Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
55 commits
Select commit Hold shift + click to select a range
eec07fc
Bump tqdm from 4.67.1 to 4.67.3
dependabot[bot] Feb 9, 2026
fa32d39
Bump actions/upload-artifact from 4 to 6
dependabot[bot] Feb 16, 2026
a5a64d9
Bump actions/setup-python from 5 to 6
dependabot[bot] Feb 16, 2026
3fa6ec7
Bump actions/setup-node from 4 to 6
dependabot[bot] Feb 16, 2026
eef0516
Bump rojopolis/spellcheck-github-actions from 0.51.0 to 0.58.0
dependabot[bot] Feb 16, 2026
10dd770
Bump docker/build-push-action from 5 to 6
dependabot[bot] Feb 16, 2026
9cc7716
Bump lodash in /app in the npm_and_yarn group across 1 directory
dependabot[bot] Feb 16, 2026
5fe172d
Merge pull request #393 from FalkorDB/dependabot/github_actions/actio…
gkorland Feb 17, 2026
8d0e9a7
Merge branch 'staging' into dependabot/github_actions/actions/setup-p…
gkorland Feb 17, 2026
acd6404
Merge pull request #394 from FalkorDB/dependabot/github_actions/actio…
gkorland Feb 17, 2026
10bf718
Merge branch 'staging' into dependabot/github_actions/actions/setup-n…
gkorland Feb 17, 2026
6121d9c
Merge pull request #395 from FalkorDB/dependabot/github_actions/actio…
gkorland Feb 17, 2026
139de84
Merge branch 'staging' into dependabot/github_actions/rojopolis/spell…
gkorland Feb 17, 2026
90cb888
Merge pull request #396 from FalkorDB/dependabot/github_actions/rojop…
gkorland Feb 17, 2026
f9e5757
Merge branch 'staging' into dependabot/github_actions/docker/build-pu…
gkorland Feb 17, 2026
5e22559
Merge pull request #397 from FalkorDB/dependabot/github_actions/docke…
gkorland Feb 17, 2026
2f77b13
Merge branch 'staging' into dependabot/npm_and_yarn/app/npm_and_yarn-…
gkorland Feb 17, 2026
51c7bc9
Initial plan
Claude Feb 17, 2026
4be6a83
test(e2e): increase confirmation wait timeouts from 20s to 30s
Claude Feb 17, 2026
57ae606
Merge branch 'staging' into claude/increase-timeouts-in-chat-tests
gkorland Feb 17, 2026
40ad71b
Merge pull request #407 from FalkorDB/claude/increase-timeouts-in-cha…
gkorland Feb 17, 2026
e0429cd
Merge branch 'staging' into dependabot/pip/staging/tqdm-4.67.3
gkorland Feb 17, 2026
af112f5
Merge branch 'staging' into dependabot/npm_and_yarn/app/npm_and_yarn-…
gkorland Feb 21, 2026
480a225
Merge pull request #387 from FalkorDB/dependabot/pip/staging/tqdm-4.67.3
gkorland Feb 21, 2026
b9e31c2
chore: bump falkordb from 1.2.2 to 1.6.0
gkorland Feb 21, 2026
769e68b
Merge pull request #410 from FalkorDB/bump-falkordb-1.6.0
gkorland Feb 21, 2026
0660bfd
Merge branch 'staging' into dependabot/npm_and_yarn/app/npm_and_yarn-…
gkorland Feb 21, 2026
e535a1c
Merge pull request #398 from FalkorDB/dependabot/npm_and_yarn/app/npm…
gkorland Feb 21, 2026
0f5b4d8
Bump actions/checkout from 4 to 6
dependabot[bot] Feb 22, 2026
8f8bff9
Bump actions/setup-python from 5 to 6
dependabot[bot] Feb 22, 2026
c4feef6
Bump actions/setup-node from 4 to 6
dependabot[bot] Feb 22, 2026
c34d659
Add target branch for GitHub Actions updates
gkorland Feb 22, 2026
79ea6df
Merge branch 'staging' into gkorland-patch-2
gkorland Feb 22, 2026
74d3e45
Merge branch 'staging' into dependabot/github_actions/actions/setup-n…
gkorland Feb 22, 2026
35eb745
Merge branch 'staging' into dependabot/github_actions/actions/setup-p…
gkorland Feb 22, 2026
845b061
Merge branch 'staging' into dependabot/github_actions/actions/checkout-6
gkorland Feb 22, 2026
568234d
Merge pull request #417 from FalkorDB/dependabot/github_actions/actio…
gkorland Feb 22, 2026
6072544
Merge branch 'staging' into dependabot/github_actions/actions/setup-p…
gkorland Feb 22, 2026
7223e31
Merge pull request #416 from FalkorDB/dependabot/github_actions/actio…
gkorland Feb 22, 2026
6b73de5
Merge branch 'staging' into dependabot/github_actions/actions/checkout-6
gkorland Feb 22, 2026
65b9098
Merge pull request #413 from FalkorDB/dependabot/github_actions/actio…
gkorland Feb 22, 2026
d115289
Merge branch 'staging' into gkorland-patch-2
gkorland Feb 22, 2026
23bdae8
Merge pull request #423 from FalkorDB/gkorland-patch-2
gkorland Feb 22, 2026
2f7a2a0
Bump actions/setup-node from 4 to 6
dependabot[bot] Feb 23, 2026
f3174ff
Bump actions/setup-python from 5 to 6
dependabot[bot] Feb 23, 2026
ea5b7c7
Bump fastapi from 0.124.4 to 0.131.0
dependabot[bot] Feb 23, 2026
0e0b2cc
Merge pull request #428 from FalkorDB/main
gkorland Feb 23, 2026
9d2aba3
Merge branch 'staging' into dependabot/github_actions/actions/setup-n…
gkorland Feb 24, 2026
4a7dbf6
Merge branch 'staging' into dependabot/pip/staging/fastapi-0.131.0
gkorland Feb 24, 2026
ba5c158
Merge branch 'staging' into dependabot/github_actions/actions/setup-p…
gkorland Feb 24, 2026
3470757
Merge pull request #426 from FalkorDB/dependabot/github_actions/actio…
gkorland Feb 24, 2026
13c1ce0
Merge branch 'staging' into dependabot/github_actions/actions/setup-n…
gkorland Feb 24, 2026
053a480
Merge pull request #425 from FalkorDB/dependabot/github_actions/actio…
gkorland Feb 24, 2026
cc3772c
Merge branch 'staging' into dependabot/pip/staging/fastapi-0.131.0
gkorland Feb 24, 2026
d5c70a2
Merge pull request #427 from FalkorDB/dependabot/pip/staging/fastapi-…
gkorland Feb 24, 2026
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions .github/dependabot.yml
Original file line number Diff line number Diff line change
Expand Up @@ -7,6 +7,7 @@ version: 2
updates:
- package-ecosystem: "github-actions"
directory: "/"
target-branch: "staging"
schedule:
interval: "weekly"
- package-ecosystem: "pip"
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/dependency-review.yml
Original file line number Diff line number Diff line change
Expand Up @@ -29,7 +29,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: 'Checkout repository'
uses: actions/checkout@v4
uses: actions/checkout@v6
- name: 'Dependency Review'
uses: actions/dependency-review-action@v4
# Commonly enabled options, see https://github.com/actions/dependency-review-action#configuration-options for all available options.
Expand Down
10 changes: 5 additions & 5 deletions .github/workflows/playwright.yml
Original file line number Diff line number Diff line change
Expand Up @@ -23,16 +23,16 @@ jobs:
runs-on: ubuntu-latest

steps:
- uses: actions/checkout@v4
- uses: actions/checkout@v6

# Setup Python
- name: Set up Python
uses: actions/setup-python@v5
uses: actions/setup-python@v6
with:
python-version: ${{ env.PYTHON_VERSION }}

# Setup Node.js
- uses: actions/setup-node@v4
- uses: actions/setup-node@v6
with:
node-version: ${{ env.NODE_VERSION }}

Expand Down Expand Up @@ -148,15 +148,15 @@ jobs:
CI: true

# Upload test results on failure
- uses: actions/upload-artifact@v4
- uses: actions/upload-artifact@v6
if: failure()
with:
name: playwright-report
path: playwright-report/
retention-days: 30

# Upload test screenshots on failure
- uses: actions/upload-artifact@v4
- uses: actions/upload-artifact@v6
if: failure()
with:
name: test-results
Expand Down
4 changes: 2 additions & 2 deletions .github/workflows/publish-docker.yml
Original file line number Diff line number Diff line change
Expand Up @@ -12,7 +12,7 @@
runs-on: ubuntu-latest
steps:
- name: Check out the repo
uses: actions/checkout@v4
uses: actions/checkout@v6

- name: Log in to Docker Hub
uses: docker/login-action@v3
Expand All @@ -27,7 +27,7 @@
images: falkordb/queryweaver

- name: Build and push Docker image
uses: docker/build-push-action@v5
uses: docker/build-push-action@v6

Check warning

Code scanning / CodeQL

Unpinned tag for a non-immutable Action in workflow Medium

Unpinned 3rd party Action 'Publish Docker image' step
Uses Step
uses 'docker/build-push-action' with ref 'v6', not a pinned commit hash
with:
context: .
push: true
Expand Down
4 changes: 2 additions & 2 deletions .github/workflows/pylint.yml
Original file line number Diff line number Diff line change
Expand Up @@ -9,10 +9,10 @@ jobs:
runs-on: ubuntu-latest

steps:
- uses: actions/checkout@v4
- uses: actions/checkout@v6

- name: Set up Python
uses: actions/setup-python@v5
uses: actions/setup-python@v6
with:
python-version: '3.12'

Expand Down
4 changes: 2 additions & 2 deletions .github/workflows/spellcheck.yml
Original file line number Diff line number Diff line change
Expand Up @@ -10,9 +10,9 @@
spellcheck:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- uses: actions/checkout@v6
- name: Spellcheck
uses: rojopolis/spellcheck-github-actions@0.51.0
uses: rojopolis/spellcheck-github-actions@0.58.0

Check warning

Code scanning / CodeQL

Unpinned tag for a non-immutable Action in workflow Medium

Unpinned 3rd party Action 'Spellcheck' step
Uses Step
uses 'rojopolis/spellcheck-github-actions' with ref '0.58.0', not a pinned commit hash
with:
config_path: .github/spellcheck-settings.yml
task_name: Markdown
4 changes: 2 additions & 2 deletions .github/workflows/tests.yml
Original file line number Diff line number Diff line change
Expand Up @@ -29,10 +29,10 @@ jobs:
--health-retries 5

steps:
- uses: actions/checkout@v4
- uses: actions/checkout@v6

- name: Set up Python
uses: actions/setup-python@v5
uses: actions/setup-python@v6
with:
python-version: '3.12'

Expand Down
6 changes: 3 additions & 3 deletions Pipfile
Original file line number Diff line number Diff line change
Expand Up @@ -4,16 +4,16 @@ verify_ssl = true
name = "pypi"

[packages]
fastapi = "~=0.124.0"
fastapi = "~=0.131.0"
uvicorn = "~=0.40.0"
litellm = "~=1.80.9"
falkordb = "~=1.2.2"
falkordb = "~=1.6.0"
psycopg2-binary = "~=2.9.11"
pymysql = "~=1.1.0"
authlib = "~=1.6.4"
itsdangerous = "~=2.2.0"
jsonschema = "~=4.26.0"
tqdm = "~=4.67.1"
tqdm = "~=4.67.3"
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟠 Major

Regenerate and commit Pipfile.lock to reflect the tqdm bump.

The library context indicates that Pipfile.lock still records tqdm at 4.67.0. Since CI runs pipenv sync --dev, it installs from the lock file — the Pipfile constraint change alone has no effect at runtime until pipenv lock is re-run and the updated lock is committed.

tqdm 4.67.3 is a valid release (published Feb 3, 2026) and is marked as the latest stable release, fixing py3.7 dependencies. The version specifier itself is correct; the gap is the missing lock file update.

🔧 Steps to resolve
# Run in the `src/maintainers/` directory
pipenv lock
# Then commit the updated Pipfile.lock
🤖 Prompt for AI Agents
Verify each finding against the current code and only fix it if needed.

In `@Pipfile` at line 16, Pipfile was updated to bump tqdm to ~=4.67.3 but
Pipfile.lock still pins 4.67.0; regenerate the lock and commit it so CI installs
the updated version: run pipenv lock in the same working directory (where
Pipfile/Pipfile.lock live, e.g., src/maintainers/), verify Pipfile.lock now
reflects tqdm 4.67.3, and commit the updated Pipfile.lock alongside the Pipfile
change.

python-multipart = "~=0.0.10"
jinja2 = "~=3.1.4"
graphiti-core = {ref = "staging", git = "git+https://github.com/FalkorDB/graphiti.git"}
Expand Down
2,152 changes: 1,020 additions & 1,132 deletions Pipfile.lock

Large diffs are not rendered by default.

8 changes: 5 additions & 3 deletions app/package-lock.json

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

6 changes: 3 additions & 3 deletions e2e/tests/chat.spec.ts
Original file line number Diff line number Diff line change
Expand Up @@ -238,7 +238,7 @@ test.describe('Chat Feature Tests', () => {
await homePage.sendQuery(`add one user "${randomUsername}" with email "${randomEmail}"`);

// Wait for confirmation message to appear (increased timeout for slow CI)
const confirmationAppeared = await homePage.waitForConfirmationMessage(20000);
const confirmationAppeared = await homePage.waitForConfirmationMessage(30000);
expect(confirmationAppeared).toBeTruthy();

// Verify confirmation message is visible
Expand Down Expand Up @@ -276,14 +276,14 @@ test.describe('Chat Feature Tests', () => {

// First insertion - should succeed
await homePage.sendQuery(`add one user "${randomUsername}" with email "${randomEmail}"`);
const confirmationAppeared1 = await homePage.waitForConfirmationMessage(20000);
const confirmationAppeared1 = await homePage.waitForConfirmationMessage(30000);
expect(confirmationAppeared1).toBeTruthy();
await homePage.clickConfirmButton();
await homePage.waitForProcessingToComplete();

// Second insertion attempt - should fail with duplicate error
await homePage.sendQuery(`add one user "${randomUsername}" with email "${randomEmail}"`);
const confirmationAppeared2 = await homePage.waitForConfirmationMessage(20000);
const confirmationAppeared2 = await homePage.waitForConfirmationMessage(30000);
expect(confirmationAppeared2).toBeTruthy();
await homePage.clickConfirmButton();
await homePage.waitForProcessingToComplete();
Expand Down