From 2b890bd08fe61ae57900f4470ab8070f5eec4d1f Mon Sep 17 00:00:00 2001 From: Adonis Jimenez <233446156+mr-adonis-jimenez@users.noreply.github.com> Date: Sun, 29 Mar 2026 08:54:51 +0000 Subject: [PATCH 1/6] fix(#26): sync requirements.txt with pyproject.toml dependencies --- requirements.txt | 14 ++++++++++++-- 1 file changed, 12 insertions(+), 2 deletions(-) diff --git a/requirements.txt b/requirements.txt index 9fe2b97..0848b70 100644 --- a/requirements.txt +++ b/requirements.txt @@ -1,6 +1,16 @@ +# Core fastapi -uvicorn +uvicorn[standard] pandas -pytest +numpy python-multipart + +# Dev / testing +pytest +pytest-cov +pytest-asyncio httpx +black +flake8 +isort +pylint From 7b68ba97f44a87f134c9f3ac03866f2218e4440e Mon Sep 17 00:00:00 2001 From: Adonis Jimenez <233446156+mr-adonis-jimenez@users.noreply.github.com> Date: Sun, 29 Mar 2026 08:55:21 +0000 Subject: [PATCH 2/6] =?UTF-8?q?fix(#26):=20remove=20placeholder=20npm=20ba?= =?UTF-8?q?dge,=20fix=20CI=20badge=20URL,=20master=E2=86=92main?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- README.md | 13 +++++-------- 1 file changed, 5 insertions(+), 8 deletions(-) diff --git a/README.md b/README.md index a5939c2..e391fbc 100644 --- a/README.md +++ b/README.md @@ -1,17 +1,16 @@ ## Release Pipeline -- ✔ OIDC-based npm publishing (no secrets) +- ✔ OIDC-based publishing (no secrets) - ✔ Verified supply-chain provenance - ✔ Automated quality gates (lint, test, audit) - ✔ Reusable CI workflows ## Contributing / Branch protection -Direct pushes to `master` should be avoided. See `CONTRIBUTING.md` to enable the repo’s `pre-push` hook that blocks direct pushes to `master` locally. +Direct pushes to `main` should be avoided. See `CONTRIBUTING.md` to enable the repo's `pre-push` hook that blocks direct pushes to `main` locally. - ## Release & Security Architecture +## Release & Security Architecture -- Monorepo publishing with npm workspaces - OIDC-based trusted publishing (no secrets) - Canary & RC release channels - SBOM generation (CycloneDX) @@ -20,9 +19,8 @@ Direct pushes to `master` should be avoided. See `CONTRIBUTING.md` to enable the This pipeline enforces supply-chain integrity and production-grade quality gates. - -![npm](https://img.shields.io/npm/v/your-package) -![CI](https://github.com/you/repo/actions/workflows/npm-publish.yml/badge.svg) +![CI](https://github.com/mr-adonis-jimenez/geo-analytics-api/actions/workflows/ci-cd.yml/badge.svg) +![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg) # 🌎 Geo-Analytics API/Dashboard @@ -113,4 +111,3 @@ curl -s -X POST "http://localhost:8000/api/datasets/json?name=my-dataset" \ curl -s -X POST "http://localhost:8000/api/datasets/csv?name=my-csv" \ -F "file=@regional_data.csv" | jq ``` - From a7ecde80546eba2b0038603bea51779558a36374 Mon Sep 17 00:00:00 2001 From: Adonis Jimenez <233446156+mr-adonis-jimenez@users.noreply.github.com> Date: Sun, 29 Mar 2026 08:55:33 +0000 Subject: [PATCH 3/6] fix(#26): add CODEOWNERS to .github/ (moved from root CODEOWNERS.md) --- .github/CODEOWNERS | 18 ++++++++++++++++++ 1 file changed, 18 insertions(+) create mode 100644 .github/CODEOWNERS diff --git a/.github/CODEOWNERS b/.github/CODEOWNERS new file mode 100644 index 0000000..96c1b15 --- /dev/null +++ b/.github/CODEOWNERS @@ -0,0 +1,18 @@ +# Global owners +* @mr-adonis-jimenez + +# Frontend code +/frontend/** @mr-adonis-jimenez + +# Backend API +/api/** @mr-adonis-jimenez + +# Infrastructure +/terraform/** @mr-adonis-jimenez +/.github/** @mr-adonis-jimenez + +# Documentation +/docs/** @mr-adonis-jimenez + +# Critical security files +/auth/** @mr-adonis-jimenez From 8f9941b66017a724b65dfbc15b5e8f45f0a0c3eb Mon Sep 17 00:00:00 2001 From: Adonis Jimenez <233446156+mr-adonis-jimenez@users.noreply.github.com> Date: Sun, 29 Mar 2026 08:55:34 +0000 Subject: [PATCH 4/6] fix(#26): remove CODEOWNERS.md from root (replaced by .github/CODEOWNERS) --- CODEOWNERS.md | 18 ------------------ 1 file changed, 18 deletions(-) delete mode 100644 CODEOWNERS.md diff --git a/CODEOWNERS.md b/CODEOWNERS.md deleted file mode 100644 index c0794af..0000000 --- a/CODEOWNERS.md +++ /dev/null @@ -1,18 +0,0 @@ -# Global owners -* @team-leads - -# Frontend code -/frontend/** @frontend-team - -# Backend API -/api/** @backend-team @security-team - -# Infrastructure -/terraform/** @devops-team -/.github/** @devops-team - -# Documentation -/docs/** @tech-writers - -# Critical security files -/auth/** @security-team @team-leads From 55230513817f031f7856e22e9023c71b88cedecc Mon Sep 17 00:00:00 2001 From: Adonis Jimenez <233446156+mr-adonis-jimenez@users.noreply.github.com> Date: Sun, 29 Mar 2026 08:55:46 +0000 Subject: [PATCH 5/6] =?UTF-8?q?fix(#26):=20update=20CONTRIBUTING.md=20mast?= =?UTF-8?q?er=E2=86=92main=20branch=20references?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- CONTRIBUTING.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md index 547b950..d560452 100644 --- a/CONTRIBUTING.md +++ b/CONTRIBUTING.md @@ -2,9 +2,9 @@ ### Enable repository git hooks (recommended) -This repo includes a `pre-push` hook to prevent direct pushes to the protected `master` branch. +This repo includes a `pre-push` hook to prevent direct pushes to the protected `main` branch. -1. Configure git to use the repo’s hook directory: +1. Configure git to use the repo's hook directory: `git config core.hooksPath scripts/git-hooks` @@ -12,7 +12,7 @@ This repo includes a `pre-push` hook to prevent direct pushes to the protected ` `chmod +x scripts/git-hooks/pre-push` -After that, any attempt to `git push` updates directly to `master` will be blocked locally. +After that, any attempt to `git push` updates directly to `main` will be blocked locally. ## Code Style ## Testing From 931a70e58ee2313bb01801d65509e1a7850b5b2c Mon Sep 17 00:00:00 2001 From: Adonis Jimenez <233446156+mr-adonis-jimenez@users.noreply.github.com> Date: Sun, 29 Mar 2026 08:55:47 +0000 Subject: [PATCH 6/6] fix(#26): remove duplicate GitHub/dependabot.yml (stale npm config, .github/dependabot.yml is canonical) --- GitHub/dependabot.yml | 13 ------------- 1 file changed, 13 deletions(-) delete mode 100644 GitHub/dependabot.yml diff --git a/GitHub/dependabot.yml b/GitHub/dependabot.yml deleted file mode 100644 index ae2b117..0000000 --- a/GitHub/dependabot.yml +++ /dev/null @@ -1,13 +0,0 @@ -version: 2 - -updates: - - package-ecosystem: "npm" - directory: "/" - schedule: - interval: "weekly" - open-pull-requests-limit: 5 - - - package-ecosystem: "github-actions" - directory: "/" - schedule: - interval: "weekly"