Conversation
Dev -> Stable 2.8.4
Automated Docs Update
Replace the single PR-author org membership check with a unified step that iterates all committers on the PR and checks each against: 1. GitHub API account type (type == "Bot" for App accounts) 2. Org membership Commits with no associated GitHub login are treated as non-exempt (prevents bypass via spoofed email with no GitHub account). Tested on aconite33/cla-workflow-test: - Human committer: correctly required CLA - github-actions[bot]: correctly skipped via API type check
Tested on aconite33/cla-workflow-test with only pull-requests:write and statuses:write -- both human CLA and bot skip paths work correctly. The CLA assistant uses PERSONAL_ACCESS_TOKEN (app token) for writing signatures to the remote CLA repo, not GITHUB_TOKEN.
Fix CLA workflow to skip bots and check all committers
# Conflicts: # .github/workflows/cla.yml
Merge stable into dev to resolve CLA workflow conflict
Merge dev into stable: CLA workflow update
More Adjectives
📊 Performance Benchmark Report
📈 Detailed Results (All Benchmarks)
🎯 Performance Summary+ 1 improvement 🚀
23 unchanged ✅🔍 Significant Changes (>10%)
🐍 Python Version 3.11.15 |
Codecov Report❌ Patch coverage is Additional details and impacted files@@ Coverage Diff @@
## 3.0 #3022 +/- ##
======================================
- Coverage 91% 91% -0%
======================================
Files 440 437 -3
Lines 37685 37509 -176
======================================
- Hits 34104 33925 -179
- Misses 3581 3584 +3 ☔ View full report in Codecov by Sentry. 🚀 New features to boost your workflow:
|
- Update deps_pip and pyproject.toml to baddns~=2.1.0 - Pass self.scan.helpers.dns.blastdns as dns_client (was .resolver) - Replace MODERATE confidence level with MEDIUM to match baddns 2.1.0
…/pytest-asyncio-1.3.0 Bump pytest-asyncio from 1.2.0 to 1.3.0
Automated Docs Update
Fix docs pipeline
…nado-6.5.5 Bump tornado from 6.5.4 to 6.5.5
Fix docs pipeline, again
Bumps [ruff](https://github.com/astral-sh/ruff) from 0.15.10 to 0.15.12. - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.15.10...0.15.12) --- updated-dependencies: - dependency-name: ruff dependency-version: 0.15.12 dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
headers: 1150 → 289 (-75%); removed pecl_http C constants, CGI env vars, HTTP status reason phrases, PHP superglobals, Apache module names, WAP-era device cruft, defunct platforms (BAE/FirePHP/Tomboy/Mosso/Prototype.js/ Hixie-76 WebSocket/RFC2965 Cookie2), per-app webhook signatures and CSRF headers, and joke/typo/fragment entries. parameters: 6514 → 5224 (-20%); removed case-insensitive duplicates, numbered single-app dump residue (u1-u50, sql* series), pfSense WebGUI form fields, SMF install fields, phpMyAdmin admin-form fields, phpBB forum-specific entries, ID3 audio-tag tool entries, all 1- and 2-letter entries, and 3-letter entries that aren't well-known abbreviations.
…ute_short options
…/ruff-0.15.12 Bump ruff from 0.15.10 to 0.15.12
…ing http protocols
…t-cleanup Paramminer Cleanup / Update
Neo4j fix - serialize host_metadata
|
I have read the CLA Document and I hereby sign the CLA 2 out of 7 committers have signed the CLA. |
enhancement: in fingerprintx, emit `URL_UNVERIFIED` event upon detecting http protocols
inspect.getsource(cls) relies on linecache heuristics that mis-anchor on Python 3.13+ and can return a single indented attribute line, which ast.parse rejects with IndentationError. Read the whole source file instead — each baddns submodule is one class per file.
|
recheck |
fix(test): parse baddns submodule source from file (Py 3.13+ fix)
No description provided.