Changes proposed in this Pull Request

This PR proposes to add missing validation of ZENODO_API_URL an deposition_id to the create_zenodo_deposition_cli utils script to safeguard against URL manipulation.

Tasks

• Possibly upstream this change as the related code is not open-tyndp specific

Workflow

Open issues

Notes

The following test script was used to verify the implementation:
verify_zenodo_api_validation.py

Generative AI was used to assist with code implementation of this PR. All content has been reviewed, verified, and is the responsibility of the author.

Checklist

• Security scan(s) show no high-severity bugs, critical vulnerabilities, or exposed secrets.
• I tested my contribution locally and it works as intended.
• Code and workflow changes are sufficiently documented.
• Changed dependencies are added to pixi.toml (using pixi add <dependency-name>).
• Changes in configuration options are added in config/config.default.yaml.
• Changes in configuration options are documented in doc/configtables/*.csv.
• Changes in configuration options are added in config/test/*.yaml.
• The multiple weather/climate years test is passing locally (using pixi run -e open-tyndp tyndp-cyears-test).
• Open-TYNDP SPDX license header added to all touched files.
• For new data sources or versions, these instructions have been followed.
• New rules are documented in the appropriate doc/*.rst files.
• A release note doc/release_notes.rst is added.
• Major features are documented with up-to-date information in doc/index.rst.
• Module docstrings added to new Python scripts.