[PR #19374] [CLOSED] feat(dependabot): added node.js dependency scanning #96227

New Issue

2026-05-15T22:28:02-05:00

GiteaMirror commented

2026-05-15 22:28:02 -05:00

📋 Pull Request Information

Original PR: https://github.com/open-webui/open-webui/pull/19374
Author: @mosewell
Created: 11/21/2025
Status: ❌ Closed

Base: main ← Head: chat-1268

📝 Commits (10+)

eb54fec feat(i18n): remove redundant translation for enhancing responses with Wikipedia knowledge
66f794e feat(docker): update txtai embeddings loading method to use huggingface-hub
127a606 feat(metrics): add inter-prompt latency histogram functionality and related UI components
6ff46cd fix(migration): format new migration for user behaviour functionality
dede9a7 Merge pull request #188 from ssc-dsai/chat-720
9a4effb feat(docker): add disk usage analysis and cleanup step to Docker build workflow
d946c81 feat(user): add role update functionality in EditUserModal
f972d3e fix(retrieval): add missing dependency (CHAT-879).
8f2a716 Merge pull request #202 from ssc-dsai/fix-tiktoken-missing-dependency
ecb7e14 Merge branch 'fix-tiktoken-missing-dependency' into dev

📊 Changes

446 files changed (+37178 additions, -62241 deletions)

View changed files

📝 .dockerignore (+17 -1)
📝 .env.example (+45 -1)
➖ .github/FUNDING.yml (+0 -1)
📝 .github/ISSUE_TEMPLATE/bug_report.md (+3 -3)
📝 .github/ISSUE_TEMPLATE/feature_request.md (+2 -2)
📝 .github/dependabot.yml (+8 -2)
📝 .github/workflows/build-release.yml (+2 -2)
➖ .github/workflows/codespell.disabled (+0 -25)
➖ .github/workflows/deploy-to-hf-spaces.yml (+0 -63)
📝 .github/workflows/docker-build.yaml (+8 -415)
➖ .github/workflows/integration-test.yml (+0 -253)
➖ .github/workflows/lint-backend.disabled (+0 -27)
➖ .github/workflows/lint-frontend.disabled (+0 -21)
➖ .github/workflows/release-pypi.yml (+0 -32)
➕ .github/workflows/security-scan-trivy.yaml (+47 -0)
📝 .gitignore (+3 -0)
➕ .vscode/launch.json (+22 -0)
📝 CHANGELOG.md (+433 -1)
📝 CODE_OF_CONDUCT.md (+83 -57)
📝 Dockerfile (+145 -42)

...and 80 more files

📄 Description

Changelog Entry

Description

Modified dependabot.yml to include scanning rules for node.js dependencies.

Changed

Modified dependabot.yml:
- Added npm package ecosystem, targeting package.lock.json in the root directory, on the dev branch, with monthly scanning.

Security

Activated rules in canchat-v2 repo to enable pip and npm scanning, without opening PRs.

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/open-webui/open-webui/pull/19374 **Author:** [@mosewell](https://github.com/mosewell) **Created:** 11/21/2025 **Status:** ❌ Closed **Base:** `main` ← **Head:** `chat-1268` --- ### 📝 Commits (10+) - [`eb54fec`](https://github.com/open-webui/open-webui/commit/eb54fec33cac821fdce58b24e9ec7c9f365f6de0) feat(i18n): remove redundant translation for enhancing responses with Wikipedia knowledge - [`66f794e`](https://github.com/open-webui/open-webui/commit/66f794e02c16a8c04a9c7693fae84d5ecb128ebf) feat(docker): update txtai embeddings loading method to use huggingface-hub - [`127a606`](https://github.com/open-webui/open-webui/commit/127a6060b900763d9900eec662982204034fec50) feat(metrics): add inter-prompt latency histogram functionality and related UI components - [`6ff46cd`](https://github.com/open-webui/open-webui/commit/6ff46cd7279bcd953d5ad6ce841df2992757dcd2) fix(migration): format new migration for user behaviour functionality - [`dede9a7`](https://github.com/open-webui/open-webui/commit/dede9a7172cd2be500ed0b53f3e775bb0919e718) Merge pull request #188 from ssc-dsai/chat-720 - [`9a4effb`](https://github.com/open-webui/open-webui/commit/9a4effbace730adb09f63e7d87a2d893ced66d81) feat(docker): add disk usage analysis and cleanup step to Docker build workflow - [`d946c81`](https://github.com/open-webui/open-webui/commit/d946c8113cf748bb811d36664a271bda67ac90c0) feat(user): add role update functionality in EditUserModal - [`f972d3e`](https://github.com/open-webui/open-webui/commit/f972d3e6d1e5c0cd140b5d1b4b273503cf9b24ec) fix(retrieval): add missing dependency (CHAT-879). - [`8f2a716`](https://github.com/open-webui/open-webui/commit/8f2a71691338c42df713f2830495bd517afd291b) Merge pull request #202 from ssc-dsai/fix-tiktoken-missing-dependency - [`ecb7e14`](https://github.com/open-webui/open-webui/commit/ecb7e1488a03738bc7128184ba8c76eb557d3c6c) Merge branch 'fix-tiktoken-missing-dependency' into dev ### 📊 Changes **446 files changed** (+37178 additions, -62241 deletions) <details> <summary>View changed files</summary> 📝 `.dockerignore` (+17 -1) 📝 `.env.example` (+45 -1) ➖ `.github/FUNDING.yml` (+0 -1) 📝 `.github/ISSUE_TEMPLATE/bug_report.md` (+3 -3) 📝 `.github/ISSUE_TEMPLATE/feature_request.md` (+2 -2) 📝 `.github/dependabot.yml` (+8 -2) 📝 `.github/workflows/build-release.yml` (+2 -2) ➖ `.github/workflows/codespell.disabled` (+0 -25) ➖ `.github/workflows/deploy-to-hf-spaces.yml` (+0 -63) 📝 `.github/workflows/docker-build.yaml` (+8 -415) ➖ `.github/workflows/integration-test.yml` (+0 -253) ➖ `.github/workflows/lint-backend.disabled` (+0 -27) ➖ `.github/workflows/lint-frontend.disabled` (+0 -21) ➖ `.github/workflows/release-pypi.yml` (+0 -32) ➕ `.github/workflows/security-scan-trivy.yaml` (+47 -0) 📝 `.gitignore` (+3 -0) ➕ `.vscode/launch.json` (+22 -0) 📝 `CHANGELOG.md` (+433 -1) 📝 `CODE_OF_CONDUCT.md` (+83 -57) 📝 `Dockerfile` (+145 -42) _...and 80 more files_ </details> ### 📄 Description # Changelog Entry ### Description - Modified dependabot.yml to include scanning rules for node.js dependencies. ### Changed - Modified dependabot.yml: - Added npm package ecosystem, targeting package.lock.json in the root directory, on the dev branch, with monthly scanning. ### Security - Activated rules in canchat-v2 repo to enable pip and npm scanning, without opening PRs. --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>

GiteaMirror added the pull-request label 2026-05-15 22:28:02 -05:00

GiteaMirror closed this issue

2026-05-15 22:28:04 -05:00

Sign in to join this conversation.

Branches Tags

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/open-webui#96227