Dependency hardening, CI, and FND featured project

[ben-dev-au]

Dependencies & security

• Dropped unused packages: fastapi-mail, fastapi-csrf-protect, fastapi-limiter, redis, python-multipart. Nothing in backend/ imported them.
• Relaxed the fastapi and uvicorn upper bounds to <1.0.0 so patch and minor security releases can land.
• Removed the orphaned ContactMessage model — contact runs through an Airtable embed, not the DB.
• Added .github/workflows/ci.yml (pytest + non-blocking pip-audit) and .github/dependabot.yml.

Compatibility fixes

• TemplateResponse(request, ...) — Starlette 1.x wants the request positionally.
• declarative_base now imported from sqlalchemy.orm; the ext.declarative path is deprecated.

Featured project (FND)

• Added the FND screenshot, description and tech badges.
• Hero switched from flexbox to a float: right image so long descriptions wrap beside it.

Lightbox

• Extracted the overlay markup out of resume.html into a shared components/lightbox.html, now that two sections use it.
• The featured project image opens in that lightbox — click or Enter/Space, Esc / × / backdrop to close, no prev-next arrows since it's a single image.
• navigateGallery is guarded on has-gallery, so arrow keys can't page through stale journey-gallery state.
• Image corners rounded in the floated layout only; square in the ≤768px stacked layout where the image is flush with the container.

Contact

• Airtable iframe wrapped and given more height to stop inner scrolling.

[coderabbitai]

Important

• 🔍 Trigger review

This repository does not receive automatic reviews because it has fewer than 10 stars.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Team

Run ID: bccc530c-81d3-4af2-b286-a53f1ebf2e59

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}