Skip to content

RELab v0.2.0#111

Open
simonvanlierde wants to merge 313 commits intomainfrom
pr-prep
Open

RELab v0.2.0#111
simonvanlierde wants to merge 313 commits intomainfrom
pr-prep

Conversation

@simonvanlierde
Copy link
Copy Markdown
Contributor

@simonvanlierde simonvanlierde commented Mar 25, 2026

Pull Request

Description

This PR consolidates a large batch of work across the monorepo, including backend refactors and feature work, frontend-app and frontend-web improvements, CI and developer-experience updates, documentation updates, and security-related fixes.

Type of Change

  • 🚀 feat: New feature
  • 🐛 fix: Bug fix
  • 🛠️ build: Build system or dependency changes
  • 🔄 ci: CI configuration changes
  • 📚 docs: Documentation only changes
  • 🏎️ perf: Performance improvement
  • ♻️ refactor: Code refactoring (no functional changes)
  • 🎨 style: Code style/formatting changes
  • ✅ test: Adding or updating tests

Checklist

  • I've read the contributing guidelines
  • Code follows style guidelines and passes quality checks (ruff, pyright)
  • Unit tests added/updated and passing locally
  • Documentation updated (if applicable)
  • Database migrations created (if applicable)

Additional Context

High-level areas included in this PR:

  • Backend feature work and refactors
  • Authentication and login-flow hardening
  • Background-data and shared CRUD/router improvements
  • Frontend-app UI overhaul, lint/test cleanup, and structural improvements
  • Frontend-web migration and modernization work
  • CI, GitHub workflows, release-please, and repository maintenance updates
  • Documentation, templates, and local developer workflow improvements

- add email subscription and unsubscription components
- Introduced EmailForm component for handling email subscriptions with validation and feedback messages.
- Created TokenAction component for confirming and unsubscribing from newsletters, displaying appropriate status messages.
- Updated index.astro and unsubscribe-form.astro to utilize new components, simplifying the code and enhancing maintainability.
- Added build:test script to package.json for testing in a test environment.
- Updated global styles and added fonts.css for improved typography and theming.
- Refactored layout and privacy pages for consistency and better structure.
…esh_disposable_email_domains.py to store email validation list locally to avoid unneeded traffic.
the plaintext password never leaves this process.
Fails open (returns 0) if the Have I Been Pwnd API is unreachable.
"""
sha1 = hashlib.sha1(password.encode(), usedforsecurity=False).hexdigest().upper()

Check failure

Code scanning / CodeQL

Use of a broken or weak cryptographic hashing algorithm on sensitive data High

Sensitive data (password)
is used in a hashing algorithm (SHA1) that is insecure for password hashing, since it is not a computationally expensive hash function.
Sensitive data (password)
is used in a hashing algorithm (SHA1) that is insecure for password hashing, since it is not a computationally expensive hash function.
Sensitive data (password)
is used in a hashing algorithm (SHA1) that is insecure for password hashing, since it is not a computationally expensive hash function.
Sensitive data (secret)
is used in a hashing algorithm (SHA1) that is insecure.

Copilot Autofix

AI 3 days ago

Copilot could not generate an autofix suggestion

Copilot could not generate an autofix suggestion for this alert. Try pushing a new commit or if the problem persists contact support.


# Serve pre-computed thumbnail when the request matches a standard width
if width and not height:
thumb = AsyncPath(thumbnail_path_for(Path(image_path), width))

Check failure

Code scanning / CodeQL

Uncontrolled data used in path expression High

This path depends on a
user-provided value
.

Copilot Autofix

AI 3 days ago

Copilot could not generate an autofix suggestion

Copilot could not generate an autofix suggestion for this alert. Try pushing a new commit or if the problem persists contact support.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants