NAPALM/driver-standard
1
0 Fork 0
Code Issues 1 Pull Requests Actions Packages Projects Releases Wiki Activity

fix: pilot findings (pip-audit scope, SPDX license, E501 in tests) #1

Merged
christianmanivong merged 2 commits from fix/pilot-findings into main 2026-10-22 19:10:48 +00:00
Conversation 0 Commits 2 Files Changed 8
+65 -17
2 Commits
Author SHA1 Message Date
christianmanivong ba133d9de3 fix(ci): audit the package's dependencies, not the tool venv
CI / test (3.12) (pull_request) Successful in 28s
Details
CI / test (3.13) (pull_request) Successful in 26s
Details
CI / test (3.11) (pull_request) Successful in 2m31s
Details 
The device-types pilot failed pip-audit on pip 25.0.1 of the venv that also
held bandit and pip-audit. The package now goes into a venv of its own with
a current pip; its frozen set (URL installs left out) is what pip-audit
checks.
 2026-10-22 19:14:55 +02:00
christianmanivong 0b21f62553 fix(check): SPDX license string; E501 off in tests (device-types pilot) 
The pilot's build warned that setuptools refuses a license table and
License classifiers from 2027-02-18 (PEP 639); check now reports both and
the template builds with setuptools>=77. Recorded device output in tests
keeps its lines, so the template turns E501 off under tests/.
 2026-10-22 19:08:06 +02:00