Bump bullet from 7.2.0 to 8.1.3 in /backend

[dependabot]

Bumps bullet from 7.2.0 to 8.1.3.

Changelog

Sourced from bullet's changelog.

8.1.3 (06/02/2026)

• Handle inversed polymorphic belongs_to false positives

8.1.2 (05/25/2026)

• Skip N+1 detection for optional polymorphic belongs_to whose *_type column is nil. ActiveRecord short-circuits the reader to nil without issuing SQL, so the access cannot represent an N+1 query and preloading would be a no-op.
• Fix Set#<< corruption in UnusedEagerLoading#add_eager_loadings split branch

8.1.1 (04/23/2026)

• Fix ActiveRecord 8.1 patch-level method signature compatibility; test against Rails 8.1.3.
• Handle string associations in safelist for Action Text
• Enhance N+1 query detection by including caller stack in association calls
• Update external links in README.md

8.1.0 (10/23/2025)

• Make get_relation private
• Support Rails 8.1

8.0.8 (05/30/2025)

• Add middleware after initializers
• Fix bullet composite primary key retrieval

8.0.7 (05/15/2025)

• Try to insert Bullet::Rack properly

8.0.6 (05/07/2025)

• Add CSP nonce for footer styles as well
• Add support for OpenTelemetry reporting

8.0.5 (04/21/2025)

• Properly insert ContentSecurityPolicy middleware
• Properly parse query string

8.0.4 (04/18/2025)

• Insert bullet middleware before ContentSecurityPolicy
• Support url query skip_html_injection=true
• Mark object as impossible after updating inversed

8.0.3 (04/04/2025)

• Update non persisted inversed_objects

... (truncated)

Commits

• bc55c03 Bumping version to 8.1.3
• bf01943 Merge pull request #774 from sloane/sloane/shorten-it-block-comment
• f30f124 Fixup ActiveRecord versions
• 899c97f Green
• 68ad149 Red
• 02b71fd Bumping version to 8.1.2
• b92d8d4 Merge pull request #773 from sloane/sloane/bullet-nil-polymorphic-false-positive
• 5f416e7 Skip N+1 detection for polymorphic belongs_to with nil _type
• 225aacb 📝 docs: clarify test wrapping requirements for Bullet
• 8667044 Merge pull request #771 from martingjaldbaek/fix-add-eager-loadings-set-merge
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.