hermes 6e1189e319 fix: log a failed password migration instead of swallowing it ...

The round-2 review noted that `_upgrade_password` catches `PyMongoError`
without logging it. A failed upgrade is harmless to the login itself - the
user still gets in - but it leaves the password stored in plain text, and
that is exactly the kind of thing an operator needs to know about. It is now
logged as a warning with the username and the traceback.

A test covers the path: the migration write is forced to fail, the login
still succeeds, and the warning is emitted.

2026-11-09 10:31:03 +10:00

..

conftest.py

fix(security): address the independent review's blocking findings

2026-11-09 10:28:15 +10:00

test_app.py

fix: log a failed password migration instead of swallowing it

2026-11-09 10:31:03 +10:00

test_brewing.py

feat(ui): rebuild the interface with a proper design system

2026-11-09 10:21:44 +10:00