Update report

Signed-off-by: Jack Luar <jluar@precisioninno.com>

Author: luarss

CHANGELOG.md

@@ -0,0 +1,240 @@
+# 2026-06
+
+- ab50525c Song Luar 2026-06-13 fix(deps): upgrade torch to 2.12.0 to resolve CVE-2025-2999 (#300)
+- 5a8e8428 Song Luar 2026-06-13 build(deps): bump pypdf to 6.12.0 and tornado to 6.5.7 (#299)
+- 0355a980 Song Luar 2026-06-06 fix(ci): replace deprecated huggingface-cli with hf (#295)
+- adec4dc2 Song Luar 2026-06-06 fix(ci): restore HF dataset download in docker-eval job (#294)
+- ecd95942 Song Luar 2026-06-06 Add workflow_dispatch to CI secret workflow (#293)
+- 369af135 Song Luar 2026-06-06 uv tool install
+- a197ec61 Song Luar 2026-06-06 ci: parallelise secret CI, cache HF dataset, speed up docker build (#291)
+- 052d03a6 Song Luar 2026-06-06 CI fixes (#290)
+- b55cc8e0 Song Luar 2026-06-06 fix: batch FAISS embedding to avoid 429 rate limit exhaustion (#289)
+- 8a1258a0 Song Luar 2026-06-05 ci: parallelise jobs, remove HF download, commit source_list fixture (#288)
+- c67bb358 Song Luar 2026-06-05 fix: retry Google embedding calls on 429 RESOURCE_EXHAUSTED (#287)
+- 091e800c Song Luar 2026-06-04 fix: patch Python CVEs in backend, frontend, and evaluation (#286)
+- ac09c57f Song Luar 2026-06-04 fix: patch transitive dep CVEs in nextjs-frontend via yarn resolutions (#285)
+
+# 2026-05
+
+- f012e20a Song Luar 2026-05-30 chore(deps): add uv.lock for mock-flask-api and lock targets to all Makefiles (#282)
+- 9ede7b67 Vitor Bandeira 2026-05-28 gha: use commit sha instead of version/tag (#280)
+- 9294d7dd dependabot[bot] 2026-05-26 Build(deps): Bump the uv group across 3 directories with 1 update (#279)
+- 0e0b417b Song Luar 2026-05-18 fix(ci): Remove unused return values from response handling (#277)
+- 052e97a7 Song Luar 2026-05-17 fix(eval): bump Gemini model from gemini-2.5-pro to gemini-3.1-pro-preview (#276)
+- 52020981 Song Luar 2026-05-15 fix(deps): resolve all 14 open Dependabot security alerts (#275)
+- 664f8c3a dependabot[bot] 2026-05-15 Build(deps-dev): Bump postcss from 8.5.3 to 8.5.10 in /frontend/nextjs-frontend in the npm_and_yarn group across 1 directory (#273)
+- 5199fdee dependabot[bot] 2026-05-15 Build(deps): Bump the uv group across 3 directories with 8 updates (#274)
+- 75aa8c26 dependabot[bot] 2026-05-15 Build(deps): Bump next from 16.2.3 to 16.2.6 in /frontend/nextjs-frontend in the npm_and_yarn group across 1 directory (#272)
+- 2614d9ef dependabot[bot] 2026-05-15 Build(deps): Bump the uv group across 3 directories with 3 updates (#271)
+
+# 2026-04
+
+- d5b47821 Song Luar 2026-04-15 bump reqs (#268)
+- 974bbbdc dependabot[bot] 2026-04-14 Build(deps): Bump the uv group across 2 directories with 4 updates (#267)
+- 7dceff00 dependabot[bot] 2026-04-13 Build(deps): Bump next from 16.1.7 to 16.2.3 in /frontend/nextjs-frontend in the npm_and_yarn group across 1 directory (#265)
+- 1ee57da1 dependabot[bot] 2026-04-13 Build(deps): Bump the uv group across 2 directories with 1 update (#264)
+- 2b1a5d12 dependabot[bot] 2026-04-02 Build(deps): Bump the uv group across 2 directories with 1 update (#263)
+- 8fa37407 Song Luar 2026-04-01 bump pygments (#262)
+- 9e03c9f5 dependabot[bot] 2026-04-01 Build(deps): Bump fastmcp from 2.14.2 to 3.2.0 in /backend in the uv group across 1 directory (#261)
+
+# 2026-03
+
+- ed5dcd06 dependabot[bot] 2026-03-29 Build(deps): Bump the uv group across 2 directories with 1 update (#257)
+- cad4dd75 dependabot[bot] 2026-03-28 Build(deps): Bump the uv group across 2 directories with 1 update (#256)
+- adfdd73c dependabot[bot] 2026-03-26 Build(deps): Bump the uv group across 3 directories with 1 update (#254)
+- 4b2a21ca dependabot[bot] 2026-03-26 Build(deps): Bump picomatch from 2.3.1 to 2.3.2 in /frontend/nextjs-frontend in the npm_and_yarn group across 1 directory (#255)
+- 60145568 dependabot[bot] 2026-03-26 Build(deps): Bump the uv group across 1 directory with 2 updates (#253)
+- b9b90f26 dependabot[bot] 2026-03-21 Build(deps): Bump flatted from 3.3.2 to 3.4.2 in /frontend/nextjs-frontend in the npm_and_yarn group across 1 directory (#252)
+- 502b7ff1 dependabot[bot] 2026-03-19 Build(deps): Bump pypdf from 6.8.0 to 6.9.1 in /backend in the uv group across 1 directory (#251)
+- 5c7f3b5c Song Luar 2026-03-18 Remove package-lock.json (#247)
+- ba0d1500 dependabot[bot] 2026-03-18 Build(deps): Bump next from 16.1.5 to 16.1.7 in /frontend/nextjs-frontend in the npm_and_yarn group across 1 directory (#246)
+- 93a15719 dependabot[bot] 2026-03-18 Build(deps): Bump the uv group across 3 directories with 1 update (#245)
+- 661f880b dependabot[bot] 2026-03-17 Build(deps): Bump authlib from 1.6.7 to 1.6.9 in /backend in the uv group across 1 directory (#244)
+- 9631bb0b dependabot[bot] 2026-03-17 Build(deps): Bump fastmcp from 2.14.0 to 2.14.2 in /backend in the uv group across 1 directory (#242)
+- 2c12d32c Song Luar 2026-03-16 Bump pyjwt (#241)
+- c5f45e38 dependabot[bot] 2026-03-13 Build(deps): Bump the uv group across 2 directories with 1 update (#240)
+- 63cb15a6 Song Luar 2026-03-13 Bump langchain/langgraph deps (#239)
+- b315569f dependabot[bot] 2026-03-12 Build(deps): Bump the uv group across 3 directories with 2 updates (#238)
+- f8fad48b dependabot[bot] 2026-03-09 Build(deps): Bump the uv group across 1 directory with 2 updates (#235)
+- 3be736bd dependabot[bot] 2026-03-02 Build(deps): Bump pypdf from 6.7.3 to 6.7.4 in /backend in the uv group across 1 directory (#231)
+- 12821803 dependabot[bot] 2026-03-02 Build(deps): Bump the uv group across 1 directory with 2 updates (#225)
+- f7973e04 dependabot[bot] 2026-03-02 Build(deps-dev): Bump minimatch from 3.1.2 to 3.1.5 in /frontend/nextjs-frontend in the npm_and_yarn group across 1 directory (#227)
+
+# 2026-02
+
+- decfd264 Song Luar 2026-02-22 Bump `google-cloud` packages  (#223)
+- 42dbebf1 dependabot[bot] 2026-02-22 Build(deps): Bump the uv group across 2 directories with 4 updates (#222)
+- 39429868 dependabot[bot] 2026-02-22 Build(deps): Bump pypdf from 6.6.2 to 6.7.1 in /backend in the uv group across 1 directory (#221)
+- a467de2e Song Luar 2026-02-17 CI bugfix (#220)
+- f690cbf7 Song Luar 2026-02-17 Use gemini for deepeval (#218)
+- d1578cfd dependabot[bot] 2026-02-16 Build(deps): Bump the uv group across 2 directories with 1 update (#217)
+- b2ab495e Song Luar 2026-02-16 Fix CI - embeddings (#216)
+- c5baa3fb Song Luar 2026-02-14 Fix dependabot alerts (#214)
+- 83f63686 dependabot[bot] 2026-02-14 Build(deps): Bump the uv group across 1 directory with 2 updates (#212)
+- d4c2303a Avyakt Jain 2026-02-02 Persist FAISS index using Docker volume (#205)
+
+# 2026-01
+
+- 47743b61 dependabot[bot] 2026-01-30 Build(deps): Bump next from 15.5.10 to 16.1.5 in /frontend/nextjs-frontend in the npm_and_yarn group across 1 directory (#211)
+- b7e6d8f8 Song Luar 2026-01-28 Bump versions (#210)
+- 68cda2ab dependabot[bot] 2026-01-28 Build(deps): Bump the uv group across 3 directories with 14 updates (#207)
+- 9f50da5b dependabot[bot] 2026-01-28 Build(deps): Bump next from 15.4.10 to 15.5.10 in /frontend/nextjs-frontend in the npm_and_yarn group across 1 directory (#209)
+- bfcbfa3a dependabot[bot] 2026-01-28 Build(deps): Bump werkzeug from 3.1.1 to 3.1.5 in /backend (#208)
+- 2304bbde dependabot[bot] 2026-01-28 Build(deps): Bump pypdf from 6.6.0 to 6.6.2 in /backend in the uv group across 1 directory (#206)
+- 45ecfadf dependabot[bot] 2026-01-12 Build(deps): Bump pypdf from 6.4.0 to 6.6.0 in /backend in the pip group across 1 directory (#203)
+
+# 2025-12
+
+- ab4b09d9 dependabot[bot] 2025-12-29 Build(deps): Bump next from 15.4.9 to 15.4.10 in /frontend/nextjs-frontend in the npm_and_yarn group across 1 directory (#201)
+- 03576dca dependabot[bot] 2025-12-12 Build(deps): Bump next from 15.4.8 to 15.4.9 in /frontend/nextjs-frontend in the npm_and_yarn group across 1 directory (#200)
+- cf384028 Palaniappan R 2025-12-04 Chatbot TUI and DB enhancements (#197)
+- aefbcd27 dependabot[bot] 2025-12-04 Build(deps): Bump next from 15.4.7 to 15.4.8 in /frontend/nextjs-frontend in the npm_and_yarn group across 1 directory (#199)
+- 01cee9e7 kevinwguan 2025-12-02 Tool call accuracy and Optimizer (#195)
+- 7f390b1a ProCodec 2025-12-02 Add mock Flask backend with validation and fix frontend message IDs (#194)
+- 73bc3ab8 dependabot[bot] 2025-12-02 Build(deps): Bump mdast-util-to-hast from 13.2.0 to 13.2.1 in /frontend/nextjs-frontend in the npm_and_yarn group across 1 directory (#198)
+
+# 2025-11
+
+- 524ea5cf dependabot[bot] 2025-11-28 Build(deps): Bump pypdf from 6.0.0 to 6.4.0 in /backend in the pip group across 1 directory (#196)
+- 270a8829 Song Luar 2025-11-16 Bump react-syntax-highlighter (#193)
+- 7bb07c88 dependabot[bot] 2025-11-16 Build(deps-dev): Bump js-yaml from 4.1.0 to 4.1.1 in /frontend/nextjs-frontend in the npm_and_yarn group across 1 directory (#192)
+- 50716154 ProCodec 2025-11-16 feat: connect new backend conversation with frontend (#182)
+- d7f38270 Song Luar 2025-11-15 Use correct endpoint for evals (#189)
+- abf1b8aa Song Luar 2025-11-15 Fix chat route, add more logging on CI failure (#188)
+- 0b6e35b0 dependabot[bot] 2025-11-15 Build(deps): Bump js-yaml from 4.1.0 to 4.1.1 in /frontend/nextjs-frontend in the npm_and_yarn group across 1 directory (#187)
+- cb4d1bdd Palaniappan R 2025-11-15 PostgreSQL database integration for conversation persistence (#181)
+
+# 2025-10
+
+- 0b2032b4 dependabot[bot] 2025-10-23 Build(deps): Bump pypdf from 6.0.0 to 6.1.3 in /backend in the pip group across 1 directory (#180)
+- 2cc4d3ce Song Luar 2025-10-20 Seed secret CI with .env.test (#179)
+- 769c7715 kevinwguan 2025-10-20 [Feature] Dynamic Makefile with RAG tools (#174)
+- 3524fefc Song Luar 2025-10-18 Migrate `evaluation` to uv backend (#178)
+- f5dd23bb Song Luar 2025-10-18 bump deepeval (#177)
+- cf17738d Song Luar 2025-10-18 Update Google Gemini model versions (#176)
+- 185dedae RayChang987 2025-10-18 add support for Gemini 2.5 Flash model and update README (#175)
+
+# 2025-09
+
+- f4eddbde Song Luar 2025-09-11 Fix secret CI with uv (#173)
+- be3b0503 Palaniappan R 2025-09-10 Update install instructions to use uv sync instead of pip (#169)
+- 6046e2ac Song Luar 2025-09-11 fix default retriever routing behavior (#172)
+- 66cbfd04 kevinwguan 2025-09-07 [Feature] MCP Client/Server (#146)
+- e839e9be dependabot[bot] 2025-09-04 Build(deps): Bump next from 15.3.5 to 15.4.7 in /frontend/nextjs-frontend in the npm_and_yarn group across 1 directory (#170)
+
+# 2025-08
+
+- 6b82596f dependabot[bot] 2025-08-16 Build(deps): Bump pypdf from 5.6.0 to 6.0.0 in /backend in the pip group across 1 directory (#168)
+
+# 2025-07
+
+- 8cb1ec01 Song Luar 2025-07-11 Backend: Add unit tests (#163)
+- 1dafd4fd Song Luar 2025-07-08 Restore docker-compose healthcheck (#162)
+- e4d2abd1 Song Luar 2025-07-07 Dependabot fixes (#161)
+- 68f7b1cc Kannav Sethi 2025-07-06 Backend Proxy For Suggested Question (#123)
+- 3c3a721e Song Luar 2025-07-06 Changelog workflow: add signing key (#158)
+- 051f3b84 Song Luar 2025-07-06 Add CLAUDE.md (#156)
+
+# 2025-06
+
+- af5eb305 Palaniappan R 2025-06-20 Fix support for models that do support inbuilt function calling. (#151)
+- 2eb108d3 Song Luar 2025-06-14 Remove overlapped dependencies from backend and frontend requirements (#150)
+- 59bd7078 Song Luar 2025-06-11 Bump evaluation reqs (#144)
+- 02e3b12c dependabot[bot] 2025-06-10 Build(deps): Bump requests from 2.32.3 to 2.32.4 in /frontend in the pip group across 1 directory (#142)
+- 2bd9ab6a Song Luar 2025-06-07 CI: increase seeding timeout to 25 mins (#141)
+- a2d22cd9 Song Luar 2025-06-06 Fix backend build docs (#140)
+- 7c8e2691 Song Luar 2025-06-06 Improve sanity_check robustness (#138)
+- a36cc3e7 Palaniappan R 2025-06-06 chore: Remove old hosted version section from README (#139)
+- 7ec0541a Song Luar 2025-06-06 Update eval schema (#137)
+- c1024a40 Kannav Sethi 2025-06-05 Integration of MongoDB for feedbacks - Revised (#107)
+- ebfd6df5 Song Luar 2025-06-05 Fix `llm-tests` target (#133)
+- d262d3ac Song Luar 2025-06-04 Fix CI tests 2 (#132)
+- 95319573 Song Luar 2025-06-04 Fix CI tests (#130)
+- 60f68a94 Song Luar 2025-06-01 Fix CI linting  (#128)
+- 15f7eab9 Song Luar 2025-06-01 CI Cleanup (#126)
+
+# 2025-04
+
+- 918b9964 kevinwguan 2025-04-02 persistent database fix (#124)
+
+# 2025-03
+
+- d0c189d4 Palaniappan R 2025-03-17 Add docs for ollama setup (#122)
+
+# 2025-01
+
+- 1441a9f8 Kannav Sethi 2025-01-15 Documentation for Backend (#120)
+- 5f57e2ea Song Luar 2025-01-06 CI Cleanup (#115)
+- becf508e ProCodec 2025-01-05 feat: add script-based auto-evaluation with Streamlit analysis (#114)
+
+# 2024-12
+
+- e882c5c9 Song Luar 2024-12-21 Feature: Add feedback reaction button and add chat history v2 (#112)
+- 423d70eb Song Luar 2024-12-18 CI: separate secret workflow (#113)
+- aefe7d4e Palaniappan R 2024-12-18 Add streaming support (#111)
+
+# 2024-11
+
+- e2af48fd dependabot[bot] 2024-11-23 Build(deps): Bump pymongo from 4.6.2 to 4.6.3 in /common in the pip group across 1 directory (#105)
+- 75b486cb Kannav Sethi 2024-11-21 Design and add a MongoDB schema (Issue 75) - Revision (#101)
+- 9af54cc4 Song Luar 2024-11-20 CI Fixes (#103)
+- ab64aa25 Song Luar 2024-11-20 Fix ci.yaml (#102)
+- a236203f Song Luar 2024-11-12 Fix changelog: fetch-depth 0 and fixed committers (#99)
+- b17336d1 Song Luar 2024-11-12 Fix changelog: use cpr v7 (#97)
+- 73aa50e5 Song Luar 2024-11-12 Fix changelog action: sign commits (#96)
+- d99326a8 Song Luar 2024-11-11 GH Action fixes (#94)
+- 70907047 Song Luar 2024-11-11 Frontend updates (#92)
+- 260bba50 Song Luar 2024-11-11 DeepEval CI integration (#86)
+- b850af49 Palaniappan R 2024-11-09 Fix muliple tool calling (#89)
+- bb5a3006 Song Luar 2024-11-08 Evaluation module refactor (#85)
+
+# 2024-10
+
+- dce7db2e dependabot[bot] 2024-10-31 Build(deps): Bump langchain from 0.2.12 to 0.3.0 in /backend in the pip group across 1 directory (#83)
+- a0f952d9 Song Luar 2024-10-30 repo stats ci (#81)
+- 94dcc786 Song Luar 2024-10-30 Revert docker-compose.yml (#80)
+- 6ecddc0f Song Luar 2024-10-27 Update docs (#79)
+- 8f65a79f Song Luar 2024-10-27 Pyproject packaging (#74)
+- d0408782 Song Luar 2024-10-27 Move build docs functionality to workflow (upload.yml) 2 (#78)
+- 84bfc37b Song Luar 2024-10-26 Remove unused data dir (#76)
+- 322d5690 Song Luar 2024-10-26 Smoke tests (#73)
+- cb86b3ec Palaniappan R 2024-10-10 Tool changes (#63)
+- b229e6cc Song Luar 2024-10-10 Add link to wiki and citation (#72)
+
+# 2024-09
+
+- 8cef3ad7 Song Luar 2024-09-01 Manpages HF integration (#66)
+- a84380f5 Song Luar 2024-09-01 Upload manpages CI (#65)
+
+# 2024-08
+
+- a5c439f8 Palaniappan R 2024-08-24 Add chat history, Ollama support (#54)
+- ddac14da Song Luar 2024-08-16 Upgrade streamlit vers for security updates (#53)
+- dce4611e Song Luar 2024-08-08 Update requirements.txt to remove nltk (#48)
+- 7ff3bffa Palaniappan R 2024-08-08 Agent updates (#46)
+
+# 2024-07
+
+- a05863a9 dependabot[bot] 2024-07-25 Build(deps): Bump langchain-community from 0.2.7 to 0.2.9 in /backend (#45)
+- 56be6564 Palaniappan R 2024-07-24 Agent Retriever Updates (#43)
+- 5ad41d43 Palaniappan R 2024-07-15 Fix: Add a text-splitter, fix the graph's tool router  (#42)
+- 79d38f4d Song Luar 2024-07-15 Feat: Automate building of manpages (#31)
+- 53af4db3 Palaniappan R 2024-07-15 Add an agentic graph workflow (#30)
+- 715dfcee Song Luar 2024-07-12 Feat: add pre-commits (#35)
+- 0b80442c Song Luar 2024-07-11 Feat: mypy ci (#26)
+- 2807dd24 Song Luar 2024-07-10 Feat: Backend docker CI (#28)
+- 5ad0ed6b ProCodec 2024-07-10 Ruff pep8 fix N806 (#23)
+- 8b940f23 Song Luar 2024-07-10 Docs: Update README.md (#22)
+- f64c7914 ProCodec 2024-07-09 Feature: Add Ruff GitHub Workflow (#12)
+- 8ec4b288 ProCodec 2024-07-08 Fix: Human Eval for new endpoints (#29)
+- 2050f6e7 Palaniappan R 2024-07-05 Add support for multiple endpoints (#21)
+
+# 2024-06
+
+- b60bd24e ProCodec 2024-06-29 feat: added human evaluation (#11)
+- 1bf1ee7a ProCodec 2024-06-29 feat: Add Streamlit Frontend (#10)
+- f9e8d053 Song Luar 2024-06-29 Feat: Mypy checks (#15)
+- 23f6a31c Palaniappan R 2024-06-22 Fix local build (#13)
+- 68410449 Palaniappan R 2024-06-21 Add an updated hybrid retriever (#6)
+- 58c1a58b Palaniappan R 2024-06-14 feat: add ensemble retriever backend (#2)
+- 6197b65b luarss 2024-06-06 Initial commit