build: v1.1

[jirhiker]

Why

This PR addresses the following problem / context:

• Use bullet points here

How

Implementation summary - the following was changed / added / removed:

• Use bullet points here

Notes

Any special considerations, workarounds, or follow-up work to note?

• Use bullet points here

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: f17d81c152

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[chatgpt-codex-connector]

Defer bucket lookup until after request validation

For requests that should be rejected locally (unsupported MIME type, oversized file, or nonexistent thing_id), FastAPI resolves this dependency before entering the handler, so get_storage_bucket() can still instantiate the GCS client and fail on missing credentials or a transient GCS setup issue before the code returns the intended 400/409. This makes invalid upload requests depend on external storage availability and contradicts the endpoint’s validation-before-upload behavior; look up the bucket only immediately before calling gcs_upload.

Useful? React with 👍 / 👎.

[Copilot]

Pull request overview

This PR bumps the project to a new build/release baseline (“v1.1”) by updating dependencies and CI/CD automation, and adds an /asset/upload-and-record endpoint that uploads an asset to GCS and persists/link it in the DB with validation and best-effort cleanup.

Changes:

• Add /asset/upload-and-record API endpoint with MIME/type + size validation, Thing existence check, deduping, and DB-failure cleanup behavior.
• Extend services.gcs_helper.gcs_upload to return a created flag (blob newly written vs pre-existing) and update call sites/tests accordingly.
• Update build/deploy tooling (uv flags, dependency groups, GitHub Actions versions) and adjust release automation to deploy inline from release-please.

Reviewed changes

Copilot reviewed 15 out of 17 changed files in this pull request and generated 2 comments.

Show a summary per file

File	Description
api/asset.py	Adds upload-and-record endpoint, validation constants, and uses new gcs_upload return signature.
services/gcs_helper.py	Returns (uri, blob_name, created) from gcs_upload to support safe-ish cleanup decisions.
services/asset_helper.py	Updates gcs_upload unpacking for new return signature.
services/audit_helper.py	Guards audit_add against non-dict auth dependency return values.
tests/test_asset.py	Updates gcs_upload tests and adds extensive coverage for upload-and-record happy/error/cleanup paths.
tests/test_cli_commands.py	Uses tmp_path instead of Click isolated filesystem for associate-assets CLI test.
pyproject.toml	Dependency bumps and moves dev tooling into the dev dependency group.
docker/app/Dockerfile	Uses uv sync --no-dev for production installs.
.github/workflows/tests.yml	Bumps setup-uv action version.
.github/workflows/release-please.yml	Upgrades release-please action and triggers production deploy via reusable workflow when a release is created.
.github/workflows/CD_production.yml	Converts production deploy to reusable workflow (workflow_call) + release: published fallback, and deploys checked-out tag.
.github/workflows/CD_staging.yml	Refactors/updates staging deploy workflow and runs uv run --no-dev.
.github/workflows/CD_testing.yml	Refactors/updates testing deploy workflow and runs uv run --no-dev.
.github/workflows/pr-title-lint.yml	Bumps semantic PR title lint action major version.
.github/workflows/jira_codex_pr.yml	Updates pinned setup-uv action revision.