🔧(dev) enable gitlint as a commit-msg hook in the devenv shell

Commit messages were only checked by the CI lint-git job, therefore any misformatting was caught only after pushing.
🔖(patch) bump release to 1.32.1
2026-09-30 06:28:59 +00:00 · 2026-09-28 09:43:54 +02:00 · 2026-09-25 16:47:35 +02:00 · 2026-09-25 16:40:39 +02:00 · 2026-09-25 16:40:39 +02:00
18 changed files with 78 additions and 23 deletions
@@ -89,3 +89,4 @@ docker/livekit/rootCA.pem

 # NixOS
 .devenv
+.pre-commit-config.yaml
@@ -8,6 +8,13 @@ and this project adheres to

 ## [Unreleased]

+## [1.32.1] - 2026-09-25
+
+### Fixed
+
+- 🔒️(backend) fix CVE-2026-73228 and CVE-2026-73229 in drf
+- 🔒️(agent) fix CRITICAL CVE-2026-63072 / CVE-2026-63073 in libssl3t64
+
 ## [1.32.0] - 2026-09-25

 ### Added
@@ -18,12 +18,50 @@
        "url": "https://github.com/cachix/devenv"
      }
    },
+    "flake-compat": {
+      "flake": false,
+      "locked": {
+        "lastModified": 1767039857,
+        "narHash": "sha256-vNpUSpF5Nuw8xvDLj2KCwwksIbjua2LZCqhV1LNRDns=",
+        "owner": "NixOS",
+        "repo": "flake-compat",
+        "rev": "5edf11c44bc78a0d334f6334cdaf7d60d732daab",
+        "type": "github"
+      },
+      "original": {
+        "owner": "NixOS",
+        "repo": "flake-compat",
+        "type": "github"
+      }
+    },
+    "git-hooks": {
+      "inputs": {
+        "flake-compat": "flake-compat",
+        "nixpkgs": [
+          "nixpkgs"
+        ]
+      },
+      "locked": {
+        "lastModified": 1790091288,
+        "narHash": "sha256-2dUuLTiQrf2gUFVLlayDq/hgluitplAMv6Y9bYwQQ+c=",
+        "ref": "refs/heads/master",
+        "rev": "0d3997c4d3253505f77c9bcea63904bb575da3c5",
+        "shallow": true,
+        "type": "git",
+        "url": "https://github.com/cachix/git-hooks.nix"
+      },
+      "original": {
+        "shallow": true,
+        "type": "git",
+        "url": "https://github.com/cachix/git-hooks.nix"
+      }
+    },
    "nixpkgs": {
      "locked": {
-        "lastModified": 1789542786,
-        "narHash": "sha256-ajQuqcxnj6RYnwCjA/9FTCnrdR2+BDzstE8UembXf60=",
+        "lastModified": 1790218706,
+        "narHash": "sha256-6e4Na3z008XpdVyOXgfasXIn1aN+z8AXFG+jXdQSyuI=",
        "ref": "nixos-26.05",
-        "rev": "4c7870105e7f1fdf9c48688c8d7efc21abf0688a",
+        "rev": "c508844df6c28fa6dabc1b6af70f3ccbd65c5201",
        "shallow": true,
        "type": "git",
        "url": "https://github.com/NixOS/nixpkgs"
@@ -38,6 +76,7 @@
    "root": {
      "inputs": {
        "devenv": "devenv",
+        "git-hooks": "git-hooks",
        "nixpkgs": "nixpkgs"
      }
    }
@@ -101,6 +101,8 @@ in
    languages.typescript.enable = false;
    languages.nix.enable = true;

+    git-hooks.hooks.gitlint.enable = true;
+
    packages =
      with pkgs;
      [
@@ -3,3 +3,8 @@ inputs:
    url: git+https://github.com/NixOS/nixpkgs?ref=nixos-26.05&shallow=1
  devenv:
    url: git+https://github.com/cachix/devenv?ref=refs/tags/v2.1.2&dir=src/modules
+  git-hooks:
+    url: git+https://github.com/cachix/git-hooks.nix?shallow=1
+    inputs:
+      nixpkgs:
+        follows: nixpkgs
@@ -5,6 +5,7 @@ RUN sed -i "s|^URIs: http://|URIs: https://|" /etc/apt/sources.list.d/debian.sou
    && apt-get update && apt-get install -y --no-install-recommends  \
    libglib2.0-0 \
    libgobject-2.0-0 \
+    libssl3t64 \
    && rm -rf /var/lib/apt/lists/*


@@ -1,7 +1,7 @@

 [project]
 name = "agents"
-version = "1.32.0"
+version = "1.32.1"
 requires-python = ">=3.12"
 dependencies = [
    "livekit-agents==1.6.7",
@@ -9,7 +9,7 @@ resolution-markers = [

 [[package]]
 name = "agents"
-version = "1.32.0"
+version = "1.32.1"
 source = { virtual = "." }
 dependencies = [
    { name = "httpx" },
@@ -7,7 +7,7 @@ build-backend = "uv_build"

 [project]
 name = "meet"
-version = "1.32.0"
+version = "1.32.1"
 authors = [{ "name" = "DINUM", "email" = "dev@mail.numerique.gouv.fr" }]
 classifiers = [
    "Development Status :: 5 - Production/Stable",
@@ -41,7 +41,7 @@ dependencies = [
    "django-timezone-field>=5.1",
    "django-pydantic-field==0.5.4",
    "django==5.2.16",
-    "djangorestframework==3.17.1",
+    "djangorestframework==3.17.2",
    "drf_spectacular==0.30.0",
    "dockerflow==2026.3.4",
    "easy_thumbnails==2.10.1",
@@ -754,14 +754,14 @@ wheels = [

 [[package]]
 name = "djangorestframework"
-version = "3.17.1"
+version = "3.17.2"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
    { name = "django" },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/ca/d7/c016e69fac19ff8afdc89db9d31d9ae43ae031e4d1993b20aca179b8301a/djangorestframework-3.17.1.tar.gz", hash = "sha256:a6def5f447fe78ff853bff1d47a3c59bf38f5434b031780b351b0c73a62db1a5", size = 905742, upload-time = "2026-03-24T16:58:33.705Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/3b/35/c96055e700fdff25da3a7b7756cfd1d4dc54f38b9bc6d6c5e19e3a0fdc20/djangorestframework-3.17.2.tar.gz", hash = "sha256:89ed713b6dc83e1539f214b7d10808ae19bb8511004beba886225da6d5c9dafa", size = 906683, upload-time = "2026-08-05T07:47:22.5Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/5a/e1/2c516bdc83652b1a60c6119366ac2c0607b479ed05cd6093f916ca8928f8/djangorestframework-3.17.1-py3-none-any.whl", hash = "sha256:c3c74dd3e83a5a3efc37b3c18d92bd6f86a6791c7b7d4dff62bb068500e76457", size = 898844, upload-time = "2026-03-24T16:58:31.845Z" },
+    { url = "https://files.pythonhosted.org/packages/a2/46/c14108e400b208c394325eb63fbae06c81341b6447fa1a6f9da718b17fe7/djangorestframework-3.17.2-py3-none-any.whl", hash = "sha256:cb0546a7415d5b46c04e0f4fe0a54b2109f4fdd5e83ca773c8c6183a6493d042", size = 899109, upload-time = "2026-08-05T07:47:20.853Z" },
 ]

 [[package]]
@@ -1187,7 +1187,7 @@ wheels = [

 [[package]]
 name = "meet"
-version = "1.32.0"
+version = "1.32.1"
 source = { editable = "." }
 dependencies = [
    { name = "aiohttp" },
@@ -1273,7 +1273,7 @@ requires-dist = [
    { name = "django-redis", specifier = "==7.0.0" },
    { name = "django-storages", extras = ["s3"], specifier = "==1.14.6" },
    { name = "django-timezone-field", specifier = ">=5.1" },
-    { name = "djangorestframework", specifier = "==3.17.1" },
+    { name = "djangorestframework", specifier = "==3.17.2" },
    { name = "dockerflow", specifier = "==2026.3.4" },
    { name = "drf-spectacular", specifier = "==0.30.0" },
    { name = "easy-thumbnails", specifier = "==2.10.1" },
@@ -1,12 +1,12 @@
 {
  "name": "meet",
-  "version": "1.32.0",
+  "version": "1.32.1",
  "lockfileVersion": 3,
  "requires": true,
  "packages": {
    "": {
      "name": "meet",
-      "version": "1.32.0",
+      "version": "1.32.1",
      "dependencies": {
        "@fontsource-variable/atkinson-hyperlegible-next": "5.3.0",
        "@fontsource-variable/lexend": "5.3.0",
@@ -1,7 +1,7 @@
 {
  "name": "meet",
  "private": true,
-  "version": "1.32.0",
+  "version": "1.32.1",
  "type": "module",
  "scripts": {
    "dev": "panda codegen && vite",
@@ -1,12 +1,12 @@
 {
  "name": "mail_mjml",
-  "version": "1.32.0",
+  "version": "1.32.1",
  "lockfileVersion": 3,
  "requires": true,
  "packages": {
    "": {
      "name": "mail_mjml",
-      "version": "1.32.0",
+      "version": "1.32.1",
      "license": "MIT",
      "dependencies": {
        "@html-to/text-cli": "0.6.1",
@@ -1,6 +1,6 @@
 {
  "name": "mail_mjml",
-  "version": "1.32.0",
+  "version": "1.32.1",
  "description": "An util to generate html and text django's templates from mjml templates",
  "type": "module",
  "dependencies": {
@@ -1,12 +1,12 @@
 {
  "name": "sdk",
-  "version": "1.32.0",
+  "version": "1.32.1",
  "lockfileVersion": 3,
  "requires": true,
  "packages": {
    "": {
      "name": "sdk",
-      "version": "1.32.0",
+      "version": "1.32.1",
      "license": "ISC",
      "workspaces": [
        "./library",
@@ -1,6 +1,6 @@
 {
  "name": "sdk",
-  "version": "1.32.0",
+  "version": "1.32.1",
  "author": "",
  "license": "ISC",
  "description": "",
@@ -1,7 +1,7 @@

 [project]
 name = "summary"
-version = "1.32.0"
+version = "1.32.1"
 requires-python = ">=3.13"
 dependencies = [
    "fastapi[standard]>=0.105.0",
@@ -1516,7 +1516,7 @@ wheels = [

 [[package]]
 name = "summary"
-version = "1.32.0"
+version = "1.32.1"
 source = { editable = "." }
 dependencies = [
    { name = "celery" },
Author	SHA1	Message	Date
briquet	06bedbe42e	🔧(dev) enable gitlint as a commit-msg hook in the devenv shell Commit messages were only checked by the CI lint-git job, therefore any misformatting was caught only after pushing.	2026-09-28 09:43:54 +02:00
lebaudantoine	21dc63b8ce	🔖(patch) bump release to 1.32.1	2026-09-25 16:47:35 +02:00
lebaudantoine	8d5d42cfdb	🔒️(agent) fix CRITICAL CVE-2026-63072 / CVE-2026-63073 in libssl3t64 Address the following CVEs reported by Trivy on the LiveKit agent image against `libssl3t64` 3.5.7-1~deb13u2: * CVE-2026-63073 — CRITICAL (CVSS 9.8) * CVE-2026-63072 Bump `libssl3t64` to the patched version to pick up both fixes.	2026-09-25 16:40:39 +02:00
lebaudantoine	2480a76b62	🔒️(backend) fix CVE-2026-73228 and CVE-2026-73229 in drf Address the following MEDIUM severity CVEs reported against `djangorestframework` 3.17.1: * CVE-2026-73228 (CVSS 5.3) * CVE-2026-73229 (CVSS 4.3) Bump `djangorestframework` to the patched version to pick up the fixes.	2026-09-25 16:40:39 +02:00