Skip to content

Promote the Media Parser Fuzz Gate Retirement to Main - #571

Merged
ptr727 merged 3 commits into
mainfrom
develop
Oct 30, 2026
Merged

ptr727 merged 3 commits into
mainfrom
develop

Conversation

@ptr727

@ptr727 ptr727 commented Oct 30, 2026

Copy link
Copy Markdown
Owner

Summary

Promotes the media parser fuzz gate's retirement to main.

  • #570 deletes checks/media_parser_fuzz_gate.py and its step in the validate action. Per OPERATIONS.md "Trust Boundaries", nothing defends the media tooling against crafted files. The fixture builders the media gate tests used move to checks/tests/media_fixtures.py, and the fuzzer's own tests and doc mentions go with it.
  • #566 and #568 are develop's copies of the Dependabot action bumps already on main.

Nothing the server sends changes, so no deploy is owed.

Verification

Issues

Closes #549

🤖 Generated with Claude Code

dependabot Bot and others added 3 commits October 29, 2026 12:38
Bumps the actions-deps group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [ptr727/ProjectTemplate/.github/workflows/validate-task.yml](https://github.com/ptr727/projecttemplate) | `2.0.1192` | `2.0.1198` |
| [ptr727/ProjectTemplate/.github/workflows/deploy-site-task.yml](https://github.com/ptr727/projecttemplate) | `2.0.1192` | `2.0.1198` |
| [ptr727/ProjectTemplate/.github/workflows/merge-bot-task.yml](https://github.com/ptr727/projecttemplate) | `2.0.1192` | `2.0.1198` |
| [ptr727/ProjectTemplate/.github/workflows/publish-plan-task.yml](https://github.com/ptr727/projecttemplate) | `2.0.1192` | `2.0.1198` |
| [ptr727/ProjectTemplate/.github/workflows/build-release-task.yml](https://github.com/ptr727/projecttemplate) | `2.0.1192` | `2.0.1198` |


Updates `ptr727/ProjectTemplate/.github/workflows/validate-task.yml` from 2.0.1192 to 2.0.1198
- [Release notes](https://github.com/ptr727/projecttemplate/releases)
- [Changelog](https://github.com/ptr727/ProjectTemplate/blob/main/HISTORY.md)
- [Commits](ptr727/ProjectTemplate@d7041d8...ab9d050)

Updates `ptr727/ProjectTemplate/.github/workflows/deploy-site-task.yml` from 2.0.1192 to 2.0.1198
- [Release notes](https://github.com/ptr727/projecttemplate/releases)
- [Changelog](https://github.com/ptr727/ProjectTemplate/blob/main/HISTORY.md)
- [Commits](ptr727/ProjectTemplate@d7041d8...ab9d050)

Updates `ptr727/ProjectTemplate/.github/workflows/merge-bot-task.yml` from 2.0.1192 to 2.0.1198
- [Release notes](https://github.com/ptr727/projecttemplate/releases)
- [Changelog](https://github.com/ptr727/ProjectTemplate/blob/main/HISTORY.md)
- [Commits](ptr727/ProjectTemplate@d7041d8...ab9d050)

Updates `ptr727/ProjectTemplate/.github/workflows/publish-plan-task.yml` from 2.0.1192 to 2.0.1198
- [Release notes](https://github.com/ptr727/projecttemplate/releases)
- [Changelog](https://github.com/ptr727/ProjectTemplate/blob/main/HISTORY.md)
- [Commits](ptr727/ProjectTemplate@d7041d8...ab9d050)

Updates `ptr727/ProjectTemplate/.github/workflows/build-release-task.yml` from 2.0.1192 to 2.0.1198
- [Release notes](https://github.com/ptr727/projecttemplate/releases)
- [Changelog](https://github.com/ptr727/ProjectTemplate/blob/main/HISTORY.md)
- [Commits](ptr727/ProjectTemplate@d7041d8...ab9d050)

---
updated-dependencies:
- dependency-name: ptr727/ProjectTemplate/.github/workflows/validate-task.yml
  dependency-version: 2.0.1198
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions-deps
- dependency-name: ptr727/ProjectTemplate/.github/workflows/deploy-site-task.yml
  dependency-version: 2.0.1198
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions-deps
- dependency-name: ptr727/ProjectTemplate/.github/workflows/merge-bot-task.yml
  dependency-version: 2.0.1198
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions-deps
- dependency-name: ptr727/ProjectTemplate/.github/workflows/publish-plan-task.yml
  dependency-version: 2.0.1198
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions-deps
- dependency-name: ptr727/ProjectTemplate/.github/workflows/build-release-task.yml
  dependency-version: 2.0.1198
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps the actions-deps group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [ptr727/ProjectTemplate/.github/workflows/validate-task.yml](https://github.com/ptr727/projecttemplate) | `2.0.1198` | `2.0.1209` |
| [ptr727/ProjectTemplate/.github/workflows/deploy-site-task.yml](https://github.com/ptr727/projecttemplate) | `2.0.1198` | `2.0.1209` |
| [ptr727/ProjectTemplate/.github/workflows/merge-bot-task.yml](https://github.com/ptr727/projecttemplate) | `2.0.1198` | `2.0.1209` |
| [ptr727/ProjectTemplate/.github/workflows/publish-plan-task.yml](https://github.com/ptr727/projecttemplate) | `2.0.1198` | `2.0.1209` |
| [ptr727/ProjectTemplate/.github/workflows/build-release-task.yml](https://github.com/ptr727/projecttemplate) | `2.0.1198` | `2.0.1209` |


Updates `ptr727/ProjectTemplate/.github/workflows/validate-task.yml` from 2.0.1198 to 2.0.1209
- [Release notes](https://github.com/ptr727/projecttemplate/releases)
- [Changelog](https://github.com/ptr727/ProjectTemplate/blob/main/HISTORY.md)
- [Commits](ptr727/ProjectTemplate@ab9d050...1faf16c)

Updates `ptr727/ProjectTemplate/.github/workflows/deploy-site-task.yml` from 2.0.1198 to 2.0.1209
- [Release notes](https://github.com/ptr727/projecttemplate/releases)
- [Changelog](https://github.com/ptr727/ProjectTemplate/blob/main/HISTORY.md)
- [Commits](ptr727/ProjectTemplate@ab9d050...1faf16c)

Updates `ptr727/ProjectTemplate/.github/workflows/merge-bot-task.yml` from 2.0.1198 to 2.0.1209
- [Release notes](https://github.com/ptr727/projecttemplate/releases)
- [Changelog](https://github.com/ptr727/ProjectTemplate/blob/main/HISTORY.md)
- [Commits](ptr727/ProjectTemplate@ab9d050...1faf16c)

Updates `ptr727/ProjectTemplate/.github/workflows/publish-plan-task.yml` from 2.0.1198 to 2.0.1209
- [Release notes](https://github.com/ptr727/projecttemplate/releases)
- [Changelog](https://github.com/ptr727/ProjectTemplate/blob/main/HISTORY.md)
- [Commits](ptr727/ProjectTemplate@ab9d050...1faf16c)

Updates `ptr727/ProjectTemplate/.github/workflows/build-release-task.yml` from 2.0.1198 to 2.0.1209
- [Release notes](https://github.com/ptr727/projecttemplate/releases)
- [Changelog](https://github.com/ptr727/ProjectTemplate/blob/main/HISTORY.md)
- [Commits](ptr727/ProjectTemplate@ab9d050...1faf16c)

---
updated-dependencies:
- dependency-name: ptr727/ProjectTemplate/.github/workflows/validate-task.yml
  dependency-version: 2.0.1209
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions-deps
- dependency-name: ptr727/ProjectTemplate/.github/workflows/deploy-site-task.yml
  dependency-version: 2.0.1209
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions-deps
- dependency-name: ptr727/ProjectTemplate/.github/workflows/merge-bot-task.yml
  dependency-version: 2.0.1209
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions-deps
- dependency-name: ptr727/ProjectTemplate/.github/workflows/publish-plan-task.yml
  dependency-version: 2.0.1209
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions-deps
- dependency-name: ptr727/ProjectTemplate/.github/workflows/build-release-task.yml
  dependency-version: 2.0.1209
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Retire the Media Parser Fuzz Gate, Since Its Inputs Are Trusted

Every media file the gate and the normalizer read is the maintainer's own,
so OPERATIONS.md "Trust Boundaries" rules out defending them against crafted
shapes. The fixture builders the media gate tests used move to
checks/tests/media_fixtures.py, and the fuzzer's own seed tests go with it.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* Drop the Fixture Parameters Only the Fuzzer Passed

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
Copilot AI lite review requested due to automatic review settings October 30, 2026 14:29
@coderabbitai

coderabbitai Bot commented Oct 30, 2026

Copy link
Copy Markdown

Important

  • 🔍 Trigger review

This repository does not receive automatic reviews because it has fewer than 10 stars.

Run configuration
  • Source mode: Auto
  • Repository: Unavailable
  • Branch: Unavailable
  • File: No configuration file from this repository applied
  • Commit: Unavailable
  • Layers: Organization UI
  • Review profile: ASSERTIVE
  • Plan: Advanced
  • Run ID: 3c5c0482-7285-4888-bc50-bac45cf34c70
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟢 Approval recommended

No active review issues remain, and the changes consistently remove the retired fuzz gate while updating the referenced reusable workflows.

No open issues 🎉

What changed in this PR

This pull request promotes the retirement of the media parser fuzz gate to main while updating reusable workflow references to ProjectTemplate 2.0.1209. Metadata, redaction, and personal-data validation remain active.

Changes:

  • Removes the media parser fuzz gate, validation step, CLI coverage, tests, and documentation.
  • Moves reusable media fixture builders into checks/tests/media_fixtures.py.
  • Updates reusable workflow pins across validation, release, merge-bot, and deployment workflows.
File Description
README.md Removes the retired fuzz-gate documentation.
checks/​tests/​test_media_metadata_gate.py Uses shared fixtures and removes fuzz-gate-specific tests.
checks/​tests/​test_cli_usage.py Removes the deleted fuzz gate from CLI coverage.
checks/​tests/​media_fixtures.py Adds shared constructed-media fixtures.
checks/​README.md Removes the retired check and related references.
checks/​media_parser_fuzz_gate.py Deletes the retired fuzz-gate implementation.
.github/​workflows/​test-pull-request.yml Updates the reusable validation workflow pin.
.github/​workflows/​publish-release.yml Updates release planning, validation, and build workflow pins.
.github/​workflows/​merge-bot-pull-request.yml Updates the merge-bot workflow pin.
.github/​workflows/​deploy-site.yml Updates validation and deployment workflow pins.
.github/​actions/​validate/​action.yml Removes the retired fuzzing step.

Review effort: Lite

@codecov

codecov Bot commented Oct 30, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 67.12%. Comparing base (b09f9e4) to head (3b107de).
⚠️ Report is 167 commits behind head on main.

Additional details and impacted files
@@             Coverage Diff             @@
##             main     #571       +/-   ##
===========================================
+ Coverage   53.98%   67.12%   +13.13%     
===========================================
  Files          12       11        -1     
  Lines        3412     2494      -918     
===========================================
- Hits         1842     1674      -168     
+ Misses       1570      820      -750     
Flag Coverage Δ
python-3.13 67.12% <ø> (+13.13%) ⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@ptr727
ptr727 merged commit 72c3cd4 into main Oct 30, 2026
13 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Retire the Media Parser Fuzz Gate, Since Its Inputs Are Trusted

2 participants