pyaniz/Thursday
Watch
1
1
Fork
You've already forked Thursday
 0
Code Issues 30 Pull requests Projects Releases Packages 1 Wiki Activity Actions

Fix: upgrade backend and frontend dependencies (1.37.4, 1.37.5) #93

Merged
pyaniz merged 2 commits from staging into main 2026-10-24 20:32:28 -05:00
Conversation 0 Commits 2 Files changed 10 +1326 -793
pyaniz commented 2026-10-24 18:27:32 -05:00
Owner

Security dependency upgrades, two commits. Part of #44.

1.37.4 Backend

  • FastAPI 0.109 -> 0.162, Starlette 1.10 (closes the recent Starlette advisories), anyio, uvicorn, Pydantic, asyncpg, PyJWT, xmltodict and Google libs pinned to exact versions
  • Removed unused passlib and requests
  • .dict() -> .model_dump(), Query(regex=) -> pattern=
  • Dockerfile: Python 3.11 -> 3.12
  • Tested: 30 backend tests pass, pip-audit clean, app imports with all 95 API paths. Already confirmed working on staging.

1.37.5 Frontend

  • axios 1.20, react-router-dom 7.18, React 19.3, Vite 7.3.7, MUI 7.3.11, recharts 3.10 and build tooling, all within current majors
  • npm audit: 22 vulnerabilities (16 high) -> 0
  • Tested: tsc and Vite build pass. Not yet clicked through: charts, MUI components, routing, login refresh. Lint reports more problems than before (361 vs 310) from newer lint rules; not part of the build.

🤖 Generated with Claude Code

Security dependency upgrades, two commits. Part of #44. **1.37.4 Backend** - FastAPI 0.109 -> 0.162, Starlette 1.10 (closes the recent Starlette advisories), anyio, uvicorn, Pydantic, asyncpg, PyJWT, xmltodict and Google libs pinned to exact versions - Removed unused `passlib` and `requests` - `.dict()` -> `.model_dump()`, `Query(regex=)` -> `pattern=` - Dockerfile: Python 3.11 -> 3.12 - Tested: 30 backend tests pass, `pip-audit` clean, app imports with all 95 API paths. Already confirmed working on staging. **1.37.5 Frontend** - axios 1.20, react-router-dom 7.18, React 19.3, Vite 7.3.7, MUI 7.3.11, recharts 3.10 and build tooling, all within current majors - `npm audit`: 22 vulnerabilities (16 high) -> 0 - Tested: `tsc` and Vite build pass. Not yet clicked through: charts, MUI components, routing, login refresh. Lint reports more problems than before (361 vs 310) from newer lint rules; not part of the build. 🤖 Generated with [Claude Code](https://claude.com/claude-code)
Fix: upgrade backend dependencies (FastAPI 0.162, Starlette 1.10), pin versions, Python 3.12 (1.37.4)
All checks were successful
Build and Publish Containers / build-and-push (push) Successful in 1m9s
Details
Mirror to GitHub / mirror (push) Successful in 23s
Details
c7f3b7883c 
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
Fix: update frontend dependencies within current majors, npm audit clean (1.37.5)
All checks were successful
Build and Publish Containers / build-and-push (push) Successful in 57s
Details
Mirror to GitHub / mirror (push) Successful in 22s
Details
284461e614 
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
pyaniz changed title from Fix: upgrade backend dependencies (1.37.4) to Fix: upgrade backend and frontend dependencies (1.37.4, 1.37.5) 2026-10-24 18:56:00 -05:00
pyaniz merged commit f257a0da37 into main 2026-10-24 20:32:28 -05:00
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels   
audit

   
bug
Something is not working

  
cleanup

   
docs

   
duplicate
This issue or pull request already exists

  
enhancement
New feature

  
help wanted
Need some help

  
invalid
Something is wrong

  
new feature
This feature doesn't exist and needs to be created

  
P0

   
P1

   
P2

   
P3

   
question
More information is needed

  
roadmap
Tasks from the official roadmap

  
security

   
wontfix
This won't be fixed

No labels
audit
bug
cleanup
docs
duplicate
enhancement
help wanted
invalid
new feature
P0
P1
P2
P3
question
roadmap
security
wontfix
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
pyaniz/Thursday!93
No description provided.