Merge pull request makeplane#9867 from makeplane/release/v1.4.3

release: v1.4.3

[GIT-384] Fix voting on published work items with no votes (makeplane…

…#10103)

* [GIT-384] fix(space): handle empty vote lists on published issues

* [GIT-384] fix: allow null votes in shared public issue type

fix: address v1.4.3 release review comments (makeplane#9925)

* fix(api): pass project context when updating an intake work item

IssueSerializer.validate() scopes assignees, labels, state, parent and
estimate point to self.context["project_id"], but the API intake PATCH
built the serializer without a context. Every in-project assignee or
label submitted there was rejected with a 400.

* chore(docker): bump the turbo pin in app Dockerfiles to 2.10.11

The catalog moved to turbo 2.10.11, but the builder stages still
installed turbo@2.9.18 for `turbo prune`.

* fix(aio): stop copying node:22-alpine's /usr/lib over the runner

The copy replaced libraries just upgraded by apk (libcrypto, libssl,
libz, libapk) with node's copies from a different Alpine release. node
only links libstdc++ and libgcc_s from /usr/lib, so install those from
apk instead.

* test(api): restore shared test state precisely

- celery_eager now restores task_eager_propagates as well as
  task_always_eager
- auth tests clear only throttle_authentication_* keys instead of the
  whole shared cache; drop the duplicate module-level reset fixture

(cherry picked from commit c7a5afe)

release: v1.4.2 makeplane#9632

chore: dump version

release: v1.4.1 makeplane#9545

chore: resolve dependabot security alerts (pnpm + pip) (makeplane#9549)

Python (apps/api):
- cryptography 48.0.1 -> 50.0.0 (PKCS#7 Bleichenbacher oracle, high)

npm (pnpm-workspace.yaml catalog/overrides + lockfile):
- react-router 7.15.1 -> 7.18.1, @react-router/dev -> 7.17.0,
  @react-router/node/serve -> 7.18.1 (DoS, open redirect, XSS, constructor injection)
- sharp ^0.34.3 -> ^0.35.3 (libvips CVEs, high)
- fast-uri -> 3.1.5 via override (host confusion, high)
- js-yaml -> 4.3.0 via override (quadratic CPU DoS, high)
- linkify-it -> 5.0.2 via override (mailto validator DoS, high)
- postcss 8.5.15 -> 8.5.25 (source map path traversal, high/medium)
- undici -> 7.29.0 via override (info disclosure, CRLF/cookie injection)
- sanitize-html 2.17.0 -> 2.17.5 (URI scheme validation bypass, medium)
- valibot -> 1.4.2 via override (flatten() throw, medium)
- body-parser -> 1.20.6 via override (limit bypass DoS, low)

[WEB-8510] fix(web): fix clipped/overlapping LayoutDropDown button in…

… Create View modal (makeplane#9542)

Replaced the icon button styling with a more generic button styling for the dropdown component to ensure consistency across the UI. This change enhances the visual coherence of the dropdown button's appearance.

release: v1.4.0 makeplane#9160

Merge pull request makeplane#9496 from makeplane/preview

v1.4.0-fixes