fix(deps): update website (#5165)

This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
|
[Flask-Compress](https://redirect.github.com/colour-science/flask-compress)
| `==1.23` → `==1.24` |
![age](https://developer.mend.io/api/mc/badges/age/pypi/flask-compress/1.24?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/flask-compress/1.23/1.24?slim=true)
|
|
[google-cloud-logging](https://redirect.github.com/googleapis/google-cloud-python/tree/main/packages/google-cloud-logging)
([source](https://redirect.github.com/googleapis/google-cloud-python)) |
`==3.14.0` → `==3.15.0` |
![age](https://developer.mend.io/api/mc/badges/age/pypi/google-cloud-logging/3.15.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/google-cloud-logging/3.14.0/3.15.0?slim=true)
|
|
[google-cloud-ndb](https://redirect.github.com/googleapis/google-cloud-python/tree/main/packages/google-cloud-ndb)
([source](https://redirect.github.com/googleapis/google-cloud-python)) |
`==2.4.0` → `==2.4.1` |
![age](https://developer.mend.io/api/mc/badges/age/pypi/google-cloud-ndb/2.4.1?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/google-cloud-ndb/2.4.0/2.4.1?slim=true)
|
| [gunicorn](https://redirect.github.com/benoitc/gunicorn)
([changelog](https://gunicorn.org/news/)) | `==25.2.0` → `==25.3.0` |
![age](https://developer.mend.io/api/mc/badges/age/pypi/gunicorn/25.3.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/gunicorn/25.2.0/25.3.0?slim=true)
|
|
[mini-css-extract-plugin](https://redirect.github.com/webpack/mini-css-extract-plugin)
| [`2.10.1` →
`2.10.2`](https://renovatebot.com/diffs/npm/mini-css-extract-plugin/2.10.1/2.10.2)
|
![age](https://developer.mend.io/api/mc/badges/age/npm/mini-css-extract-plugin/2.10.2?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/mini-css-extract-plugin/2.10.1/2.10.2?slim=true)
|
| [requests](https://redirect.github.com/psf/requests)
([changelog](https://redirect.github.com/psf/requests/blob/master/HISTORY.md))
| `==2.33.0` → `==2.33.1` |
![age](https://developer.mend.io/api/mc/badges/age/pypi/requests/2.33.1?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/requests/2.33.0/2.33.1?slim=true)
|

---

### Release Notes

<details>
<summary>colour-science/flask-compress (Flask-Compress)</summary>

###
[`v1.24`](https://redirect.github.com/colour-science/flask-compress/blob/HEAD/CHANGELOG.md#124-2026-03-31)

[Compare
Source](https://redirect.github.com/colour-science/flask-compress/compare/v1.23...v1.24)

- add mypy annotations and mark it as checkable,
[#&#8203;76](https://redirect.github.com/colour-science/flask-compress/pull/76)
by [@&#8203;orborde](https://redirect.github.com/orborde)
- enable trusted publishing, allowing GitHub Actions to publish releases
to PyPI without long lived credentials,
[#&#8203;78](https://redirect.github.com/colour-science/flask-compress/issues/78)
by [@&#8203;alexprengere](https://redirect.github.com/alexprengere)

</details>

<details>
<summary>googleapis/google-cloud-python (google-cloud-logging)</summary>

###
[`v3.15.0`](https://redirect.github.com/googleapis/google-cloud-python/releases/tag/google-cloud-logging-v3.15.0):
google-cloud-logging: v3.15.0

[Compare
Source](https://redirect.github.com/googleapis/google-cloud-python/compare/google-cloud-logging-v3.14.0...google-cloud-logging-v3.15.0)

#####
[v3.15.0](https://redirect.github.com/googleapis/google-cloud-python/compare/google-cloud-logging-v3.14.0...google-cloud-logging-v3.15.0)
(2026-03-26)

</details>

<details>
<summary>benoitc/gunicorn (gunicorn)</summary>

###
[`v25.3.0`](https://redirect.github.com/benoitc/gunicorn/releases/tag/25.3.0):
Gunicorn 25.3.0

[Compare
Source](https://redirect.github.com/benoitc/gunicorn/compare/25.2.0...25.3.0)

#### Bug Fixes

- **HTTP/2 ASGI Body Duplication**: Fix request body being received
twice in HTTP/2
  ASGI requests, causing JSON parsing errors with "Extra data" messages

([#&#8203;3558](https://redirect.github.com/benoitc/gunicorn/issues/3558))

- **ASGI Chunked EOF Handling**: Add `finish()` method to callback
parser to handle
chunked encoding edge case where connection closes before final CRLF
after zero-chunk

- **HTTP/2 Documentation**: Fix `http_protocols` examples to use
comma-separated string
instead of list syntax
([#&#8203;3561](https://redirect.github.com/benoitc/gunicorn/issues/3561))

- **Chunked Encoding**: Reject chunk extensions containing bare CR bytes
per RFC 9112

([#&#8203;3556](https://redirect.github.com/benoitc/gunicorn/discussions/3556))

- **Request Line Limit**: Fix `--limit-request-line 0` to mean unlimited
as documented,
instead of using default maximum. Works with both Python and fast C
parser.

([#&#8203;3563](https://redirect.github.com/benoitc/gunicorn/issues/3563))

#### Security

- **ASGI Parser Header Validation**: Add security checks per RFC
9110/9112:
  - Reject duplicate Content-Length headers
  - Reject requests with both Content-Length and Transfer-Encoding
  - Reject chunked transfer encoding in HTTP/1.0
  - Reject stacked chunked encoding
  - Validate Transfer-Encoding values
  - Strict chunk size validation

#### Changes

- **Fast HTTP Parser**: Update to gunicorn\_h1c >= 0.6.3 for
`asgi_headers` property
  and `InvalidChunkExtension` validation for bare CR rejection

- **ASGI PROXY Protocol**: Add PROXY protocol v1/v2 support to callback
parser

- **Docker Images**: Update to Python 3.14

</details>

<details>
<summary>webpack/mini-css-extract-plugin
(mini-css-extract-plugin)</summary>

###
[`v2.10.2`](https://redirect.github.com/webpack/mini-css-extract-plugin/blob/HEAD/CHANGELOG.md#2102-2026-03-26)

[Compare
Source](https://redirect.github.com/webpack/mini-css-extract-plugin/compare/v2.10.1...v2.10.2)

</details>

<details>
<summary>psf/requests (requests)</summary>

###
[`v2.33.1`](https://redirect.github.com/psf/requests/blob/HEAD/HISTORY.md#2331-2026-03-30)

[Compare
Source](https://redirect.github.com/psf/requests/compare/v2.33.0...v2.33.1)

**Bugfixes**

- Fixed test cleanup for CVE-2026-25645 to avoid leaving unnecessary
files in the tmp directory.
([#&#8203;7305](https://redirect.github.com/psf/requests/issues/7305))
- Fixed Content-Type header parsing for malformed values.
([#&#8203;7309](https://redirect.github.com/psf/requests/issues/7309))
- Improved error consistency for malformed header values.
([#&#8203;7308](https://redirect.github.com/psf/requests/issues/7308))

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "before 6am on wednesday" in timezone
Australia/Sydney, Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/google/osv.dev).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMDAuMCIsInVwZGF0ZWRJblZlciI6IjQzLjEwMC4wIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyJdfQ==-->

Author: renovate-bot

gcp/website/frontend3/pnpm-lock.yaml

@@ -4,19 +4,19 @@ requires-python = ">=3.13,<4.0"
 dependencies = [
     "Flask==3.1.3",
     "Flask-Caching==2.3.1",
-    "Flask-Compress==1.23",
+    "Flask-Compress==1.24",
     "werkzeug==3.1.7",
     "google-auth==2.49.1",
-    "google-cloud-ndb==2.4.0",
-    "google-cloud-logging==3.14.0",
+    "google-cloud-ndb==2.4.1",
+    "google-cloud-logging==3.15.0",
     "google-cloud-storage==3.10.1",
     "jinja2==3.1.6",
     "markdown2==2.5.5",
     "markupsafe==3.0.3",
     "packageurl-python==0.17.6",
     "redis==6.4.0",
-    "requests==2.33.0",
-    "gunicorn==25.2.0",
+    "requests==2.33.1",
+    "gunicorn==25.3.0",
     "whitenoise==6.12.0",
     "cvss==3.6",
     "osv",