Cory Francis Myers
Cory Francis Myers
After #2680 and before we implement #2595, I'd like to suggest that we treat documenting the app's "read" flows as a first-class task (and a first trial run of freedomofpress/securedrop#7613)....
#2595 will provide a framework for submitting client-side actions back to the Journalist API. *User-initiated actions* need a UX that indicates that they are pending and potentially when they have...
## Description The app could cache (UUIDs of) sources (a) present and/or (b) viewed in a given session and notify the journalist when a sync during the session updates one...
Previously: - #2535 - #2554 Now: > Dependabot doesn't support the 'updating transitive dependencies' feature for pnpm package_manager > > Dependabot attempted to update your dependencies but encountered an unsupported...
## Description If the server's `/index` contains keys for more resources than the client supports, their versions will (correctly) mismatch, but the client will waste a round trip on an...
If we want fully deterministic dependencies—including, for reproducible wheels, fully deterministic *build* dependencies—then we must pin these either: 1. in a fully `pip-compile --allow-unsafe`'d `requirements.txt`, enforced in CI via `PIP_CONSTRAINT=requirements.txt...