Chore/dependency security audit - #2

Merged

KIVOX-dev merged 25 commits into

mainfrom

chore/dependency-security-audit

Aug 5, 2026

Commits on Aug 1, 2026

fix(deps): pin pydantic[email] to close unpinned duplicate declaration

KIVOX-dev
and
claude
committed
759183b
style: apply black formatting across python-service

KIVOX-dev
and
claude
committed
d621b5e
chore: ignore the black reformat commit in git blame

KIVOX-dev
and
claude
committed
e9ad48f
feat: initialize project configuration in pyproject.toml
KIVOX-dev
committed
638ee21
docs: record third-pass toolchain audit findings

KIVOX-dev
and
claude
committed
68d7b0e
feat: implement backend service architecture including auth, dashboard, and placement modules with input validation and security safeguards.
KIVOX-dev
committed
b418af2
feat: migrate to Node.js backend, add secure file uploads, validation, and integration testing infrastructure
KIVOX-dev
committed
d61230c
feat: scaffold Node.js API with health checks, rate limiting, and WebSocket support
KIVOX-dev
committed
7e2baa6
initialize virtual environment and dependency structure for AI service
KIVOX-dev
committed
9dabb02
feat: introduce ai-service microservice, implement student repository and services, and add database indexing scripts
KIVOX-dev
committed
daa52d0
feat: implement ai-service with security configuration, CI workflows, and validation tests
KIVOX-dev
committed
f088c70
feat: add docker-compose stack, nginx load balancing, and credential rotation documentation
KIVOX-dev
committed
0f8e968
feat: implement Redis-backed rate limiting with configurable auth/kiosk policies and add load testing token utility
KIVOX-dev
committed
364a4a3

Navigation Menu

Chore/dependency security audit - #2

Chore/dependency security audit#2
KIVOX-dev merged 25 commits into
mainfrom
chore/dependency-security-audit

Commits on Aug 1, 2026

fix(deps): pin pydantic[email] to close unpinned duplicate declaration

style: apply black formatting across python-service

chore: ignore the black reformat commit in git blame

feat: initialize project configuration in pyproject.toml

docs: record third-pass toolchain audit findings

feat: implement backend service architecture including auth, dashboard, and placement modules with input validation and security safeguards.

feat: migrate to Node.js backend, add secure file uploads, validation, and integration testing infrastructure

feat: scaffold Node.js API with health checks, rate limiting, and WebSocket support

initialize virtual environment and dependency structure for AI service

feat: introduce ai-service microservice, implement student repository and services, and add database indexing scripts

feat: implement ai-service with security configuration, CI workflows, and validation tests

feat: add docker-compose stack, nginx load balancing, and credential rotation documentation

feat: implement Redis-backed rate limiting with configurable auth/kiosk policies and add load testing token utility

Commits on Aug 2, 2026

feat: add capacity benchmark script for node-api and configure pytest for ai-service

Merge origin/main and resolve pyproject conflict

Apply remaining changes

feat: implement base repository pattern, add department/resume models, and containerize API with Docker

test: add integration test suite for auth registration, login, refresh, and password change flows

Commits on Aug 5, 2026

changes in setting

test: add integration suite for auth flows and configure environment settings

feat: implement TestService with assessment logic and configure Claude environment permissions

feat: implement placement application and record modules with secure file upload middleware

feat: implement secure PlacementRecordService with role-based authorization and add Claude project settings

feat: add Cloud Build configuration, service-specific dockerignore, and environment permissions settings

Potential fix for pull request finding 'CodeQL / Workflow does not contain permissions'