Skip to content

fix: 10 - add missing regular expression anchors with re.fullmatch - #778

Merged
daniel-rdt merged 5 commits into
masterfrom
fix/security-fix-10
Jul 7, 2026
Merged

fix: 10 - add missing regular expression anchors with re.fullmatch#778
daniel-rdt merged 5 commits into
masterfrom
fix/security-fix-10

Conversation

@daniel-rdt

@daniel-rdt daniel-rdt commented Jul 2, 2026

Copy link
Copy Markdown
Member

Changes proposed in this Pull Request

This PR proposes to add missing regex anchors with re.fullmatch to the create_zenodo_deposition_cli utils script.

Tasks

  • Possibly upstream this change as the related code is not open-tyndp specific

Workflow

Open issues

Notes

The implementation was verified and tested with the following test script generated with generative AI:
verify_zenodo_url_parsing.py

Checklist

  • Security scan(s) show no high-severity bugs, critical vulnerabilities, or exposed secrets.
  • I tested my contribution locally and it works as intended.
  • Code and workflow changes are sufficiently documented.
  • Changed dependencies are added to pixi.toml (using pixi add <dependency-name>).
  • Changes in configuration options are added in config/config.default.yaml.
  • Changes in configuration options are documented in doc/configtables/*.csv.
  • Changes in configuration options are added in config/test/*.yaml.
  • The multiple weather/climate years test is passing locally (using pixi run -e open-tyndp tyndp-cyears-test).
  • Open-TYNDP SPDX license header added to all touched files.
  • For new data sources or versions, these instructions have been followed.
  • New rules are documented in the appropriate doc/*.rst files.
  • A release note doc/release_notes.rst is added.
  • Major features are documented with up-to-date information in doc/index.rst.
  • Module docstrings added to new Python scripts.

@daniel-rdt daniel-rdt self-assigned this Jul 2, 2026
@daniel-rdt daniel-rdt added SB Scenario Building CBA Cost Benefit Analysis labels Jul 2, 2026
@daniel-rdt
daniel-rdt marked this pull request as ready for review July 2, 2026 17:06
@daniel-rdt
daniel-rdt requested a review from tgilon July 2, 2026 17:06
@daniel-rdt daniel-rdt changed the title fix: add missing regular expression anchors with re.fullmatch fix: 10 - add missing regular expression anchors with re.fullmatch Jul 2, 2026

@tgilon tgilon left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for the fix, could be upstreamed too

Comment thread doc/release_notes.rst Outdated
@tgilon tgilon added security and removed SB Scenario Building CBA Cost Benefit Analysis labels Jul 6, 2026
@daniel-rdt
daniel-rdt enabled auto-merge (squash) July 7, 2026 10:01
@daniel-rdt
daniel-rdt merged commit ab8eacc into master Jul 7, 2026
6 of 7 checks passed
@daniel-rdt
daniel-rdt deleted the fix/security-fix-10 branch July 7, 2026 10:01
@daniel-rdt

Copy link
Copy Markdown
Member Author

Upstream PR opened in PyPSA#2225

@tgilon tgilon mentioned this pull request Jul 8, 2026
14 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants