gitea-admin/gh-christianlouis-inboxconverge
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
f439f887d037221b988459b970b3d530f895d644
gh-christianlouis-inboxconv…/CHANGELOG.md
T
copilot-swe-agent[bot] f439f887d0 fix: address multiple code quality improvements across backend and frontend 
Backend fixes:
- Fix JWT sub claim: encode as str(user.id), decode with int() cast (python-jose requirement)
- Replace all deprecated datetime.utcnow() with datetime.now(timezone.utc)
- Replace deprecated FastAPI @app.on_event() with modern lifespan context manager
- Replace deprecated Pydantic class Config with model_config = ConfigDict(...)
- Replace deprecated Pydantic .dict() with .model_dump()
- Fix overly broad except (GmailInjectionError, Exception) → except Exception
- Remove unused GmailInjectionError import
- Fix TokenPayload schema sub field type from int to str

Frontend:
- Create frontend/src/lib/api.ts — API client module with auth, user, mail accounts, processing runs APIs
- Add !frontend/src/lib/ to .gitignore negation

Tests:
- Add 3 new JWT tests (sub string encoding, access token type, refresh token type)
- Update test_token_payload_schema for string sub claim
- All 128 tests pass

Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
Agent-Logs-Url: https://github.com/christianlouis/pop_puller_to_gmail/sessions/e0b13eb0-8de7-4f02-81e4-e202cbba4608
2026-03-23 13:09:23 +00:00

5.7 KiB
Raw Blame History

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

[Unreleased]

Added

  • GitHub issue templates (bug report, feature request, test needed)
  • Pull request template with comprehensive checklist
  • docs/CODING_PATTERNS.md with development best practices
  • docs/ERRORS.md documenting all error codes
  • docs/adr/ directory with Architecture Decision Records
  • Makefile with common development tasks
  • .pre-commit-config.yaml for code quality enforcement
  • CHANGELOG.md for version tracking
  • Security validation for SECRET_KEY and ENCRYPTION_KEY on startup
  • CSRF protection middleware
  • Security headers middleware (X-Frame-Options, CSP, HSTS)
  • Rate limiting per user/tier
  • Comprehensive test infrastructure setup
  • CI/CD pipeline for testing and security scanning
  • Dependabot configuration for automated dependency updates (pip, npm, GitHub Actions, Docker)
  • Copilot instructions requiring TODO.md and CHANGELOG.md updates
  • Unit tests for security middleware (SecurityHeadersMiddleware, CSRFProtectionMiddleware)
  • Unit tests for JWT token lifecycle (access tokens, refresh tokens, decode, edge cases)
  • Unit tests for credential encryption edge cases (empty, long, unicode, special chars)
  • Unit tests for FastAPI application factory and core endpoints (root, health, OpenAPI)
  • Unit tests for Pydantic schema validation (users, mail accounts, notifications, subscriptions)
  • Unit tests for JWT sub claim string encoding and token type verification
  • Created frontend/src/lib/api.ts — API client module (fixes frontend compilation blocker)
  • Reached 57% test coverage (up from 54%)

Changed

  • Reorganized documentation into docs/ directory
  • Improved error handling with specific exception types
  • Updated datetime usage to timezone-aware
  • Enhanced logging with structured context
  • Bumped Docker Python base image from 3.11-slim to 3.14-slim
  • Bumped CI Python version from 3.11 to 3.14
  • Bumped CI Node.js version from 18 to 20
  • Bumped GitHub Actions: actions/setup-python v5 → v6, actions/setup-node v4 → v6, docker/setup-buildx-action v3 → v4, codecov/codecov-action v3 → v5
  • Bumped backend dependencies: pydantic 2.5.3 → 2.12.5, pydantic-settings 2.1.0 → 2.13.1, psycopg2-binary 2.9.9 → 2.9.11, asyncpg 0.29.0 → 0.31.0, stripe 7.11.0 → 14.4.1, aioimaplib 1.0.1 → 2.0.1, google-auth-httplib2 0.2.0 → 0.3.0, celery 5.3.6 → 5.6.2, redis 5.0.1 → 7.3.0, tenacity 8.2.3 → 9.1.4
  • Bumped frontend dependencies: react 19.2.3 → 19.2.4, @tanstack/react-query ^5.90.20 → ^5.95.0, axios ^1.13.5 → ^1.13.6, zustand ^5.0.11 → ^5.0.12, eslint ^9 → ^10, eslint-config-next 16.1.6 → 16.2.1

Removed

  • Removed CodeQL analysis from CI pipeline (was blocking builds)

Fixed

  • JWT sub claim now encoded as string per JWT spec (python-jose rejects integer subjects)
  • TokenPayload schema sub field type changed from int to str for consistency
  • Replaced deprecated datetime.utcnow() with datetime.now(timezone.utc) throughout backend
  • Replaced deprecated FastAPI @app.on_event() handlers with modern lifespan context manager
  • Replaced deprecated Pydantic class Config with model_config = ConfigDict(...) in all schemas
  • Replaced deprecated Pydantic .dict() with .model_dump() in mail account updates
  • Removed overly broad except (GmailInjectionError, Exception) in task error handler
  • Bare exception handlers replaced with specific types
  • Open redirect vulnerability in OAuth redirect_uri
  • Default encryption keys security issue

Security

  • All dependencies updated to patched versions
  • Security headers added to all API responses
  • Input validation improved for all endpoints
  • Credential handling audited and improved

[1.0.0] - 2026-02-01

Added

  • Multi-tenant SaaS backend with FastAPI
  • JWT and OAuth2 (Google Sign-In) authentication
  • Encrypted credential storage with Fernet
  • Subscription management with Stripe integration
  • PostgreSQL database with SQLAlchemy ORM
  • Redis for caching and session management
  • Celery for background task processing
  • Apprise for multi-channel notifications
  • Docker and docker-compose support
  • Comprehensive API documentation with OpenAPI
  • Extensive documentation (README, ARCHITECTURE, SECURITY_REPORT, etc.)

Changed

  • Upgraded from single-user script to multi-tenant platform

[0.1.0] - 2025-12-15 (Legacy Version)

Added

  • Initial release of single-user pop3_forwarder.py script
  • Docker support with docker-compose
  • Multiple POP3 account support
  • Gmail forwarding via SMTP
  • Rate limiting and throttling
  • Error notifications via Postmarkapp
  • Environment-based configuration
  • Basic logging

Version History

  • [Unreleased] - Current development (agentic coding improvements, security hardening)
  • [1.0.0] - Multi-tenant SaaS platform (2026-02-01)
  • [0.1.0] - Legacy single-user script (2025-12-15)

How to Update This Changelog

Categories

Use these standard categories:

  • Added - New features
  • Changed - Changes in existing functionality
  • Deprecated - Soon-to-be removed features
  • Removed - Removed features
  • Fixed - Bug fixes
  • Security - Vulnerability fixes

Format

## [Version] - YYYY-MM-DD

### Added
- New feature description (#issue-number)

### Fixed
- Bug fix description (#issue-number)

Workflow

  1. Add unreleased changes to [Unreleased] section
  2. When releasing, move unreleased changes to new version section
  3. Add version number, date, and comparison link
  4. Create git tag: git tag -a v1.0.0 -m "Release v1.0.0"

Maintained by: Development Team Last Updated: 2026-03-23

Reference in New Issue View Git Blame Copy Permalink