fix(deps): update dependency @apollo/client to v4

Moves the production deploy from AWS to the Frostmoln production cluster (namespace `schemas`), with unboundsoftware/schemas.

- `deploy-prod` (AWS, failing since CI left AWS) → `deploy-prod-frostmoln`: `deploy prod-frostmoln -n schemas`.
- Restricted Pod Security: `nginxinc/nginx-unprivileged` (uid 101, port 8080; 1.31.7 isn't published for it yet, so 1.31.6). `nginx.conf`: no `user`, pid and temp paths under `/tmp`, `listen 8080`. Configs copied with `--chmod=644`. Service is ClusterIP.
- `autoscale-prod`/`pdb-prod` → `-prod-frostmoln`; the ALB ingress → a Traefik one for `/` on `schemas.unbound.se` (the API's `/query` ingress wins on the longer path).

Checked locally (amd64): as uid 101 with all capabilities dropped, `/health`, `/` and SPA routes 200, security headers present.

**Merge with** the schemas PR, after infra#1878 is applied.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

https://claude.ai/code/session_01Ma8eHhW59hLAJuLzBnLvUu
Reviewed-on: #391

.pre-commit-config.yaml

@@ -28,7 +28,7 @@ repos:
     stages: [ commit-msg ]
     additional_dependencies: [ '@commitlint/config-conventional' ]
 - repo: https://github.com/pre-commit/mirrors-eslint
-  rev: v10.12.0
+  rev: v10.13.0
   hooks:
   - id: eslint
     types: [ file ]

Dockerfile

@@ -13,7 +13,7 @@ FROM scratch as export
 COPY --from=builder /build/coverage /
 
 # Unprivileged (uid 101, port 8080): Frostmoln enforces restricted Pod Security.
-FROM nginxinc/nginx-unprivileged:1.31.6@sha256:1d26a516fb93b18f9c0214dc9c645054486e516f13ff09ef63d5bd5c622278a2
+FROM nginxinc/nginx-unprivileged:1.31.7@sha256:09b0d3eda2aa592d2487f284519419015cab010d7df16cd0fe224b585fc60eb6
 MAINTAINER Joakim Olsson <joakim@unbound.se>
 
 COPY --chmod=644 ./nginx/nginx.conf /etc/nginx/nginx.conf

package.json

@@ -18,13 +18,13 @@
     "lintfix": "eslint --fix . && npm run lint:style --fix"
   },
   "dependencies": {
-    "@apollo/client": "3.14.1",
+    "@apollo/client": "4.3.5",
     "@auth0/auth0-vue": "2.11.0",
     "@vue/apollo-composable": "4.2.2",
     "graphql": "16.14.2",
-    "graphql-ws": "6.3.0",
-    "nuxt": "4.6.1",
-    "vue": "3.5.43",
+    "graphql-ws": "6.4.1",
+    "nuxt": "4.6.2",
+    "vue": "3.5.44",
     "vuetify-nuxt-module": "0.19.5"
   },
   "version": "1.0.0",
@@ -34,31 +34,31 @@
   "author": "",
   "license": "ISC",
   "devDependencies": {
-    "@commitlint/cli": "21.2.3",
-    "@commitlint/config-conventional": "21.2.3",
+    "@commitlint/cli": "21.2.4",
+    "@commitlint/config-conventional": "21.2.4",
     "@graphql-codegen/cli": "7.4.6",
-    "@graphql-codegen/typed-document-node": "7.1.1",
+    "@graphql-codegen/typed-document-node": "7.2.0",
     "@graphql-codegen/typescript": "6.1.2",
     "@graphql-codegen/typescript-operations": "6.1.10",
     "@graphql-codegen/typescript-vue-apollo": "5.0.1",
-    "@nuxt/devtools": "3.4.2",
+    "@nuxt/devtools": "3.4.4",
     "@nuxt/eslint": "1.17.0",
     "@nuxtjs/stylelint-module": "5.2.1",
     "@stylistic/eslint-plugin": "5.10.0",
     "@vitejs/plugin-vue": "6.0.10",
-    "@vitest/coverage-v8": "5.0.3",
+    "@vitest/coverage-v8": "5.0.5",
     "@vue/test-utils": "2.5.1",
-    "eslint": "10.12.0",
+    "eslint": "10.13.0",
     "eslint-plugin-simple-import-sort": "14.0.0",
     "eslint-plugin-vue": "10.11.1",
-    "jsdom": "30.1.2",
+    "jsdom": "30.1.3",
     "postcss-html": "2.0.0",
     "stylelint": "17.16.0",
     "stylelint-config-recommended-vue": "2.0.0",
     "stylelint-config-standard": "40.0.0",
     "typescript": "6.0.3",
-    "typescript-eslint": "8.71.1",
-    "vitest": "5.0.3",
+    "typescript-eslint": "8.72.0",
+    "vitest": "5.0.5",
     "vue-eslint-parser": "10.4.1"
   },
   "overrides": {