Merge branch 'main' into 446-vcio-v3-advisories

Signed-off-by: tdruez <tdruez@aboutcode.org>

Author: tdruez

.devcontainer/demo/devcontainer.json

@@ -0,0 +1,27 @@
+{
+  "name": "DejaCode Demo (Codespaces only)",
+  "dockerComposeFile": "../../compose.demo.yml",
+  "service": "web",
+  "workspaceFolder": "/workspaces/${localWorkspaceFolderBasename}",
+  "overrideCommand": false,
+  "forwardPorts": [8000],
+  "portsAttributes": {
+    "8000": {
+      "label": "DejaCode",
+      "onAutoForward": "notify"
+    }
+  },
+  "customizations": {
+    "codespaces": {
+      "openFiles": []
+    },
+    "vscode": {
+      "settings": {
+        "chat.disableAIFeatures": true,
+        "workbench.startupEditor": "none",
+        "workbench.tips.enabled": false,
+        "git.openRepositoryInParentFolders": "never"
+      }
+    }
+  }
+}

.env.demo

@@ -0,0 +1,24 @@
+POSTGRES_DB=dejacode_demo_db
+POSTGRES_USER=dejacode
+POSTGRES_PASSWORD=dejacode
+POSTGRES_INITDB_ARGS="--encoding=UTF-8 --lc-collate=en_US.UTF-8 --lc-ctype=en_US.UTF-8"
+
+DATABASE_HOST=db
+DATABASE_NAME=dejacode_demo_db
+DATABASE_USER=dejacode
+DATABASE_PASSWORD=dejacode
+
+SECRET_KEY=insecure-demo-key
+DEJACODE_DEBUG=True
+ALLOWED_HOSTS=*
+CSRF_TRUSTED_ORIGINS="https://*.app.github.dev,http://localhost:8000"
+X_FRAME_OPTIONS=SAMEORIGIN
+SECURE_CROSS_ORIGIN_OPENER_POLICY=None
+
+DEJACODE_ASYNC=False
+CLAMD_ENABLED=False
+
+DJANGO_SUPERUSER_USERNAME=demo
+DJANGO_SUPERUSER_EMAIL=demo@example.com
+DJANGO_SUPERUSER_PASSWORD=demo
+LOGIN_FORM_ALERT='<div class="alert alert-success">Username: demo<br>Password: demo</div>'

.github/workflows/check-code-and-docs-validation.yml

@@ -0,0 +1,34 @@
+name: Run unit tests
+
+on:
+  workflow_dispatch:
+  pull_request:
+  push:
+    branches:
+      - main
+
+jobs:
+  check-code-and-docs-validation:
+    runs-on: ubuntu-24.04
+    permissions:
+      contents: read
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
+        with:
+          persist-credentials: false  # do not keep the token around
+
+      - name: Set up Python
+        uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405  # v6.2.0
+        with:
+          python-version: "3.14"
+
+      - name: Install uv from vendored wheel
+        run: pip install --no-index --find-links=./thirdparty/dist uv
+
+      - name: Validate code format
+        run: make check
+
+      - name: Build the documentation
+        run: make docs

.github/workflows/run-unit-tests.yml

@@ -16,6 +16,7 @@ include
 .settings
 TAGS
 .idea
+.vscode
 Include
 Lib
 .env

.gitignore

@@ -1,6 +1,23 @@
 Release notes
 =============
 
+### Version 5.8.0
+
+* feat: [five-c] Compliance dashboard export/report by @tdruez in https://github.com/aboutcode-org/dejacode/pull/522
+* feat: [five-c] Compliance extended report set by @tdruez in https://github.com/aboutcode-org/dejacode/pull/523
+* feat: [five-c] User experience (UX) enhancements by @tdruez in https://github.com/aboutcode-org/dejacode/pull/524
+* feat: [five-c] Compliance dashboards improved by @tdruez in https://github.com/aboutcode-org/dejacode/pull/532
+* feat: [five-c] Compliance dashboards extended by @tdruez in https://github.com/aboutcode-org/dejacode/pull/537
+* fix: REQUESTS_TIMEOUT by converting to int by @rogu-beta in https://github.com/aboutcode-org/dejacode/pull/526
+* feat: replace pip install by uv and lock file by @tdruez in https://github.com/aboutcode-org/dejacode/pull/529
+* chore: upgrade multiple dependencies by @tdruez in https://github.com/aboutcode-org/dejacode/pull/530
+* chore: upgrade django-registration to latest version by @tdruez in https://github.com/aboutcode-org/dejacode/pull/531
+* chore: upgrade dependencies by @tdruez in https://github.com/aboutcode-org/dejacode/pull/538
+* chore: remove the dependency on gitpython by @tdruez in https://github.com/aboutcode-org/dejacode/pull/539
+* feat: add create_dependencies option to all import forms by @tdruez in https://github.com/aboutcode-org/dejacode/pull/540
+* chore: update seed data and add instructions by @tdruez in https://github.com/aboutcode-org/dejacode/pull/541
+* feat: add a set_key method on AbstractAPIToken by @tdruez in https://github.com/aboutcode-org/dejacode/pull/521
+
 ### Version 5.7.1
 
 - feat: Product compliance tab