home/links
2
0
Fork 0
mirror of https://github.com/wahyd4/links.git synced 2026-08-08 21:04:53 +10:00
Code Issues Packages Projects Releases Wiki Activity
706 Commits 29 Branches 0 Tags
main
Commit Graph
14 Commits
Author SHA1 Message Date
junv 74b2e72844 chore: update dependencies to clear security advisories 
Python (pip-audit: 0 vulnerabilities):
  - Django 5.2.12 -> >=5.2.16  (CVEs PYSEC-2026-48..55, 197..201, 2090..2092)
  - sqlparse 0.5.1 -> >=0.5.4  (GHSA-27jp-wm6q-gp25)
  - pillow 12.2.0 -> >=12.3.0  (PYSEC-2026-2253..2257, 3451..3453)
  - transitive upgrades: idna 3.10 -> 3.15, setuptools 78.1.1 -> 83.0.0
  - refreshed uv.lock via `uv sync --upgrade`

npm (`npm audit`: 0 vulnerabilities):
  - brace-expansion, glob, picomatch bumped via `npm audit fix --legacy-peer-deps`
    (brace-expansion ReDoS, glob CLI cmd injection, picomatch ReDoS/injection)

Verified: 67/67 tests pass, Tailwind build clean, pip-audit and npm
audit both report 0 vulnerabilities.
 2026-07-16 10:29:15 +10:00
junvandGitHub 3a1d80bb86 Merge pull request #98 from wahyd4/dependabot/npm_and_yarn/multi-c4a89f1b01 
build(deps-dev): bump vite and @vitejs/plugin-react
 2026-07-16 10:14:05 +10:00
dependabot[bot]andGitHub 67cde4169c build(deps): bump echarts from 5.6.0 to 6.1.0 
Bumps [echarts](https://github.com/apache/echarts) from 5.6.0 to 6.1.0.
- [Release notes](https://github.com/apache/echarts/releases)
- [Commits](https://github.com/apache/echarts/compare/5.6.0...6.1.0)

---
updated-dependencies:
- dependency-name: echarts
  dependency-version: 6.1.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-30 17:28:54 +00:00
dependabot[bot]andGitHub f06aca0862 build(deps-dev): bump vite and @vitejs/plugin-react 
Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) and [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react). These dependencies needed to be updated together.

Updates `vite` from 6.4.1 to 8.1.1
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v8.1.1/packages/vite)

Updates `@vitejs/plugin-react` from 4.7.0 to 6.0.3
- [Release notes](https://github.com/vitejs/vite-plugin-react/releases)
- [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite-plugin-react/commits/plugin-react@6.0.3/packages/plugin-react)

---
updated-dependencies:
- dependency-name: vite
  dependency-version: 8.1.1
  dependency-type: direct:development
- dependency-name: "@vitejs/plugin-react"
  dependency-version: 6.0.3
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-30 15:43:33 +00:00
junvandCopilot a87b4643fd feat: port JBOT AI robot face into links as Django app 
- Add jbot Django app (jbot/__init__.py, apps.py, urls.py, api_urls.py)
- Python backend (jbot/views.py): TTS 2.0, ASR 1.0 BigASR, LLM/memory via OpenRouter
- React SPA frontend at /jbot/ (static_src/jbot/): RobotFace, ChatPanel, expressions,
  voices, push-to-talk, history, memory, settings pages
- Vite entry jbot: static_src/jbot/main.jsx → dist/jbot.js + dist/jbot.css
- react-router-dom added; BrowserRouter basename=/jbot for SPA routing
- core/settings.py: added jbot to INSTALLED_APPS
- core/urls.py: /jbot/ + /api/jbot/ URL includes
- pyproject.toml: websocket-client>=1.9.0 for BigASR binary WS protocol
- Dockerfile: ffmpeg added to production apt-get for WebM→PCM audio conversion
- k8s/manifest.yaml: VOLC_APP_ID, VOLC_ACCESS_TOKEN, OPENROUTER_API_KEY env vars
  via jbot-credentials Secret; LLM_MODEL, VOLC_TTS_VOICE, VOLC_ASR_RESOURCE defaults

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
 2026-05-17 14:13:37 +10:00
dependabot[bot]andGitHub 46234ef5a5 Bump minimatch from 9.0.5 to 9.0.9 
Bumps [minimatch](https://github.com/isaacs/minimatch) from 9.0.5 to 9.0.9.
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md)
- [Commits](https://github.com/isaacs/minimatch/compare/v9.0.5...v9.0.9)

---
updated-dependencies:
- dependency-name: minimatch
  dependency-version: 9.0.9
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-03-29 00:17:20 +00:00
junv 3a20fcb63a Optimize frontend 2026-03-29 11:10:37 +11:00
dependabot[bot]andGitHub 20745ae216 Bump yaml from 2.6.0 to 2.8.3 
Bumps [yaml](https://github.com/eemeli/yaml) from 2.6.0 to 2.8.3.
- [Release notes](https://github.com/eemeli/yaml/releases)
- [Commits](https://github.com/eemeli/yaml/compare/v2.6.0...v2.8.3)

---
updated-dependencies:
- dependency-name: yaml
  dependency-version: 2.8.3
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-03-26 19:00:04 +00:00
junvandGitHub 7034e10ab4 Merge pull request #31 from wahyd4/dependabot/npm_and_yarn/brace-expansion-2.0.2 
Bump brace-expansion from 2.0.1 to 2.0.2
 2025-09-02 10:24:35 +10:00
dependabot[bot]andGitHub 1d14e3d2ff Bump brace-expansion from 2.0.1 to 2.0.2 
Bumps [brace-expansion](https://github.com/juliangruber/brace-expansion) from 2.0.1 to 2.0.2.
- [Release notes](https://github.com/juliangruber/brace-expansion/releases)
- [Commits](https://github.com/juliangruber/brace-expansion/compare/v2.0.1...v2.0.2)

---
updated-dependencies:
- dependency-name: brace-expansion
  dependency-version: 2.0.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-06-12 10:13:19 +00:00
dependabot[bot]andGitHub f3e72d9704 Bump nanoid from 3.3.7 to 3.3.11 
Bumps [nanoid](https://github.com/ai/nanoid) from 3.3.7 to 3.3.11.
- [Release notes](https://github.com/ai/nanoid/releases)
- [Changelog](https://github.com/ai/nanoid/blob/main/CHANGELOG.md)
- [Commits](https://github.com/ai/nanoid/compare/3.3.7...3.3.11)

---
updated-dependencies:
- dependency-name: nanoid
  dependency-version: 3.3.11
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-04-12 03:46:56 +00:00
junv cef193c835 Update cross-spawn 2025-02-21 17:23:58 +11:00
dependabot[bot]andGitHub dff2ac916b Bump cross-spawn from 7.0.3 to 7.0.6 
Bumps [cross-spawn](https://github.com/moxystudio/node-cross-spawn) from 7.0.3 to 7.0.6.
- [Changelog](https://github.com/moxystudio/node-cross-spawn/blob/master/CHANGELOG.md)
- [Commits](https://github.com/moxystudio/node-cross-spawn/compare/v7.0.3...v7.0.6)

---
updated-dependencies:
- dependency-name: cross-spawn
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-01-03 05:12:11 +00:00
junv 06e7bbf6e6 Add newsletter 2024-11-05 22:31:04 +11:00