Pouzor 1811afa749 fix: upgrade fastapi to 0.135.1, fix starlette CVEs, update auth test assertions ...

- fastapi 0.115.0 → 0.135.1 pulls starlette 0.52.1 (fixes CVE-2024-47874, CVE-2025-54121)
- pip-audit: ignore CVE-2024-23342 (ecdsa Minerva attack, no fix exists; app uses HS256 only)
- Update auth guard tests: FastAPI 0.135 returns 401 (not 403) when Bearer token is missing

2026-03-07 15:18:28 +01:00

..

quality.yml

feat: Phase 1 scaffold — frontend canvas + backend skeleton

2026-03-06 23:14:34 +01:00

security.yml

fix: upgrade fastapi to 0.135.1, fix starlette CVEs, update auth test assertions

2026-03-07 15:18:28 +01:00