Merge branch 'dev' of https://git.theprivateserver.de/PHB/semapform_api into dev

.gitea/workflows/release.yml

@@ -58,7 +58,7 @@ jobs:
           fetch-tags: true # Fetch all tags (refs/tags)
 
       - name: Install uv
-        uses: astral-sh/setup-uv@v5
+        uses: astral-sh/setup-uv@v7
       - name: Set up Python
         run: uv python install
         with:

.gitea/workflows/test_pr.yml

@@ -16,7 +16,7 @@ jobs:
         uses: docker/setup-buildx-action@v2
 
       - name: Install uv
-        uses: astral-sh/setup-uv@v5
+        uses: astral-sh/setup-uv@v7
 
       - name: (optional) Prepare dependencies
         run: |

.vscode/settings.json

@@ -0,0 +1,13 @@
+{
+    "cSpell.words": [
+        "buildx",
+        "Buildx",
+        "elif",
+        "gitea",
+        "Gitea",
+        "github",
+        "linux",
+        "pyproject",
+        "semapform"
+    ]
+}

api_service.py

@@ -4,17 +4,19 @@ This can run independently to support the PHP application.
 """
 
 from __future__ import annotations
+
 import asyncio
-from contextlib import asynccontextmanager
 import json
 import logging
 import os
 import re
 import time
-from typing import Any, TYPE_CHECKING
+import urllib.parse
+from contextlib import asynccontextmanager
+from typing import TYPE_CHECKING, Any
 
 if TYPE_CHECKING:
-    from collections.abc import AsyncIterator, Callable, Awaitable
+    from collections.abc import AsyncIterator, Awaitable, Callable
 
 # Avoid importing heavy modules at top-level to keep `import api_service` lightweight
 from fastapi import FastAPI, Query, Request, Response
@@ -29,7 +31,7 @@ redis_client = None
 @asynccontextmanager
 async def _lifespan(_app: FastAPI) -> AsyncIterator[None]:
     """Lifespan handler: connect to Redis on startup and close on shutdown."""
-    global redis_client
+    global redis_client  # type: ignore[PLW0603]
     if REDIS_URL:
         try:
             import redis.asyncio as aioredis
@@ -159,6 +161,10 @@ async def _cache_set(key: str, value: CacheValue, ttl: int = CACHE_TTL_SECONDS)
 async def validate_signature(signature: str = Query(...)) -> JSONResponse:
     """Validate a book signature and return total pages."""
     # check cache first
+    # ensure signature is stripped of leading/trailing whitespace
+    signature = signature.strip()
+    # enforce url quotes
+    signature = urllib.parse.quote(signature)
     cache_key = f"signature:{signature}"
     cached = await _cache_get(cache_key)
     if cached is not None:

pyproject.toml

@@ -7,7 +7,6 @@ requires-python = ">=3.13"
 dependencies = [
     "bibapi[catalogue]>=0.0.6",
     "fastapi>=0.122.0",
-    "pip>=25.3",
     "uvicorn>=0.38.0",
     "redis>=4.6.0",
 ]
@@ -16,7 +15,7 @@ name = "gitea"
 url = "https://git.theprivateserver.de/api/packages/PHB/pypi/simple/"
 
 [tool.bumpversion]
-current_version = "0.2.0"
+current_version = "0.1.3"
 parse = "(?P<major>\\d+)\\.(?P<minor>\\d+)\\.(?P<patch>\\d+)"
 serialize = ["{major}.{minor}.{patch}"]
 search = "{current_version}"