peter 011dea8eb7 fix(deps): Authlib 1.7.2 -> 1.9.1 for CVE-2026-96760 and CVE-2026-114616 ...

One pin bumped in place; pip check passes and pip-audit finds nothing.

2026-10-27 21:46:16 +01:00

..

.basedpyright

refactor(plex): playlists, playback, Discover and admin through the unit; the plex package is fenced

2026-10-19 22:42:46 +02:00

alembic

fix(catalog): a follow from YouTube keeps an explored channel, and the list counts only what can come

2026-10-24 11:29:14 +02:00

app

chore(security): gitleaks knows the public InnerTube key and a fixture's page cursors are no secrets

2026-10-25 17:35:20 +01:00

tests

test(db): lock probes read only their own database's locks

2026-10-25 13:51:26 +01:00

alembic.ini

test: the gate's output carries no noise to hide a real warning in

2026-09-17 03:03:37 +02:00

docker-compose.test.yml

chore(test): the DB lane runs on every core — each pytest-xdist worker gets its own database

2026-10-16 01:13:31 +02:00

Dockerfile.test

build(deps): pin a reproducible lock + pip-audit; bump node 20->22 (E1 S4, SEC-5/DX-3)

2026-08-18 02:34:45 +02:00

entrypoint.sh

feat: one structured log for every process, with a request id

2026-09-16 01:37:02 +02:00

pyrightconfig.json

docs(comments): no WebSocket and no CI in the present tense

2026-10-05 00:50:36 +02:00

pytest.ini

chore(test): the DB lane runs on every core — each pytest-xdist worker gets its own database

2026-10-16 01:13:31 +02:00

requirements-dev.txt

chore(test): the DB lane runs on every core — each pytest-xdist worker gets its own database

2026-10-16 01:13:31 +02:00

requirements.lock

fix(deps): Authlib 1.7.2 -> 1.9.1 for CVE-2026-96760 and CVE-2026-114616

2026-10-27 21:46:16 +01:00

requirements.txt

fix(clip): a clip is held to its owner's storage cap, and its limits and failures say the server's truth

2026-10-10 15:35:12 +02:00

ruff.toml

chore(comments): drop epic, sprint and review-round ids from the code

2026-10-05 00:19:39 +02:00