Skip to content

Fix CodeQL alerts and add release Makefile (v1.3.1)#29

Merged
kellenmurphy merged 1 commit into
mainfrom
fix/codeql-alerts
May 29, 2026
Merged

Fix CodeQL alerts and add release Makefile (v1.3.1)#29
kellenmurphy merged 1 commit into
mainfrom
fix/codeql-alerts

Conversation

@kellenmurphy

Copy link
Copy Markdown
Owner

Summary

  • Add permissions: contents: read to both CI workflows, resolving two actions/missing-workflow-permissions CodeQL alerts
  • Tighten test assertions from substring URL matches to exact equality checks, resolving two false-positive py/incomplete-url-substring-sanitization CodeQL alerts
  • Bump __version__ to 1.3.1
  • Add Makefile with make patch / make minor / make major targets for future releases

Test plan

  • CI passes (pytest 100% coverage)
  • All 4 CodeQL alerts close after merge

- Add permissions: contents: read to CI workflows (missing-workflow-permissions)
- Tighten test assertions to avoid incomplete-url-substring-sanitization pattern
- Bump version to 1.3.1
- Add Makefile with patch/minor/major release targets
@codecov-commenter

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

@kellenmurphy
kellenmurphy merged commit 51c517c into main May 29, 2026
8 checks passed
@kellenmurphy
kellenmurphy deleted the fix/codeql-alerts branch June 25, 2026 01:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants