13 Commits

Author	SHA1	Message	Date
Xlorep DarkHelm	5fa44e2bec	chore: Update @playwright/test to 1.61.1 (#94) ... This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| --- ### Release Notes ### Configuration 📅 **Schedule**: 🚦 **Automerge**: Disabled ♻ **Rebasing**: Not rebasing 👥 **Reviewers**: None --- *This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).* <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4xNzMuMSIsInVwZGF0ZWRJblZlciI6IjQxLjE3My4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJzZWN1cml0eSJdfQ==--> Co-authored-by: Renovate Bot <renovate@darkhelm.org> Reviewed-on: #94	2026-07-21 22:17:44 -04:00
Xlorep DarkHelm	640d3bb767	chore: Update vue to 3.5.40 (#93) ... This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| --- ### Release Notes ### Configuration 📅 **Schedule**: 🚦 **Automerge**: Disabled ♻ **Rebasing**: Not rebasing 👥 **Reviewers**: None --- *This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).* <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4xNzMuMSIsInVwZGF0ZWRJblZlciI6IjQxLjE3My4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJzZWN1cml0eSJdfQ==--> Co-authored-by: Renovate Bot <renovate@darkhelm.org> Reviewed-on: #93	2026-07-21 22:16:56 -04:00
Xlorep DarkHelm	75fdff75cf	chore: Update Frontend dev tools (patch) (#91) ... This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| --- ### Release Notes ### Configuration 📅 **Schedule**: 🚦 **Automerge**: Disabled ♻ **Rebasing**: Not rebasing 👥 **Reviewers**: None --- *This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).* <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4xNzMuMSIsInVwZGF0ZWRJblZlciI6IjQxLjE3My4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJzZWN1cml0eSJdfQ==--> Co-authored-by: Renovate Bot <renovate@darkhelm.org> Reviewed-on: #91	2026-07-21 22:15:29 -04:00
Xlorep DarkHelm	9d4db9eaa4	chore: Update @vue/test-utils to 2.4.11 (#89) ... This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| --- ### Release Notes ### Configuration 📅 **Schedule**: 🚦 **Automerge**: Disabled ♻ **Rebasing**: Not rebasing 👥 **Reviewers**: None --- *This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).* <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4xNzMuMSIsInVwZGF0ZWRJblZlciI6IjQxLjE3My4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJzZWN1cml0eSJdfQ==--> Co-authored-by: Renovate Bot <renovate@darkhelm.org> Reviewed-on: #89	2026-07-21 22:14:25 -04:00
Xlorep DarkHelm	0e76925c90	chore: Update @vitest/coverage-v8 to 3.2.7 (#88) ... This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| --- ### Release Notes ### Configuration 📅 **Schedule**: 🚦 **Automerge**: Disabled ♻ **Rebasing**: Not rebasing 👥 **Reviewers**: None --- *This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).* <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4xNzMuMSIsInVwZGF0ZWRJblZlciI6IjQxLjE3My4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJzZWN1cml0eSJdfQ==--> Co-authored-by: Renovate Bot <renovate@darkhelm.org> Reviewed-on: #88	2026-07-21 22:12:41 -04:00
Xlorep DarkHelm	c4f59e4d05	chore: Update @vitejs/plugin-vue to 6.0.8 (#87) ... This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| --- ### Release Notes ### Configuration 📅 **Schedule**: 🚦 **Automerge**: Disabled ♻ **Rebasing**: Not rebasing 👥 **Reviewers**: None --- *This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).* <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4xNzMuMSIsInVwZGF0ZWRJblZlciI6IjQxLjE3My4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJzZWN1cml0eSJdfQ==--> Co-authored-by: Renovate Bot <renovate@darkhelm.org> Reviewed-on: #87	2026-07-21 22:12:22 -04:00
Xlorep DarkHelm	4b2c46e1d8	chore: Update @types/node to 20.19.43 (#85) ... This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| --- ### Release Notes ### Configuration 📅 **Schedule**: 🚦 **Automerge**: Disabled ♻ **Rebasing**: Not rebasing 👥 **Reviewers**: None --- *This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).* <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4xNzMuMSIsInVwZGF0ZWRJblZlciI6IjQxLjE3My4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJzZWN1cml0eSJdfQ==--> Co-authored-by: Renovate Bot <renovate@darkhelm.org> Reviewed-on: #85	2026-07-20 14:18:08 -04:00
Xlorep DarkHelm	f627ef018a	feat: integrate security audits into pre-commit and CI/CD with backend pip-audit migration (#74) ... ## Summary This PR integrates security-focused checks into the existing quality gates and aligns local workflows with CI/CD execution. ## What changed - Added Bandit to pre-commit backend checks. - Integrated eslint-plugin-security into the existing frontend ESLint setup used by pre-commit. - Added dedicated audit tasks: - backend audit via pip-audit - frontend audit via yarn npm audit - Updated CI/CD workflow to include and gate on frontend/backend audit jobs. - Switched backend vulnerability scanning from Safety to pip-audit to avoid interactive/auth requirements in CI. - Updated backend dependency set and lockfile to resolve test dependency conflicts and keep the environment solvable. - Marked backend integration API tests with the integration marker so marker-based unit/integration separation works consistently. ## Validation - Pre-commit hooks run and pass after formatting/autofixes. - Branch commit created successfully after hook-driven file updates. - Branch pushed to remote and tracking is configured. ## Notes - pip-audit now executes from backend context (for example via uv --directory backend run ...), matching project layout. - Remaining reported vulnerabilities depend on upstream package fix availability/constraints and may require follow-up once publishable fix versions are consumable. ## Follow-ups (optional) - Add a curated pip-audit ignore policy for non-actionable/transient advisories with rationale. - Open a focused follow-up PR for remaining dependency advisories once upstream fixes are practically installable. Co-authored-by: copilotcoder <copilotcoder@darkhelm.org> Reviewed-on: #74	2026-07-13 22:19:57 -04:00
Cliff Hill	d02039a22e	Backend runtime upgraded to Python 3.14 with exact dependency pinning (#57) ... Signed-off-by: Cliff Hill <xlorep@darkhelm.org> ## Summary Upgrades backend runtime baseline and dependency management for issue #10. ### Changes 1. **Python Baseline**: Updated from 3.13 to 3.14 - Updated `backend/pyproject.toml` requires-python constraint - Updated `backend/pyrightconfig.json` pythonVersion - Updated all Dockerfile and CI references 2. **Dependency Pinning**: Switched to exact version pins in `backend/pyproject.toml` - All dev and runtime dependencies now use `==` instead of `>=` - `fastapi==0.120.2`, `uvicorn==0.38.0` - ruff, pyright, pytest suite pinned to current resolved versions - Regenerated `backend/uv.lock` under Python 3.14 3. **Startup Compatibility Guard** (TDD via RED→GREEN) - New `compatibility_status()` function evaluates runtime and pinned deps - Startup raises `RuntimeError` if policy fails - Implemented via FastAPI lifespan (non-deprecated) handler 4. **Compatibility Status Endpoint** - New `GET /compatibility` returns policy status, runtime version, and package checks - Shares single source of truth with startup validation 5. **Integration Tests** - Added failing-then-passing tests for startup guard and endpoint behavior - 100% coverage maintained 6. **Direnv Configuration** - Added `UV_PYTHON="3.14"` pin to repo `.envrc` - Ensures direnv creates/recreates venv with correct Python version ### Validation - ✅ ruff format/check - ✅ pyright strict (0 errors) - ✅ pytest: 8 passed, 100% coverage (>=95 gate) - ✅ pydoclint: pass - ✅ xdoctest: pass ### Notes - SQLAlchemy/SQLModel introduction deferred to next pass per scope - Compatibility logic currently validates fastapi/uvicorn pins (runtime deps) - Ready for container build validation and Renovate bot testing Co-authored-by: copilotcoder <copilotcoder@darkhelm.org> Reviewed-on: #57 Co-authored-by: Cliff Hill <xlorep@darkhelm.org> Co-committed-by: Cliff Hill <xlorep@darkhelm.org>	2026-06-18 11:19:24 -04:00
Cliff Hill	8a3aaeafe8	Getting yarn berry working. ... Signed-off-by: Cliff Hill <xlorep@darkhelm.org>	2025-10-27 12:23:28 -04:00
Cliff Hill	2590682425	Making yarn work with vue and vite right. ... Signed-off-by: Cliff Hill <xlorep@darkhelm.org>	2025-10-27 11:50:23 -04:00
Cliff Hill	8aa8d41e8a	Did some things, made more improvements. ... Signed-off-by: Cliff Hill <xlorep@darkhelm.org>	2025-10-19 21:35:02 -04:00
Cliff Hill	6068faf026	Getting all the things working. ... Signed-off-by: Cliff Hill <xlorep@darkhelm.org>	2025-10-18 21:33:45 -04:00