Tomas DvorakandDevin 479eeb021b fix(deps): patch fixable Go vulns, build on go 1.26 ...

- golang-jwt/v5 5.0.0->5.2.2 (CVE-2025-30204), x/crypto, x/net,
  x/text, otel -> latest; go.mod now requires go 1.26
- builder golang:1.24-alpine -> 1.26-alpine, clearing the stdlib
  HIGH batch (crypto/tls, net/http, x509, net/mail DoS)
- npm-side findings (tar, brace-expansion, pacote, sigstore, ...)
  are npm-CLI internals inside the node base image, inert at
  runtime - no overrides; fixed by base image updates

Authored By: TDvorak <[email protected]>

Generated with [Devin](https://devin.ai)

Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>

2026-09-21 14:36:28 +02:00

..

auth

fix(auth): bump better-auth to 1.6.33, node to 22

2026-09-21 14:15:21 +02:00

cmd

Consolidate backend: drop vendored APwhy, converge on goose + sqlc

2026-09-17 09:40:08 +02:00

docs/api

small fix, don't worry about it

2026-04-10 12:02:36 +02:00

internal

fix: un-ignore internal/build package

2026-09-17 20:32:22 +02:00

migrations_goose

feat: persist scaling policies to Postgres

2026-09-17 18:44:06 +02:00

sqlc

feat(notifications): persistent notification center

2026-09-17 17:52:37 +02:00

.dockerignore

small fix, don't worry about it

2026-04-10 12:02:36 +02:00

docker-compose.yml

small fix, don't worry about it

2026-04-10 12:02:36 +02:00

Dockerfile

fix(deps): patch fixable Go vulns, build on go 1.26

2026-09-21 14:36:28 +02:00

go.mod

fix(deps): patch fixable Go vulns, build on go 1.26

2026-09-21 14:36:28 +02:00

go.sum

fix(deps): patch fixable Go vulns, build on go 1.26

2026-09-21 14:36:28 +02:00

railway.toml

small fix, don't worry about it

2026-04-10 12:02:36 +02:00

README_BACKEND.md

Consolidate backend: drop vendored APwhy, converge on goose + sqlc

2026-09-17 09:40:08 +02:00

server

small fix, don't worry about it

2026-04-10 12:02:36 +02:00

sqlc.yaml

small fix, don't worry about it

2026-04-10 12:02:36 +02:00