Staging #372

overcut-ai · 2026-01-08T18:28:02Z

[IMPORTANCE]: major – The new github-actions entry omits a target-branch, so Dependabot will open workflow updates directly against main while the existing pip/npm configs are gated through staging. Please add target-branch: "staging" under this entry so all automation follows the same staging-first flow and avoids bypassing your promotion process.

-Original file line number
+Diff line change
@@ Expand Up / @@ -5,6 +5,10 @@ @@
     version: 2
     updates:
+      - package-ecosystem: "github-actions"
+        directory: "/"
+        schedule:
+          interval: "weekly"
       - package-ecosystem: "pip"
         directory: "/"
         target-branch: "staging"
@@ Expand Down @@

-Original file line number
+Diff line change
@@ Expand Up / @@ -12,7 +12,7 @@ psycopg2-binary = "~=2.9.11" @@
     pymysql = "~=1.1.0"
     authlib = "~=1.6.4"
     itsdangerous = "~=2.2.0"
-    jsonschema = "~=4.25.0"
+    jsonschema = "~=4.26.0"
     tqdm = "~=4.67.1"
     python-multipart = "~=0.0.10"
     jinja2 = "~=3.1.4"
@@ Expand Down @@

-Original file line number
+Diff line change
@@ Expand Up / @@ -43,6 +43,14 @@ async def dispatch(self, request: Request, call_next): @@
                     return JSONResponse(status_code=403, content={"detail": "Forbidden"})
             response = await call_next(request)
+            # Add HSTS header to prevent man-in-the-middle attacks
+            # max-age=31536000: 1 year in seconds
+            # includeSubDomains: apply to all subdomains
+            # preload: eligible for browser HSTS preload lists
+            hsts_value = "max-age=31536000; includeSubDomains; preload"
+            response.headers["Strict-Transport-Security"] = hsts_value
             return response
@@ Expand Down @@

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Staging #372

Uh oh!

Diff view

Diff view

There are no files selected for viewing

overcut-ai bot Jan 8, 2026

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Staging #372

Are you sure you want to change the base?

Uh oh!

Staging #372

Uh oh!

Uh oh!

Diff view

Diff view

There are no files selected for viewing

overcut-ai bot Jan 8, 2026

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

Uh oh!