chore(deps): bump react-draggable from 4.5.0 to 4.7.0 in /frontend

[dependabot]

Bumps react-draggable from 4.5.0 to 4.7.0.

Changelog

Sourced from react-draggable's changelog.

4.7.0 (Jun 18, 2026)

• Feature: add a nonce prop to support a strict Content Security Policy. It's applied to the dynamically-injected user-select <style> element so a style-src policy without 'unsafe-inline' no longer blocks it. When omitted, webpack's __webpack_nonce__ global is used if available. enableUserSelectHack={false} remains a no-prop opt-out. (#808, closes #791)
• Internal: de-duplicate redundant tsc compilation in the build/CI pipeline.

4.6.0 (May 29, 2026)

• Internal: Migrate library source from Flow to TypeScript. Types are now generated from source instead of hand-maintained, eliminating Flow/TypeScript drift. The build uses tsup (CommonJS + ESM + generated declarations) with webpack for the UMD bundle. No public API change — the CommonJS export shape (module.exports === Draggable, plus .default and .DraggableCore), the UMD ReactDraggable global, and the shipped type surface are all unchanged. (#805)
• Feature: ship an ESM build and an exports map alongside the existing CommonJS entry, so the package can be imported natively in both module systems. (#805)
• Fix: treat ctrl+click as a right-click on macOS so it no longer starts a drag. (#786)
• Fix: remove a global module declaration from the TypeScript types to prevent type pollution. (#787)
• Internal: Support React 19 (dependency upgrade and nodeRef-based browser tests).
• Internal: Migrate the test suite from Karma/Jasmine to Vitest, expand unit coverage, and run CI across Node 20, 22, and 24. (#785, #788)
• Docs: Modernize the README and publish a GitHub Pages demo site. (#790)

Commits

• a0b6e21 release v4.7.0
• 4551b5d ci: dedup redundant tsc compilation in build/CI
• 5611b11 feat: add nonce prop for CSP-compliant user-select style injection (#808)
• 721287a fix(types): keep prop-types out of the generated public declarations
• 0e32702 fix(pkg): drop stale typings dir from published files
• 2aade57 release v4.6.0
• a969889 refactor: migrate source from Flow to TypeScript (#805)
• 4c6e95a chore: clean up package.json files field
• 5627d5f fix: correct RGL and resizable example links
• 5927b4f fix(readme): update demo links to root URL
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)