Closed Issues
Breaking Changes
- Feat: refresh dependencies and cache builder API (#867) by seapagan
- Fix: upgrade bcrypt to 5.0.0 and enforce password byte limit (#833) by seapagan
- Fix: enforce token type separation and harden CORS defaults (#804) by seapagan
New Features
- Set uv dependency cooldown (#855) by seapagan
- Add optional secrets dir support for settings (#842) by seapagan
- Feat: track API key last usage timestamp (#819) by seapagan
- Fix: add EmailStr validation to base schema (#817) by seapagan
- Perf: parallelize cache invalidation for better performance (#815) by seapagan
- Fix: centralize cache namespace strings to prevent typos (#814) by seapagan
- Feat: add rate limiting for authentication endpoints (#807) by seapagan
- Feat: Add optional Redis caching infrastructure (#803) by seapagan
- Feat: add optional Prometheus metrics endpoint (#799) by seapagan
- Feat: include query parameters in request logs (#797) by seapagan
- Paginate users list endpoint (#796) by seapagan
- Add heartbeat endpoint and tests (#795) by seapagan
- Feat(logging): implement comprehensive logging infrastructure with loguru (#794) by seapagan
- Prevent last admin from deleting themselves (#792) by seapagan
- Extend JWT format validation to verify and refresh endpoints (#790) by seapagan
- Add password recovery feature (#788) by seapagan
Testing
- Deps: upgrade pytest to 9.1.1 (#869) by seapagan
- Test: add xdist and transactional database fixtures (#854) by seapagan
- Test: return to 100% app coverage (#843) by seapagan
- Fix(tests): ensure Path objects are created after fake filesystem activation (#813) by seapagan
- Tests: Remove obsolete xfail markers (#811) by seapagan
- Test: add unit tests for metrics and OpenAPI modules (#801) by seapagan
Security
- Update some deps for security and others to latest versions (#853) by seapagan
- Update
makopackage to fix security alert (#844) by seapagan - Fix some security alerts and update linters (#840) by seapagan
- Update
cryptographypackage to close security alerts (#823) by seapagan - Update python-multipart to fix security alert (#821) by seapagan
- Fix: add max_length constraint to refresh token schema (#818) by seapagan
- Security: fix timing attacks and token validation vulnerabilities (#810) by seapagan
- Fix: update dependencies to fix security advisories in 2 third-party libraries (#809) by seapagan
- Fix(security): redact sensitive query params in request logs (#805) by seapagan
- Fix(security): validate credentials and prevent weak defaults (#793) by seapagan
CI / CD Pipeline
- Ci: harden GitHub Actions workflows (#871) by seapagan
- Modify renovate-bot config slightly (#831) by seapagan
Bug Fixes
- Fix: make api_keys.user_id index explicit in model (#816) by seapagan
- Fix CLI crash when database not initialized (#791) by seapagan
Refactoring
- Refactor: code quality quick wins (#812) by seapagan
- Fix deprecated HTTP_422_UNPROCESSABLE_ENTITY status code (#798) by seapagan
Documentation
- Chore: update copyright year to 2026 (#802) by seapagan
- Docs: comprehensive documentation improvements (#800) by seapagan
Dependency Updates
- Chore(deps): update astral-sh/setup-uv action to v10 (#866) by renovate[bot]
- Chore(deps): update j178/prek-action action to v3 (#865) by renovate[bot]
- Chore(deps): update astral-sh/ruff-action action to v4.1.0 (#860) by renovate[bot]
- Chore(deps): update actions/checkout action to v7 (#858) by renovate[bot]
- Security - update starlette and python-multipart for security alerts (#857) by seapagan
- Chore(deps): update astral-sh/setup-uv action to v8.2.0 (#851) by renovate[bot]
- Update dependencies and build metadata (#848) by seapagan
- Chore(deps): update actions/dependency-review-action action to v5 (#847) by renovate[bot]
- Chore(deps): update astral-sh/setup-uv action to v8 (#846) by renovate[bot]
- Chore(deps): update astral-sh/ruff-action action to v4 (#845) by renovate[bot]
- and 7 more dependency updates
Full Changelog | Diff | Patch