deps(py): Bump types-python-dateutil from 2.9.0.20260323 to 2.9.0.20260402 in /backend #508

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged

Blb3D merged 3 commits into main from dependabot/pip/backend/types-python-dateutil-2.9.0.20260402

Apr 7, 2026

+1 −1

Merged

deps(py): Bump types-python-dateutil from 2.9.0.20260323 to 2.9.0.20260402 in /backend #508

deps(py): Bump types-python-dateutil in /backend

GitHub Actions / Review Council failed Apr 6, 2026 in 0s

2 fail, 2 pass in 0s

4 tests 2 ✅ 0s ⏱️
1 suites 0 💤
1 files 2 ❌

Results for commit 65349ad.

Annotations

Check warning on line 42 in src/config.js

github-actions / Review Council

GUARDIAN-001: Hardcoded API Key (GUARDIAN) failed

.code-conclave/reviews/conclave-results.xml

Raw output


            [BLOCKER] Hardcoded API Key
Severity: BLOCKER
File: src/config.js
Line: 42

Description:
API key is hardcoded in source code, exposing credentials in version control.

Check warning on line 87 in src/db/queries.js

github-actions / Review Council

GUARDIAN-002: SQL Injection Risk (GUARDIAN) failed

.code-conclave/reviews/conclave-results.xml

Raw output


            [HIGH] SQL Injection Risk
Severity: HIGH
File: src/db/queries.js
Line: 87

Description:
User input is concatenated directly into SQL query string.

View more details on GitHub Actions