Skip to content

fix: satisfy new ruff rules and bump 4 CVE-flagged dependencies - #929

Open
Santisoutoo wants to merge 1 commit into
mainfrom
fix/ci-ruff-and-cve-bumps
Open

fix: satisfy new ruff rules and bump 4 CVE-flagged dependencies#929
Santisoutoo wants to merge 1 commit into
mainfrom
fix/ci-ruff-and-cve-bumps

Conversation

@Santisoutoo

Copy link
Copy Markdown
Collaborator

Descripción

main está rojo desde julio: la versión nueva de ruff que uvx instala sin pin rompe lint (RUF036 en chat_threads.py + formato en 8 archivos) y pip-audit falla con 9 CVEs frescas (click, cryptography, mcp, pyasn1).

  • uvx ruff check . --fix + uvx ruff format . repo-wide.
  • Bumps en uv.lock: click 8.4.2, cryptography 50.0.0, mcp 1.29.0, pyasn1 0.6.4.

Checklist

  • uv run pytest -q -n auto --dist=loadfile → 628 passed, 9 skipped
  • uv run mypy src/lexflow/ → limpio
  • uvx ruff check . + uvx ruff format --check . → limpio
  • pip-audit --skip-editable → sin vulnerabilidades

🤖 Generated with Claude Code

https://claude.ai/code/session_019FXiAM89b81PkWzRx8gPgS

uvx in the lint job always runs the latest ruff, and a new release both
flags a union-ordering violation in chat_threads.py (RUF036) and formats
10 files differently, turning main red. pip-audit also fails on fresh
advisories. Bump click 8.4.2, cryptography 50.0.0, mcp 1.29.0 and
pyasn1 0.6.4 past their fix versions. Full suite: 628 passed, 9 skipped;
mypy and pip-audit clean.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_019FXiAM89b81PkWzRx8gPgS
@coderabbitai

coderabbitai Bot commented Aug 24, 2026

Copy link
Copy Markdown

Important

  • 🔍 Trigger review

This repository does not receive automatic reviews because it has fewer than 10 stars.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: 96af5ba3-413f-47c3-aaab-38b429ae0b74


Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@github-actions github-actions Bot added area: codebase Touches src/, scripts/ or main.py area: api FastAPI endpoints / api layer area: deps Dependency bumps (pyproject.toml, uv.lock) area: docs Documentation only labels Aug 24, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area: api FastAPI endpoints / api layer area: codebase Touches src/, scripts/ or main.py area: deps Dependency bumps (pyproject.toml, uv.lock) area: docs Documentation only

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant