Skip to content

ReceiptPi v1.2.1 — Security & Maintenance

Choose a tag to compare

View all tags
@HostisHumani HostisHumani released this 24 Sep 14:43
· 50 commits to main since this release
v1.2.1
e4a41a8
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

ReceiptPi v1.2.1 — Security & Maintenance

This maintenance release improves ReceiptPi's development and security infrastructure.

🔐 Automated Security Scanning

ReceiptPi now uses GitHub CodeQL to automatically scan the codebase for potential security issues.

CodeQL covers both:

  • Python
  • JavaScript / TypeScript

Scans run on pushes and pull requests to main, as well as on a weekly schedule.

🤖 Dependabot

Dependabot is now enabled for:

  • Python dependencies
  • GitHub Actions

This allows ReceiptPi to automatically detect available dependency and workflow updates and propose them through pull requests.

🔄 GitHub Actions Updates

The first Dependabot updates have already been applied, bringing the affected GitHub Actions dependencies up to their current major versions.

✅ No Application Changes

This release does not change ReceiptPi's user-facing functionality.

It is a maintenance release focused on keeping the project easier to maintain and continuously checked for dependency and code security issues.

Full Changelog: v1.2.0...v1.2.1

Assets 2
Loading