Refactor the CLI dynamic command resolution (#362)

* Replaced eval with importlib for secure dynamic command module loading, better mitigating arbitrary code execution risks. * Defined a plugin folder and a specified list of known modules for tighter execution control, enhancing CLI security. * Enhanced error handling for clearer feedback on command module loading issues. * Shifted to pathlib for more robust path handling, replacing os.path and string manipulations. * Adopted importlib.metadata for fetching package versions, offering a fallback for unavailable versions.
TGSAI · Mar 6, 2024 · c3ba558 · c3ba558
1 parent 8814863
commit c3ba558
Show file tree

Hide file tree

Showing 4 changed files with 774 additions and 831 deletions.
diff --git a/.github/workflows/constraints-poetry.txt b/.github/workflows/constraints-poetry.txt
@@ -1 +1 @@
-poetry==1.7.1
+poetry==1.8.2
diff --git a/.github/workflows/constraints.txt b/.github/workflows/constraints.txt
@@ -1,4 +1,4 @@
-pip==23.3.2
-nox==2023.4.22
+pip==24.0
+nox==2024.3.2
 nox-poetry==1.0.3
-virtualenv==20.25.0
+virtualenv==20.25.1