Release 3.0.0-alpha.12

.github/workflows/dependabot-auto-merge.yml

@@ -13,7 +13,7 @@ jobs:
 
       - name: Dependabot metadata
         id: metadata
-        uses: dependabot/fetch-metadata@v3.0.0
+        uses: dependabot/fetch-metadata@v3.1.0
         with:
           github-token: "${{ secrets.GITHUB_TOKEN }}"
 

.gitignore

@@ -1,3 +1,4 @@
 /.idea
 /.vscode
 .DS_Store
+backend/.env.local

CHANGELOG.md

@@ -2,6 +2,25 @@
 
 All notable changes to this project will be documented in this file.
 
+## 3.0.0-alpha.11 - 2026-04-16
+
+### Added
+
+- **Initial user bootstrap** — Script and docs to bootstrap an initial user in the DB; tests and refactors around that flow (merged via [#111](https://github.com/kilobyteno/LANMS/pull/111) — adjust org/repo if your remote differs).
+
+### Changed
+
+- **Documentation** — Centralized developer docs under `docs/` (`docs/README.md`, `docs/backend/README.md`, `docs/frontend/README.md`); moved `LEGACY-CODEBASE.md` to `docs/legacy/`; root and app READMEs now point at `docs/` instead of long inline guides.
+- **Backend docs** — Environment variables documented; docs updated for env, tests, and bootstrap.
+- **CI / release** — Release workflow: add **uv** (`astral-sh/setup-uv@v7`) and run `uv lock` in the backend so `uv.lock` is refreshed during release; ensures uv is available before Node setup.
+- **Dependencies** — `uv.lock` updated.
+
+### Fixed
+
+- **Uvicorn** — Replace deprecated `uvicorn_log_config` with `log_config`.
+- **Build** — Build script runs steps **sequentially** (fix for parallel/ordering issues).
+- Minor typo fix.
+
 ## 3.0.0-alpha.10 - 2026-04-14
 
 ### Features & product

backend/.env.example

@@ -1,7 +1,7 @@
 ENV=local
 JWT_PUBLIC_KEY=""
 JWT_PRIVATE_KEY=""
-OTP_SECRET_KEY=NNUWY33CPF2GKLTON4======
+OTP_SECRET_KEY=
 PORTAL_URL=http://localhost:3000
 
 # Optional variables
@@ -20,7 +20,7 @@ JWT_ALGORITHM=RS256
 ACCESS_TOKEN_EXPIRE_MINUTES=60
 REFRESH_TOKEN_EXPIRE_MINUTES=43200
 
-FROM_EMAIL=hello@lanms.net
+FROM_EMAIL=
 SENTRY_DSN=
 SENDGRID_API_KEY=
 POSTMARK_API_KEY=

backend/.gitignore

@@ -163,3 +163,4 @@ cython_debug/
 .ruff_cache
 .run/*
 requirements-audit.txt
+logs/

backend/.version

@@ -1 +1 @@
-3.0.0-alpha.10
+3.0.0-alpha.11

backend/alembic/env.py

@@ -1,11 +1,11 @@
-import importlib
 from logging.config import fileConfig
 
 from sqlalchemy import engine_from_config, pool
 
 from alembic import context
 
-# from app.models.other_models import Base
+import app.models  # noqa: F401 - register all ORM models on Base.metadata
+from app.models.base import Base
 from config import Config
 
 # this is the Alembic Config object, which provides
@@ -17,15 +17,8 @@
 if config.config_file_name is not None:
     fileConfig(config.config_file_name)
 
-# add your model's MetaData object here
-# for 'autogenerate' support
-# target_metadata = None
-# target_metadata = Base.metadata
-models_package = importlib.import_module('app.models')
-models = [getattr(models_package, name) for name in dir(models_package) if not name.startswith('__')]
-
-# Assuming your models use Base.metadata
-target_metadata = [model.Base.metadata for model in models]
+# Single declarative Base from app.models.base; model modules subclass BaseModel on this Base.
+target_metadata = Base.metadata
 
 # other values from the config, defined by the needs of env.py,
 # can be acquired: