Merge branch 'main' into store-emails-in-s3

Author: marcoacierno

.github/workflows/build-frontend.yml

@@ -42,10 +42,6 @@ jobs:
           sentry_auth_token=$(aws ssm get-parameter --output text --query Parameter.Value --with-decryption --name /pythonit/${{ inputs.tf_environment }}/common/sentry-auth-token)
           echo "::add-mask::$sentry_auth_token"
           echo "SENTRY_AUTH_TOKEN=$sentry_auth_token" >> "$GITHUB_OUTPUT"
-
-          posthog_key=$(aws ssm get-parameter --output text --query Parameter.Value --with-decryption --name /pythonit/${{ inputs.tf_environment }}/pycon-frontend/posthog-key)
-          echo "::add-mask::$posthog_key"
-          echo "POSTHOG_KEY=$posthog_key" >> "$GITHUB_OUTPUT"
       - name: Build and push
         uses: docker/build-push-action@v6
         with:
@@ -66,5 +62,4 @@ jobs:
             CONFERENCE_CODE=${{ steps.vars.outputs.conference_code }}
             GIT_HASH=${{ inputs.githash }}
           secrets: |
-            sentry_auth_token=${{ steps.vars.outputs.sentry_auth_token }}
-            posthog_key=${{ steps.vars.outputs.posthog_key }}
+            "sentry_auth_token=${{ steps.vars.outputs.sentry_auth_token }}"

.github/workflows/claude.yml

@@ -0,0 +1,48 @@
+name: Claude PR Assistant
+
+on:
+  issue_comment:
+    types: [created]
+  pull_request_review_comment:
+    types: [created]
+  issues:
+    types: [opened, assigned]
+  pull_request_review:
+    types: [submitted]
+
+jobs:
+  claude-code-action:
+    if: |
+      (github.event_name == 'issue_comment' && contains(github.event.comment.body, '@claude')) ||
+      (github.event_name == 'pull_request_review_comment' && contains(github.event.comment.body, '@claude')) ||
+      (github.event_name == 'pull_request_review' && contains(github.event.review.body, '@claude')) ||
+      (github.event_name == 'issues' && contains(github.event.issue.body, '@claude'))
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      pull-requests: read
+      issues: read
+      id-token: write
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 1
+
+      - name: Run Claude PR Action
+        uses: anthropics/claude-code-action@beta
+        with:
+          anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
+          # Or use OAuth token instead:
+          # claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
+          timeout_minutes: "60"
+          # mode: tag  # Default: responds to @claude mentions
+          # Optional: Restrict network access to specific domains only
+          # experimental_allowed_domains: |
+          #   .anthropic.com
+          #   .github.com
+          #   api.github.com
+          #   .githubusercontent.com
+          #   bun.sh
+          #   registry.npmjs.org
+          #   .blob.core.windows.net

.github/workflows/frontend-lint.yml

@@ -34,5 +34,7 @@ jobs:
         run: pnpm install
       - name: Codegen
         run: pnpm run codegen
+        env:
+          API_URL_SERVER: https://pastaporto-admin.pycon.it
       - name: Run Biome
         run: biome ci .

backend/Dockerfile

@@ -72,7 +72,7 @@ ENV LIBRARY_PATH=/lib:/usr/lib LD_LIBRARY_PATH=/lib:/usr/lib
 
 RUN apt-get update -y && apt-get install -y curl
 
-RUN groupadd -r app && useradd -r -g app app && mkdir -p ${FUNCTION_DIR} && chown -R app:app ${FUNCTION_DIR}
+RUN groupadd -r app && useradd -r -g app app && mkdir -p ${FUNCTION_DIR} && chown -R app:app ${FUNCTION_DIR} && mkdir -p /tmp/pycon && chown -R app:app /tmp/pycon
 
 COPY --chown=app:app --from=js-stage ${FUNCTION_DIR}/dist/*.html ${FUNCTION_DIR}/custom_admin/templates/astro/
 COPY --chown=app:app --from=js-stage ${FUNCTION_DIR}/dist/widgets/*.html ${FUNCTION_DIR}/custom_admin/templates/astro/widgets/
@@ -83,6 +83,8 @@ COPY --chown=app:app . ${FUNCTION_DIR}
 
 USER app
 
+VOLUME ["/tmp/pycon"]
+
 RUN mkdir -p assets && .venv/bin/python manage.py collectstatic --noinput
 
 ENTRYPOINT ["/home/app/.venv/bin/gunicorn"]

backend/api/billing/types.py

@@ -6,7 +6,8 @@ class BillingAddress:
     id: strawberry.ID
     is_business: bool
     company_name: str
-    user_name: str
+    user_given_name: str
+    user_family_name: str
     zip_code: str
     city: str
     address: str
@@ -22,7 +23,8 @@ def from_django_model(cls, instance):
             id=instance.id,
             is_business=instance.is_business,
             company_name=instance.company_name,
-            user_name=instance.user_name,
+            user_given_name=instance.user_given_name,
+            user_family_name=instance.user_family_name,
             zip_code=instance.zip_code,
             city=instance.city,
             address=instance.address,

backend/api/files_upload/permissions.py

@@ -37,9 +37,11 @@ def _check_proposal_material(self, user, input: "UploadFileInput") -> bool:
         conference_code = input.data.conference_code
 
         try:
-            proposal = Submission.objects.for_conference_code(
-                conference_code
-            ).get_by_hashid(proposal_id)
+            proposal = (
+                Submission.objects.for_conference_code(conference_code)
+                .filter(status=Submission.STATUS.accepted)
+                .get_by_hashid(proposal_id)
+            )
         except (Submission.DoesNotExist, IndexError):
             return False
 

backend/api/files_upload/tests/mutations/test_upload_file.py

@@ -1,6 +1,6 @@
 import pytest
 from files_upload.models import File
-from submissions.tests.factories import SubmissionFactory
+from submissions.tests.factories import AcceptedSubmissionFactory, SubmissionFactory
 from conferences.tests.factories import ConferenceFactory
 from django.test import override_settings
 
@@ -64,7 +64,7 @@ def test_upload_participant_avatar_to_invalid_conf_fails(graphql_client, user):
 
 
 def test_upload_proposal_material_file(graphql_client, user):
-    proposal = SubmissionFactory(speaker=user)
+    proposal = AcceptedSubmissionFactory(speaker=user)
     graphql_client.force_login(user)
 
     response = _upload_file(
@@ -88,7 +88,26 @@ def test_upload_proposal_material_file(graphql_client, user):
 
 
 def test_cannot_upload_proposal_material_file_if_not_speaker(graphql_client, user):
-    proposal = SubmissionFactory()
+    proposal = AcceptedSubmissionFactory()
+    graphql_client.force_login(user)
+
+    response = _upload_file(
+        graphql_client,
+        {
+            "proposalMaterial": {
+                "filename": "test.txt",
+                "proposalId": proposal.hashid,
+                "conferenceCode": proposal.conference.code,
+            }
+        },
+    )
+
+    assert not response["data"]
+    assert response["errors"][0]["message"] == "You cannot upload files of this type"
+
+
+def test_cannot_upload_proposal_material_file_if_not_accepted(graphql_client, user):
+    proposal = SubmissionFactory(status="proposed")
     graphql_client.force_login(user)
 
     response = _upload_file(
@@ -129,7 +148,7 @@ def test_cannot_upload_proposal_material_file_with_invalid_proposal_id(
 def test_cannot_upload_proposal_material_file_with_invalid_proposal_id_for_conference(
     graphql_client, user
 ):
-    proposal = SubmissionFactory()
+    proposal = AcceptedSubmissionFactory()
     graphql_client.force_login(user)
 
     response = _upload_file(
@@ -151,7 +170,7 @@ def test_cannot_upload_proposal_material_file_with_invalid_proposal_id_for_confe
     "file_type", [File.Type.PARTICIPANT_AVATAR, File.Type.PROPOSAL_MATERIAL]
 )
 def test_superusers_can_upload_anything(graphql_client, admin_superuser, file_type):
-    proposal = SubmissionFactory()
+    proposal = AcceptedSubmissionFactory()
     graphql_client.force_login(admin_superuser)
 
     req_input = {}

backend/api/job_board/schema.py

@@ -11,7 +11,9 @@ class JobBoardQuery:
     def job_listings(self, conference: str) -> list[JobListingType]:
         return [
             JobListingType.from_django_model(listing)
-            for listing in JobListing.objects.filter(conference__code=conference).all()
+            for listing in JobListing.objects.filter(conference__code=conference)
+            .order_by("order")
+            .all()
         ]
 
     @strawberry.field

backend/api/job_board/types.py

@@ -2,15 +2,13 @@
 
 import strawberry
 
-from ..helpers.i18n import make_localized_resolver
-
 
 @strawberry.type
 class JobListing:
     id: strawberry.ID
-    title: str = strawberry.field(resolver=make_localized_resolver("title"))
-    slug: str = strawberry.field(resolver=make_localized_resolver("slug"))
-    description: str = strawberry.field(resolver=make_localized_resolver("description"))
+    title: str
+    slug: str
+    description: str
     company: str
     company_logo_url: strawberry.Private[Optional[str]]
     apply_url: str

backend/api/orders/mutations.py

@@ -43,7 +43,8 @@ def create_order(
             is_business=input.invoice_information.is_business,
             defaults={
                 "company_name": input.invoice_information.company,
-                "user_name": input.invoice_information.name,
+                "user_given_name": input.invoice_information.given_name,
+                "user_family_name": input.invoice_information.family_name,
                 "zip_code": input.invoice_information.zipcode,
                 "city": input.invoice_information.city,
                 "address": input.invoice_information.street,