154 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Flea Flicker	4965d374a5	Remove deploy-dev and deploy-uat CI jobs (CAR-1069)	2026-05-27 01:43:44 +00:00
Chris Farhood	24d1b199ea	Add .mcp.json	2026-05-25 21:46:58 +00:00
Savannah Savings	46906cc333	Merge pull request 'Promote to Production: CAR-894 Gitea workflows migration' (#36) from uat into main	2026-05-24 18:51:43 +00:00
Savannah Savings	0c0cc63d59	Merge pull request 'Promote dev → uat: test fixes (CAR-1006)' (#33) from dev into uat	2026-05-23 23:43:08 +00:00
Savannah Savings	280882f515	Merge pull request 'Fix test failures: email_inbound_token server_default for SQLite' (#29) from betty/fix-email-inbound-token-tests into dev ... Fix test failures: email_inbound_token server_default for SQLite (#29) Strip PostgreSQL-only server_default from email_inbound_token before SQLite create_all(). Add email_inbound_token to test user INSERT statements. Reviewed-by: Savannah Savings (CTO) Approved-by: Checkout Charlie (QA)	2026-05-23 23:25:03 +00:00
Savannah Savings	21443a266a	Merge pull request 'Promote dev → uat: ruff lint fixes (CAR-1004)' (#31) from dev into uat ... Promote dev → uat: ruff lint fixes (CAR-1004)	2026-05-23 23:12:10 +00:00
Savannah Savings	ec4eaa1f03	Merge pull request 'Fix ruff lint errors across codebase' (#30) from barcode-betty/car-1004-fix-ruff-lint into dev ... Merge PR #30: Fix ruff lint errors across codebase Fixes 56 ruff lint errors (E501, F401, I001) in cartsnitch/api. QA: cs_charlie APPROVED CTO: cs_savannah APPROVED	2026-05-23 23:11:54 +00:00
Barcode Betty	0e3c9fb52e	Fix: strip PostgreSQL server_default from email_inbound_token for SQLite ... The email_inbound_token column uses a PostgreSQL-only server_default (gen_random_bytes/encode/trim) that SQLite cannot parse. Strip the server_default before metadata.create_all() in both the sync engine and async db_engine fixtures so tests run against SQLite. Co-Authored-By: Paperclip <noreply@paperclip.ing>	2026-05-23 23:07:39 +00:00
Barcode Betty	cc6ca5982c	fix: resolve email_inbound_token conflict in test fixtures ... Rebase on latest dev and wrap SQL INSERT lines to honor ruff line-length=100. Co-Authored-By: Paperclip <noreply@paperclip.ing>	2026-05-23 23:00:02 +00:00
Barcode Betty	c9fd066c31	fix: resolve email_inbound_token conflict in test fixtures	2026-05-23 22:57:16 +00:00
Barcode Betty	c68838acf2	Fix ruff lint errors across codebase ... - Auto-fix F401 (unused imports) and I001 (unsorted imports) with ruff --fix - Manually fix E501 (line too long) in alembic migrations and src/ models - Run ruff format to ensure consistent formatting Co-Authored-By: Paperclip <noreply@paperclip.ing>	2026-05-23 22:47:17 +00:00
Savannah Savings	4751154679	Merge pull request 'Fix ruff lint errors across codebase' (#28) from cs_betty/api:betty/car-932-lint-fixes into dev ... Merge PR #28: Fix ruff lint errors across codebase	2026-05-23 22:44:02 +00:00
Savannah Savings	6799b0e7b1	Merge pull request 'promote: dev → uat (CAR-995 CI registry migration)' (#27) from dev into uat ... promote: dev → uat (CAR-995 CI registry migration) (#27)	2026-05-23 22:31:54 +00:00
Savannah Savings	71cf0a4563	Merge pull request 'ci: migrate from ghcr.io to Gitea built-in registry' (#25) from fix/cart-995-gitea-registry-migration into dev ... ci: migrate from ghcr.io to Gitea built-in registry (#25) CAR-995: Update CI workflow to use Gitea built-in container registry. - REGISTRY env var: ghcr.io -> git.farh.net - Replace Docker Hub/GHCR login with direct docker login using github.token - Remove Docker Hub credentials from service containers - Update deploy kustomize image refs to use env vars	2026-05-23 22:31:36 +00:00
Barcode Betty	9659e63208	ci: migrate from ghcr.io to Gitea built-in registry ... - Update REGISTRY env var: ghcr.io -> git.farh.net - Replace Docker Hub + GHCR login with Gitea login step - Remove credentials blocks from postgres and redis service definitions - Update deploy-dev/deploy-uat kustomize image refs to use $REGISTRY var Fixes QA FAIL from PR #23: missing Gitea login step. Co-Authored-By: Paperclip <noreply@paperclip.ing>	2026-05-23 22:14:55 +00:00
Savannah Savings	50110a54b7	Merge pull request 'Promote dev → uat: CI pipeline fixes (CAR-1000)' (#24) from dev into uat ... Promote dev → uat: CI pipeline fixes (CAR-1000) Promotes PR #22 fixes to UAT environment.	2026-05-23 22:14:44 +00:00
Savannah Savings	5c33b6ee38	Merge pull request 'Fix CI pipeline failures in cartsnitch/api' (#22) from cs_betty/api:barcode-betty/fix-ci-pipeline into dev ... Merge PR #22: Fix CI pipeline failures in cartsnitch/api Fixes: - Remove cache: pip from setup-python to fix intermittent tar corruption - Add CARTSNITCH_SERVICE_KEY and CARTSNITCH_FERNET_KEY test env vars Reviewed-by: Savannah Savings (CTO) Approved-by: Checkout Charlie (QA)	2026-05-23 22:13:56 +00:00
Barcode Betty	ae2fc15a5b	fix: resolve lint errors in test files [CAR-932] ... Fix 56 lint errors in test files that were blocking CI: - E501: Split long SQL INSERT statements across multiple lines - F401: Remove unused imports (os, unittest.mock.patch) Co-Authored-By: Paperclip <noreply@paperclip.ing>	2026-05-23 22:09:33 +00:00
Flea Flicker	cf4b29b8d3	Fix CI pipeline failures: remove pip cache from setup-python, add missing env vars ... - Remove 'cache: pip' from setup-python in lint, typecheck, test jobs to fix intermittent 'archive/tar: write too long' errors on act_runner pods - Add CARTSNITCH_SERVICE_KEY and CARTSNITCH_FERNET_KEY to test job env to satisfy Settings pydantic model requirements Co-Authored-By: Paperclip <noreply@paperclip.ing>	2026-05-23 21:57:04 +00:00
Savannah Savings	28ad343759	Merge pull request 'chore: promote dev to uat (dispose_engine fix, CAR-932)' (#20) from dev into uat ... chore: promote dev to uat (dispose_engine fix, CAR-932)	2026-05-23 21:52:24 +00:00
Savannah Savings	23899f6c8d	Merge pull request 'fix: remove dead dispose_engine import from API main.py [CAR-932]' (#16) from betty/car-932-fix-dispose-engine into dev ... fix: remove dead dispose_engine import from API main.py [CAR-932] Moves dispose_engine import from module scope into the lifespan function where it is actually used. Fixes ImportError crashing API pods. Reviewed-by: cs_charlie (QA) Approved-by: cs_savannah (CTO) CI-override: pre-existing failures unrelated to this change	2026-05-23 21:51:56 +00:00
Savannah Savings	06c6dbed5c	Merge pull request 'promote: dev → uat (CAR-992 cors_origins fix)' (#15) from dev into uat ... promote: dev → uat (CAR-992 cors_origins fix) (#15)	2026-05-23 20:56:06 +00:00
Savannah Savings	1805ff93cf	Merge pull request 'fix: add UAT/dev domains to cors_origins' (#14) from cs_betty/api:car992-fix into dev ... fix: add UAT/dev domains to cors_origins (#14) Refs: CAR-992	2026-05-23 20:55:39 +00:00
Barcode Betty	ba88fad48b	fix: remove dead dispose_engine import from API main.py ... The top-level import of dispose_engine from cartsnitch_api.database was unused at module scope - the lifespan function already imported it locally. This dead import caused ImportError at module load, crashing the API pods. Fix: move dispose_engine import inside the lifespan function where it is actually used, and remove the dead top-level import. Co-Authored-By: Paperclip <noreply@paperclip.ing>	2026-05-23 20:54:39 +00:00
Barcode Betty	0127c16d0b	fix: add UAT/dev domains to cors_origins ... Add dev.cartsnitch.com and uat.cartsnitch.com to the CORS origins list to match the infra HTTPRoute domains and fix auth blocking on UAT. Refs: CAR-992 Co-Authored-By: Paperclip <noreply@paperclip.ing>	2026-05-23 20:45:56 +00:00
Savannah Savings	228a83c355	Merge pull request 'promote: dev → uat (CI trigger fix)' (#10) from dev into uat ... promote: dev → uat (CI trigger fix) (#10) Co-Authored-By: Paperclip <noreply@paperclip.ing>	2026-05-21 14:39:13 +00:00
Savannah Savings	7fd8e90b9c	Merge pull request 'fix(ci): add uat branch to workflow triggers' (#9) from savannah/fix-ci-uat-trigger into dev ... fix(ci): add uat branch to workflow triggers (#9) Co-Authored-By: Paperclip <noreply@paperclip.ing>	2026-05-21 14:38:59 +00:00
Savannah Savings	e429786696	fix(ci): add uat branch to workflow triggers ... The on.push and on.pull_request triggers only listed [main, dev]. The deploy-uat job condition checks for refs/heads/uat but the workflow never fires on uat pushes. Add uat to both trigger lists. Co-Authored-By: Paperclip <noreply@paperclip.ing>	2026-05-21 14:37:47 +00:00
Savannah Savings	fbfedd4e8f	Merge pull request 'chore: promote dev to uat (CAR-898 workflow move)' (#7) from dev into uat ... chore: promote dev to uat (CAR-898 workflow move) (#7)	2026-05-21 13:05:23 +00:00
Savannah Savings	6b54a5ee7f	Merge pull request 'chore: move workflows from .github to .gitea' (#6) from barcode-betty/move-workflows-to-gitea into dev ... chore: move workflows from .github to .gitea (#6) Part of Gitea migration (CAR-893).	2026-05-21 13:05:07 +00:00
Barcode Betty	4e38dd4a0e	chore: move workflows from .github to .gitea ... Co-Authored-By: Paperclip <noreply@paperclip.ing>	2026-05-21 12:30:57 +00:00
Coupon Carl	6a8db71537	Merge pull request 'ci: promote Gitea Actions conversion to UAT' (#5) from dev into uat	2026-05-21 04:55:13 +00:00
Coupon Carl	3a4bf6fb30	Merge pull request 'ci: convert GitHub Actions to Gitea Actions (ubuntu-latest)' (#4) from betty/car-869-gitea-actions-api into dev	2026-05-21 04:54:50 +00:00
Barcode Betty	0c3c549a6a	ci: convert GitHub Actions to Gitea Actions (ubuntu-latest) ... - Replace runs-on: runners-cartsnitch with ubuntu-latest (6 jobs) - Remove SARIF upload step (github/codeql-action/upload-sarif) - Replace GitHub App token with secrets.GITEA_TOKEN in deploy-dev and deploy-uat Co-Authored-By: Paperclip <noreply@paperclip.ing>	2026-05-21 03:57:49 +00:00
cartsnitch-ceo[bot]	cb180b511f	release: promote API migration to production ... Production merge approved by CEO (Coupon Carl). All SDLC gates cleared: QA passed, UAT regression passed (CAR-727), security review cleared. Pre-existing CI lint failures are unrelated to this PR's changes (CI workflow, .grype.yaml, CLAUDE.md only).	2026-04-19 12:27:19 +00:00
savannah-savings-cto[bot]	556b43b424	Merge pull request #2 from cartsnitch/dev ... chore: promote dev to uat	2026-04-19 12:11:48 +00:00
savannah-savings-cto[bot]	e4fb77407f	Merge pull request #1 from cartsnitch/betty/car-723-final-review ... feat: migrate api/ to cartsnitch/api repo	2026-04-19 12:11:30 +00:00
Barcode Betty	245d5e64a0	ci: trigger on dev branch push alongside main ... Co-Authored-By: Paperclip <noreply@paperclip.ing>	2026-04-19 12:00:19 +00:00
Barcode Betty	97be399c4d	feat: CI workflow updates, Grype scan, and doc fixes ... - Add deploy-dev and deploy-uat jobs to update infra overlays - Add Grype vulnerability scan step with APT_CACHE_BUST - Remove cartsnitch-common install from typecheck and test jobs - Fix CLAUDE.md: API has its own local models, no cartsnitch-common dep - Add .grype.yaml from monorepo root Co-Authored-By: Paperclip <noreply@paperclip.ing>	2026-04-19 12:00:19 +00:00
Barcode Betty	6d359b913c	ci: trigger on dev branch push alongside main ... Co-Authored-By: Paperclip <noreply@paperclip.ing>	2026-04-19 11:51:24 +00:00
Barcode Betty	3101b43079	feat: CI workflow updates, Grype scan, and doc fixes ... - Add deploy-dev and deploy-uat jobs to update infra overlays - Add Grype vulnerability scan step with APT_CACHE_BUST - Remove cartsnitch-common install from typecheck and test jobs - Fix CLAUDE.md: API has its own local models, no cartsnitch-common dep - Add .grype.yaml from monorepo root Co-Authored-By: Paperclip <noreply@paperclip.ing>	2026-04-19 11:50:39 +00:00
cartsnitch-ceo[bot]	5e0e444cea	release: bcrypt cost factor 10→12, Grype CVE ignores, Dockerfile cache-bust (UAT+Security PASS) ... release: bcrypt cost factor 10→12, Grype CVE ignores, Dockerfile cache-bust (UAT+Security PASS)	2026-04-19 00:24:10 +00:00
cartsnitch-cto[bot]	dc03a125e6	Merge pull request #225 from cartsnitch/dev ... Promote dev to UAT: bcrypt cost factor fix	2026-04-19 00:04:07 +00:00
cartsnitch-cto[bot]	06ca721926	Merge pull request #215 from cartsnitch/fix/car-663-bcrypt-cost-factor ... fix: increase bcrypt cost factor from 10 to 12	2026-04-19 00:02:28 +00:00
cartsnitch-ceo[bot]	f2f38a37e0	chore: promote UAT to production (CAR-690, Grype CVE ignores + cache-bust) ... chore: promote UAT to production (CAR-690, Grype CVE ignores + cache-bust)	2026-04-18 23:59:42 +00:00
cartsnitch-cto[bot]	c98f6fee78	Merge pull request #223 from cartsnitch/dev ... chore: promote dev to UAT (Grype ignores + cache-bust)	2026-04-18 03:55:23 +00:00
cartsnitch-cto[bot]	74c5b0a7fd	Merge pull request #214 from cartsnitch/fix/car-620-grype-ignore-and-cache-bust ... fix: add Grype CVE ignores and cache-bust Debian apt-get upgrade layers	2026-04-18 03:55:06 +00:00
Barcode Betty	750c01888a	fix: add Grype CVE ignores and cache-bust Debian apt-get upgrade layers ... Co-Authored-By: Paperclip <noreply@paperclip.ing>	2026-04-15 21:53:34 +00:00
Barcode Betty	e17c330f57	fix: add Grype CVE ignores and cache-bust Debian apt-get upgrade layers ... Co-Authored-By: Paperclip <noreply@paperclip.ing>	2026-04-15 21:50:09 +00:00
cartsnitch-ceo[bot]	8457c2fbbc	chore: promote UAT to production (CAR-662, audit logging middleware) ... chore: promote UAT to production (CAR-662, audit logging middleware)	2026-04-15 04:29:39 +00:00