[Update] Add Scheduler v1.0.8 for LNbits v1.0.0+ - #822
Open
bitkarrot wants to merge 7 commits into
Open
Conversation
Adds the latest Decoder extension release (v1.1.3) to the vetted extensions registry. This version requires LNbits >= 1.5.4 and includes CI/CD lint fixes and updated lock files to patch Dependabot security alerts. Archive hash verified: 29fb701cb3399d8924f4db7b49d1398d3a9cb9147f3611a770f1b066fee27445 Generated with [Devin](https://devin.ai) Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>
Adds the latest Scheduler extension release `v1.0.0` to the vetted extensions registry. This release includes: - LNbits v1.5.4 compatibility - Bumped `min_lnbits_version` to `1.5.4` - Modernized `pyproject.toml` with PEP 621 format - Fixed helper paths and pause scheduler DB/crontab sync - Added `.gitattributes` and `uv.lock` for cleaner release archives Generated with [Devin](https://devin.ai) Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>
Co-authored-by: Shelley <shelley@exe.dev>
bitkarrot
changed the title
bitkarrot
enabled auto-merge (squash)
June 24, 2026 04:20
Updated the minimum LNbits version requirement for the Scheduler extension.
bitkarrot
requested review from
alanbits,
arcbtc,
blackcoffeexbt,
dni and
motorina0
June 24, 2026 04:46
Collaborator
Author
|
IMPORTANT: I gave the user the option to install APScheduler to use with this if they wanted |
bitkarrot
changed the title
motorina0
approved these changes
Aug 21, 2026
Updates the Scheduler extension from v1.0.7 to v1.0.8. This release removes the legacy poetry.lock file to eliminate duplicate Dependabot alerts. Archive hash verified: 4fbc3183cb1e0b1322ef8b7e541e693a40ee02fa4c6765deab18e17f5242b219
bitkarrot
changed the title
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Updates the Scheduler extension from
v1.0.7tov1.0.8in the vetted extensions registry.Changes in v1.0.8
poetry.lock— the project migrated touv(Makefile and CI useuv runexclusively).poetry.lockwas no longer maintained and caused duplicate Dependabot alerts for vulnerabilities already tracked inuv.lock.Dependabot alerts
Reviewed all 86 Dependabot alerts (60 fixed, 26 open). All 26 open alerts dismissed:
poetry.lock,requirements.txt, andpyproject.tomlmanifests.poetry.lockremoved to prevent future duplicates.starlette,pyjwt, andecdsaare transitive dependencies pinned bylnbits(all available versions constrainstarlette~=0.48.0,pyjwt~=2.12.0). Cannot upgrade to fixed versions without breaking lnbits compatibility.ecdsahas no upstream fix for CVE-2024-26593. Dismissed as tolerable risk; the scheduler extension does not use the vulnerable code paths.Updated fields
1.0.8https://github.com/bitkarrot/scheduler/archive/refs/tags/v1.0.8.zip4fbc3183cb1e0b1322ef8b7e541e693a40ee02fa4c6765deab18e17f5242b219min_lnbits_versionremains1.0.0.