T08: Python lock files, CI web unit tests, dependency audit

- Generate requirements-lock.txt and requirements-dev-lock.txt via pip-compile
- CI uses locked files for reproducible installs
- Add web unit tests to CI (npm run test:unit)
- Add dependency-audit job using pip-audit
- Add Makefile with lock/lock-dev targets for regeneration
This commit is contained in:
ik
2026-09-10 05:53:15 +07:00
parent f550639456
commit 2c7dd27b4f
4 changed files with 265 additions and 4 deletions
+9
View File
@@ -0,0 +1,9 @@
# Regenerate Python dependency lock files
.PHONY: lock lock-dev
lock:
cd apps/api && pip-compile requirements.txt --output-file requirements-lock.txt
lock-dev:
cd apps/api && pip-compile requirements-dev.txt --output-file requirements-dev-lock.txt