Merge branch 'main' into feature/karpathy-lab-init

Author: Neiland85

.github/workflows/ci-cd-fixed.yml

@@ -37,8 +37,8 @@ jobs:
     runs-on: ubuntu-latest
     if: github.event.inputs.skip_tests != 'true'
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-python@v5
+      - uses: actions/checkout@v6
+      - uses: actions/setup-python@v6
         with:
           python-version: '3.11'
       - run: pip install -r requirements.txt
@@ -49,8 +49,8 @@ jobs:
     runs-on: ubuntu-latest
     if: github.event.inputs.skip_tests != 'true'
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-python@v5
+      - uses: actions/checkout@v6
+      - uses: actions/setup-python@v6
         with:
           python-version: '3.11'
       - run: pip install bandit safety -r requirements.txt
@@ -63,13 +63,13 @@ jobs:
     runs-on: ubuntu-latest
     if: github.event.inputs.force_deploy == 'true'
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-python@v5
+      - uses: actions/checkout@v6
+      - uses: actions/setup-python@v6
         with:
           python-version: '3.11'
 
       - name: Configure AWS (OIDC)
-        uses: aws-actions/configure-aws-credentials@v4
+        uses: aws-actions/configure-aws-credentials@v5
         with:
           role-to-assume: ${{ env.AWS_ROLE_ARN }}
           aws-region: ${{ env.AWS_REGION }}

.github/workflows/ci-cd.yml

@@ -42,9 +42,9 @@ jobs:
     env:
       CI: "true"
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
-      - uses: actions/setup-python@v5
+      - uses: actions/setup-python@v6
         with:
           python-version: "3.11"
 
@@ -56,17 +56,17 @@ jobs:
         run: |
           pytest --cov=app --cov-report=xml --cov-report=html
 
-      - uses: codecov/codecov-action@v4
+      - uses: codecov/codecov-action@v5
         if: always()
         with:
           files: ./coverage.xml
 
   security:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
-      - uses: actions/setup-python@v5
+      - uses: actions/setup-python@v6
         with:
           python-version: "3.11"
 
@@ -104,9 +104,9 @@ jobs:
     runs-on: ubuntu-latest
     if: github.event_name == 'workflow_dispatch' && github.event.inputs.deploy_to_aws == 'true'
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
-      - uses: aws-actions/configure-aws-credentials@v4
+      - uses: aws-actions/configure-aws-credentials@v5
         with:
           role-to-assume: ${{ env.AWS_ROLE_ARN }}
           aws-region: ${{ env.AWS_REGION }}

.github/workflows/codeql.yml

@@ -29,6 +29,7 @@ jobs:
     steps:
     - name: Checkout repository
       uses: actions/checkout@v4
+      uses: actions/checkout@v6
 
     - name: Initialize CodeQL
       uses: github/codeql-action/init@v4

.github/workflows/docker-security.yml

@@ -18,7 +18,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Run Trivy vulnerability scanner (fs)
         uses: aquasecurity/[email protected]
@@ -29,6 +29,6 @@ jobs:
           severity: "CRITICAL,HIGH"
 
       - name: Upload SARIF results to GitHub Security
-        uses: github/codeql-action/upload-sarif@v3
+        uses: github/codeql-action/upload-sarif@v4
         with:
           sarif_file: trivy-results.sarif

Dockerfile

@@ -1,5 +1,5 @@
 # NeuroBank FastAPI Toolkit - Production Dockerfile optimized for Railway
-FROM python:3.11-slim
+FROM python:3.14-slim
 
 # Establecer el directorio de trabajo
 WORKDIR /app

api/requirements.txt

@@ -1,5 +1,26 @@
 fastapi==0.116.1
 starlette==0.37.2
+starlette==0.47.2
 uvicorn[standard]==0.38.0
 uvloop==0.21.0
 pydantic==2.7.0
+pydantic-settings==2.2.1
+
+python-dotenv==1.0.1
+python-multipart==0.0.20
+
+loguru==0.7.3
+python-json-logger==2.0.7
+
+jinja2==3.1.6
+requests==2.32.4
+httpx==0.27.0
+
+pytest==8.2.0
+pytest-asyncio==0.23.6
+pytest-cov==5.0.0
+
+watchtower==3.0.0
+aws-xray-sdk==2.13.0
+mangum==0.17.0
+

requirements-dev.txt

@@ -8,7 +8,7 @@ pytest-cov==5.0.0
 pytest-mock==3.14.0
 pytest-xdist==3.6.0  # Para tests paralelos
 pytest-timeout==2.3.1  # Timeout para tests
-pytest-env==1.1.3  # Variables de entorno para tests
+pytest-env==1.2.0  # Variables de entorno para tests
 
 # HTTP Testing
 httpx==0.27.0
@@ -20,7 +20,7 @@ safety==3.2.3
 semgrep==1.75.0  # Additional security scanner
 
 # Code Quality
-black==24.4.2  # Code formatter
+black==25.12.0  # Code formatter
 isort==5.13.2  # Import sorter
 flake8==7.0.0  # Linter
 mypy==1.10.0  # Type checker

requirements-for-safety.txt

@@ -18,21 +18,21 @@ dparse==0.6.4
 email_validator==2.2.0
 fastapi==0.115.6
 fastapi-cli==0.0.8
-filelock==3.16.1
+filelock==3.20.0
 h11==0.16.0
 httpcore==1.0.9
 httptools==0.6.4
 httpx==0.27.0
 idna==3.10
-iniconfig==2.1.0
+iniconfig==2.3.0
 Jinja2==3.1.6
 jmespath==1.0.1
 joblib==1.5.1
 jsonpatch==1.33
 jsonpointer==3.0.0
 jsonschema==4.25.0
 jsonschema-specifications==2025.4.1
-loguru==0.7.2
+loguru==0.7.3
 mangum==0.19.0
 markdown-it-py==3.0.0
 MarkupSafe==3.0.2
@@ -45,23 +45,23 @@ orjson==3.11.0
 packaging==25.0
 pbr==6.1.1
 pluggy==1.6.0
-psutil==6.1.1
+psutil==7.1.3
 pycparser==2.22
 pydantic==2.7.0
-pydantic_core==2.18.1
+pydantic_core==2.41.5
 Pygments==2.19.2
 pytest==8.2.0
 pytest-asyncio==1.1.0
 python-dateutil==2.9.0.post0
 python-dotenv==1.0.1
-python-multipart==0.0.18
+python-multipart==0.0.20
 PyYAML==6.0.2
 referencing==0.36.2
 regex==2024.11.6
 requests==2.32.4
 rich==14.0.0
 rich-toolkit==0.14.8
-rpds-py==0.26.0
+rpds-py==0.30.0
 ruamel.yaml==0.18.14
 ruamel.yaml.clib==0.2.12
 s3transfer==0.13.1

requirements.txt

@@ -1,5 +1,26 @@
 fastapi==0.116.1
 starlette==0.37.2
+starlette==0.47.2
 uvicorn[standard]==0.38.0
 uvloop==0.21.0
 pydantic==2.7.0
+pydantic-settings==2.2.1
+
+python-dotenv==1.0.1
+python-multipart==0.0.20
+
+loguru==0.7.3
+python-json-logger==2.0.7
+
+jinja2==3.1.6
+requests==2.32.4
+httpx==0.27.0
+
+pytest==8.2.0
+pytest-asyncio==0.23.6
+pytest-cov==5.0.0
+
+watchtower==3.0.0
+aws-xray-sdk==2.13.0
+mangum==0.17.0
+