Commit History
-
docs: add CR doc for dockerfile-samgis-base Python-path fix
alessandro trinca tornidorUnverified signatureDocument the DHI -dev vs hardened image incompatibility (different Python install paths) that broke the builder/runtime venv-copy pattern, and the fix, for reuse if similar Dockerfiles hit the same class of bug.c7c981b
-
chore(security): add static/.npmrc ignore-scripts=true; drop stale pnpm build-script allowlist (snyk/esbuild not in tree)
alessandro trinca tornidorUnverified signature10491ab -
fix(security): add esbuild ^0.28.1 pnpm override (GHSA-g7r4-m6w7-qqqr) — esbuild absent from rolldown vite build, override guards any future pull
alessandro trinca tornidorUnverified signature978a275 -
fix(deps): update frontend dev deps within ranges (vite 8.0.16 resolves CVE), scope ajv override to fix eslint, version 1.12.16
alessandro trinca tornidorUnverified signature85f610b -
fix(security): bump starlette 1.1.0 → 1.3.1 (GHSA-82w8-qh3p-5jfq, GHSA-jp82-jpqv-5vv3), replace httpx→httpx2, version 1.12.15
alessandro trinca tornidorUnverified signaturefe4a8e1 -
chore(docker,docs): bump Dockerfile base to gis-prediction:1.12.14, update changelog
alessandro trinca tornidorUnverified signature1b0473c
-
fix(deps): patch frontend CVEs via pnpm.overrides (js-cookie, brace-expansion, qs), version 1.12.13
alessandro trinca tornidorUnverified signature- js-cookie >=3.0.7 (GHSA-qjx8-664m-686j, HIGH — cookie-attr injection, @vue/test-utils path) - brace-expansion >=5.0.6 (GHSA-jxxr-4gwj-5jf2, MODERATE — DoS, @stryker-mutator/core path) - qs >=6.15.2 (GHSA-q8mj-m7cp-5q26, MODERATE — stringify crash, @stryker-mutator/core path)19bd1ed
-
fix(deps,security): bump samgis 1.12.9→1.12.11, update full dep stack
alessandro trinca tornidorUnverified signaturepyproject.toml: version 1.12.9→1.12.11, samgis-web==1.3.5→==1.3.7. Dockerfile: base image tag 1.12.9→1.12.11. uv.lock + requirements.txt: samgis-web 1.3.5→1.3.7, samgis-core 4.1.8→4.1.11, sam2-onnx 0.3.7→0.3.9, pyright 1.1.408→1.1.409, drop bson. app.py: explanatory comment for 0.0.0.0 binding (bandit B104). client_health.py: explanatory comment for localhost urlopen (bandit B310).bf28c58
-
fix(deps): drop pip-audit, bump mistune 3.2.1, cap pyright <2.0.0
alessandro trinca tornidorUnverified signatureRemoves pip 26.0.1 (CVE-2026-3219, moderate) and 17 transitive packages by replacing pip-audit with built-in (manual use only, no CI). Bumps mistune 3.2.0→3.2.1 (CVE-2026-33079, ReDoS, docs group only). Caps pyright <2.0.0 for consistency with other dependency groups.f070d2e
-
fix(deps): bump pillow 12.1.1 → 12.2.0, release 1.12.9
alessandro trinca tornidorUnverified signature- regenerate requirements.txt from uv.lock (Dependabot alert: pillow 12.1.1 was stale in the exported file; uv.lock already pinned 12.2.0) - bump project version 1.12.8 → 1.12.9 - update Dockerfile FROM to gis-prediction:1.12.9 (requires rebuild and push of the base image before the app image can build)72004b9
-
chore: bump version to 1.12.8, update frontend deps
alessandro trinca tornidorUnverified signature6adb3f9
-
chore: bump version to 1.12.7, pnpm 10.32.1 → 10.33.0
alessandro trinca tornidor- update base Docker image tag to 1.12.7 - update docs/Changelog.md for 1.12.6 and 1.12.7972e7e4 -
chore: bump version to 1.12.6
alessandro trinca tornidorbf1dc92 -
docs: add sam2_onnx API docs, update OpenAPI spec, remove dead links
alessandro trinca tornidor- Add sam2_onnx package RST stubs to Sphinx sidebar - Mock torch/sam2 in conf.py for export_onnx autodoc - Update OpenAPI spec: version 1.12.5, add /health endpoint, fix server port - Remove dead links (segment-anything.com, self-hosted demo, LISA on CUDA) - Replace Segment Anything ref with SAM2 GitHub - Add QGIS plugin refs (plugins.qgis.org + project page)792c2bc -
docs: update Sphinx RST stubs, replace sam-quantized refs with SAM2 ONNX
alessandro trinca tornidor- Regenerate samgis_core RST to match current package (new geo, prediction_api modules) - Remove ghost modules (sam_onnx2, sam_onnx_inference, utilities.constants) - Update README.md and AGENTS.md to reference scripts/download_models.py - Clean obsolete sam-quantized exclude patterns from docs/conf.pybccd49e
-
docs: update changelog and README for 1.12.5 Docker build fixes
alessandro trinca tornidor97cc631 -
docs: document e2e smoke test commands and changelog for 1.12.4
alessandro trinca tornidor9a6d07b -
chore: bump version to 1.12.4
alessandro trinca tornidorac894fc
-
feat: migrate from Poetry to uv as package manager
alessandro trinca tornidorConvert pyproject.toml to PEP 621 + PEP 735 dependency-groups. Docker builder no longer installs Poetry — uses pip install --require-hashes from uv-exported requirements.txt. Dockerfile smoke tests converted to exec-form RUN for distroless compatibility.d53e2be
-
docs: update Changelog.md
alessandro trinca tornidoread7db7 -
ref: remove all the references and usages of the gradio dependency
alessandro trinca tornidorf78ae56
-
docs: avoid exception on doc generation using mock imports
alessandro trinca tornidor1645811
-
doc: update changelog, openapi specs, conf and content documentation
alessandro trinca tornidor0831531
-
doc: update changelog
alessandro trinca tornidorcb7d001
-
doc: fix changelog markdown
alessandro trinca tornidor9c69906 -
doc: update changelog
alessandro trinca tornidord0b5fb6 -
refactor: sam-quantized submodule now referrenced without symlinks, update dockerfile
alessandro trinca tornidor606a7d7
-
ci: fix the tailwindcss build command within the docker image, bump to 1.11.6 version
alessandro trinca tornidor45f1577 -
pin sphinx < 8.2.0 to avoid a build fail caused by sphinx-autodoc-typehints, see docs
alessandro trinca tornidor43a515e
-
chore: update backend dependencies
b105b62
-
doc: update CHANGELOG.md, README.md, frontend and backend dependencies
0139375
-
doc: update CHANGELOG, README.md because of optional gradio poetry group
affac18
-
doc: update README.md because of removed fastapi poetry dependency group, remove old section about docker AWS lambda
83d9059
-
doc: update changelog
dfccb88
-
chore: bump to version 1.6.9, update Changelog.md, update Dockerfile
9b2d8dc
-
doc: update Changelog.md, add docs about get_dependencies_freeze() from samgis-core
8c22623
-
doc: update pacakges docs
11306d2 -
chore: update samgis-core, samgis-web; improve imports and create_requirements.sh
fe4d399
-
chore: bump to version 1.6.6
764d22a
-
doc: update sphinx docs
bb1d071
-
doc: update changelog
35c62bd
-
[doc] update Changelog.md
036244b
-
[chore] bump to version 1.5.2, update changelog
61ac2f7
-
[doc] added section about local build on macos in README.md, updated docs, updated changelog
f9e0370
-
[doc] update changelog
170d2b6
-
[doc] bump to version 1.4.2
eef2867
-
[ci] use python docker image 3.11, bump to version 1.4.1
a5a70f7 -
[ci] add support for python 3.11, update some vulnerable dependencies
dbd223c
-
[doc] update changelog
3fabe66
-
[doc] update docs, bump to version 1.3.0
e657337