Skip to content

chore: Refresh release dependencies - #175

Merged
kylejschultz merged 1 commit into
mainfrom
chore/security-dependency-refresh-v1.5.1
Aug 14, 2026
Merged

chore: Refresh release dependencies#175
kylejschultz merged 1 commit into
mainfrom
chore/security-dependency-refresh-v1.5.1

Conversation

@kylejschultz

Copy link
Copy Markdown
Owner

Summary

  • Update the release branch’s FastAPI, Uvicorn, and Starlette dependencies.
  • Update Vite and React type packages, including the lockfile refresh that resolves the nanoid audit finding.
  • Update Docker login Action to v4.6.0 in the release image workflows.

Scope

Contains only security and dependency maintenance. No dev UI, API, migration, or product changes are included.

Validation

  • npm audit --audit-level=high (0 vulnerabilities)
  • npm run build
  • Docker image build
  • Imported FastAPI 0.141.1 and Uvicorn 0.52.1 from the built image

Rollout and rollback

After merge, Release Please will update the release PR for the combined v1.5.1 maintenance release. Roll back by pinning the prior 1.5.0 image tag and recreating the service.

@kylejschultz
kylejschultz merged commit bae277f into main Aug 14, 2026
6 checks passed
@kylejschultz
kylejschultz deleted the chore/security-dependency-refresh-v1.5.1 branch August 14, 2026 07:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant