Fix/vulnerabilities

pyproject.toml

@@ -16,6 +16,8 @@ dependencies = [
     "pydantic-settings~=2.14.0",
     "jinja2~=3.1.0",
     "python-dotenv~=1.2.0",
+    "starlette>=1.3.1",
+    "idna>=3.15",
 ]
 
 [dependency-groups]
@@ -29,7 +31,7 @@ dev = [
     "python-frontmatter>=1.3.0",
 ]
 test = [
-    "pytest~=8.3.0",
+    "pytest>=8.4.0,<9",
     "pytest-asyncio~=1.2.0",
     "pytest-cov~=7.1.0",
     "httpx~=0.28.0",

src/app/main.py

@@ -1,7 +1,9 @@
 import logging
 from contextlib import asynccontextmanager
+from pathlib import Path
 from typing import AsyncIterator
 
+
 from fastapi import FastAPI, Request
 from fastapi.responses import JSONResponse, Response
 from fastapi.staticfiles import StaticFiles
@@ -33,8 +35,9 @@ async def lifespan(app: FastAPI) -> AsyncIterator[None]:
     redoc_url=None,
 )
 
-app.mount("/static", StaticFiles(directory="src/app/ui"), name="static")
-templates = Jinja2Templates(directory="src/app/ui")
+_UI_DIR = Path(__file__).resolve().parent / "ui"
+app.mount("/static", StaticFiles(directory=_UI_DIR), name="static")
+templates = Jinja2Templates(directory=_UI_DIR)
 
 
 # --Health--