gitea-admin/gh-christianlouis-inboxconverge
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

chore: merge dependency updates from PRs #26-#49 and remove CodeQL checks

Browse Source 
Backend (Python):
- pydantic 2.5.3 → 2.12.5
- pydantic-settings 2.1.0 → 2.13.1
- psycopg2-binary 2.9.9 → 2.9.11
- asyncpg 0.29.0 → 0.31.0
- stripe 7.11.0 → 14.4.1
- aioimaplib 1.0.1 → 2.0.1
- google-auth-httplib2 0.2.0 → 0.3.0
- celery 5.3.6 → 5.6.2
- redis 5.0.1 → 7.3.0
- tenacity 8.2.3 → 9.1.4

Frontend (npm):
- react 19.2.3 → 19.2.4
- @tanstack/react-query ^5.90.20 → ^5.95.0
- axios ^1.13.5 → ^1.13.6
- zustand ^5.0.11 → ^5.0.12
- eslint ^9 → ^10
- eslint-config-next 16.1.6 → 16.2.1

Docker:
- Python base image 3.11-slim → 3.14-slim

CI/CD:
- actions/setup-python v5 → v6
- actions/setup-node v4 → v6
- docker/setup-buildx-action v3 → v4
- codecov/codecov-action v3 → v5
- Python version 3.11 → 3.14, Node.js 18 → 20
- Removed CodeQL checks (was blocking builds)

Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
Agent-Logs-Url: https://github.com/christianlouis/pop_puller_to_gmail/sessions/d8a6f888-1c85-4de6-a36d-55e9dcd7489e
This commit is contained in:
copilot-swe-agent[bot]
2026-03-23 12:33:33 +00:00
parent 5f5b4777dd
commit c4d8f392f8
8 changed files with 405 additions and 576 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.github/workflows/ci.yml
+10 -20
View File
@@ -27,9 +27,9 @@ jobs:
- uses: actions/checkout@v4
- name: Set up Python
uses: actions/setup-python@v5
uses: actions/setup-python@v6
with:
python-version: '3.11'
python-version: '3.14'
- name: Install Python linting tools
run: |
@@ -48,9 +48,9 @@ jobs:
continue-on-error: true
- name: Set up Node.js
uses: actions/setup-node@v4
uses: actions/setup-node@v6
with:
node-version: '18'
node-version: '20'
cache: 'npm'
cache-dependency-path: frontend/package-lock.json
@@ -100,9 +100,9 @@ jobs:
- uses: actions/checkout@v4
- name: Set up Python
uses: actions/setup-python@v5
uses: actions/setup-python@v6
with:
python-version: '3.11'
python-version: '3.14'
cache: 'pip'
- name: Install dependencies
@@ -122,7 +122,7 @@ jobs:
pytest tests/ -v --cov=app --cov-report=xml --cov-report=term
- name: Upload coverage to Codecov
uses: codecov/codecov-action@v3
uses: codecov/codecov-action@v5
with:
file: ./backend/coverage.xml
flags: unittests
@@ -136,16 +136,14 @@ jobs:
runs-on: ubuntu-latest
permissions:
contents: read
security-events: write
actions: read
steps:
- uses: actions/checkout@v4
- name: Set up Python
uses: actions/setup-python@v5
uses: actions/setup-python@v6
with:
python-version: '3.11'
python-version: '3.14'
- name: Install dependencies
run: |
@@ -161,14 +159,6 @@ jobs:
run: safety check --json
continue-on-error: true
- name: Initialize CodeQL
uses: github/codeql-action/init@v3
with:
languages: python, javascript-typescript
- name: Perform CodeQL Analysis
uses: github/codeql-action/analyze@v3
# ── Phase 4: Build ─────────────────────────────────────────────────────
build:
name: Build & Push Docker Image
@@ -186,7 +176,7 @@ jobs:
uses: actions/checkout@v4
- name: Set up Docker Buildx
uses: docker/setup-buildx-action@v3
uses: docker/setup-buildx-action@v4
- name: Log in to Container Registry
uses: docker/login-action@v3
CHANGELOG.md
+9
View File
@@ -36,6 +36,15 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
- Improved error handling with specific exception types
- Updated datetime usage to timezone-aware
- Enhanced logging with structured context
- Bumped Docker Python base image from 3.11-slim to 3.14-slim
- Bumped CI Python version from 3.11 to 3.14
- Bumped CI Node.js version from 18 to 20
- Bumped GitHub Actions: `actions/setup-python` v5 → v6, `actions/setup-node` v4 → v6, `docker/setup-buildx-action` v3 → v4, `codecov/codecov-action` v3 → v5
- Bumped backend dependencies: pydantic 2.5.3 → 2.12.5, pydantic-settings 2.1.0 → 2.13.1, psycopg2-binary 2.9.9 → 2.9.11, asyncpg 0.29.0 → 0.31.0, stripe 7.11.0 → 14.4.1, aioimaplib 1.0.1 → 2.0.1, google-auth-httplib2 0.2.0 → 0.3.0, celery 5.3.6 → 5.6.2, redis 5.0.1 → 7.3.0, tenacity 8.2.3 → 9.1.4
- Bumped frontend dependencies: react 19.2.3 → 19.2.4, @tanstack/react-query ^5.90.20 → ^5.95.0, axios ^1.13.5 → ^1.13.6, zustand ^5.0.11 → ^5.0.12, eslint ^9 → ^10, eslint-config-next 16.1.6 → 16.2.1
### Removed
- Removed CodeQL analysis from CI pipeline (was blocking builds)
### Fixed
- Bare exception handlers replaced with specific types
Dockerfile
+1 -1
View File
@@ -1,4 +1,4 @@
FROM python:3.11-slim
FROM python:3.14-slim
# Set working directory
WORKDIR /app
backend/Dockerfile
+1 -1
View File
@@ -1,4 +1,4 @@
FROM python:3.11-slim
FROM python:3.14-slim
# Set working directory
WORKDIR /app
backend/requirements.txt
+10 -10
View File
@@ -1,14 +1,14 @@
# Core Framework
fastapi==0.109.1 # Updated: Fixed ReDoS vulnerability (was 0.109.0)
uvicorn[standard]==0.27.0
pydantic==2.5.3
pydantic-settings==2.1.0
pydantic==2.12.5
pydantic-settings==2.13.1
# Database
sqlalchemy==2.0.25
alembic==1.13.1
psycopg2-binary==2.9.9
asyncpg==0.29.0
psycopg2-binary==2.9.11
asyncpg==0.31.0
# Authentication
python-jose[cryptography]==3.3.0
@@ -18,23 +18,23 @@ authlib==1.6.9 # Updated: Fixed OIDC hash binding, JWE RSA1_5 padding oracle, a
httpx==0.26.0
# Payment Processing
stripe==7.11.0
stripe==14.4.1
# Email & Mail Processing
aiosmtplib==3.0.1
aiohttp==3.13.3 # Updated: Fixed zip bomb, DoS, and directory traversal vulnerabilities (was 3.9.1)
aioimaplib==1.0.1
aioimaplib==2.0.1
email-validator==2.1.0.post1
# Gmail API (for direct email injection)
google-api-python-client==2.193.0
google-auth==2.49.1
google-auth-oauthlib==1.2.0
google-auth-httplib2==0.2.0
google-auth-httplib2==0.3.0
# Job Queue & Cache
celery==5.3.6
redis==5.0.1
celery==5.6.2
redis==7.3.0
# Security & Encryption
cryptography==46.0.5 # Updated: Fixed NULL pointer dereference (was 42.0.0)
@@ -55,4 +55,4 @@ faker==22.6.0
# Utilities
python-dotenv==1.0.0
schedule==1.2.0
tenacity==8.2.3
tenacity==9.1.4
docs/TODO.md
+2
View File
@@ -94,6 +94,8 @@ Comprehensive task breakdown for repository improvements and production readines
- [x] Create `.github/workflows/security.yml` for security scanning
- [x] Existing `.github/workflows/docker-build.yml` for Docker images
- [x] Set up automatic dependency updates (Dependabot)
- [x] Merge Dependabot dependency updates (PRs #26–#49)
- [x] Remove CodeQL checks from CI (was blocking builds)
### In Progress 🔨
- [ ] Configure branch protection rules
frontend/package-lock.json
Generated
+366 -538
View File
File diff suppressed because it is too large Load Diff
frontend/package.json
+6 -6
View File
@@ -9,21 +9,21 @@
"lint": "eslint"
},
"dependencies": {
"@tanstack/react-query": "^5.90.20",
"axios": "^1.13.5",
"@tanstack/react-query": "^5.95.0",
"axios": "^1.13.6",
"lucide-react": "^0.577.0",
"next": "16.1.7",
"react": "19.2.3",
"react": "19.2.4",
"react-dom": "19.2.4",
"zustand": "^5.0.11"
"zustand": "^5.0.12"
},
"devDependencies": {
"@tailwindcss/postcss": "^4",
"@types/node": "^20",
"@types/react": "^19",
"@types/react-dom": "^19",
"eslint": "^9",
"eslint-config-next": "16.1.6",
"eslint": "^10",
"eslint-config-next": "16.2.1",
"tailwindcss": "^4",
"typescript": "^5"
}