Merge feat/1.2.1: security hardening, deterministic baseline checks, UX polish#2
Merged
Merge feat/1.2.1: security hardening, deterministic baseline checks, UX polish#2
Conversation
- Fix audit findings: add AST parsing limits/timeout guards, expand sensitive dir denylist, optimize HTML report snippet reads, and warn on cache signature/version mismatches. - Refactor CLI error handling + batching; add clear fallback warnings for parallel processing; tighten typing around cache stats. - Apply slots across classes where appropriate, and clean up formatting for Ruff compliance. - Update CHANGELOG.md for 1.2.1 with security, performance, and test coverage notes.
- Fix audit findings: add AST parsing limits/timeout guards, expand sensitive dir denylist, optimize HTML report snippet reads, and warn on cache signature/version mismatches. - Refactor CLI error handling + batching; add clear fallback warnings for parallel processing; tighten typing around cache stats. - Apply slots across classes where appropriate, and clean up formatting for Ruff compliance. - Update CHANGELOG.md for 1.2.1 with security, performance, and test coverage notes.
- Add/expand unit + integration tests to reach 98% coverage, including CLI paths, cache warnings, HTML report edge cases, extractor guardrails, and scanner sensitivity. - Improve test structure for clarity and stability; remove unnecessary version guards and fix style/lint issues in tests. - Add CLI main-guard test via subprocess to avoid runpy warning.
- Add/expand unit + integration tests to reach 98% coverage, including CLI paths, cache warnings, HTML report edge cases, extractor guardrails, and scanner sensitivity. - Improve test structure for clarity and stability; remove unnecessary version guards and fix style/lint issues in tests. - Add CLI main-guard test via subprocess to avoid runpy warning.
…ing a number of “empty” fields that differ between 3.10–3.12 and 3.13+
…ing a number of “empty” fields that differ between 3.10–3.12 and 3.13+
…version AST dump drift
…on, cross-version reproduction of clone detection is not guaranteed. It rigidly fixes the contract stating that the check must be performed on the same version of Python in which the baseline was created. Now codeclone writes the version on which the baseline was created and verifies it when running the check.
…on, cross-version reproduction of clone detection is not guaranteed. It rigidly fixes the contract stating that the check must be performed on the same version of Python in which the baseline was created. Now codeclone writes the version on which the baseline was created and verifies it when running the check.
…on, cross-version reproduction of clone detection is not guaranteed. It rigidly fixes the contract stating that the check must be performed on the same version of Python in which the baseline was created. Now codeclone writes the version on which the baseline was created and verifies it when running the check.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
No description provided.