDTOOLS_CONTENT }}
+      BUILDTOOLS_CONTENT: ${{ secrets.BUILDTOOLS_FROSTMOLN_PRODUCTION }}
       GITEA_REPOSITORY: ${{ gitea.repository }}
+      FM_TENANT: 9ae61342-0f76-476f-8176-e46f6b0b0c32
     environment: prod
     steps:
       - uses: actions/checkout@v7
       - uses: buildtool/setup-buildtools-action@v1
-      - name: Deploy
-        run: deploy prod
+      - name: Install fm
+        run: |
+          sudo install -d -m 0755 /etc/apt/keyrings
+          sudo curl -fsSL -o /etc/apt/keyrings/frostmoln.gpg https://get.frostmoln.cloud/deb/frostmoln.gpg
+          sudo curl -fsSL -o /etc/apt/sources.list.d/frostmoln.sources https://get.frostmoln.cloud/deb/frostmoln.sources
+          sudo apt-get update && sudo apt-get install -y fm
+      - name: Deploy to Frostmoln production
+        env:
+          FROSTMOLN_API_KEY: ${{ secrets.FROSTMOLN_PRODUCTION_DEPLOY_KEY }}
+        # The cluster API is private: the kubeconfig's exec plugin opens an fm
+        # tunnel on demand. fm reads the key from its config file, not the env.
+        run: |
+          fm auth api-key set "$FROSTMOLN_API_KEY" > /dev/null
+          fm kubernetes cluster kubeconfig ${{ vars.FROSTMOLN_PRODUCTION_CLUSTER_ID }} --exec --file "$RUNNER_TEMP/kubeconfig"
+          KUBECONFIG_CONTENT="$(cat "$RUNNER_TEMP/kubeconfig")" deploy prod-frostmoln -n dancefinder

Dockerfile

@@ -12,7 +12,7 @@ COPY . /build
 RUN npm run postinstall && npm run generate && npm run lint
 #RUN yarn start:ci & yarn wait && yarn test:cypress
 
-FROM amd64/nginx:1.31.6@sha256:8e1fce8cb4de80385f5fc98dd9d8cf0fe75d5dbac383c048eff65871a0d1065e
+FROM nginxinc/nginx-unprivileged:1.31.7@sha256:09b0d3eda2aa592d2487f284519419015cab010d7df16cd0fe224b585fc60eb6
 MAINTAINER Joakim Olsson <joakim@unbound.se>
 
 COPY --from=builder /build/.output/public/ /usr/share/nginx/html/

app/plugins/01.grafana.ts

@@ -9,7 +9,7 @@ export default defineNuxtPlugin((nuxtApp) => {
   if (config.grafanaUrl) {
     const faro = initializeFaro({
       app: {
-        name: 'Shiny Frontend',
+        name: 'dancefinder-app',
         version: '1.0.0',
         environment: config.name,
       },

app/utils/environment.ts

@@ -41,7 +41,7 @@ export const envConfig = (host: string): EnvConfig => {
         auth: prod,
         dev: false,
         tracesSampleRate: 1.0,
-        grafanaUrl: 'https://faro-collector-prod-eu-west-0.grafana.net/collect/532676b975308d70605d856635721a61',
+        grafanaUrl: 'https://faro.unbound.se/collect',
       }
     default:
       throw new Error(`unexpected host: ${host}`)

k8s/deploy.yaml

@@ -22,6 +22,13 @@ spec:
       labels:
         app.kubernetes.io/name: dancefinder-app
     spec:
+      imagePullSecrets:
+      - name: oci-registry
+      securityContext:
+        runAsNonRoot: true
+        runAsUser: 101
+        seccompProfile:
+          type: RuntimeDefault
       affinity:
         podAntiAffinity:
           preferredDuringSchedulingIgnoredDuringExecution:
@@ -36,17 +43,21 @@ spec:
               topologyKey: kubernetes.io/hostname
       containers:
       - name: dancefinder-app
+        securityContext:
+          allowPrivilegeEscalation: false
+          capabilities:
+            drop: ["ALL"]
         readinessProbe:
           httpGet:
             path: /health
-            port: 80
+            port: 8080
           initialDelaySeconds: 5
           periodSeconds: 5
           timeoutSeconds: 5
         imagePullPolicy: Always
-        image: oci.unbound.se/dancefinder/dancefinder-app:${COMMIT}
+        image: ${IMAGE}
         ports:
-        - containerPort: 80
+        - containerPort: 8080
         resources:
           requests:
             cpu: 10m
@@ -64,9 +75,8 @@ metadata:
   labels:
     app.kubernetes.io/name: dancefinder-app
 spec:
-  type: NodePort
   selector:
     app.kubernetes.io/name: dancefinder-app
   ports:
   - port: 80
-    targetPort: 80
+    targetPort: 8080

k8s/ingress-prod-frostmoln.yaml

@@ -0,0 +1,20 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: dancefinder-app
+  annotations:
+    traefik.ingress.kubernetes.io/router.entrypoints: websecure
+    traefik.ingress.kubernetes.io/router.tls.certresolver: letsencrypt
+spec:
+  ingressClassName: traefik
+  rules:
+  - host: "dancefinder.unbound.se"
+    http:
+      paths:
+      - path: /
+        pathType: Prefix
+        backend:
+          service:
+            name: dancefinder-app
+            port:
+              number: 80

k8s/ingress-prod.yaml

@@ -1,29 +0,0 @@
-apiVersion: networking.k8s.io/v1
-kind: Ingress
-metadata:
-  name: dancefinder-app-ingress
-  annotations:
-    alb.ingress.kubernetes.io/group.name: "default"
-    alb.ingress.kubernetes.io/group.order: "101"
-    alb.ingress.kubernetes.io/scheme: internet-facing
-    alb.ingress.kubernetes.io/target-type: instance
-    alb.ingress.kubernetes.io/listen-ports: '[{"HTTP": 80},{"HTTPS": 443}]'
-    alb.ingress.kubernetes.io/ssl-redirect: "443"
-    alb.ingress.kubernetes.io/healthcheck-path: "/health"
-    alb.ingress.kubernetes.io/healthcheck-interval-seconds: "30"
-    alb.ingress.kubernetes.io/healthcheck-timeout-seconds: "5"
-    alb.ingress.kubernetes.io/healthy-threshold-count: "2"
-    alb.ingress.kubernetes.io/unhealthy-threshold-count: "2"
-spec:
-  ingressClassName: "alb"
-  rules:
-    - host: "dancefinder.unbound.se"
-      http:
-        paths:
-          - path: /*
-            pathType: ImplementationSpecific
-            backend:
-              service:
-                name: dancefinder-app
-                port:
-                  number: 80

k8s/pdb-prod-frostmoln.yaml

@@ -0,0 +1,9 @@
+apiVersion: policy/v1
+kind: PodDisruptionBudget
+metadata:
+  name: dancefinder-app
+spec:
+  minAvailable: 1
+  selector:
+    matchLabels:
+      app.kubernetes.io/name: dancefinder-app

nginx-conf/default.conf

@@ -1,5 +1,5 @@
 server {
-    listen       80;
+    listen       8080;
     server_name  localhost;
     sendfile     off;
     charset      utf-8;

package.json

@@ -18,46 +18,46 @@
   "devDependencies": {
     "@commitlint/cli": "21.2.3",
     "@commitlint/config-conventional": "21.2.3",
-    "@graphql-codegen/cli": "7.4.3",
+    "@graphql-codegen/cli": "7.4.6",
     "@graphql-codegen/fragment-matcher": "7.1.0",
-    "@graphql-codegen/typescript": "6.1.0",
-    "@graphql-codegen/typescript-operations": "6.1.8",
+    "@graphql-codegen/typescript": "6.1.2",
+    "@graphql-codegen/typescript-operations": "6.1.10",
     "@graphql-codegen/typescript-vue-apollo": "5.0.1",
-    "@nuxt/devtools": "3.4.2",
+    "@nuxt/devtools": "3.4.3",
     "@nuxt/eslint": "1.17.0",
     "@nuxtjs/i18n": "10.6.0",
     "@stylistic/eslint-plugin": "5.10.0",
     "@vue/test-utils": "2.5.1",
     "esbuild": "0.28.2",
-    "eslint": "10.11.0",
+    "eslint": "10.13.0",
     "eslint-plugin-simple-import-sort": "14.0.0",
     "eslint-plugin-vue": "10.11.1",
-    "nuxt": "4.5.2",
+    "nuxt": "4.6.1",
     "postcss-html": "2.0.0",
-    "sass": "1.105.0",
-    "stylelint": "17.15.0",
+    "sass": "1.105.2",
+    "stylelint": "17.16.0",
     "stylelint-config-recommended-vue": "2.0.0",
     "stylelint-config-standard": "40.0.0",
     "typescript": "6.0.3",
-    "typescript-eslint": "8.71.0",
+    "typescript-eslint": "8.71.2",
     "vite-plugin-vuetify": "2.1.3",
-    "vue": "3.5.43",
+    "vue": "3.5.44",
     "vue-eslint-parser": "10.4.1",
-    "vue-router": "5.3.1",
-    "vuetify": "4.2.2"
+    "vue-router": "5.4.0",
+    "vuetify": "4.2.6"
   },
   "dependencies": {
-    "@apollo/client": "3.14.1",
+    "@apollo/client": "4.3.4",
     "@auth0/auth0-vue": "2.11.0",
     "@grafana/faro-web-sdk": "2.12.1",
     "@grafana/faro-web-tracing": "2.12.1",
     "@mdi/font": "7.4.47",
-    "@pinia/nuxt": "1.0.2",
+    "@pinia/nuxt": "1.0.3",
     "@vue/apollo-composable": "4.2.2",
     "date-fns": "4.4.0",
     "graphql": "16.14.2",
     "graphql-tag": "2.12.7",
-    "pinia": "4.0.3",
+    "pinia": "4.1.0",
     "pinia-plugin-persistedstate": "4.7.1"
   },
   "engines": {