From 609050f0e70e0ad365fd5f1e9001dac6e8930740 Mon Sep 17 00:00:00 2001 From: bitWarrior <164793+bitWarrior@users.noreply.github.com> Date: Thu, 3 Sep 2026 12:19:14 -0700 Subject: [PATCH] Bump version to 1.3.0 A security release: .gitignore no longer hides tracked files from a directory walk, so a pull request cannot ignore a file, force-add it, and slip it past `codesnake check src/`. Anyone running CodeSnake as a gate over code they do not control should upgrade; the fix needs no flag or CI change. Co-Authored-By: Claude Opus 5 Claude-Session: https://claude.ai/code/session_0114gUUe4CxYr8W8oC95ffmD --- CHANGELOG.md | 8 +++++++- docs/INTEGRATIONS.md | 4 ++-- src/codesnake/_version.py | 2 +- 3 files changed, 10 insertions(+), 4 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 75fcc17..d6d219b 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -6,6 +6,11 @@ All notable changes to CodeSnake are documented here. The format follows ## [Unreleased] +## [1.3.0] - 2026-09-03 + +A security fix for anyone using CodeSnake as a CI gate. Upgrade if you run it against +pull requests you do not control. + ### Fixed - **`.gitignore` no longer hides committed files from a directory walk.** git's own @@ -128,7 +133,8 @@ A correctness, precision, and packaging release. 189 tests, up from 91. - Version single-sourced from `codesnake/_version.py`. - MIT `LICENSE` added, with PEP 639 metadata; CI on Python 3.10 through 3.13. -[Unreleased]: https://github.com/bitWarrior/codesnake/compare/v1.2.1...HEAD +[Unreleased]: https://github.com/bitWarrior/codesnake/compare/v1.3.0...HEAD +[1.3.0]: https://github.com/bitWarrior/codesnake/compare/v1.2.1...v1.3.0 [1.2.1]: https://github.com/bitWarrior/codesnake/compare/v1.2.0...v1.2.1 [1.2.0]: https://github.com/bitWarrior/codesnake/compare/v1.1.0...v1.2.0 [1.1.0]: https://github.com/bitWarrior/codesnake/releases/tag/v1.1.0 diff --git a/docs/INTEGRATIONS.md b/docs/INTEGRATIONS.md index 6410cbe..ee92c4b 100644 --- a/docs/INTEGRATIONS.md +++ b/docs/INTEGRATIONS.md @@ -42,7 +42,7 @@ repos: ``` To have pre-commit manage the install instead, use `language: python` with -`additional_dependencies: ["git+https://github.com/bitWarrior/codesnake@v1.2.1"]`. +`additional_dependencies: ["git+https://github.com/bitWarrior/codesnake@v1.3.0"]`. ## GitHub Actions @@ -76,7 +76,7 @@ jobs: - uses: actions/setup-python@v7 with: python-version: "3.12" - - run: pip install "git+https://github.com/bitWarrior/codesnake@v1.2.1" + - run: pip install "git+https://github.com/bitWarrior/codesnake@v1.3.0" - run: codesnake check --format github --no-color src/ ``` diff --git a/src/codesnake/_version.py b/src/codesnake/_version.py index a6ec462..c85bae2 100644 --- a/src/codesnake/_version.py +++ b/src/codesnake/_version.py @@ -1,3 +1,3 @@ """Single source of truth for the package version (read by pyproject.toml).""" -__version__ = "1.2.1" +__version__ = "1.3.0"