Repository navigation
Conversation
Bumps the actions-deps group with 5 updates: | Package | From | To | | --- | --- | --- | | [ptr727/ProjectTemplate/.github/workflows/validate-task.yml](https://github.com/ptr727/projecttemplate) | `2.0.1192` | `2.0.1198` | | [ptr727/ProjectTemplate/.github/workflows/deploy-site-task.yml](https://github.com/ptr727/projecttemplate) | `2.0.1192` | `2.0.1198` | | [ptr727/ProjectTemplate/.github/workflows/merge-bot-task.yml](https://github.com/ptr727/projecttemplate) | `2.0.1192` | `2.0.1198` | | [ptr727/ProjectTemplate/.github/workflows/publish-plan-task.yml](https://github.com/ptr727/projecttemplate) | `2.0.1192` | `2.0.1198` | | [ptr727/ProjectTemplate/.github/workflows/build-release-task.yml](https://github.com/ptr727/projecttemplate) | `2.0.1192` | `2.0.1198` | Updates `ptr727/ProjectTemplate/.github/workflows/validate-task.yml` from 2.0.1192 to 2.0.1198 - [Release notes](https://github.com/ptr727/projecttemplate/releases) - [Changelog](https://github.com/ptr727/ProjectTemplate/blob/main/HISTORY.md) - [Commits](ptr727/ProjectTemplate@d7041d8...ab9d050) Updates `ptr727/ProjectTemplate/.github/workflows/deploy-site-task.yml` from 2.0.1192 to 2.0.1198 - [Release notes](https://github.com/ptr727/projecttemplate/releases) - [Changelog](https://github.com/ptr727/ProjectTemplate/blob/main/HISTORY.md) - [Commits](ptr727/ProjectTemplate@d7041d8...ab9d050) Updates `ptr727/ProjectTemplate/.github/workflows/merge-bot-task.yml` from 2.0.1192 to 2.0.1198 - [Release notes](https://github.com/ptr727/projecttemplate/releases) - [Changelog](https://github.com/ptr727/ProjectTemplate/blob/main/HISTORY.md) - [Commits](ptr727/ProjectTemplate@d7041d8...ab9d050) Updates `ptr727/ProjectTemplate/.github/workflows/publish-plan-task.yml` from 2.0.1192 to 2.0.1198 - [Release notes](https://github.com/ptr727/projecttemplate/releases) - [Changelog](https://github.com/ptr727/ProjectTemplate/blob/main/HISTORY.md) - [Commits](ptr727/ProjectTemplate@d7041d8...ab9d050) Updates `ptr727/ProjectTemplate/.github/workflows/build-release-task.yml` from 2.0.1192 to 2.0.1198 - [Release notes](https://github.com/ptr727/projecttemplate/releases) - [Changelog](https://github.com/ptr727/ProjectTemplate/blob/main/HISTORY.md) - [Commits](ptr727/ProjectTemplate@d7041d8...ab9d050) --- updated-dependencies: - dependency-name: ptr727/ProjectTemplate/.github/workflows/validate-task.yml dependency-version: 2.0.1198 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions-deps - dependency-name: ptr727/ProjectTemplate/.github/workflows/deploy-site-task.yml dependency-version: 2.0.1198 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions-deps - dependency-name: ptr727/ProjectTemplate/.github/workflows/merge-bot-task.yml dependency-version: 2.0.1198 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions-deps - dependency-name: ptr727/ProjectTemplate/.github/workflows/publish-plan-task.yml dependency-version: 2.0.1198 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions-deps - dependency-name: ptr727/ProjectTemplate/.github/workflows/build-release-task.yml dependency-version: 2.0.1198 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions-deps ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps the actions-deps group with 5 updates: | Package | From | To | | --- | --- | --- | | [ptr727/ProjectTemplate/.github/workflows/validate-task.yml](https://github.com/ptr727/projecttemplate) | `2.0.1198` | `2.0.1209` | | [ptr727/ProjectTemplate/.github/workflows/deploy-site-task.yml](https://github.com/ptr727/projecttemplate) | `2.0.1198` | `2.0.1209` | | [ptr727/ProjectTemplate/.github/workflows/merge-bot-task.yml](https://github.com/ptr727/projecttemplate) | `2.0.1198` | `2.0.1209` | | [ptr727/ProjectTemplate/.github/workflows/publish-plan-task.yml](https://github.com/ptr727/projecttemplate) | `2.0.1198` | `2.0.1209` | | [ptr727/ProjectTemplate/.github/workflows/build-release-task.yml](https://github.com/ptr727/projecttemplate) | `2.0.1198` | `2.0.1209` | Updates `ptr727/ProjectTemplate/.github/workflows/validate-task.yml` from 2.0.1198 to 2.0.1209 - [Release notes](https://github.com/ptr727/projecttemplate/releases) - [Changelog](https://github.com/ptr727/ProjectTemplate/blob/main/HISTORY.md) - [Commits](ptr727/ProjectTemplate@ab9d050...1faf16c) Updates `ptr727/ProjectTemplate/.github/workflows/deploy-site-task.yml` from 2.0.1198 to 2.0.1209 - [Release notes](https://github.com/ptr727/projecttemplate/releases) - [Changelog](https://github.com/ptr727/ProjectTemplate/blob/main/HISTORY.md) - [Commits](ptr727/ProjectTemplate@ab9d050...1faf16c) Updates `ptr727/ProjectTemplate/.github/workflows/merge-bot-task.yml` from 2.0.1198 to 2.0.1209 - [Release notes](https://github.com/ptr727/projecttemplate/releases) - [Changelog](https://github.com/ptr727/ProjectTemplate/blob/main/HISTORY.md) - [Commits](ptr727/ProjectTemplate@ab9d050...1faf16c) Updates `ptr727/ProjectTemplate/.github/workflows/publish-plan-task.yml` from 2.0.1198 to 2.0.1209 - [Release notes](https://github.com/ptr727/projecttemplate/releases) - [Changelog](https://github.com/ptr727/ProjectTemplate/blob/main/HISTORY.md) - [Commits](ptr727/ProjectTemplate@ab9d050...1faf16c) Updates `ptr727/ProjectTemplate/.github/workflows/build-release-task.yml` from 2.0.1198 to 2.0.1209 - [Release notes](https://github.com/ptr727/projecttemplate/releases) - [Changelog](https://github.com/ptr727/ProjectTemplate/blob/main/HISTORY.md) - [Commits](ptr727/ProjectTemplate@ab9d050...1faf16c) --- updated-dependencies: - dependency-name: ptr727/ProjectTemplate/.github/workflows/validate-task.yml dependency-version: 2.0.1209 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions-deps - dependency-name: ptr727/ProjectTemplate/.github/workflows/deploy-site-task.yml dependency-version: 2.0.1209 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions-deps - dependency-name: ptr727/ProjectTemplate/.github/workflows/merge-bot-task.yml dependency-version: 2.0.1209 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions-deps - dependency-name: ptr727/ProjectTemplate/.github/workflows/publish-plan-task.yml dependency-version: 2.0.1209 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions-deps - dependency-name: ptr727/ProjectTemplate/.github/workflows/build-release-task.yml dependency-version: 2.0.1209 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions-deps ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Retire the Media Parser Fuzz Gate, Since Its Inputs Are Trusted Every media file the gate and the normalizer read is the maintainer's own, so OPERATIONS.md "Trust Boundaries" rules out defending them against crafted shapes. The fixture builders the media gate tests used move to checks/tests/media_fixtures.py, and the fuzzer's own seed tests go with it. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> * Drop the Fixture Parameters Only the Fuzzer Passed Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> --------- Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
|
Important
This repository does not receive automatic reviews because it has fewer than 10 stars.
|
There was a problem hiding this comment.
🟢 Approval recommended
No active review issues remain, and the changes consistently remove the retired fuzz gate while updating the referenced reusable workflows.
No open issues 🎉
What changed in this PR
This pull request promotes the retirement of the media parser fuzz gate to main while updating reusable workflow references to ProjectTemplate 2.0.1209. Metadata, redaction, and personal-data validation remain active.
Changes:
- Removes the media parser fuzz gate, validation step, CLI coverage, tests, and documentation.
- Moves reusable media fixture builders into
checks/tests/media_fixtures.py. - Updates reusable workflow pins across validation, release, merge-bot, and deployment workflows.
| File | Description |
|---|---|
README.md |
Removes the retired fuzz-gate documentation. |
checks/tests/test_media_metadata_gate.py |
Uses shared fixtures and removes fuzz-gate-specific tests. |
checks/tests/test_cli_usage.py |
Removes the deleted fuzz gate from CLI coverage. |
checks/tests/media_fixtures.py |
Adds shared constructed-media fixtures. |
checks/README.md |
Removes the retired check and related references. |
checks/media_parser_fuzz_gate.py |
Deletes the retired fuzz-gate implementation. |
.github/workflows/test-pull-request.yml |
Updates the reusable validation workflow pin. |
.github/workflows/publish-release.yml |
Updates release planning, validation, and build workflow pins. |
.github/workflows/merge-bot-pull-request.yml |
Updates the merge-bot workflow pin. |
.github/workflows/deploy-site.yml |
Updates validation and deployment workflow pins. |
.github/actions/validate/action.yml |
Removes the retired fuzzing step. |
Review effort: Lite
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## main #571 +/- ##
===========================================
+ Coverage 53.98% 67.12% +13.13%
===========================================
Files 12 11 -1
Lines 3412 2494 -918
===========================================
- Hits 1842 1674 -168
+ Misses 1570 820 -750
Flags with carried forward coverage won't be shown. Click here to find out more. ☔ View full report in Codecov by Harness. 🚀 New features to boost your workflow:
|
Summary
Promotes the media parser fuzz gate's retirement to
main.checks/media_parser_fuzz_gate.pyand its step in the validate action. PerOPERATIONS.md"Trust Boundaries", nothing defends the media tooling against crafted files. The fixture builders the media gate tests used move tochecks/tests/media_fixtures.py, and the fuzzer's own tests and doc mentions go with it.develop's copies of the Dependabot action bumps already onmain.Nothing the server sends changes, so no deploy is owed.
Verification
cd checks && python3 -m unittest discover -s testspasses ondevelop.Issues
Closes #549
🤖 Generated with Claude Code