Cherry-pick pick-me labelled dependency bump commits

[Copilot]

Summary

Picks the commits from all PRs labelled pick-me into this single branch.

Applied (14/15)

• build(deps): bump redis from 8.10.1 to 8.10.2 in /redis #1436 redis 8.10.1 → 8.10.2
• build(deps): bump nginx from 1.31.5 to 1.31.6 in /local_ratelimit in the examples-local-ratelimit group across 1 directory #1431 nginx 1.31.5 → 1.31.6
• build(deps): bump the examples-grpc-bridge group across 1 directory with 3 updates #1430 grpc-bridge client group (grpcio, grpcio-tools, protobuf)
• build(deps): bump yarl from 1.24.5 to 1.25.1 in /.github/workflows in the github-workflows group across 1 directory #1429 yarl bump (.github/workflows)
• build(deps): bump yarl from 1.24.5 to 1.25.1 in /shared/python/aiohttp in the examples-shared-python group across 1 directory #1428 yarl bump (shared/python/aiohttp)
• build(deps): bump the examples-grpc-bridge group across 1 directory with 2 updates #1427 grpc-bridge server group (golang.org/x/net, google.golang.org/grpc)
• build(deps): bump google.golang.org/grpc from 1.83.2 to 1.84.0 in /ext_authz/auth/grpc-service in the examples-ext-authz group across 1 directory #1426 google.golang.org/grpc (ext_authz/auth/grpc-service)
• build(deps): bump google.golang.org/grpc from 1.83.2 to 1.84.0 in /load-reporting-service in the examples-load-reporting group across 1 directory #1424 google.golang.org/grpc (load-reporting-service)
• build(deps): bump psycopg2-binary from 2.9.12 to 2.9.13 in /shared/python/postgres in the examples-postgres group across 1 directory #1418 psycopg2-binary bump
• build(deps): bump openpolicyagent/opa from 1.20.1-envoy-3-static to 1.20.2-envoy-4-static in /ext_authz in the examples-ext-authz group across 1 directory #1412 openpolicyagent/opa bump
• build(deps): bump @chakra-ui/react from 3.36.1 to 3.37.0 in /single-page-app/ui #1383 @chakra-ui/react bump
• build(deps): bump react-router from 8.3.0 to 8.4.0 in /single-page-app/ui #1385 react-router bump
• build(deps-dev): bump @vitejs/plugin-react from 6.1.0 to 6.1.1 in /single-page-app/ui #1384 @vitejs/plugin-react bump
• build(deps): bump js-yaml from 4.3.1 to 4.3.2 in /single-page-app/ui #1416 js-yaml transitive bump

The last four (single-page-app/ui) all touch package.json/yarn.lock. They were cherry-picked in reverse order of lines touched (largest diff first: #1383, then #1385, then #1384, then #1416) to minimize conflicts — all four applied cleanly.

Skipped (1/15)

• Bump envoy/envoy_api registry pins to 1.40.0-dev.20260904.13144fb.envoy, version 0.2.7 #1402 (envoy/envoy_api registry pin + version bump) — genuine cherry-pick conflict, since the registry/version bump was already superseded by the already-merged deps: Bump registry hash and versions #1433. Left for the next pass as instructed.

Validation

• Code review: no comments
• CodeQL: skipped (trivial dependency-only changes)