[edwin-vasquez-ucaldas]

Purpose

DYN-10892: Annual pre-Global-Launch refresh of SplashScreen for Dynamo 4.3 (Civil 3D 2028 GL), following last year's #89.

Changes

• Node 22 → 24 (current Active LTS) in build.yml and in both jobs of npm-publish.yml.
• Dependencies refreshed with npm update + npm audit fix (lockfile only, no package.json changes). Every resolved URL still points at registry.npmjs.org.
• License output regenerated (npm run generate_license).

Security

	Before	After
Total	102	99
Critical	1	0
High	61	63

Almost everything left comes from react-scripts (Create React App). CRA is no longer maintained, and npm audit fix --force proposes react-scripts@0.0.0, meaning no fixed version exists. As noted in #89, these are build and dev-server packages and aren't in the shipped bundle. Tracked in DYN-11026.

Runtime impact — please check visually

• bootstrap 5.2.1 → 5.3.8
• react-bootstrap 2.5.0 → 2.10.10
• react / react-dom 18.2.0 → 18.3.1

Bootstrap minor releases can shift styling, so the splash screen's layout should be checked in Dynamo during the GL smoke test.

Testing

Run locally on Node 24.15 / npm 11.12 from a clean plain npm ci (as CI runs it, without --force):

• npm run build ✅
• npm run test:unit: 3/3 ✅
• npm run test:e2e (Playwright): 1/1 ✅
• npm run production ✅

Release

• Bump version 1.0.31 → 1.0.32
• After merge, create GitHub Release v1.0.32 to publish to npm
• Bump the Dynamo pin in src/DynamoCoreWpf/DynamoCoreWpf.csproj (DYN-10892)

This release also includes the ~30 Dependabot security merges since 1.0.31.

🤖 Generated with Claude Code

[jasonstratton]

LGTM