64819b3696
🔖 (minor) bump release to 1.20.0
2026-06-12 17:25:56 +02:00
e5184695bb
🔖 (minor) bump release to 1.19.0
2026-06-04 19:13:32 +02:00
aca3261a9a
⬆️ (backend) upgrade idna to >=3.15 to address CVE-2026-45409
...
Pin idna to >=3.15 via uv constraint-dependencies to fix a moderate
severity (CVSS 5.3) information disclosure vulnerability. The flaw is
network-exploitable with no authentication required.
2026-06-04 17:53:40 +02:00
22b2e6bd1e
⬆️ (dependencies) update aiohttp to v3.14.0 [SECURITY]
2026-06-04 16:06:10 +02:00
be35c1d6e0
⬆️ (dependencies) update python dependencies
...
Update python dependencies.
Co-Authored-By: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-06-04 15:34:39 +02:00
73a7841b96
🔖 (minor) bump release to 1.18.0
2026-06-03 14:46:26 +02:00
a4997e7431
🔖 (minor) bump release to 1.17.0
2026-05-31 18:18:00 +02:00
7390673bfc
⚡ ️(frontend) backport phone number formatting to the backend
...
Use the Python port of Google's phone number library on the backend
instead of the JS one on the client. Saves 140Kb of unnecessary JS
and avoids a complex dynamic import that would have been required to
optimize loading.
The transformation is static: the phone number lives in the Django
settings, so the backend can format it once and pass the result to
the client. This avoids every client loading the 140Kb library and
re-computing the same information.
Moreover, within a single client, the transformation was previously
re-computed several times during a webapp lifecycle.
2026-05-30 23:39:05 +02:00
35951ba2a6
🔖 (minor) bump release to 1.16.0
2026-05-13 22:30:32 +02:00
05f32d008a
⬆️ (dependencies) Bump urllib3 from 2.6.3 to 2.7.0 [SECURITY]
...
Fix CVE-2026-44431 and CVE-2026-44432.
2026-05-12 11:23:00 +02:00
6a8eb79b41
⬆️ (dependencies) update django to v5.2.14 [SECURITY]
2026-05-11 12:03:18 +02:00
07698ddced
🔖 (minor) bump release to 1.15.0
2026-05-01 00:16:34 +02:00
211e97edfa
⬆️ (backend) bump django-lasuite to v0.0.26
...
Upgrade the package to support the `login_hint` parameter.
2026-04-23 11:49:52 +02:00
aaf21e97e8
🔖 (minor) bump release to 1.14.0
2026-04-16 22:12:48 +02:00
b80c46da54
⬆️ (backend) upgrade dependencies to fix Pillow CVE-2026-40192
...
Run `uv lock --upgrade` to update transitive dependencies and
resolve the vulnerability in Pillow.
Upgrade Pillow from 12.1.1 to 12.2.0 to address the FITS GZIP
decompression bomb issue.
2026-04-16 12:36:03 +02:00
34f9dea73f
⬆️ (dependencies) update pytest to v9.0.3 [SECURITY]
2026-04-14 10:53:11 +02:00
a30b573d36
⬆️ (dependencies) update django to v5.2.13 [SECURITY]
2026-04-09 00:36:28 +02:00
83b95c5520
⬆️ (backend) bump pygments from 2.19.2 to 2.20.0 in /src/backend
...
Bumps [pygments](https://github.com/pygments/pygments ) from 2.19.2 to 2.20.0.
- [Release notes](https://github.com/pygments/pygments/releases )
- [Changelog](https://github.com/pygments/pygments/blob/master/CHANGES )
- [Commits](https://github.com/pygments/pygments/compare/2.19.2...2.20.0 )
---
updated-dependencies:
- dependency-name: pygments
dependency-version: 2.20.0
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-04-08 15:14:24 +02:00
08aa63ecb2
⬆️ (dependencies) update aiohttp to v3.13.4 [SECURITY]
2026-04-07 17:22:56 +02:00
7e422e5846
🔖 (minor) bump release to 1.13.0
2026-04-01 10:24:36 +02:00
9d9ec794aa
Bump cryptography from 46.0.5 to 46.0.6 in /src/backend
...
Bumps [cryptography](https://github.com/pyca/cryptography ) from 46.0.5 to 46.0.6.
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst )
- [Commits](https://github.com/pyca/cryptography/compare/46.0.5...46.0.6 )
---
updated-dependencies:
- dependency-name: cryptography
dependency-version: 46.0.6
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-28 15:44:38 +01:00
7469ccfdf1
⬆️ Bump requests from 2.32.5 to 2.33.0 in /src/backend
...
Bumps [requests](https://github.com/psf/requests ) from 2.32.5 to 2.33.0.
- [Release notes](https://github.com/psf/requests/releases )
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md )
- [Commits](https://github.com/psf/requests/compare/v2.32.5...v2.33.0 )
---
updated-dependencies:
- dependency-name: requests
dependency-version: 2.33.0
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-28 15:36:22 +01:00
73496406e8
⬆️ (dependencies) update python dependencies
2026-03-25 11:18:57 +01:00
f57fbf2d35
🔖 (minor) bump release to 1.12.0
2026-03-24 23:37:41 +01:00
ee8d96bee7
🔖 (minor) bump release to 1.11.0
2026-03-19 00:31:32 +01:00
7c05aedcfe
⬆️ (dependencies) update PyJWT to v2.12.0 [SECURITY]
2026-03-17 18:33:39 +01:00
342f992556
🔨 (python-env) migrate meet main app to UV
...
Migrate main meet app to use UV for dependancy management.
Also optimized the backend image build sequence for faster rebuilds
when dependencies don't change.
Also removed compiled django translations files are they are done in the build
process now.
Changes inspired by drive repo.
2026-03-12 10:25:35 +01:00
lebaudantoine