Juan Denis 9604e1ea66 Add Bandit + Safety security scanning to CI and fix vulnerable deps ...

- Add .github/workflows/security-scan.yml with Bandit SAST and Safety
  dependency scanning (requires SAFETY_API_KEY secret)
- Add backend/.bandit config to skip expected noise (B404, B603, B607)
- Update vulnerable dependencies:
  gunicorn 21.2.0 → 22.0.0 (CVE-2024-1135 HTTP smuggling)
  gevent 23.9.1 → 25.4.2 (HTTP smuggling + race condition)
  python-socketio 5.10.0 → 5.14.0 (CVE-2025-61765 deserialization)
  cryptography 42.0.0 → 44.0.3 (multiple CVEs)
  requests 2.31.0 → 2.32.5 (vulnerability fixes)
  Flask-Cors 4.0.0 → 5.0.1, Flask-SocketIO 5.3.6 → 5.4.1
  python-engineio 4.8.1 → 4.11.2
- Pin previously unpinned deps: schedule, passlib, bcrypt

2026-02-11 23:06:14 -05:00

..

agent-release.yml

Add system tray app and IPC server to agent

2026-01-25 13:03:23 -05:00

security-scan.yml

Add Bandit + Safety security scanning to CI and fix vulnerable deps

2026-02-11 23:06:14 -05:00

test-system-utils.yml

Update CI images and package install steps

2026-02-10 16:36:11 -05:00

version-bump.yml

Update version to 1.2.44 and revise docs/CI config

2026-01-21 19:47:41 -05:00