Security + install: cryptography 49, dependabot hardening, first-run message#1212

Merged

jaylfc merged 8 commits into

Jun 20, 2026

Commits on Jun 20, 2026

chore(deps): bump astral-sh/setup-uv from 6 to 7
dependabot[bot]
authored
Merge pull request #991 from jaylfc/dependabot/github_actions/dev/astral-sh/setup-uv-7
jaylfc
authored
ci(dependabot): ignore fastapi >=0.137 + npm major bumps
jaylfc
committed
fix(deps): bump cryptography 48->49 + pydantic-settings to clear advisories
jaylfc
committed
Merge pull request #1211 from jaylfc/fix/sec-crypto-bump
jaylfc
authored
install: tell users to create their admin account on first run (no default password)
jaylfc
committed
docs(status): beta.4.1 shipped + dependabot security pass (14->3 advisories)
jaylfc
committed
Merge remote-tracking branch 'origin/master' into dev
jaylfc
committed