Skip to content

PatchProof v0.1.2 — Real Bottle Integration

Latest
Latest

Choose a tag to compare

View all tags
@eatdrop eatdrop released this 03 Aug 09:05
v0.1.2
e036873
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

中文

v0.1.2 为 PatchProof 增加首个真正独立的第三方开源缺陷验证案例：固定 Bottle 修复前提交与准确的上游源码修复 Hunk，通过独立复现测试、359 项 Bottle 原生回归测试和不同的边界测试完成四阶段验证。

新增

  • Bottle HTTP 条件请求优先级真实集成案例。
  • 独立 bottle-integration Docker CI 与内容寻址审计产物。
  • 包式 unittest discover 的安全 top-level 支持。
  • .tpl 文本快照支持。
  • 自动忽略测试目录中的标准 __pycache__ 生成物。

验证证据

  • 80 项 PatchProof 自动化测试通过。
  • Bottle：补丁前复现失败、补丁后通过、359 项上游回归通过、1 项独立边界测试通过。
  • 目标 Bottle checkout 前后快照一致。
  • 合并后 GitHub Actions 四项检查全部通过。

English

v0.1.2 adds PatchProof's first genuinely independent third-party open-source defect case. It pins Bottle's pre-fix commit and exact upstream source-fix hunk, then establishes the four-phase result with an independently authored reproduction, 359 Bottle-native regressions, and a distinct edge case.

Added

  • A real Bottle HTTP-precondition precedence integration case.
  • A dedicated Docker-backed bottle-integration CI job with content-addressed audit artifacts.
  • Safe unittest package discovery top-level support.
  • .tpl text-snapshot support.
  • Standard __pycache__ artifacts are ignored in external test bundles.

Evidence

  • 80 PatchProof automated tests passed.
  • Bottle: fail before patch, pass after patch, 359 upstream regressions passed, and 1 independent edge case passed.
  • The target Bottle checkout retained the same before/after snapshot.
  • All four post-merge GitHub Actions checks passed.

PR: #3

Post-merge CI: https://github.com/eatdrop/patchproof/actions/runs/30799759460

Wheel SHA-256: 86269161839fbe74350d81eb1483fcf19f139fa1823a9f316844a76d86af3280

Assets 3
Loading