Trenton H
6ba1acd7d3
fix(profiling): fix stale docstring and add module_db docstring in doclist test
2026-04-11 14:19:51 -07:00
Trenton H
d006b79fd1
feat(profiling): add document list API and selection_data profiling
...
Adds test_doclist_profile.py with 8 profiling tests covering the
/api/documents/ list path (ORM ordering, page sizes, single-doc detail,
cProfile) and _get_selection_data_for_queryset in isolation and via API.
Also registers the 'profiling' pytest marker in pyproject.toml.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-04-11 14:13:17 -07:00
Trenton H
24b754b44c
fix(profiling): fix stale run paths in docstrings and consolidate profiling imports
2026-04-11 13:57:00 -07:00
Trenton H
a1a3520a8c
refactor(profiling): use shared profile_cpu in backend search test
...
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-04-11 13:46:43 -07:00
Trenton H
23449cda17
refactor(profiling): use shared profile_cpu/measure_memory in classifier test
...
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-04-11 13:44:57 -07:00
Trenton H
ca3f5665ba
fix(profiling): correct docstring import path and add Callable type annotation
2026-04-11 13:29:48 -07:00
Trenton H
9aa0914c3f
feat(profiling): add profile_cpu and measure_memory shared helpers
...
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-04-11 13:22:43 -07:00
shamoon
fdd5e3ecb2
Update SECURITY.md
2026-04-10 12:34:47 -07:00
shamoon
df3b656352
Add tests
2026-04-10 12:06:28 -07:00
shamoon
51e721733f
Enhancement: validate and sanitize uploaded logos ( #12551 )
2026-04-10 11:50:58 -07:00
dependabot[bot]
0ad8b8c002
Chore(deps): Bump the utilities-minor group with 19 updates ( #12540 )
...
Bumps the utilities-minor group with 19 updates:
| Package | From | To |
| --- | --- | --- |
| [dateparser](https://github.com/scrapinghub/dateparser ) | `1.3.0` | `1.4.0` |
| [drf-spectacular-sidecar](https://github.com/tfranzel/drf-spectacular-sidecar ) | `2026.3.1` | `2026.4.1` |
| llama-index-embeddings-huggingface | `0.6.1` | `0.7.0` |
| llama-index-embeddings-openai | `0.5.2` | `0.6.0` |
| llama-index-llms-ollama | `0.9.1` | `0.10.1` |
| llama-index-llms-openai | `0.6.26` | `0.7.5` |
| llama-index-vector-stores-faiss | `0.5.3` | `0.6.0` |
| [openai](https://github.com/openai/openai-python ) | `2.26.0` | `2.30.0` |
| [regex](https://github.com/mrabarnett/mrab-regex ) | `2026.2.28` | `2026.3.32` |
| [sentence-transformers](https://github.com/huggingface/sentence-transformers ) | `5.2.3` | `5.3.0` |
| [torch](https://github.com/pytorch/pytorch ) | `2.10.0` | `2.11.0` |
| [faker](https://github.com/joke2k/faker ) | `40.8.0` | `40.12.0` |
| [pytest-cov](https://github.com/pytest-dev/pytest-cov ) | `7.0.0` | `7.1.0` |
| [pytest-env](https://github.com/pytest-dev/pytest-env ) | `1.5.0` | `1.6.0` |
| [celery-types](https://github.com/sbdchd/celery-types ) | `0.24.0` | `0.26.0` |
| [mypy](https://github.com/python/mypy ) | `1.19.1` | `1.20.0` |
| [pyrefly](https://github.com/facebook/pyrefly ) | `0.55.0` | `0.59.0` |
| [types-channels](https://github.com/python/typeshed ) | `4.3.0.20250822` | `4.3.0.20260408` |
| [types-dateparser](https://github.com/python/typeshed ) | `1.3.0.20260206` | `1.4.0.20260328` |
Updates `dateparser` from 1.3.0 to 1.4.0
- [Release notes](https://github.com/scrapinghub/dateparser/releases )
- [Changelog](https://github.com/scrapinghub/dateparser/blob/master/HISTORY.rst )
- [Commits](https://github.com/scrapinghub/dateparser/compare/v1.3.0...v1.4.0 )
Updates `drf-spectacular-sidecar` from 2026.3.1 to 2026.4.1
- [Commits](https://github.com/tfranzel/drf-spectacular-sidecar/compare/2026.3.1...2026.4.1 )
Updates `llama-index-embeddings-huggingface` from 0.6.1 to 0.7.0
Updates `llama-index-embeddings-openai` from 0.5.2 to 0.6.0
Updates `llama-index-llms-ollama` from 0.9.1 to 0.10.1
Updates `llama-index-llms-openai` from 0.6.26 to 0.7.5
Updates `llama-index-vector-stores-faiss` from 0.5.3 to 0.6.0
Updates `openai` from 2.26.0 to 2.30.0
- [Release notes](https://github.com/openai/openai-python/releases )
- [Changelog](https://github.com/openai/openai-python/blob/main/CHANGELOG.md )
- [Commits](https://github.com/openai/openai-python/compare/v2.26.0...v2.30.0 )
Updates `regex` from 2026.2.28 to 2026.3.32
- [Changelog](https://github.com/mrabarnett/mrab-regex/blob/hg/changelog.txt )
- [Commits](https://github.com/mrabarnett/mrab-regex/compare/2026.2.28...2026.3.32 )
Updates `sentence-transformers` from 5.2.3 to 5.3.0
- [Release notes](https://github.com/huggingface/sentence-transformers/releases )
- [Commits](https://github.com/huggingface/sentence-transformers/compare/v5.2.3...v5.3.0 )
Updates `torch` from 2.10.0 to 2.11.0
- [Release notes](https://github.com/pytorch/pytorch/releases )
- [Changelog](https://github.com/pytorch/pytorch/blob/main/RELEASE.md )
- [Commits](https://github.com/pytorch/pytorch/compare/v2.10.0...v2.11.0 )
Updates `faker` from 40.8.0 to 40.12.0
- [Release notes](https://github.com/joke2k/faker/releases )
- [Changelog](https://github.com/joke2k/faker/blob/master/CHANGELOG.md )
- [Commits](https://github.com/joke2k/faker/compare/v40.8.0...v40.12.0 )
Updates `pytest-cov` from 7.0.0 to 7.1.0
- [Changelog](https://github.com/pytest-dev/pytest-cov/blob/master/CHANGELOG.rst )
- [Commits](https://github.com/pytest-dev/pytest-cov/compare/v7.0.0...v7.1.0 )
Updates `pytest-env` from 1.5.0 to 1.6.0
- [Release notes](https://github.com/pytest-dev/pytest-env/releases )
- [Commits](https://github.com/pytest-dev/pytest-env/compare/1.5.0...1.6.0 )
Updates `celery-types` from 0.24.0 to 0.26.0
- [Commits](https://github.com/sbdchd/celery-types/commits )
Updates `mypy` from 1.19.1 to 1.20.0
- [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md )
- [Commits](https://github.com/python/mypy/compare/v1.19.1...v1.20.0 )
Updates `pyrefly` from 0.55.0 to 0.59.0
- [Release notes](https://github.com/facebook/pyrefly/releases )
- [Commits](https://github.com/facebook/pyrefly/compare/0.55.0...0.59.0 )
Updates `types-channels` from 4.3.0.20250822 to 4.3.0.20260408
- [Commits](https://github.com/python/typeshed/commits )
Updates `types-dateparser` from 1.3.0.20260206 to 1.4.0.20260328
- [Commits](https://github.com/python/typeshed/commits )
---
updated-dependencies:
- dependency-name: dateparser
dependency-version: 1.4.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: utilities-minor
- dependency-name: drf-spectacular-sidecar
dependency-version: 2026.4.1
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: utilities-minor
- dependency-name: llama-index-embeddings-huggingface
dependency-version: 0.7.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: utilities-minor
- dependency-name: llama-index-embeddings-openai
dependency-version: 0.6.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: utilities-minor
- dependency-name: llama-index-llms-ollama
dependency-version: 0.10.1
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: utilities-minor
- dependency-name: llama-index-llms-openai
dependency-version: 0.7.5
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: utilities-minor
- dependency-name: llama-index-vector-stores-faiss
dependency-version: 0.6.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: utilities-minor
- dependency-name: openai
dependency-version: 2.30.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: utilities-minor
- dependency-name: regex
dependency-version: 2026.3.32
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: utilities-minor
- dependency-name: sentence-transformers
dependency-version: 5.3.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: utilities-minor
- dependency-name: torch
dependency-version: 2.11.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: utilities-minor
- dependency-name: faker
dependency-version: 40.12.0
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: utilities-minor
- dependency-name: pytest-cov
dependency-version: 7.1.0
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: utilities-minor
- dependency-name: pytest-env
dependency-version: 1.6.0
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: utilities-minor
- dependency-name: celery-types
dependency-version: 0.26.0
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: utilities-minor
- dependency-name: mypy
dependency-version: 1.20.0
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: utilities-minor
- dependency-name: pyrefly
dependency-version: 0.59.0
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: utilities-minor
- dependency-name: types-channels
dependency-version: 4.3.0.20260408
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: utilities-minor
- dependency-name: types-dateparser
dependency-version: 1.4.0.20260328
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: utilities-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-08 15:09:42 -07:00
dependabot[bot]
4d5d77ce15
Chore(deps): Bump cryptography in the uv group across 1 directory ( #12546 )
...
Bumps the uv group with 1 update in the / directory: [cryptography](https://github.com/pyca/cryptography ).
Updates `cryptography` from 46.0.6 to 46.0.7
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst )
- [Commits](https://github.com/pyca/cryptography/compare/46.0.6...46.0.7 )
---
updated-dependencies:
- dependency-name: cryptography
dependency-version: 46.0.7
dependency-type: indirect
dependency-group: uv
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-08 14:01:39 -07:00
dependabot[bot]
5ba2ce9c98
Chore(deps-dev): Bump types-python-dateutil ( #12542 )
...
Bumps [types-python-dateutil](https://github.com/python/typeshed ) from 2.9.0.20260305 to 2.9.0.20260323.
- [Commits](https://github.com/python/typeshed/commits )
---
updated-dependencies:
- dependency-name: types-python-dateutil
dependency-version: 2.9.0.20260323
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-08 13:46:05 -07:00
dependabot[bot]
d8fe6a9a36
Chore(deps-dev): Bump types-pytz ( #12541 )
...
Bumps [types-pytz](https://github.com/python/typeshed ) from 2025.2.0.20251108 to 2026.1.1.20260304.
- [Commits](https://github.com/python/typeshed/commits )
---
updated-dependencies:
- dependency-name: types-pytz
dependency-version: 2026.1.1.20260304
dependency-type: direct:development
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-08 13:03:54 -07:00
dependabot[bot]
bd630c1280
Chore(deps): Bump django-guardian in the utilities-patch group ( #12539 )
...
Bumps the utilities-patch group with 1 update: [django-guardian](https://github.com/django-guardian/django-guardian ).
Updates `django-guardian` from 3.3.0 to 3.3.1
- [Release notes](https://github.com/django-guardian/django-guardian/releases )
- [Commits](https://github.com/django-guardian/django-guardian/compare/3.3.0...3.3.1 )
---
updated-dependencies:
- dependency-name: django-guardian
dependency-version: 3.3.1
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: utilities-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-08 11:59:35 -07:00
dependabot[bot]
ab183b9982
Chore(deps-dev): Bump zensical in the development group ( #12532 )
...
Bumps the development group with 1 update: [zensical](https://github.com/zensical/zensical ).
Updates `zensical` from 0.0.29 to 0.0.31
- [Release notes](https://github.com/zensical/zensical/releases )
- [Commits](https://github.com/zensical/zensical/compare/v0.0.29...v0.0.31 )
---
updated-dependencies:
- dependency-name: zensical
dependency-version: 0.0.31
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: development
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-08 18:19:50 +00:00
dependabot[bot]
439e10d767
Chore(deps): Bump pdfjs-dist from 5.4.624 to 5.6.205 in /src-ui ( #12536 )
...
Bumps [pdfjs-dist](https://github.com/mozilla/pdf.js ) from 5.4.624 to 5.6.205.
- [Release notes](https://github.com/mozilla/pdf.js/releases )
- [Commits](https://github.com/mozilla/pdf.js/compare/v5.4.624...v5.6.205 )
---
updated-dependencies:
- dependency-name: pdfjs-dist
dependency-version: 5.6.205
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-08 17:31:39 +00:00
dependabot[bot]
cebfea9d94
Chore(deps): Bump the actions group with 4 updates ( #12538 )
...
Bumps the actions group with 4 updates: [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv ), [codecov/codecov-action](https://github.com/codecov/codecov-action ), [github/codeql-action](https://github.com/github/codeql-action ) and [crowdin/github-action](https://github.com/crowdin/github-action ).
Updates `astral-sh/setup-uv` from 7.3.1 to 8.0.0
- [Release notes](https://github.com/astral-sh/setup-uv/releases )
- [Commits](5a095e7a20...cec208311d )
Updates `codecov/codecov-action` from 5.5.2 to 6.0.0
- [Release notes](https://github.com/codecov/codecov-action/releases )
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md )
- [Commits](671740ac38...57e3a136b7 )
Updates `github/codeql-action` from 4.32.5 to 4.35.1
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/v4.32.5...c10b8064de6f491fea524254123dbe5e09572f13 )
Updates `crowdin/github-action` from 2.15.0 to 2.16.0
- [Release notes](https://github.com/crowdin/github-action/releases )
- [Commits](8818ff65bf...7ca9c452bf )
---
updated-dependencies:
- dependency-name: astral-sh/setup-uv
dependency-version: 8.0.0
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: actions
- dependency-name: codecov/codecov-action
dependency-version: 6.0.0
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: actions
- dependency-name: github/codeql-action
dependency-version: 4.35.1
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: actions
- dependency-name: crowdin/github-action
dependency-version: 2.16.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: actions
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-08 10:23:38 -07:00
dependabot[bot]
a97c0d8a06
Chore(deps-dev): Bump the frontend-eslint-dependencies group ( #12535 )
...
Bumps the frontend-eslint-dependencies group in /src-ui with 3 updates: [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin ), [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser ) and [@typescript-eslint/utils](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/utils ).
Updates `@typescript-eslint/eslint-plugin` from 8.57.2 to 8.58.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases )
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md )
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.58.0/packages/eslint-plugin )
Updates `@typescript-eslint/parser` from 8.57.2 to 8.58.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases )
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md )
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.58.0/packages/parser )
Updates `@typescript-eslint/utils` from 8.57.2 to 8.58.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases )
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/utils/CHANGELOG.md )
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.58.0/packages/utils )
---
updated-dependencies:
- dependency-name: "@typescript-eslint/eslint-plugin"
dependency-version: 8.58.0
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: frontend-eslint-dependencies
- dependency-name: "@typescript-eslint/parser"
dependency-version: 8.58.0
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: frontend-eslint-dependencies
- dependency-name: "@typescript-eslint/utils"
dependency-version: 8.58.0
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: frontend-eslint-dependencies
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-08 16:50:57 +00:00
dependabot[bot]
1e571ea23c
Chore(deps): Bump the frontend-angular-dependencies group ( #12533 )
...
Bumps the frontend-angular-dependencies group in /src-ui with 5 updates:
| Package | From | To |
| --- | --- | --- |
| [@ng-select/ng-select](https://github.com/ng-select/ng-select ) | `21.5.2` | `21.7.0` |
| [@angular-devkit/core](https://github.com/angular/angular-cli ) | `21.2.3` | `21.2.6` |
| [@angular-devkit/schematics](https://github.com/angular/angular-cli ) | `21.2.3` | `21.2.6` |
| [@angular/build](https://github.com/angular/angular-cli ) | `21.2.3` | `21.2.6` |
| [@angular/cli](https://github.com/angular/angular-cli ) | `21.2.3` | `21.2.6` |
Updates `@ng-select/ng-select` from 21.5.2 to 21.7.0
- [Release notes](https://github.com/ng-select/ng-select/releases )
- [Changelog](https://github.com/ng-select/ng-select/blob/master/CHANGELOG.md )
- [Commits](https://github.com/ng-select/ng-select/compare/v21.5.2...v21.7.0 )
Updates `@angular-devkit/core` from 21.2.3 to 21.2.6
- [Release notes](https://github.com/angular/angular-cli/releases )
- [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md )
- [Commits](https://github.com/angular/angular-cli/compare/v21.2.3...v21.2.6 )
Updates `@angular-devkit/schematics` from 21.2.3 to 21.2.6
- [Release notes](https://github.com/angular/angular-cli/releases )
- [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md )
- [Commits](https://github.com/angular/angular-cli/compare/v21.2.3...v21.2.6 )
Updates `@angular/build` from 21.2.3 to 21.2.6
- [Release notes](https://github.com/angular/angular-cli/releases )
- [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md )
- [Commits](https://github.com/angular/angular-cli/compare/v21.2.3...v21.2.6 )
Updates `@angular/cli` from 21.2.3 to 21.2.6
- [Release notes](https://github.com/angular/angular-cli/releases )
- [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md )
- [Commits](https://github.com/angular/angular-cli/compare/v21.2.3...v21.2.6 )
---
updated-dependencies:
- dependency-name: "@ng-select/ng-select"
dependency-version: 21.7.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: frontend-angular-dependencies
- dependency-name: "@angular-devkit/core"
dependency-version: 21.2.6
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: frontend-angular-dependencies
- dependency-name: "@angular-devkit/schematics"
dependency-version: 21.2.6
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: frontend-angular-dependencies
- dependency-name: "@angular/build"
dependency-version: 21.2.6
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: frontend-angular-dependencies
- dependency-name: "@angular/cli"
dependency-version: 21.2.6
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: frontend-angular-dependencies
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-08 16:33:58 +00:00
dependabot[bot]
b80b92a2b2
Chore(deps-dev): Bump jest-preset-angular from 16.1.1 to 16.1.2 in /src-ui in the frontend-jest-dependencies group across 1 directory ( #12534 )
...
* Chore(deps-dev): Bump jest-preset-angular
Bumps the frontend-jest-dependencies group in /src-ui with 1 update: [jest-preset-angular](https://github.com/thymikee/jest-preset-angular ).
Updates `jest-preset-angular` from 16.1.1 to 16.1.2
- [Release notes](https://github.com/thymikee/jest-preset-angular/releases )
- [Changelog](https://github.com/thymikee/jest-preset-angular/blob/main/CHANGELOG.md )
- [Commits](https://github.com/thymikee/jest-preset-angular/compare/v16.1.1...v16.1.2 )
---
updated-dependencies:
- dependency-name: jest-preset-angular
dependency-version: 16.1.2
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: frontend-jest-dependencies
...
Signed-off-by: dependabot[bot] <support@github.com >
* Circumvent setSystemTime bug
See https://github.com/sinonjs/fake-timers/issues/557
---------
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: shamoon <4887959+shamoon@users.noreply.github.com >
2026-04-08 16:11:53 +00:00
dependabot[bot]
c07b802bb8
Chore(deps-dev): Bump @playwright/test from 1.58.2 to 1.59.0 in /src-ui ( #12537 )
...
* Chore(deps-dev): Bump @playwright/test from 1.58.2 to 1.59.0 in /src-ui
Bumps [@playwright/test](https://github.com/microsoft/playwright ) from 1.58.2 to 1.59.0.
- [Release notes](https://github.com/microsoft/playwright/releases )
- [Commits](https://github.com/microsoft/playwright/compare/v1.58.2...v1.59.0 )
---
updated-dependencies:
- dependency-name: "@playwright/test"
dependency-version: 1.59.0
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
* bump Playwright docker images
---------
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: shamoon <4887959+shamoon@users.noreply.github.com >
2026-04-08 15:52:49 +00:00
GitHub Actions
ec6969e326
Auto translate strings
2026-04-08 15:42:05 +00:00
shamoon
4629bbf83e
Enhancement: add view_global_statistics and view_system_status permissions ( #12530 )
2026-04-08 15:39:47 +00:00
shamoon
826ffcccef
Handle the final batch of zizmor warnings
2026-04-08 08:06:00 -07:00
shamoon
b7a5255102
Chore: address more zizmor flags ( #12529 )
2026-04-08 14:16:09 +00:00
dependabot[bot]
962a4ddd73
Chore(deps): Bump the npm_and_yarn group across 1 directory with 2 updates ( #12531 )
...
Bumps the npm_and_yarn group with 2 updates in the /src-ui directory: [@hono/node-server](https://github.com/honojs/node-server ) and [hono](https://github.com/honojs/hono ).
Updates `@hono/node-server` from 1.19.12 to 1.19.13
- [Release notes](https://github.com/honojs/node-server/releases )
- [Commits](https://github.com/honojs/node-server/compare/v1.19.12...v1.19.13 )
Updates `hono` from 4.12.9 to 4.12.12
- [Release notes](https://github.com/honojs/hono/releases )
- [Commits](https://github.com/honojs/hono/compare/v4.12.9...v4.12.12 )
---
updated-dependencies:
- dependency-name: "@hono/node-server"
dependency-version: 1.19.13
dependency-type: indirect
dependency-group: npm_and_yarn
- dependency-name: hono
dependency-version: 4.12.12
dependency-type: indirect
dependency-group: npm_and_yarn
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-07 21:39:44 -07:00
Trenton H
a5fe88d2a1
Chore: Resolves some zizmor reported code scan findings ( #12516 )
...
Co-authored-by: shamoon <4887959+shamoon@users.noreply.github.com >
2026-04-06 23:03:29 +00:00
GitHub Actions
51c59746a7
Auto translate strings
2026-04-06 22:51:57 +00:00
Trenton H
c232d443fa
Breaking: Decouple OCR control from archive file control ( #12448 )
...
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com >
Co-authored-by: shamoon <4887959+shamoon@users.noreply.github.com >
2026-04-06 15:50:21 -07:00
shamoon
a945cd9379
Security: add static analysis CI workflow ( #12466 )
2026-04-04 04:17:23 +00:00
Trenton H
5f5fb263c9
Fix: Don't create a new note highlight generator per note in the loop ( #12512 )
2026-04-03 17:34:15 -07:00
shamoon
c039df423f
Documentation: note required secret key in v3 guide ( #12513 )
2026-04-03 15:41:38 -07:00
shamoon
b807b107ad
Enhancement: include sharelinks + bundles in export/import ( #12479 )
2026-04-03 21:51:57 +00:00
Trenton H
c2f02851da
Chore: Better typed status manager messages ( #12509 )
2026-04-03 21:18:01 +00:00
GitHub Actions
d0f8a98a9a
Auto translate strings
2026-04-03 20:55:14 +00:00
shamoon
566afdffca
Enhancement: unify text search to use tantivy ( #12485 )
2026-04-03 13:53:45 -07:00
Trenton H
f32ad98d8e
Feature: Update consumer logging to include task ID for log correlation ( #12510 )
2026-04-03 13:31:40 -07:00
dependabot[bot]
64debc87a5
Chore(deps): Bump djangorestframework in the django-ecosystem group ( #12488 )
...
Bumps the django-ecosystem group with 1 update: [djangorestframework](https://github.com/encode/django-rest-framework ).
Updates `djangorestframework` from 3.16.1 to 3.17.1
- [Release notes](https://github.com/encode/django-rest-framework/releases )
- [Commits](https://github.com/encode/django-rest-framework/compare/3.16.1...3.17.1 )
---
updated-dependencies:
- dependency-name: djangorestframework
dependency-version: 3.17.1
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: django-ecosystem
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-03 08:16:36 -07:00
dependabot[bot]
eb758862c9
Chore(deps): Bump the document-processing group with 3 updates ( #12489 )
...
Bumps the document-processing group with 3 updates: [gotenberg-client](https://github.com/stumpylog/gotenberg-client ), [ocrmypdf](https://github.com/ocrmypdf/OCRmyPDF ) and [tika-client](https://github.com/stumpylog/tika-client ).
Updates `gotenberg-client` from 0.13.1 to 0.14.0
- [Release notes](https://github.com/stumpylog/gotenberg-client/releases )
- [Changelog](https://github.com/stumpylog/gotenberg-client/blob/main/CHANGELOG.md )
- [Commits](https://github.com/stumpylog/gotenberg-client/compare/0.13.1...0.14.0 )
Updates `ocrmypdf` from 17.3.0 to 17.4.0
- [Release notes](https://github.com/ocrmypdf/OCRmyPDF/releases )
- [Commits](https://github.com/ocrmypdf/OCRmyPDF/compare/v17.3.0...v17.4.0 )
Updates `tika-client` from 0.10.0 to 0.11.0
- [Release notes](https://github.com/stumpylog/tika-client/releases )
- [Changelog](https://github.com/stumpylog/tika-client/blob/main/CHANGELOG.md )
- [Commits](https://github.com/stumpylog/tika-client/compare/0.10.0...0.11.0 )
---
updated-dependencies:
- dependency-name: gotenberg-client
dependency-version: 0.14.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: document-processing
- dependency-name: ocrmypdf
dependency-version: 17.4.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: document-processing
- dependency-name: tika-client
dependency-version: 0.11.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: document-processing
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-03 07:22:04 -07:00
dependabot[bot]
8c539bd862
Chore(deps): Bump the utilities-patch group across 1 directory with 5 updates ( #12499 )
...
Bumps the utilities-patch group with 5 updates in the / directory:
| Package | From | To |
| --- | --- | --- |
| [llama-index-core](https://github.com/run-llama/llama_index ) | `0.14.16` | `0.14.19` |
| [nltk](https://github.com/nltk/nltk ) | `3.9.3` | `3.9.4` |
| [zensical](https://github.com/zensical/zensical ) | `0.0.26` | `0.0.29` |
| [prek](https://github.com/j178/prek ) | `0.3.5` | `0.3.8` |
| [ruff](https://github.com/astral-sh/ruff ) | `0.15.5` | `0.15.7` |
Updates `llama-index-core` from 0.14.16 to 0.14.19
- [Release notes](https://github.com/run-llama/llama_index/releases )
- [Changelog](https://github.com/run-llama/llama_index/blob/main/CHANGELOG.md )
- [Commits](https://github.com/run-llama/llama_index/compare/v0.14.16...v0.14.19 )
Updates `nltk` from 3.9.3 to 3.9.4
- [Changelog](https://github.com/nltk/nltk/blob/develop/ChangeLog )
- [Commits](https://github.com/nltk/nltk/compare/3.9.3...3.9.4 )
Updates `zensical` from 0.0.26 to 0.0.29
- [Release notes](https://github.com/zensical/zensical/releases )
- [Commits](https://github.com/zensical/zensical/compare/v0.0.26...v0.0.29 )
Updates `prek` from 0.3.5 to 0.3.8
- [Release notes](https://github.com/j178/prek/releases )
- [Changelog](https://github.com/j178/prek/blob/master/CHANGELOG.md )
- [Commits](https://github.com/j178/prek/compare/v0.3.5...v0.3.8 )
Updates `ruff` from 0.15.5 to 0.15.7
- [Release notes](https://github.com/astral-sh/ruff/releases )
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md )
- [Commits](https://github.com/astral-sh/ruff/compare/0.15.5...0.15.7 )
---
updated-dependencies:
- dependency-name: llama-index-core
dependency-version: 0.14.19
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: utilities-patch
- dependency-name: nltk
dependency-version: 3.9.4
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: utilities-patch
- dependency-name: zensical
dependency-version: 0.0.29
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: utilities-patch
- dependency-name: prek
dependency-version: 0.3.8
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: utilities-patch
- dependency-name: ruff
dependency-version: 0.15.7
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: utilities-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-03 13:25:17 +00:00
Trenton H
d365f19962
Security: Registers a custom serializer which signs the task payload ( #12504 )
2026-04-03 03:49:54 +00:00
GitHub Actions
2703c12f1a
Auto translate strings
2026-04-03 03:25:57 +00:00
shamoon
e7c7978d67
Enhancement: allow opt-in blocking internal mail hosts ( #12502 )
2026-04-03 03:24:28 +00:00
GitHub Actions
83501757df
Auto translate strings
2026-04-02 22:36:32 +00:00
Trenton H
dda05a7c00
Security: Improve overall security in a few ways ( #12501 )
...
- Make sure we're always using regex with timeouts for user controlled data
- Adds rate limiting to the token endpoint (configurable)
- Signs the classifier pickle file with the SECRET_KEY and refuse to load one which doesn't verify.
- Require the user to set a secret key, instead of falling back to our old hard coded one
2026-04-02 15:30:26 -07:00
Trenton H
376af81b9c
Fix: Resolve another TC assuming an object has been created somewhere ( #12503 )
2026-04-02 14:58:28 -07:00
GitHub Actions
05c9e21fac
Auto translate strings
2026-04-02 19:40:05 +00:00
Trenton H
aed9abe48c
Feature: Replace Whoosh with tantivy search backend ( #12471 )
...
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com >
Co-authored-by: Antoine Mérino <3023499+Merinorus@users.noreply.github.com >
2026-04-02 12:38:22 -07:00
dependabot[bot]
e01a762e81
Chore(deps): Bump aiohttp in the uv group across 1 directory ( #12486 )
...
---
updated-dependencies:
- dependency-name: aiohttp
dependency-version: 3.13.4
dependency-type: indirect
dependency-group: uv
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-02 10:13:19 -07:00