Closed
Conversation
#309) Bumps [svgo](https://github.com/svg/svgo) from 4.0.0 to 4.0.1. - [Release notes](https://github.com/svg/svgo/releases) - [Commits](svg/svgo@v4.0.0...v4.0.1) --- updated-dependencies: - dependency-name: svgo dependency-version: 4.0.1 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…nd (#308) Bumps [immutable](https://github.com/immutable-js/immutable-js) from 5.1.4 to 5.1.5. - [Release notes](https://github.com/immutable-js/immutable-js/releases) - [Changelog](https://github.com/immutable-js/immutable-js/blob/main/CHANGELOG.md) - [Commits](immutable-js/immutable-js@v5.1.4...v5.1.5) --- updated-dependencies: - dependency-name: immutable dependency-version: 5.1.5 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* feat(backend): add POST /endpoints/health for per-endpoint health reporting Add a new API endpoint that accepts granular per-endpoint health status from clients, replacing the domain-level heartbeat as the primary health signal. The health monitor is simplified to a 2-tier approach: per-endpoint health (priority 1) with heartbeat as a deprecated fallback (priority 2). - Add health_status, health_checked_at, health_ttl_seconds to EndpointModel - Add POST /endpoints/health route with bulk slug matching and TTL capping - Add EndpointHealthRequest/Response schemas and repository methods - Simplify health monitor: remove HTTP fallback, extract modular tier methods - Add deprecation notes to heartbeat endpoints, services, schemas, and models - Add alembic migration for new nullable endpoint health columns * remove alembic migrations * chore: add migrations * test(backend): update health monitor tests and add endpoint health tests
ci: add workflow to trigger cross-service E2E tests on push to main
chore: trigger e2e workflow
Bumps [pyjwt](https://github.com/jpadilla/pyjwt) from 2.10.1 to 2.12.0. - [Release notes](https://github.com/jpadilla/pyjwt/releases) - [Changelog](https://github.com/jpadilla/pyjwt/blob/master/CHANGELOG.rst) - [Commits](jpadilla/pyjwt@2.10.1...2.12.0) --- updated-dependencies: - dependency-name: pyjwt dependency-version: 2.12.0 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [pyjwt](https://github.com/jpadilla/pyjwt) from 2.10.1 to 2.12.0. - [Release notes](https://github.com/jpadilla/pyjwt/releases) - [Changelog](https://github.com/jpadilla/pyjwt/blob/master/CHANGELOG.rst) - [Commits](jpadilla/pyjwt@2.10.1...2.12.0) --- updated-dependencies: - dependency-name: pyjwt dependency-version: 2.12.0 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
…nd/pyjwt-2.12.0 chore(deps): bump pyjwt from 2.10.1 to 2.12.0 in /components/backend
…gator/pyjwt-2.12.0 chore(deps): bump pyjwt from 2.10.1 to 2.12.0 in /components/aggregator
* feat: add feedback endpoint that creates Linear issues Add authenticated POST /api/v1/feedback endpoint that accepts user feedback/bug reports and creates Linear issues via GraphQL API. Supports screenshot upload as file attachments. Ref: OME-76 * chore: fix lint errors * ci: wire LINEAR_API_KEY and LINEAR_TEAM_ID through deployment pipeline
Upgrade authlib, PyJWT, and pyasn1 to fix 6 open security alerts: MCP component: - authlib 1.6.6 → 1.6.9: fixes CVE-2026-27962 (CRITICAL: JWS header injection signature bypass), CVE-2026-28490 (Bleichenbacher padding oracle), CVE-2026-28498 (fail-open OIDC hash binding), CVE-2026-28802 (alg:none signature bypass) - PyJWT 2.10.1 → 2.12.1: fixes CVE-2026-32597 (accepts unknown crit header extensions) - Add pydantic override to resolve pre-existing syft-accounting-sdk version conflict during lock regeneration Backend component: - pyasn1 0.6.2 → 0.6.3: fixes CVE-2026-30922 (DoS via unbounded recursion). Added as uv override-dependency since it is transitive via google-auth. Aggregator component: - Document nltk 3.9.3 (CVE-2026-33230, unbounded recursion DoS) as unfixable — no upstream patch available, mitigated by context (backend service, no HTML rendering, no JSONTaggedDecoder usage) Closes #80, #79, #78, #77, #76, #75, #72, #66
…327) Bumps [flatted](https://github.com/WebReflection/flatted) from 3.3.3 to 3.4.2. - [Commits](WebReflection/flatted@v3.3.3...v3.4.2) --- updated-dependencies: - dependency-name: flatted dependency-version: 3.4.2 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
IonesioJunior
added a commit
that referenced
this pull request
Mar 23, 2026
Merge main into dev, resolving conflicts: - .github/workflows/ci.yml: keep RESEND_API_KEY wiring from dev alongside LINEAR_API_KEY/LINEAR_TEAM_ID additions from main - components/backend/src/syfthub/schemas/endpoint.py: accept is_slug_available stub function from main Includes from main: feedback endpoint for Linear, endpoint health API refactor, PyJWT 2.12.0 upgrade, security dep patches, e2e workflow trigger, frontend dep bumps.
Member
|
Merged manually — resolved conflicts in ci.yml (RESEND_API_KEY wiring) and endpoint.py (is_slug_available stub). dev is now up to date with main. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
3 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Automated Sync
This sync includes workflow file changes which require manual merge:
GITHUB_TOKEN cannot modify workflow files due to security restrictions.
Please merge this PR manually to keep
devup to date withmain.