nodes/katsut-ComfyUI-AlphaVAE
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
17 Commits 2 Branches 0 Tags
dependabot/github_actions/actions/setup-python-7
Commit Graph
17 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
dependabot[bot] b4c3f6d47c ci(deps): bump actions/setup-python from 6 to 7 
Bumps [actions/setup-python](https://github.com/actions/setup-python) from 6 to 7.
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](https://github.com/actions/setup-python/compare/v6...v7)

---
updated-dependencies:
- dependency-name: actions/setup-python
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-08-01 05:07:44 +00:00
dependabot[bot] 5a2c70c163 ci(deps): bump actions/checkout from 4 to 7 (#15) 
Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 7.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v4...v7)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-07-01 11:08:06 +09:00
dependabot[bot] a2232026a2 ci(deps): bump astral-sh/setup-uv from 5 to 7 (#14) 
Bumps [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) from 5 to 7.
- [Release notes](https://github.com/astral-sh/setup-uv/releases)
- [Commits](https://github.com/astral-sh/setup-uv/compare/v5...v7)

---
updated-dependencies:
- dependency-name: astral-sh/setup-uv
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-07-01 11:07:17 +09:00
dependabot[bot] aae1beabae ci(deps): bump actions/setup-python from 5 to 6 (#13) 
Bumps [actions/setup-python](https://github.com/actions/setup-python) from 5 to 6.
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](https://github.com/actions/setup-python/compare/v5...v6)

---
updated-dependencies:
- dependency-name: actions/setup-python
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-07-01 10:40:38 +09:00
Katsuhide Tsuruta d391f29820 ci: add monthly pip-audit scan and Dependabot config (#12) 
Add a low-frequency (monthly + manual) security workflow that resolves
dependencies with uv and audits them against the OSV / PyPI Advisory DB
via pip-audit, failing the job when a vulnerability is found.

Also add Dependabot (pip + github-actions, monthly) to auto-open PRs
that bump dependencies to fixed versions. PRs are review/merge by hand
(no auto-merge) since there is no test-gating CI yet.

Closes #11
 2026-07-01 10:29:15 +09:00
Katsuhide Tsuruta 774e92540c chore(deps): bump diffusers floor to >=0.38.0 and pytest to >=9.0.3 (#10) 
Raise declared dependency floors to non-vulnerable versions: diffusers
0.38.0 fixes the trust_remote_code/custom_pipeline RCE advisories
(CVE-2026-44513/44827/45804), and pytest 9.0.3 fixes the tmpdir handling
issue. uv.lock is gitignored, so only pyproject floors are tracked; the
local lock was refreshed and the suite re-run (20 passed) to verify the
upgraded resolution still works.

Closes #9
 2026-07-01 10:27:49 +09:00
Katsuhide Tsuruta 63a34f941b docs: document FLUX.1-only scope and FLUX.2 non-support (#8) 
Add a 'FLUX.2 support' section to the README explaining that this wrapper
targets FLUX.1-dev only, why FLUX.2 (incl. klein) cannot be supported
without upstream retraining, and pointing FLUX.2 users to post-process
background removal. Pre-empts repeat feature requests (see #6).

Closes #7
 2026-06-30 23:46:47 +09:00
Katsuhide Tsuruta 57795b5c01 fix: use importlib.util to load nodes.py, avoiding name collision with ComfyUI's nodes module 2026-03-30 10:23:58 +09:00
Katsuhide Tsuruta e22395de26 fix: invert alpha channel output — foreground is now opaque, background transparent 
Fixes #5
 2026-03-30 10:18:50 +09:00
Katsuhide Tsuruta 5d6d0a1afd docs: use neutral use case examples in README 2026-03-30 09:57:56 +09:00
Katsuhide Tsuruta 05e34f594f docs: expand README with context, architecture diagram, and component explanations 2026-03-30 09:25:03 +09:00
Katsuhide Tsuruta 2c52b46f98 test: add unit tests for all nodes with ComfyUI module mocking 
- 20 tests covering node registration, loader, decode, encode, and model wrapper
- conftest.py mocks ComfyUI-specific modules (folder_paths, comfy.model_management)
- Use absolute import in __init__.py for test compatibility
- Setup uv for dependency management
 2026-03-30 08:36:01 +09:00
Katsuhide Tsuruta 2d8dfb01aa docs: fix ComfyUI repo URL, add pip install step, add CLIP download links 2026-03-30 08:21:46 +09:00
Katsuhide Tsuruta 87982a6e43 docs: update README with installation guide, workflow example, and LoRA requirement 2026-03-30 08:14:46 +09:00
Katsuhide Tsuruta d12e618af4 fix: correct VAE decode by calling decoder directly and fix directory scanning 
- Call model.decoder() directly to bypass diffusers auto-scaling
- Fix AlphaVAELoader directory scanning to skip non-directory entries
- Remove incorrect latent scaling in encode/decode nodes
 2026-03-30 08:08:55 +09:00
Katsuhide Tsuruta 8ecc7e1b8d feat: implement AlphaVAE Loader, Decode, and Encode nodes 
Closes #1, Closes #2, Closes #3
 2026-03-30 02:05:59 +09:00
Katsuhide Tsuruta 5bad947146 feat: initial project setup with README, LICENSE, and .gitignore 2026-03-30 01:49:16 +09:00