v26.08.12

What's Changed

Security

• security: generate dev secrets instead of committing them by @Jamyn in #44
• security: close the two open CodeQL alerts by @Jamyn in #45

Fixes

• fix: release pooled connections before dropping the test database by @Jamyn in #50

CI

• ci: install docs with npm ci on node 22 by @Jamyn in #46

Maintenance and documentation

• chore: remove unused devcontainer by @Jamyn in #43
• build: batch four frontend dependency bumps with a regenerated lock by @Jamyn in #47
• build(deps): bump sentry-sdk from 1.45.0 to 1.45.1 by @dependabot[bot] in #40
• build(deps): bump follow-redirects from 1.15.6 to 1.16.0 in /docs by @dependabot[bot] in #32
• build(deps): bump @babel/plugin-transform-modules-systemjs from 7.20.11 to 7.29.8 in /docs by @dependabot[bot] in #33
• build(deps-dev): bump pytest from 7.4.4 to 9.1.1 by @dependabot[bot] in #15
• build(deps): bump setuptools from 81.0.0 to 83.0.0 by @dependabot[bot] in #41
• docs: correct the stale setuptools pin rationale by @Jamyn in #51
• build(deps): bump node-forge from 1.3.1 to 1.4.0 in /docs by @dependabot[bot] in #48
• build(deps): bump lodash from 4.17.21 to 4.18.1 in /docs by @dependabot[bot] in #49
• build(deps): bump yaml from 1.10.2 to 1.10.3 in /docs by @dependabot[bot] in #52

New Contributors

• @dependabot[bot] made their first contribution in #40

Full Changelog: v26.08.11.2...v26.08.12

v26.08.11.2

What's Changed

Maintenance and documentation

• docs: trim the openssl comment in the runtime layer by @Jamyn in #38
• build: pin the python dependency set with a hashed lockfile by @Jamyn in #39

Full Changelog: v26.08.11.1...v26.08.11.2

v26.08.11.1

What's Changed

Security

• security: apply Debian security updates to the runtime image by @Jamyn in #37

Maintenance and documentation

• docs: drop fork framing and fix stale release and branch links by @Jamyn in #35

Full Changelog: v26.08.11...v26.08.11.1

v26.08.11

What's Changed

Security

• security: pin actions, set least-privilege permissions, and remove publishing workflows by @Jamyn in #13

Fixes

• fix: package a working wheel and frontend under hatchling by @Jamyn in #2
• fix: commit the fulltext-search triggers during schema init by @Jamyn in #5
• fix: keep apply(timer/counter) from wrapping the Slack events router by @Jamyn in #6
• fix: align spacy and thinc with the Python 3.14 base image by @Jamyn in #20

CI

• ci: enforce two-tier PR labels and configure Dependabot and release notes by @Jamyn in #10
• ci: deploy the docs site to GitHub Pages by @Jamyn in #11
• ci: fail when a lockfile drifts from its package.json by @Jamyn in #12

Maintenance and documentation

• build: move the image to Debian 13, postgres client 18, and a pinned mjml by @Jamyn in #1
• build: pin Python dependencies past known CVEs by @Jamyn in #7
• build: update frontend dependencies by @Jamyn in #8
• build: update docs toolchain dependencies by @Jamyn in #9
• docs: rewrite README, add a security policy, and point links at the new site by @Jamyn in #17

New Contributors

• @Jamyn made their first contribution in #1

Full Changelog: https://github.com/Jamyn/dispatch/commits/v26.08.11