GlcoinCore/blitz_api
1
0
Fork 0
mirror of https://github.com/fusion44/blitz_api.git synced 2026-08-13 11:52:45 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions 1
487 commits 21 branches 2 tags 5.1 MiB
Commit graph

49 commits

Author SHA1 Message Date
fusion44
65588d6c7c
chore(deps): bump dependencies with known security vulnerabilities 
Direct dependencies:
- fastapi 0.128.0 -> 0.139.0 (needed for starlette 1.x support)
- starlette 0.49.1 -> 1.3.1
- pyjwt 2.10.1 -> 2.13.0
- aiohttp 3.13.3 -> 3.14.1
- deepdiff 8.6.1 -> 9.1.0
- requests 2.32.5 -> 2.33.0

Transitive dependencies:
- urllib3 2.6.3 -> 2.7.0
- idna 3.11 -> 3.18
- python-multipart 0.0.22 -> 0.0.32

Dev dependencies:
- pytest 9.0.2 -> 9.0.3

The update-requirements-file make target now passes --upgrade to
uv pip compile; without it, stale (vulnerable) pins from the existing
requirements.txt are silently preserved.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
 2026-07-03 17:46:36 +02:00
fusion44
c9f27c3f47
chore(nix): migrate flake from poetry2nix to uv2nix 
The project switched from poetry to uv in 44385ca, but the flake still
built everything through poetry2nix (an undeclared input resolved via
the flake registry) and no longer evaluated against the uv-based
pyproject.toml.

- build packages.blitz-api as a uv2nix virtualenv from uv.lock
  (wheels preferred), keeping the bin/api entry point the NixOS
  module expects
- replace the poetry dev shell with a uv-based tooling shell that
  mirrors devenv.nix
- move click to the main dependencies: the api console script
  imports it at runtime, so a production install without the dev
  group would crash on startup
- update the nixpkgs pin so the dev shell ships a uv that
  understands the current lockfile revision

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
 2026-07-03 16:00:42 +02:00
fusion44
e0f4d7e2fc
fix(deps): ensure async-timeout is included for older Python 3.11 
- Add async-timeout as a direct dependency in pyproject.toml to fix
  ModuleNotFoundError on systems with Python < 3.11.3 (e.g. Raspberry Pi).
- Switch to universal requirements generation in Makefile and
  requirements.txt to include platform-specific markers and conditional
  dependencies.
- Update uv.lock to reflect dependency changes.

This resolves a crash where redis-py attempted to import async_timeout,
which was missing because it was pruned during requirements generation
on a newer Python version.
 2026-02-21 08:04:34 +01:00
fusion44
07d2bfbc76
feat: update Python and Devenv deps 
- Updated all dependencies to their latest versions
- Vendored fastapi-plugins[redis] as it looks unmaintained
 2026-02-03 11:04:41 +01:00
fusion44
44385ca40c
chore: deprecate poetry for uv; update dependencies 2025-11-10 12:30:03 +01:00
fusion44
b5786399bf
fix: target python 3.11 2025-08-08 09:10:41 +02:00
fusion44
6d1aca7854
chore: pin dependencies to an exact version 2025-05-09 12:45:31 +02:00
fusion44
382f8303f3 chore: update deps and fake blitz scripts 2025-05-06 09:16:46 +02:00
fusion44
4e038e8fc7 feat: fetch app status via a celery task 
This is a feature that allows to fetch the app status via a celery
task which stores the result in the Redis database and notifies the API
of the change. The API sends a notification to connected clients via the
SSE mechanism.

Using a background task allows to avoid crashing the whole API if the
script call fails.

The by default the cache is refreshed every 30 minutes. This can be
changed by setting the `BAPI_APP_STATUS_UPDATE_INTERVAL_MIN` environment
variable.

refs #123
 2025-05-06 09:16:46 +02:00
fusion44
b52732ead9 chore: update dependencies 2025-03-23 17:43:39 +01:00
fusion44
149bd30b15
chore: update deps and flake file 2024-12-16 15:20:46 +01:00
fusion44
d3902e1c2b
chore: remove pre-commit 2024-10-06 15:01:58 +02:00
dependabot[bot]
11f8d57f4e chore(deps): bump aiohttp from 3.9.3 to 3.9.4 
Bumps [aiohttp](https://github.com/aio-libs/aiohttp) from 3.9.3 to 3.9.4.
- [Release notes](https://github.com/aio-libs/aiohttp/releases)
- [Changelog](https://github.com/aio-libs/aiohttp/blob/master/CHANGES.rst)
- [Commits](https://github.com/aio-libs/aiohttp/compare/v3.9.3...v3.9.4)

---
updated-dependencies:
- dependency-name: aiohttp
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-04-21 12:58:56 +02:00
dependabot[bot]
a8461ccd46 chore(deps-dev): bump black from 24.2.0 to 24.3.0 
Bumps [black](https://github.com/psf/black) from 24.2.0 to 24.3.0.
- [Release notes](https://github.com/psf/black/releases)
- [Changelog](https://github.com/psf/black/blob/main/CHANGES.md)
- [Commits](https://github.com/psf/black/compare/24.2.0...24.3.0)

---
updated-dependencies:
- dependency-name: black
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-04-06 21:07:56 +02:00
fusion44
6da6f0aedc
feat: simplify flake file and update dependencies 2024-02-21 20:25:19 +01:00
fusion44
18c66f44f4
chore: update dependencies 2024-02-18 12:24:02 +01:00
dependabot[bot]
29f019810a chore(deps): bump fastapi from 0.108.0 to 0.109.1 
Bumps [fastapi](https://github.com/tiangolo/fastapi) from 0.108.0 to 0.109.1.
- [Release notes](https://github.com/tiangolo/fastapi/releases)
- [Commits](https://github.com/tiangolo/fastapi/compare/0.108.0...0.109.1)

---
updated-dependencies:
- dependency-name: fastapi
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-02-18 12:14:03 +01:00
dependabot[bot]
8d10ce3ea8 chore(deps): bump aiohttp from 3.9.0 to 3.9.2 
Bumps [aiohttp](https://github.com/aio-libs/aiohttp) from 3.9.0 to 3.9.2.
- [Release notes](https://github.com/aio-libs/aiohttp/releases)
- [Changelog](https://github.com/aio-libs/aiohttp/blob/master/CHANGES.rst)
- [Commits](https://github.com/aio-libs/aiohttp/compare/v3.9.0...v3.9.2)

---
updated-dependencies:
- dependency-name: aiohttp
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-02-18 12:11:51 +01:00
fusion44
956d7dc9f9
chore: update dependencies 2024-01-14 10:11:22 +01:00
dependabot[bot]
6edad7ac48
chore(deps): bump aiohttp from 3.8.5 to 3.9.0 (#233) 
Bumps [aiohttp](https://github.com/aio-libs/aiohttp) from 3.8.5 to 3.9.0.
- [Release notes](https://github.com/aio-libs/aiohttp/releases)
- [Changelog](https://github.com/aio-libs/aiohttp/blob/master/CHANGES.rst)
- [Commits](https://github.com/aio-libs/aiohttp/compare/v3.8.5...v3.9.0)

---
updated-dependencies:
- dependency-name: aiohttp
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-01-07 17:07:40 +01:00
fusion44
9adcc866fb
feat: add nix flake (#216) 2023-10-29 19:29:25 +01:00
dependabot[bot]
486f9a7854
chore(deps): bump aiohttp from 3.8.3 to 3.8.5 (#223) 
Bumps [aiohttp](https://github.com/aio-libs/aiohttp) from 3.8.3 to 3.8.5.
- [Release notes](https://github.com/aio-libs/aiohttp/releases)
- [Changelog](https://github.com/aio-libs/aiohttp/blob/v3.8.5/CHANGES.rst)
- [Commits](https://github.com/aio-libs/aiohttp/compare/v3.8.3...v3.8.5)

---
updated-dependencies:
- dependency-name: aiohttp
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-10-29 07:52:44 +01:00
dependabot[bot]
191c77b4d4
chore(deps): bump grpcio from 1.50.0 to 1.53.0 (#218) 
Bumps [grpcio](https://github.com/grpc/grpc) from 1.50.0 to 1.53.0.
- [Release notes](https://github.com/grpc/grpc/releases)
- [Changelog](https://github.com/grpc/grpc/blob/master/doc/grpc_release_schedule.md)
- [Commits](https://github.com/grpc/grpc/compare/v1.50.0...v1.53.0)

---
updated-dependencies:
- dependency-name: grpcio
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-07-08 13:11:42 +02:00
fusion44
d0d1380eea
feat: implement remote debugging on a remote machine (#207) 
closes #206 

* feat: implement remote debugging on a RaspiBlitz
* docs: reverse the prep steps
* fix: ruff line length warning
 2023-06-25 08:01:43 +02:00
fusion44
adf472ac8b feat: implement Ruff as a linter; fix given errors 2023-06-25 07:17:00 +02:00
fusion44
45e5a96683
chore: update redis due to security vulnerability 2023-03-29 20:50:16 +02:00
dependabot[bot]
f95f97707c
chore(deps): bump redis from 4.3.4 to 4.5.3 
Bumps [redis](https://github.com/redis/redis-py) from 4.3.4 to 4.5.3.
- [Release notes](https://github.com/redis/redis-py/releases)
- [Changelog](https://github.com/redis/redis-py/blob/master/CHANGES)
- [Commits](https://github.com/redis/redis-py/compare/v4.3.4...v4.5.3)

---
updated-dependencies:
- dependency-name: redis
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-03-27 22:34:09 +00:00
fusion44
fcbae78956
chore: update dependencies 2023-03-12 16:33:41 +01:00
fusion44
0fe94da897
feat: prepare for release 0.5.1beta 2023-02-05 21:24:31 +01:00
fusion44
bd06a3cc6f
feat: improve logging by using loguru package 2022-12-18 20:55:31 +01:00
fusion44
5edb60ad82
chore: update dependencies 2022-11-28 19:15:26 +01:00
fusion44
04eadf9caa
chore: add changes from main 
Due to the heavy refactoring work, it was almost impossible to
normally merge the changes over. The changes where applied
by manually.
 2022-10-20 20:38:47 +02:00
fusion44
fe65568f55
Revert "chore: merge changes from main" 
This reverts commit e3f0350c72, reversing
changes made to a448dbda8d.
 2022-10-19 21:32:47 +02:00
fusion44
e3f0350c72
chore: merge changes from main 2022-10-19 21:19:43 +02:00
fusion44
4f5216b502
chore(deps): bump protobuf from 3.20.1 to 3.20.3 
Update all dependencies, not only protobuf.

replaces PR #153
 2022-10-02 13:07:14 +02:00
fusion44
a31b2e0f9c
Merge branch 'main' into refactor_system 2022-09-10 16:24:40 +02:00
fusion44
c86a687348
chore: update dependencies 2022-09-10 13:42:50 +02:00
fusion44
0ad597cd90 refactor: move login to platform specific files 
refs #143
 2022-08-24 20:56:40 +02:00
fusion44
cdfdba16fa
chore: lock dependencies to latest versions 2022-07-23 15:07:32 +02:00
fusion44
bb6d6a6bff
chore: dep update; update version to 0.5.0 2022-05-28 12:38:10 +02:00
fusion44
a34dd7954c
chore: apply pre_commit, fix typos, update deps 2022-05-18 18:20:13 +02:00
fusion44
20f60abaf3
feat: add a pre-commit hook to format source code 
refs #14
 2022-03-20 16:00:25 +01:00
Stefan Stammberger
f9aae93ce9
fix: install problem due to include from git repo 
fixes #40
 2021-11-18 08:31:46 +01:00
Stefan Stammberger
1748e5ba1c
feat: Add a Makefile as build system 2021-10-02 12:10:52 +02:00
Stefan Stammberger
10cd9f7e79
test: Add testing dependencies and first tests 2021-10-02 12:00:44 +02:00
Stefan Stammberger
3c722aa888
chore: update dependencies 2021-09-26 21:34:41 +02:00
Stefan Stammberger
faaa1fadff
feat: redirect index route to latest api docs 
Temporary use forked version of fastapi-versioning with a required fix.
 2021-09-26 18:11:32 +02:00
Stefan Stammberger
070ac2131c
fix: update wrong PyJWT version 
Also: don't silently eat exceptions when decoding a JWT token
 2021-09-25 17:58:53 +02:00
Stefan Stammberger
20598b3eee
feat: implement poetry as a build system 
This commit enables dependency locking for more secure and
stable development environments.

https://python-poetry.org

closes #6
 2021-09-20 19:37:24 +02:00