mirror of https://github.com/reconurge/flowsint.git synced 2026-07-23 03:20:55 -05:00

Files

T

History

dextmorgn 9fcc60ca63 fix(deps): upgrade Python dependencies to patch 27 known vulnerabilities

pip-audit reported 27 vulnerabilities across 12 packages, including
cryptography PYSEC-2026-36 (CVSS 9.8) used by the vault, a starlette
Host-header path bypass, and python-multipart arbitrary file write.

- cryptography 45.0.7 -> 46.0.7 (pin was capped at <46)
- fastapi 0.115 -> 0.136, pulling starlette 0.46 -> 1.2
- python-multipart 0.0.20 -> 0.0.32
- pyjwt, urllib3, aiohttp, lxml, idna, mako and transitive bumps
- dev tools: pytest 8 -> 9 (requires pytest-httpx >=0.36), black 25 -> 26

All four module test suites pass (458 tests). pip-audit now reports
no known vulnerabilities.

2026-06-05 08:57:19 +02:00

alembic

feat(api): add collaborator endpoints, profile update, user search and backfill migration

2026-04-11 14:44:28 +02:00

app

feat(api): authenticate SSE via header, drop query-param auth and dead route

2026-06-03 11:28:41 +02:00

tests

test(api): SSE auth-gate and endpoint-removal tests (red)

2026-06-03 11:22:58 +02:00

.gitignore

feat: complete refactor

2025-11-27 17:16:41 +01:00

alembic.ini

…

Dockerfile

fix(api): run production container as non-root flowsint user

2026-05-30 18:49:43 +02:00

entrypoint.sh

feat(chore): update deploy components

2026-01-25 20:45:22 +01:00

pyproject.toml

fix(deps): upgrade Python dependencies to patch 27 known vulnerabilities

2026-06-05 08:57:19 +02:00

README.md

feat(api): switch to uv

2026-04-11 13:14:16 +02:00

resume.cfg

…

README.md

flowsint-api

Installation

Install Python dependencies:

uv sync

Run

# dev
uv run uvicorn app.main:app --host 0.0.0.0 --port 5001 --reload
# prod
uv run uvicorn app.main:app --host 0.0.0.0 --port 5001