Skip to content

Update Prisma Migrations#2

Open
github-actions[bot] wants to merge 28 commits intomainfrom
feat/prisma-migration-
Open

Update Prisma Migrations#2
github-actions[bot] wants to merge 28 commits intomainfrom
feat/prisma-migration-

Conversation

@github-actions
Copy link

Auto-generated migration based on schema.prisma changes.

Generated files:

  • deploy/migrations/${VERSION}_schema_update/migration.sql
  • deploy/migrations/${VERSION}_schema_update/README.md

yuneng-jiang and others added 24 commits December 10, 2025 08:35
[Fix] Change credential encryption to only affect db credentials
…14.1

- Fix CVE-2025-68113: Update altcha-lib from 1.3.0 to 1.4.1
- Fix CVE-2025-15284: Update qs from 6.13.0 to 6.14.1
- Add overrides and resolutions to enforce fixed versions
…and qs to 6.14.1

- Fix GHSA-5j59-xgg2-r9c4 and GHSA-mwv6-3258-q52c: Update next from 14.2.33 to 14.2.35
- Fix CVE-2025-15284: Update qs from 6.13.0 to 6.14.1
- Add override for qs to enforce fixed version
- Add run_secret_detection() call to main() function
- Install ggshield upfront for consistency with other tools
- Secret detection scans will now run as part of the security scan workflow
- Add patterns to ignore all test files (Python and TypeScript)
- Add patterns for common test fixtures and mock data
- Ignore Jupyter notebooks and example config files
- Simplify and clean up comments for better maintainability
- Remove complex regex patterns that GitGuardian doesn't support
- Keep simple string patterns and SHA256 hashes
- Test files are already excluded via ignored_paths
…xample patterns

- Replace sk-02Wr4IAlN3NvPXvL5JVvDA with sk-example-... in key_management_endpoints.py
- Replace sk-Fn8Ej39NkBQmUagFEoUWPQ with sk-example-... in spend_management_endpoints.py
- Add SHA256 hashes to ignore mock data in cache_dashboard.tsx comments
…mments with example patterns

- Replace high-entropy mock API keys in comments with sk-example-... pattern
- Remove unnecessary gitguardian ignore entries for bad practices
- Fixes GHSA-hp6r-r9vc-q8wx (CSRF vulnerability, CVSS 6.3)
- Update in both pyproject.toml and requirements.txt
- Add typing-extensions>=4.14.1 to pyproject.toml, requirements.txt, and .circleci/requirements.txt
- Required by pydantic-core which needs Sentinel from typing_extensions
- Also update fastapi-sso to 0.19.0 in .circleci/requirements.txt to match previous fix
- Fixes ImportError: cannot import name 'Sentinel' from 'typing_extensions'
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants