release: bcrypt cost factor 10→12, Grype CVE ignores, Dockerfile cache-bust (UAT+Security PASS)

Merge pull request #225 from cartsnitch/dev
2026-04-19 00:24:10 +00:00 · 2026-04-19 00:04:07 +00:00 · 2026-04-19 00:03:32 +00:00 · 2026-04-19 00:02:28 +00:00 · 2026-04-15 21:51:46 +00:00 · 2026-04-15 21:50:09 +00:00
2 changed files with 3 additions and 1 deletions
@@ -569,6 +569,7 @@ jobs:
          git config user.name "cartsnitch-ci[bot]"
          git config user.email "cartsnitch-ci[bot]@users.noreply.github.com"
          git add apps/overlays/dev/kustomization.yaml
+          git diff --cached --quiet && echo "No image changes to deploy" && exit 0
          git commit -m "ci(dev): update cartsnitch, auth, receiptwitness, and api images"
          git pull --rebase origin main
          git push origin main
@@ -667,6 +668,7 @@ jobs:
          git config user.name "cartsnitch-ci[bot]"
          git config user.email "cartsnitch-ci[bot]@users.noreply.github.com"
          git add apps/overlays/uat/kustomization.yaml
+          git diff --cached --quiet && echo "No image changes to deploy" && exit 0
          git commit -m "ci(uat): update cartsnitch, auth, receiptwitness, and api images"
          git pull --rebase origin main
          git push origin main
@@ -37,7 +37,7 @@ export const auth = betterAuth({
    maxPasswordLength: 128,
    password: {
      hash: async (password: string) => {
-        return bcrypt.hash(password, 10);
+        return bcrypt.hash(password, 12);
      },
      verify: async (data: { hash: string; password: string }) => {
        return bcrypt.compare(data.password, data.hash);
Author	SHA1	Message	Date
cartsnitch-ceo[bot]	a66583b883	release: bcrypt cost factor 10→12, Grype CVE ignores, Dockerfile cache-bust (UAT+Security PASS) release: bcrypt cost factor 10→12, Grype CVE ignores, Dockerfile cache-bust (UAT+Security PASS)	2026-04-19 00:24:10 +00:00
cartsnitch-cto[bot]	4a7d5131fc	Merge pull request #225 from cartsnitch/dev Promote dev to UAT: bcrypt cost factor fix	2026-04-19 00:04:07 +00:00
cartsnitch-cto[bot]	56b1ff9a36	Merge pull request #220 from cartsnitch/fix/car-656-deploy-commit-guard fix(deploy): guard commit step against no-op changes (CAR-674)	2026-04-19 00:03:32 +00:00
cartsnitch-cto[bot]	b660336897	Merge pull request #215 from cartsnitch/fix/car-663-bcrypt-cost-factor fix: increase bcrypt cost factor from 10 to 12	2026-04-19 00:02:28 +00:00
Barcode Betty	82978f072b	fix(deploy): guard commit step against no-op changes Guard the infra commit step in deploy-dev and deploy-uat jobs with `git diff --cached --quiet` to prevent CI failure when kustomization has no actual image tag changes. Refs: CAR-674 Co-Authored-By: Paperclip <noreply@paperclip.ing>	2026-04-15 21:51:46 +00:00
Barcode Betty	9ba745b5a9	fix: increase bcrypt cost factor from 10 to 12 Co-Authored-By: Paperclip <noreply@paperclip.ing>	2026-04-15 21:50:09 +00:00
Barcode Betty	c13e640864	fix: add Grype CVE ignores and cache-bust Debian apt-get upgrade layers Co-Authored-By: Paperclip <noreply@paperclip.ing>	2026-04-15 21:50:09 +00:00