Commit Graph

667 Commits

Author SHA1 Message Date
Christoph Reiter
e6e5bc74ad security: list all the packages missing vuln metadata
It's a bit of a wall of text right now, but we need to show them
somewhere so we can fix them.
2024-12-14 10:53:14 +01:00
Christoph Reiter
73aa5d60bf outofdate: fix total package number in case a repo filter is active
only count packages for the active filter
2024-12-14 10:48:46 +01:00
Christoph Reiter
d42899e01f security: show git version as well, like everywhere else 2024-12-06 18:09:44 +01:00
Christoph Reiter
1db24694a1 Update deps
one small typing fix uncovered by newer mypy
2024-12-06 18:00:01 +01:00
Christoph Reiter
0859f77eef Update deps
hopefully fixes trusted_hosts
2024-10-12 15:58:23 +02:00
Christoph Reiter
5cade52753 Update deps 2024-10-07 07:43:35 +02:00
Christoph Reiter
73bc537d8d Update deps 2024-09-21 11:08:02 +02:00
Christoph Reiter
b6190a960b package -> packages
for consistency
2024-09-15 17:07:03 +02:00
Christoph Reiter
3c7444c0a3 Get rid of the repo query param for single packages
We keep package names unique, and if for some reason they wouldn't be
we show both packages on that page then.

Let's not add a query param to every URL for such an edge case.
2024-09-15 17:06:51 +02:00
Christoph Reiter
106f1e42ec More 404 reponses when things couldn't be found 2024-09-15 16:35:03 +02:00
Christoph Reiter
b6ecb4abae Use the correct template for when no package with the name is found
The virtual package template doesn't cover that case
2024-09-15 16:16:38 +02:00
Christoph Reiter
aee5de581e Fix TemplateResponse deprecation warning
the request should be passed as the first arg now
2024-09-15 16:13:40 +02:00
Christoph Reiter
1958c2cf98 port to new fastapi lifespan api 2024-09-15 16:10:09 +02:00
Christoph Reiter
8c0c9b65e7 Fix pydantic deprecation warning 2024-09-15 16:01:17 +02:00
Christoph Reiter
1178edde11 Sort repos by priority and not by name
Use the order of the repos in the config as the order for everything else.
selection inputs, package groupes etc
2024-09-15 15:42:14 +02:00
Christoph Reiter
2b03c69a8f add flake8 config to reuse config 2024-09-12 14:13:03 +02:00
Christoph Reiter
1844af449a Update deps; drop setup.cfg 2024-09-12 13:52:07 +02:00
Christoph Reiter
a2d66ef817 package: fix missing version info for all provides/conflicts/replaces 2024-08-28 08:24:33 +02:00
Christoph Reiter
5f4c810561 Update deps 2024-08-28 08:14:53 +02:00
Christoph Reiter
020360de4f Update deps 2024-08-16 08:32:07 +02:00
Christoph Reiter
0ec93350fe preload the fonts 2024-08-09 23:41:41 +02:00
Christoph Reiter
1ff07f8252 Update frontend deps; drop woff support
nearly everything supports woff2 now
2024-08-09 12:02:19 +02:00
Christoph Reiter
e4b1d3bc21 Update deps 2024-08-09 11:47:59 +02:00
Christoph Reiter
023e901977 Update deps 2024-08-02 09:43:19 +02:00
Christoph Reiter
4fd8eb8cc3 Change the styling a bot for the sub-list headings
So it looks different to the main list headings in mobile view.
Not ideal.. but maybe better?
2024-07-23 17:41:28 +02:00
Christoph Reiter
c81a8e797e npm: update deps; rollup: use esm mode 2024-07-23 09:40:33 +02:00
Christoph Reiter
a9fa23b06f Update deps 2024-07-23 09:35:11 +02:00
Christoph Reiter
461f08c905 package removals: show more context
add links, and show the dependency type
2024-07-23 09:33:11 +02:00
Christoph Reiter
fd3925efa0 Only show an outdated banner if the git version is too old
And not the version in the repo.
If the new version is in git, there is usually nothing to do, except
waiting for it to reach the repo.
2024-07-23 00:14:27 +02:00
Christoph Reiter
da40892968 Only show the git version in case it is different
In the common case it is the same, so avoid showing it twice
2024-07-22 23:50:28 +02:00
Christoph Reiter
1436216386 base: remove repo list
Now that the repos are listed via the sections of the binary packages,
there is no point it listing them again at the top.
2024-07-22 23:14:42 +02:00
Christoph Reiter
93ea5de77e Update deps 2024-07-20 17:15:54 +02:00
Christoph Reiter
cd4a9ac00c more compact 2024-07-20 17:13:38 +02:00
Christoph Reiter
97e57e0098 Move the source-only tarball to the binary package file section
While it's in theory a base package property, it's rarely used/usefull,
so put it to the other file stuff for now.
2024-07-20 17:07:15 +02:00
Christoph Reiter
433371ad98 Move external links into a sub list
To separate it visually from the rest
2024-07-20 17:05:37 +02:00
Christoph Reiter
0daf0070de Add a link to the "source-only tarball" 2024-07-20 16:46:25 +02:00
Christoph Reiter
1b3cc5d6a6 docker: install media-types to fix content-type for fonts
starlette guesses the mimetype, but without media-types it doesn't
know anything about fonts
2024-07-17 18:46:15 +02:00
Christoph Reiter
39e285c20d docker: update to bookworm 2024-07-17 18:46:03 +02:00
Christoph Reiter
62e455be6a Update npm deps 2024-07-17 09:23:13 +02:00
Christoph Reiter
2ec83d9239 Move to new uvicorn_worker package
The gunicorn worker included in uvicorn is deprecated
2024-07-17 09:20:37 +02:00
Christoph Reiter
9b7cc624fb add reuse to reuse 2024-07-12 11:45:41 +02:00
Christoph Reiter
ccc77e396a Update Python deps
port to new reuse format
2024-07-12 11:29:13 +02:00
Christoph Reiter
8b69672ee7 Fix error in case all vulns of a package have been ignored
We guarded in various places by whether vulns exist and then used
worst_vulnerability to select a color, but in case all are ignored
worst_vulnerability is None and things fail.

Introduce all_vulnerabilities/active_vulnerabilities/worst_active_vulnerability
properties and make sure that worst_active_vulnerability is always guarded
properly.
2024-06-30 16:01:53 +02:00
Christoph Reiter
99a86f1ca4 run: add CLI option to skip external sources
makes testing faster in some cases
2024-06-30 15:55:53 +02:00
Christoph Reiter
f0d1065951 base: group binary packages by repo
since it's not obvious which package name prefix belongs
to which repo/env
2024-06-30 15:31:15 +02:00
Christoph Reiter
4102481fc1 Update deps 2024-06-30 15:02:48 +02:00
Christoph Reiter
60d6cb0856 Update frontend deps 2024-06-07 17:54:16 +02:00
Christoph Reiter
c25ba67a76 Update deps 2024-06-07 17:48:17 +02:00
Christoph Reiter
44a4f46ec6 anitya: don't link if explicitely disabled
If the PKGBUILD contains an empty anitya entry don't try to guess
the project based on the package name, just skip it.
2024-05-25 18:22:19 +02:00
Christoph Reiter
c1a941bd9b Use the new Arch geo mirror by default
Less likely to be offline
2024-05-25 18:20:02 +02:00