15 Commits

Author	SHA1	Message	Date
copilotcoder	e61b70c4a0	fix(frontend): restore TS6-compatible lint and type checks	2026-07-22 13:28:30 -04:00
copilotcoder	6c98ee7018	Trying to get all of the version updates in one go. ... Signed-off-by: copilotcoder <copilotcoder@darkhelm.org>	2026-07-22 11:10:05 -04:00
Xlorep DarkHelm	2bb73a3f6b	chore: Update zod to 4.4.3 (#109) ... This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| --- ### Release Notes ### Configuration 📅 **Schedule**: 🚦 **Automerge**: Disabled ♻ **Rebasing**: Not rebasing 👥 **Reviewers**: None --- *This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).* <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4xNzMuMSIsInVwZGF0ZWRJblZlciI6IjQxLjE3My4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJtYWpvci11cGRhdGUiXX0=--> Co-authored-by: Renovate Bot <renovate@darkhelm.org> Reviewed-on: #109	2026-07-21 22:20:46 -04:00
Xlorep DarkHelm	329663ccdf	chore: Update @types/node to 24.13.3 (#101) ... This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| --- ### Release Notes ### Configuration 📅 **Schedule**: 🚦 **Automerge**: Disabled ♻ **Rebasing**: Not rebasing 👥 **Reviewers**: None --- *This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).* <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4xNzMuMSIsInVwZGF0ZWRJblZlciI6IjQxLjE3My4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJtYWpvci11cGRhdGUiXX0=--> Co-authored-by: Renovate Bot <renovate@darkhelm.org> Reviewed-on: #101	2026-07-21 22:20:04 -04:00
Xlorep DarkHelm	1ba01171a1	chore: Update Yarn to 4.17.1 (#100) ... This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| --- ### Release Notes ### Configuration 📅 **Schedule**: 🚦 **Automerge**: Disabled ♻ **Rebasing**: Not rebasing 👥 **Reviewers**: None --- *This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).* <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4xNzMuMSIsInVwZGF0ZWRJblZlciI6IjQxLjE3My4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJzZWN1cml0eSJdfQ==--> Co-authored-by: Renovate Bot <renovate@darkhelm.org> Reviewed-on: #100	2026-07-21 22:19:47 -04:00
Renovate Bot	81ff99fe59	chore: Update typescript to 5.9.3	2026-07-21 22:19:06 -04:00
Xlorep DarkHelm	a51bb70ba0	chore: Update @vue/tsconfig to 0.9.1 (#95) ... This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| --- ### Release Notes ### Configuration 📅 **Schedule**: 🚦 **Automerge**: Disabled ♻ **Rebasing**: Not rebasing 👥 **Reviewers**: None --- *This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).* <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4xNzMuMSIsInVwZGF0ZWRJblZlciI6IjQxLjE3My4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJzZWN1cml0eSJdfQ==--> Co-authored-by: Renovate Bot <renovate@darkhelm.org> Reviewed-on: #95	2026-07-21 22:18:42 -04:00
Xlorep DarkHelm	f627ef018a	feat: integrate security audits into pre-commit and CI/CD with backend pip-audit migration (#74) ... ## Summary This PR integrates security-focused checks into the existing quality gates and aligns local workflows with CI/CD execution. ## What changed - Added Bandit to pre-commit backend checks. - Integrated eslint-plugin-security into the existing frontend ESLint setup used by pre-commit. - Added dedicated audit tasks: - backend audit via pip-audit - frontend audit via yarn npm audit - Updated CI/CD workflow to include and gate on frontend/backend audit jobs. - Switched backend vulnerability scanning from Safety to pip-audit to avoid interactive/auth requirements in CI. - Updated backend dependency set and lockfile to resolve test dependency conflicts and keep the environment solvable. - Marked backend integration API tests with the integration marker so marker-based unit/integration separation works consistently. ## Validation - Pre-commit hooks run and pass after formatting/autofixes. - Branch commit created successfully after hook-driven file updates. - Branch pushed to remote and tracking is configured. ## Notes - pip-audit now executes from backend context (for example via uv --directory backend run ...), matching project layout. - Remaining reported vulnerabilities depend on upstream package fix availability/constraints and may require follow-up once publishable fix versions are consumable. ## Follow-ups (optional) - Add a curated pip-audit ignore policy for non-actionable/transient advisories with rationale. - Open a focused follow-up PR for remaining dependency advisories once upstream fixes are practically installable. Co-authored-by: copilotcoder <copilotcoder@darkhelm.org> Reviewed-on: #74	2026-07-13 22:19:57 -04:00
Cliff Hill	d02039a22e	Backend runtime upgraded to Python 3.14 with exact dependency pinning (#57) ... Signed-off-by: Cliff Hill <xlorep@darkhelm.org> ## Summary Upgrades backend runtime baseline and dependency management for issue #10. ### Changes 1. **Python Baseline**: Updated from 3.13 to 3.14 - Updated `backend/pyproject.toml` requires-python constraint - Updated `backend/pyrightconfig.json` pythonVersion - Updated all Dockerfile and CI references 2. **Dependency Pinning**: Switched to exact version pins in `backend/pyproject.toml` - All dev and runtime dependencies now use `==` instead of `>=` - `fastapi==0.120.2`, `uvicorn==0.38.0` - ruff, pyright, pytest suite pinned to current resolved versions - Regenerated `backend/uv.lock` under Python 3.14 3. **Startup Compatibility Guard** (TDD via RED→GREEN) - New `compatibility_status()` function evaluates runtime and pinned deps - Startup raises `RuntimeError` if policy fails - Implemented via FastAPI lifespan (non-deprecated) handler 4. **Compatibility Status Endpoint** - New `GET /compatibility` returns policy status, runtime version, and package checks - Shares single source of truth with startup validation 5. **Integration Tests** - Added failing-then-passing tests for startup guard and endpoint behavior - 100% coverage maintained 6. **Direnv Configuration** - Added `UV_PYTHON="3.14"` pin to repo `.envrc` - Ensures direnv creates/recreates venv with correct Python version ### Validation - ✅ ruff format/check - ✅ pyright strict (0 errors) - ✅ pytest: 8 passed, 100% coverage (>=95 gate) - ✅ pydoclint: pass - ✅ xdoctest: pass ### Notes - SQLAlchemy/SQLModel introduction deferred to next pass per scope - Compatibility logic currently validates fastapi/uvicorn pins (runtime deps) - Ready for container build validation and Renovate bot testing Co-authored-by: copilotcoder <copilotcoder@darkhelm.org> Reviewed-on: #57 Co-authored-by: Cliff Hill <xlorep@darkhelm.org> Co-committed-by: Cliff Hill <xlorep@darkhelm.org>	2026-06-18 11:19:24 -04:00
Cliff Hill	8a3aaeafe8	Getting yarn berry working. ... Signed-off-by: Cliff Hill <xlorep@darkhelm.org>	2025-10-27 12:23:28 -04:00
Cliff Hill	2590682425	Making yarn work with vue and vite right. ... Signed-off-by: Cliff Hill <xlorep@darkhelm.org>	2025-10-27 11:50:23 -04:00
Cliff Hill	2c8f424a81	Fixing everything, making the project structure ready for real code. ... Signed-off-by: Cliff Hill <xlorep@darkhelm.org>	2025-10-23 12:58:32 -04:00
Cliff Hill	8aa8d41e8a	Did some things, made more improvements. ... Signed-off-by: Cliff Hill <xlorep@darkhelm.org>	2025-10-19 21:35:02 -04:00
Cliff Hill	4502c92f9b	Making pre-commit powerful again. ... Signed-off-by: Cliff Hill <xlorep@darkhelm.org>	2025-10-18 21:31:34 -04:00
Cliff Hill	8ab2e1dd28	Did some things. ... Signed-off-by: Cliff Hill <xlorep@darkhelm.org>	2025-10-18 21:29:28 -04:00