[PR #65] [MERGED] feat(python): upgrade ruff to v0.11.2, integrate flake8-bandit ruleset for security linting #115

Closed
opened 2026-02-15 21:15:50 -05:00 by yindo · 0 comments
Owner

📋 Pull Request Information

Original PR: https://github.com/langgenius/dify-plugin-sdks/pull/65
Author: @QuantumGhost
Created: 3/24/2025
Status: Merged
Merged: 3/24/2025
Merged by: @Yeuoly

Base: mainHead: feat/flask8-bandit


📝 Commits (4)

  • cb9cbf5 chore(python): update .gitignore for Python SDK
  • 7222eb7 chore: add .editorconfig for consistent formatting
  • a5e3842 chore(python): upgrade ruff version to v0.11.2
  • d6f0c43 feat(python): Integrate flake8-bandit ruleset for security linting

📊 Changes

9 files changed (+151 additions, -33 deletions)

View changed files

.editorconfig (+18 -0)
📝 python/.gitignore (+93 -8)
📝 python/.ruff.toml (+15 -0)
📝 python/dify_plugin/interfaces/model/openai_compatible/speech2text.py (+1 -1)
📝 python/dify_plugin/interfaces/model/openai_compatible/tts.py (+1 -1)
📝 python/dify_plugin/invocations/file.py (+1 -1)
📝 python/examples/jina/models/text_embedding/text_embedding.py (+1 -1)
📝 python/pdm.lock (+20 -20)
📝 python/pyproject.toml (+1 -1)

📄 Description

Enable the flake8-bandit (S) ruleset in ruff to enforce security-related
best practices and mitigate potential vulnerabilities in the codebase.

Suppress existing issues in the current code using noqa comments, primarily for
instances of requests calls without a specified timeout parameter.


🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/langgenius/dify-plugin-sdks/pull/65 **Author:** [@QuantumGhost](https://github.com/QuantumGhost) **Created:** 3/24/2025 **Status:** ✅ Merged **Merged:** 3/24/2025 **Merged by:** [@Yeuoly](https://github.com/Yeuoly) **Base:** `main` ← **Head:** `feat/flask8-bandit` --- ### 📝 Commits (4) - [`cb9cbf5`](https://github.com/langgenius/dify-plugin-sdks/commit/cb9cbf57f7ee71cf7da66252995252d8e775f158) chore(python): update .gitignore for Python SDK - [`7222eb7`](https://github.com/langgenius/dify-plugin-sdks/commit/7222eb7ef25ee3afceb67d9216b8ff2ddd4d338a) chore: add .editorconfig for consistent formatting - [`a5e3842`](https://github.com/langgenius/dify-plugin-sdks/commit/a5e3842b4592106dfd2d49d5578a50b06ff1d060) chore(python): upgrade ruff version to v0.11.2 - [`d6f0c43`](https://github.com/langgenius/dify-plugin-sdks/commit/d6f0c4397516bd1935fb88dc55980e741d0dda71) feat(python): Integrate flake8-bandit ruleset for security linting ### 📊 Changes **9 files changed** (+151 additions, -33 deletions) <details> <summary>View changed files</summary> ➕ `.editorconfig` (+18 -0) 📝 `python/.gitignore` (+93 -8) 📝 `python/.ruff.toml` (+15 -0) 📝 `python/dify_plugin/interfaces/model/openai_compatible/speech2text.py` (+1 -1) 📝 `python/dify_plugin/interfaces/model/openai_compatible/tts.py` (+1 -1) 📝 `python/dify_plugin/invocations/file.py` (+1 -1) 📝 `python/examples/jina/models/text_embedding/text_embedding.py` (+1 -1) 📝 `python/pdm.lock` (+20 -20) 📝 `python/pyproject.toml` (+1 -1) </details> ### 📄 Description Enable the flake8-bandit (S) ruleset in ruff to enforce security-related best practices and mitigate potential vulnerabilities in the codebase. Suppress existing issues in the current code using `noqa` comments, primarily for instances of `requests` calls without a specified `timeout` parameter. --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
yindo added the pull-request label 2026-02-15 21:15:50 -05:00
yindo closed this issue 2026-02-15 21:15:50 -05:00
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: langgenius/dify-plugin-sdks#115