6 Commits

Include renames

Author	SHA1	Message	Date
ik	8d7fab97b9	ci: lock generated OpenAPI contract	2026-09-12 21:03:37 +07:00
ik	d4ded77355	ci: schedule isolated production bootstrap	2026-09-12 20:58:50 +07:00
ik	ed78a17109	A11: Replace pip audit with real pip-audit tool and remove error suppression ... Bug: CI used 'pip audit ... || true' which: 1. Relied on pip-audit being pre-installed (not guaranteed) 2. Suppressed all errors with '|| true', hiding security issues Fix: - Install pip-audit explicitly in CI workflow - Remove '|| true' to fail on security vulnerabilities - Use requirements-lock.txt instead of requirements.txt for reproducibility - Check both production and dev dependencies This ensures: - Security audit actually runs and fails on vulnerabilities - Locked dependencies are used for consistent results - No silent failures masking security issues	2026-09-10 18:18:09 +07:00
ik	2c7dd27b4f	T08: Python lock files, CI web unit tests, dependency audit ... - Generate requirements-lock.txt and requirements-dev-lock.txt via pip-compile - CI uses locked files for reproducible installs - Add web unit tests to CI (npm run test:unit) - Add dependency-audit job using pip-audit - Add Makefile with lock/lock-dev targets for regeneration	2026-09-10 05:53:15 +07:00
ik	18855644a4	build: separate API development dependencies	2026-09-08 16:16:09 +07:00
ik	9cc3d44a49	ci: validate backend web migrations and e2e	2026-09-05 07:28:40 +07:00