v2.5.0

Security hardening and dependency updates: ruff security rules across the codebase, servicekit 3.1.0, and current Python and console dependencies.

Changed

• servicekit 3.1.0 is now the minimum version.
• Python dependencies updated (fastapi 0.162, starlette 1.10, pandas 3.1, polars 2.1, sqlalchemy 2.1.6, python-dateutil 3.0, among others).
• Console frontend dependencies updated and the bundled console rebuilt.
• The ruff S (flake8-bandit) security rules are enabled.

Fixed

• chapkit artifact no longer relies on assert for control flow, so its checks hold under python -O.
• Project discovery in the chapkit CLI only skips unreadable or malformed pyproject.toml files instead of swallowing every error.
• certifi upgraded for the eMudhra CA compromise (CLIM-1547).

Upgrading

Requires servicekit >= 3.1.0; pip install -U chapkit or uv lock --upgrade-package chapkit pulls it in.

What's Changed

• chore: bump version to 2.5.0.dev0 by @mortenoh in #148
• fix: upgrade certifi (CLIM-1547) by @mortenoh in #150
• chore(deps): bump the frontend-dependencies group in /frontend with 6 updates by @dependabot[bot] in #149
• chore(deps): bump astral-sh/setup-uv from 10.3.0 to 10.3.2 in the github-actions group by @dependabot[bot] in #151
• chore(deps): bump the frontend-dependencies group in /frontend with 10 updates by @dependabot[bot] in #152
• chore: enable ruff security rules and update dependencies (CLIM-1536) by @mortenoh in #153
• chore: release 2.5.0 by @mortenoh in #154

Full Changelog: v2.4.1...v2.5.0