Repository navigation
Releases: cyr-ius/security-review
Releases · cyr-ius/security-review
Release list
v6.0.0
Contributors
cyr-ius
Assets 6
v5.0.0
Contributors
cyr-ius
Assets 6
v4.0.0
Contributors
cyr-ius
Assets 6
v3.0.0
What's Changed
- Merge pre-commit by @cyr-ius in #75
- Release 3.0.0 by @cyr-ius in #77
- build(deps): bump ruff from 0.17.0 to 0.17.1 by @dependabot[bot] in #85
- build(deps): bump astral-sh/setup-uv from 10.3.0 to 10.3.2 by @dependabot[bot] in #84
- build(deps): bump alembic from 1.20.0 to 1.20.1 by @dependabot[bot] in #83
- build(deps): bump astral-sh/uv from 0.13.1 to 0.13.5 by @dependabot[bot] in #82
- build(deps): bump tomlkit from 0.15.1 to 0.15.2 by @dependabot[bot] in #81
- build(deps): bump pydantic-settings from 2.16.0 to 2.16.1 by @dependabot[bot] in #80
- build(deps): bump pypa/gh-action-pypi-publish from 1.14.2 to 1.14.3 by @dependabot[bot] in #79
- build(deps): bump swagger-ui-dist from 5.33.1 to 5.34.0 in /web by @dependabot[bot] in #78
- Release 3.0.0: PyPI package renamed to security-review, deployment docs by @cyr-ius in #87
Full Changelog: v2.0.0...v3.0.0
Contributors
cyr-ius and dependabot
Assets 6
v2.0.0
Contributors
cyr-ius
Assets 6
v1.0.0
What's Changed
- chore(deps): Bump astral-sh/setup-uv from 6 to 7 by @dependabot[bot] in #1
- chore(deps): Bump actions/download-artifact from 4 to 8 by @dependabot[bot] in #2
- chore(deps): Bump actions/upload-artifact from 4 to 7 by @dependabot[bot] in #3
- chore(deps): Bump actions/checkout from 4 to 7 by @dependabot[bot] in #4
- feat: scan the whole codebase, not only diffs by @cyr-ius in #5
- feat: optional built-in bearer authentication and TLS for HTTP transport by @cyr-ius in #6
- feat: bearer authentication and TLS for HTTP transport, MkDocs documentation by @cyr-ius in #7
- docs: AI agent guidelines, branch workflow and condensed README by @cyr-ius in #8
- feat: web interface for security teams with role-based tokens by @cyr-ius in #9
- feat: web interface for security teams, security review and GitHub rules for agents by @cyr-ius in #10
- chore(deps): Bump actions/upload-pages-artifact from 4 to 5 by @dependabot[bot] in #11
- chore(deps): Bump actions/deploy-pages from 4 to 5 by @dependabot[bot] in #12
- chore(deps): Bump actions/setup-node from 6 to 7 by @dependabot[bot] in #13
- Devcontainer avec Docker et correction de l'avertissement TLS by @cyr-ius in #15
- fix: devcontainer dependency install, and an expanded pull request template by @cyr-ius in #16
- docs: document HTTP host configuration by @cyr-ius in #17
- Dev by @cyr-ius in #18
- feat: seed the default rules into the database from default_rules.toml by @cyr-ius in #19
- feat: add project token enrollment by @cyr-ius in #20
- Release: merge dev into master by @cyr-ius in #21
- feat: support multi-project token enrollment by @cyr-ius in #22
- Dev by @cyr-ius in #23
- Release 1.1.0: checklist management API and UI by @cyr-ius in #24
- feat!: split the MCP server and the controller, manage the schema with Alembic by @cyr-ius in #25
- Release: MCP server / controller split, hardened API, new web UI by @cyr-ius in #26
- Release: SSO web users, development standards, OIDC login, OSV updates and self-signed TLS by @cyr-ius in #27
- feat: SSO et proxy sortant configurables dans l'interface, menu Référentiel, usage des jetons projet by @cyr-ius in #28
- docs: publish the documentation and the README in English and French by @cyr-ius in #29
- Release: merge dev into master by @cyr-ius in #30
- feat: offer the web interface in English, French and Spanish by @cyr-ius in #31
- Release: merge dev into master (web interface in English, French and Spanish) by @cyr-ius in #32
- Release: merge dev into master by @cyr-ius in #33
- chore(deps): Bump astral-sh/uv from 0.13.0 to 0.13.1 by @dependabot[bot] in #38
- chore(deps): Bump bootstrap-icons from 1.13.1 to 1.13.2 in /web by @dependabot[bot] in #36
- Release: SBOM, pipeline client, human-only triage, report author, audit log and docs reorganization by @cyr-ius in #39
- Release: dev → master (pipeline commands only through security-review-ci) by @cyr-ius in #40
- chore(deps): Bump astral-sh/setup-uv from 7.6.0 to 10.3.0 by @dependabot[bot] in #41
- chore(deps): Bump pydantic-settings from 2.15.0 to 2.16.0 by @dependabot[bot] in #42
- chore(deps): Bump fastapi from 0.143.0 to 0.143.1 by @dependabot[bot] in #44
- Dev by @cyr-ius in #45
- feat(web): split the settings page into three admin screens by @cyr-ius in #47
- feat!: roles, groups and permissions for the web accounts by @cyr-ius in #48
- refactor: Angular and FastAPI standards compliance by @cyr-ius in #51
- feat: give roles and projects directly to a web user by @cyr-ius in #52
- feat: security hardening of the controller (standards fastapi / standard) by @cyr-ius in #53
- refactor(web): Angular standards (signals, shared/, read-only state, a11y, colors) by @cyr-ius in #54
- feat: About page, Backend unavailable page and Session expired dialog by @cyr-ius in #55
- Dev by @cyr-ius in #56
- feat!: tokens are for machines, api tokens for the REST API, triager becomes an ordinary role by @cyr-ius in #57
- Dev by @cyr-ius in #58
- feat!: environment variables take precedence over the web interface settings by @cyr-ius in #60
- feat: set the syslog server of the audit log from the audit log page by @cyr-ius in #61
- fix!: identify OIDC users by their issuer and subject by @cyr-ius in #62
- feat!: enrollment requests a project for approval, never a token by @cyr-ius in #65
- feat(reports): store and check the declared coverage of a review by @cyr-ius in #66
- Dev by @cyr-ius in #67
- Release : hausse de criticité, seuil d'acceptation, bornes MCP, nettoyage by @cyr-ius in #68
- Release : connecteurs de ticketing (Jira, ServiceNow), check-lists reformulées by @cyr-ius in #69
- docs(readme): add a banner and status badges by @cyr-ius in #71
New Contributors
- @dependabot[bot] made their first contribution in #1
- @cyr-ius made their first contribution in #5
Full Changelog: https://github.com/cyr-ius/security-review-mcp/commits/v1.0.0
Contributors
cyr-ius and dependabot