Consolidate bug fixes, resource-safety cleanups, and tests from AI/Copilot autofix branches (Jun-Jul 2026)

[echoix]

Description

Consolidates multiple small behavior-relevant fixes, resource-safety cleanups, and test additions from ai-findings-autofix/*, alert-autofix-*, and finding-autofix-* branches (Copilot Autofix / CodeQL / bot suggestions, Jun-Jul 2026, echoix/echoix-org forks). Each cherry-picked with -x for traceability.

Bug fixes (4)

• python/grass/temporal/metadata.py: STR3DSMetadata._print_info_body printed top/bottom resolution using get_ewres_min/max() instead of get_tbres_min/max() — wrong values in t.info/t.rast3d.info output.
• scripts/r.in.wms/wms_cap_parsers.py: inverted boolean condition (!= → ==) when deciding whether to copy elements from the parent WMS layer.
• raster/r.what.color/main.c: removed an uncontrolled-format-string fprintf(stdout, fmt, ...) path in favor of the existing safe %s path (CodeQL alert CI(OSGeo4W): Windows 2022 ci 3 #467). A similar pattern still exists elsewhere in the file, untouched — possible follow-up.
• gui/wxpython/lmgr/layertree.py: removed an unreachable/no-op branch in a sibling-walk loop.

Resource-safety cleanups (4) — manual open/close → context manager

• scripts/i.oif/i.oif.py, scripts/v.import/v.import.py, scripts/r.in.wms/wms_gdal_drv.py: open()/close() → with open(...) as f:
• scripts/m.proj/m.proj.py: manual open/write/close → Path(tmpfile).write_text(...) (import already present)

Other (3)

• docker/debian/Dockerfile: grass symlink was hardcoded to grass86; now detects the installed grass* dir dynamically (no edit needed on version bumps).
• scripts/d.correlate/tests/d_correlate_test.py: adds a test for the primary two-map case.
• temporal/t.vect.import/tests/t_vect_import_test.py: adds start_time/end_time assertions.

Branches checked but left out, and why

• finding-autofix-960 (python/grass/temporal/univar_statistics.py, "file is not always closed"): not included on purpose. It only wraps the header-writing section in a with open(...) as out_file: block, but the same function writes to out_file again afterward for the CSV/JSON body and calls out_file.close() at the end — both would raise ValueError: I/O operation on closed file once the with block exits. Needs a proper rewrite, not a cherry-pick; left for a follow-up.
• alert-autofix-153/200/239 (sscanf checks, URL/email sanitization) and finding-autofix-382 (unused exception object): already fixed independently on main since these branches were created.

How has this been tested?

Each commit is a small, isolated diff taken as-is from the original suggestion; no test suite was run in this environment. metadata.py and wms_cap_parsers.py are the two most worth a closer look since they change program behavior.

Types of changes

• Bug fix (non-breaking change which fixes an issue)

Checklist

• PR title starts with a pre-defined prefix
• Follows code style (each hunk taken as-is from the original suggestion)
• Tests added (2 of the picked commits add test coverage)

🤖 Generated with Claude Code

https://claude.ai/code/session_01FWZbrtWRkJPgkvEbtB1q6p