home/links
2
0
Fork 0
mirror of https://github.com/wahyd4/links.git synced 2026-08-09 05:06:16 +10:00
Code Issues Packages Projects Releases Wiki Activity
694 Commits 29 Branches 0 Tags
9f3a673e474b70bac65ef09d33dd962f12f345fd
Commit Graph
31 Commits
Author SHA1 Message Date
junv 74b2e72844 chore: update dependencies to clear security advisories 
Python (pip-audit: 0 vulnerabilities):
  - Django 5.2.12 -> >=5.2.16  (CVEs PYSEC-2026-48..55, 197..201, 2090..2092)
  - sqlparse 0.5.1 -> >=0.5.4  (GHSA-27jp-wm6q-gp25)
  - pillow 12.2.0 -> >=12.3.0  (PYSEC-2026-2253..2257, 3451..3453)
  - transitive upgrades: idna 3.10 -> 3.15, setuptools 78.1.1 -> 83.0.0
  - refreshed uv.lock via `uv sync --upgrade`

npm (`npm audit`: 0 vulnerabilities):
  - brace-expansion, glob, picomatch bumped via `npm audit fix --legacy-peer-deps`
    (brace-expansion ReDoS, glob CLI cmd injection, picomatch ReDoS/injection)

Verified: 67/67 tests pass, Tailwind build clean, pip-audit and npm
audit both report 0 vulnerabilities.
 2026-07-16 10:29:15 +10:00
dependabot[bot]andGitHub 1549d6484c build(deps): bump cryptography from 46.0.5 to 48.0.1 
Bumps [cryptography](https://github.com/pyca/cryptography) from 46.0.5 to 48.0.1.
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](https://github.com/pyca/cryptography/compare/46.0.5...48.0.1)

---
updated-dependencies:
- dependency-name: cryptography
  dependency-version: 48.0.1
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-19 15:59:56 +00:00
junvandCopilot a87b4643fd feat: port JBOT AI robot face into links as Django app 
- Add jbot Django app (jbot/__init__.py, apps.py, urls.py, api_urls.py)
- Python backend (jbot/views.py): TTS 2.0, ASR 1.0 BigASR, LLM/memory via OpenRouter
- React SPA frontend at /jbot/ (static_src/jbot/): RobotFace, ChatPanel, expressions,
  voices, push-to-talk, history, memory, settings pages
- Vite entry jbot: static_src/jbot/main.jsx → dist/jbot.js + dist/jbot.css
- react-router-dom added; BrowserRouter basename=/jbot for SPA routing
- core/settings.py: added jbot to INSTALLED_APPS
- core/urls.py: /jbot/ + /api/jbot/ URL includes
- pyproject.toml: websocket-client>=1.9.0 for BigASR binary WS protocol
- Dockerfile: ffmpeg added to production apt-get for WebM→PCM audio conversion
- k8s/manifest.yaml: VOLC_APP_ID, VOLC_ACCESS_TOKEN, OPENROUTER_API_KEY env vars
  via jbot-credentials Secret; LLM_MODEL, VOLC_TTS_VOICE, VOLC_ASR_RESOURCE defaults

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
 2026-05-17 14:13:37 +10:00
junv 221cdcdbee add yfinance dependency 2026-04-18 22:56:16 +10:00
junvandCopilot 3955e95b9e geo: replace ip-api.com with local DB-IP City Lite MMDB 
- Rewrite nginxmon/geo.py to use maxminddb + DB-IP City Lite MMDB
  (https://cdn.jsdelivr.net/npm/dbip-city-lite/dbip-city-lite.mmdb.gz)
  instead of ip-api.com HTTP API — eliminates all network timeouts and
  rate-limit issues; lookups are now sub-millisecond in-process
- Keep _lookup_batch() signature unchanged so routermon receiver
  requires no changes
- MMDB downloaded on first use (lazy) and refreshed monthly via
  APScheduler; reader cached module-level (thread-safe for reads)
- Add management command: manage.py download_geo_db
- Update k8s init container to download MMDB on first deploy if absent
- Add maxminddb==3.1.1 dependency

CC BY 4.0 — DB-IP (https://db-ip.com)

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
 2026-04-16 16:44:02 +10:00
junvandGitHub af73cdf267 Merge pull request #77 from wahyd4/dependabot/uv/pillow-12.2.0 
Bump pillow from 12.1.1 to 12.2.0
 2026-04-14 14:44:04 +10:00
dependabot[bot]andGitHub d3aa50794a Bump pytest from 8.3.4 to 9.0.3 
Bumps [pytest](https://github.com/pytest-dev/pytest) from 8.3.4 to 9.0.3.
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](https://github.com/pytest-dev/pytest/compare/8.3.4...9.0.3)

---
updated-dependencies:
- dependency-name: pytest
  dependency-version: 9.0.3
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-04-14 00:22:04 +00:00
dependabot[bot]andGitHub 19ea20485d Bump pillow from 12.1.1 to 12.2.0 
Bumps [pillow](https://github.com/python-pillow/Pillow) from 12.1.1 to 12.2.0.
- [Release notes](https://github.com/python-pillow/Pillow/releases)
- [Changelog](https://github.com/python-pillow/Pillow/blob/main/CHANGES.rst)
- [Commits](https://github.com/python-pillow/Pillow/compare/12.1.1...12.2.0)

---
updated-dependencies:
- dependency-name: pillow
  dependency-version: 12.2.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-04-13 23:41:28 +00:00
junv 179702ac6d Fix nginx logs ingestion! 2026-04-01 19:26:47 +11:00
junv c26c620f78 Add redis caching 2026-03-29 10:23:46 +11:00
dependabot[bot]andGitHub f58d15e0da Bump markdown from 3.7 to 3.8.1 
Bumps [markdown](https://github.com/Python-Markdown/markdown) from 3.7 to 3.8.1.
- [Release notes](https://github.com/Python-Markdown/markdown/releases)
- [Changelog](https://github.com/Python-Markdown/markdown/blob/master/docs/changelog.md)
- [Commits](https://github.com/Python-Markdown/markdown/compare/3.7...3.8.1)

---
updated-dependencies:
- dependency-name: markdown
  dependency-version: 3.8.1
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-03-21 10:02:08 +00:00
junv 2ff7ab85ed Add tests 2026-03-21 21:00:38 +11:00
junv 551fdf5cbb Add network scan 2026-03-21 16:41:14 +11:00
dependabot[bot]andGitHub 22144862d2 Bump pillow from 11.2.1 to 12.1.1 
Bumps [pillow](https://github.com/python-pillow/Pillow) from 11.2.1 to 12.1.1.
- [Release notes](https://github.com/python-pillow/Pillow/releases)
- [Changelog](https://github.com/python-pillow/Pillow/blob/main/CHANGES.rst)
- [Commits](https://github.com/python-pillow/Pillow/compare/11.2.1...12.1.1)

---
updated-dependencies:
- dependency-name: pillow
  dependency-version: 12.1.1
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-02-13 07:51:17 +00:00
OpenClaw Sub-agent 7a36a73edf feat: add qdrant-client dependency 2026-02-13 18:50:06 +11:00
junv f81d8a1260 Update django 2025-12-06 08:21:27 +11:00
junv d8b763592f Update search function 2025-11-05 21:18:26 +11:00
junv 6ff54f0439 Switch to use playwright to capture screenshots 2025-11-04 21:22:37 +11:00
junv 41a8726fd3 Update worker to be apscheduler 2025-11-04 20:15:43 +11:00
junv 8cb8f9330f Update Django 2025-10-11 10:25:00 +11:00
dependabot[bot]andGitHub 2621f8af48 Bump django from 5.0.14 to 5.1.10 
Bumps [django](https://github.com/django/django) from 5.0.14 to 5.1.10.
- [Commits](https://github.com/django/django/compare/5.0.14...5.1.10)

---
updated-dependencies:
- dependency-name: django
  dependency-version: 5.1.10
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-09-02 15:10:53 +00:00
dependabot[bot]andGitHub 7857928da3 Bump requests from 2.32.3 to 2.32.4 
Bumps [requests](https://github.com/psf/requests) from 2.32.3 to 2.32.4.
- [Release notes](https://github.com/psf/requests/releases)
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md)
- [Commits](https://github.com/psf/requests/compare/v2.32.3...v2.32.4)

---
updated-dependencies:
- dependency-name: requests
  dependency-version: 2.32.4
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-06-10 09:59:12 +00:00
junvandGitHub 7c4b8e8b9f Merge pull request #29 from wahyd4/image-show-mini-apps 
And random image API
 2025-05-29 05:47:43 -07:00
junv 39f2fb1e9d And random image API 2025-05-29 22:47:23 +10:00
junvandGitHub 52439a556d Merge pull request #25 from wahyd4/dependabot/pip/gunicorn-23.0.0 
Bump gunicorn from 22.0.0 to 23.0.0
 2025-04-13 21:43:41 +10:00
dependabot[bot]andGitHub 82a23cb410 Bump django from 5.0.11 to 5.0.14 
Bumps [django](https://github.com/django/django) from 5.0.11 to 5.0.14.
- [Commits](https://github.com/django/django/compare/5.0.11...5.0.14)

---
updated-dependencies:
- dependency-name: django
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-04-02 20:21:19 +00:00
dependabot[bot]andGitHub 7a5caed6c7 Bump gunicorn from 22.0.0 to 23.0.0 
Bumps [gunicorn](https://github.com/benoitc/gunicorn) from 22.0.0 to 23.0.0.
- [Release notes](https://github.com/benoitc/gunicorn/releases)
- [Commits](https://github.com/benoitc/gunicorn/compare/22.0.0...23.0.0)

---
updated-dependencies:
- dependency-name: gunicorn
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-03-22 03:31:00 +00:00
dependabot[bot]andGitHub 5ec03dbdfb Bump django from 5.0.10 to 5.0.11 
Bumps [django](https://github.com/django/django) from 5.0.10 to 5.0.11.
- [Commits](https://github.com/django/django/compare/5.0.10...5.0.11)

---
updated-dependencies:
- dependency-name: django
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-02-21 06:25:02 +00:00
junv feddd53d3b Fix security issues 2025-01-03 16:11:05 +11:00
junv f8abdfee75 first version images 2024-11-17 11:11:08 +11:00
junv 4cbdf35cfc Add uv 2024-11-04 17:26:58 +11:00