peter 1eeaad61d9 fix(security): patch cryptography CVEs, upgrade pip at build, harden /auth/upgrade ...

- requirements: cryptography >=46.0.7 (was pinned <46, which excluded the fix for
  the CVEs pip-audit flagged in our Fernet/crypto library). pip-audit now clean.
- Dockerfile: upgrade pip before installing deps (patches installer-level CVEs).
- auth: /auth/upgrade now defaults to the least-privileged read scope; only an
  explicit access=write requests the write scope.

2026-06-14 05:59:34 +02:00

..

routes

feat(auth): split base sign-in from YouTube scopes for incremental onboarding

2026-06-13 23:56:34 +02:00

static

chore: rebrand Subfeed -> Siftlode

2026-06-14 04:40:22 +02:00

sync

fix(backfill): don't skip the tail of the recent/deep boundary page

2026-06-12 00:15:20 +02:00

youtube

chore: rebrand Subfeed -> Siftlode

2026-06-14 04:40:22 +02:00

__init__.py

feat: M1 foundation — compose stack, FastAPI, Google OAuth, encrypted tokens

2026-06-11 01:01:37 +02:00

auth.py

fix(security): patch cryptography CVEs, upgrade pip at build, harden /auth/upgrade

2026-06-14 05:59:34 +02:00

config.py

chore: rebrand Subfeed -> Siftlode

2026-06-14 04:40:22 +02:00

db.py

feat: M1 foundation — compose stack, FastAPI, Google OAuth, encrypted tokens

2026-06-11 01:01:37 +02:00

email.py

chore: rebrand Subfeed -> Siftlode

2026-06-14 04:40:22 +02:00

main.py

chore: rebrand Subfeed -> Siftlode

2026-06-14 04:40:22 +02:00

models.py

feat(stats): per-user API quota attribution + admin usage page

2026-06-12 02:47:55 +02:00

quota.py

feat(stats): per-user API quota attribution + admin usage page

2026-06-12 02:47:55 +02:00

scheduler.py

feat(stats): per-user API quota attribution + admin usage page

2026-06-12 02:47:55 +02:00

security.py

feat: M1 foundation — compose stack, FastAPI, Google OAuth, encrypted tokens

2026-06-11 01:01:37 +02:00

state.py

chore: structured timestamped logging across the backend

2026-06-11 04:26:18 +02:00