Skip to content

Update dependencies - #6

Open
ktfth wants to merge 2 commits into
mainfrom
claude/youthful-volta-Czz4G
Open

Update dependencies#6
ktfth wants to merge 2 commits into
mainfrom
claude/youthful-volta-Czz4G

Conversation

@ktfth

@ktfth ktfth commented May 27, 2026 •
edited by sourcery-ai Bot
Loading

Copy link
Copy Markdown
Owner

Dependency lockfile updates.

https://claude.ai/code/session_01En5ivp3mn72edV7neN1fJp

Summary by Sourcery

Enhancements:

  • Introduce uv.lock as the project’s dependency lockfile to track exact resolved package versions.

@sourcery-ai

sourcery-ai Bot commented May 27, 2026 •
edited
Loading

Copy link
Copy Markdown
Reviewer's guide (collapsed on small PRs)

Reviewer's Guide

Adds a new uv.lock dependency lockfile to capture the current resolved dependency graph and versions.

File-Level Changes

Change Details Files
Introduce a uv.lock dependency lockfile to pin resolved dependency versions and metadata.
  • Add a new lockfile generated by uv to record the full dependency resolution state.
  • Capture exact versions, transitive dependencies, and hashes for reproducible environments.
  • Align project dependency management with uv tooling by checking in its lockfile.
 uv.lock
Tips and commands

Interacting with Sourcery

  • Trigger a new review: Comment @sourcery-ai review on the pull request.
  • Continue discussions: Reply directly to Sourcery's review comments.
  • Generate a GitHub issue from a review comment: Ask Sourcery to create an
    issue from a review comment by replying to it. You can also reply to a
    review comment with @sourcery-ai issue to create an issue from it.
  • Generate a pull request title: Write @sourcery-ai anywhere in the pull
    request title to generate a title at any time. You can also comment
    @sourcery-ai title on the pull request to (re-)generate the title at any time.
  • Generate a pull request summary: Write @sourcery-ai summary anywhere in
    the pull request body to generate a PR summary at any time exactly where you
    want it. You can also comment @sourcery-ai summary on the pull request to
    (re-)generate the summary at any time.
  • Generate reviewer's guide: Comment @sourcery-ai guide on the pull
    request to (re-)generate the reviewer's guide at any time.
  • Resolve all Sourcery comments: Comment @sourcery-ai resolve on the
    pull request to resolve all Sourcery comments. Useful if you've already
    addressed all the comments and don't want to see them anymore.
  • Dismiss all Sourcery reviews: Comment @sourcery-ai dismiss on the pull
    request to dismiss all existing Sourcery reviews. Especially useful if you
    want to start fresh with a new review - don't forget to comment
    @sourcery-ai review to trigger a new review!

Customizing Your Experience

Access your dashboard to:

  • Enable or disable review features such as the Sourcery-generated pull request
    summary, the reviewer's guide, and others.
  • Change the review language.
  • Add, remove or edit custom review instructions.
  • Adjust other review settings.

Getting Help

@github-actions

github-actions Bot commented May 27, 2026

Copy link
Copy Markdown

Regression validator

Category Count
new 651

No regressions or failures detected.

sourcery-ai[bot]
sourcery-ai Bot reviewed May 27, 2026
View reviewed changes

@sourcery-ai sourcery-ai Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Hey - I've reviewed your changes and they look great!

Sourcery is free for open source - if you like our reviews please consider sharing them ✨
Help me be more useful! Please click 👍 or 👎 on each comment and I'll use the feedback to improve your reviews.

@claude
fix: strengthen validators, add metrics to post_privesc_windows, add …
6e947c5 
…missing tests

Validators (P2/P3):
- validate_prototype_pollution: add 3rd FP check for payload echoed in
  error/validation message context (was: 2 checks, min: 3)
- validate_deserialization: add 3rd FP check for generic HTTP 5xx without
  any deserialization-specific indicator (was: 2 checks, min: 3)
- validate_idor: add raw_data to primary evidence signal — captures first
  accessible response body as forensic evidence (was: 0 raw_data, min: 1)

Metrics pipeline (P4):
- post_privesc_windows: add metrics.record_run() — function returned
  Windows commands without tracking usage in metrics pipeline

Test coverage (P4):
- tests/test_config.py: 23 tests covering defaults, env-var overrides,
  get_config() behavior for KamboConfig
- tests/test_docker_runner.py: 16 tests covering init, ensure_container,
  run() output parsing and exit code handling (Docker daemon mocked)
- tests/test_server.py: 18 tests covering tool registry, list_tools(),
  dispatch routing, metrics wiring (_historical_warning, flush_metrics),
  error handling and scope management

Total: 580 → 637 tests (all passing)

https://claude.ai/code/session_01En5ivp3mn72edV7neN1fJp
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@sourcery-ai sourcery-ai[bot] sourcery-ai[bot] left review comments

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@ktfth @claude