Skip to content

improve: add dependabot config, security audit to CI, and temp file ignore#13

Open
Coding-Dev-Tools wants to merge 4 commits into
masterfrom
improve/apiauth-20260625-deps-ci
Open

improve: add dependabot config, security audit to CI, and temp file ignore#13
Coding-Dev-Tools wants to merge 4 commits into
masterfrom
improve/apiauth-20260625-deps-ci

Conversation

@Coding-Dev-Tools

Copy link
Copy Markdown
Owner

Automated improvement by dev-engineer

Changes

  • Add Dependabot configuration (.github/dependabot.yml): Weekly automated dependency updates for Python packages and GitHub Actions, with grouped updates for dev and core dependencies
  • Add security audit to CI (.github/workflows/ci.yml): Integrated pip-audit to scan for known vulnerabilities, uploading results as SARIF to GitHub Security tab
  • Ignore temp files (.gitignore): Added patterns for temp_*.txt and *.tmp files to avoid accidental commits

Rationale

  • Dependabot ensures dependencies stay current with automated PRs
  • pip-audit integration catches known CVEs in dependencies early
  • Clean .gitignore prevents temp files from polluting the repo

Testing

  • All 60 existing tests pass
  • Ruff linting passes
  • CI workflow updated with security audit step

…it/stats) and fix Windows UTF-8 encoding

- 7 commands were registered with name='list' instead of their proper names,
  causing silent overwrites — only the last registered 'list' command worked
- Add sys.stdout/stderr.reconfigure(encoding='utf-8') on Windows to prevent
  cp1252 encoding crashes with Rich library Unicode symbols
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant