Commit cfe86b7f authored by Mickaël Desfrênes's avatar Mickaël Desfrênes
Browse files

Fix PyPI dependency vulnerabilities and add deps-check target 

Scan Python and frontend lockfiles with osv-scanner without upgrading dependencies. Update affected PyPI packages and python-discovery, and bump Jama to 2026.10.29.0.

Validation: 305 tests passed, image/OCR and virtualenv smoke checks passed, and OSV reports zero PyPI vulnerabilities. Existing npm findings remain.
parent d357ac9c

Makefile

+4 −5
Changes for Makefile: 4 added lines, 5 removed lines.
Original line number Diff line number Diff line 
.PHONY: install install-hooks update run format test build publish help

.PHONY: install install-hooks update run format test deps-check build publish help



TEST_DATABASE ?= memory
@@ -54,6 +54,9 @@ test: ## Lancer les tests (TEST_DATABASE=memory|configured) 
		exit 2; \

	fi



deps-check: ## Scan des dependances Python et frontend avec osv-scanner

	osv-scanner scan source --lockfile uv.lock --lockfile src/ui/front/yarn.lock



build:build-ui-front  ## build package

	rm -rf dist

	uv build
@@ -65,7 +68,3 @@ help: ## Show this help 
	@echo "\nChoisissez une commande. Les choix sont:\n"

	@grep -E '^[0-9a-zA-Z_-]+:.*?## .*$$' $(MAKEFILE_LIST) | awk 'BEGIN {FS = ":.*?## "}; {printf "  \033[0;36m%-12s\033[m %s\n", $$1, $$2}'

	@echo ""
 


dependency-check:

	uv lock --upgrade

	osv-scanner scan --lockfile uv.lock

src/jama/__init__.py

+1 −1
Changes for src/jama/__init__.py: 1 added line, 1 removed line.
Original line number Diff line number Diff line 
__version__ = "2026.10.16.1"
 
__version__ = "2026.10.29.0"

uv.lock

+75 −74

File changed.

Preview size limit exceeded, changes collapsed.