Commit Graph
8 Commits
Author SHA1 Message Date
flanandClaude Sonnet 4.6 444932c369 fix: remove API key from plain-text config file, add workflow permissions
- config.py: stop writing API_KEY to .immich_config.json; direct users
  to .env instead. Resolves CodeQL py/clear-text-storage-sensitive-data.
- test.yml, lint.yml: add permissions: contents: read to satisfy
  actions/missing-workflow-permissions scanner.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-06-12 03:51:55 +00:00
flanandClaude Sonnet 4.6 5634dd9e0c ci: add uv/docker/github-actions dependabot + run lint/test on dev
- dependabot.yml: add uv ecosystem (updates pyproject.toml + uv.lock
  together), github-actions ecosystem (keeps action versions current),
  and group all Python deps into one weekly PR
- lint.yml, test.yml: extend triggers to dev branch so ruff and pytest
  run on push/PR to dev, not just main

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-06-12 00:44:44 +00:00
root cdf10452fb automated update: 2026-06-10 22:31:20 2026-06-10 22:31:20 -04:00
root 0dac947519 automated update: 2026-06-10 21:26:35 2026-06-10 21:26:35 -04:00
root f14000be04 automated update: 2026-06-10 21:24:16 2026-06-10 21:24:16 -04:00
root cd5f0f8849 automated update: 2026-06-10 21:20:20 2026-06-10 21:20:20 -04:00
root 5972402d9c automated update: 2026-06-10 21:03:59 2026-06-10 21:03:59 -04:00
root da2c58ae8d automated update: 2026-06-10 20:51:44 2026-06-10 20:51:44 -04:00