2303 Commits

Author SHA1 Message Date
Kovid Goyal
d81047e595
Another CVE against an unused filetype in ffmpeg 2025-12-04 15:20:21 +05:30
Kovid Goyal
bf51250406
Ignore DoS in python stdlib when reading from malicious HTTP server
Not important enough to risk updating past python 3.11. Will be fixed if
and when there is a fixed version of python 3.11 released.
2025-12-04 15:12:23 +05:30
Kovid Goyal
aecb0ed407
Another tarfile.extract call site 2025-12-02 20:36:28 +05:30
Kovid Goyal
3612060714
Forgot to add tzdata install to arch CI 2025-11-30 20:37:57 +05:30
Kovid Goyal
2a10f39e68
Use std::to_chars for formatting float numbers as well
this gives us a larger representation in many cases since it tries to
represent floats to max precision, but that tradeoff is worth it for
dropping 2000 lines of C code.
2025-11-19 10:56:27 +05:30
Kovid Goyal
be304b6f99
Use std::to_chars instead of stb for uint->hex 2025-11-19 10:39:38 +05:30
un-pogaz
ce13dfbb43 iteritems (manual 2) 2025-11-18 16:14:51 +01:00
un-pogaz
8ed12a2e78 itervalues (regex 3)
(set|frozenset|list|tuple|enumerate|sorted|max|min|sum)\(itervalues\(([\w\.]+)\)
\1(\2.values()

replace itervalues() used on simple variables/attributs in a know iterable
2025-11-18 16:14:51 +01:00
un-pogaz
1903f69416 urllib.request import (manual) 2025-11-18 15:39:52 +01:00
un-pogaz
2ca38cb2c1 http_server import (manual) 2025-11-18 15:39:52 +01:00
un-pogaz
072d8f2fec unicode_type (regex)
unicode_type(
str(
2025-11-18 15:39:51 +01:00
un-pogaz
47257e1262 codepoint_to_chr (regex)
codepoint_to_chr(
chr(
2025-11-18 15:39:51 +01:00
un-pogaz
bb9272f300 iteritems (regex 1)
in iteritems\(([\w\.]+)\)
in \1.items()

replace iteritems() used on simple variables/attributs in a for loop
2025-11-18 15:39:50 +01:00
Kovid Goyal
bfd86222ae
Dont scan grype itself with grype 2025-11-02 15:43:19 +05:30
Kovid Goyal
54dfc86710
... 2025-10-17 10:59:55 +05:30
Kovid Goyal
cb56da890c
Update grype db as part of installation 2025-10-17 10:29:45 +05:30
Kovid Goyal
ced66a2815
Fix false positive CVEs 2025-10-17 09:54:37 +05:30
Kovid Goyal
c41ff6ef85
Ignore spurious dep CVE 2025-10-12 07:01:48 +05:30
un-pogaz
f9d745f500 slice to remove prefix or suffix (auto-fix)
ruff 'FURB188'
2025-10-11 17:21:25 +02:00
un-pogaz
e428bb13ce refurbishing code (auto-fix)
ruff 'FURB'
2025-10-11 17:21:25 +02:00
un-pogaz
4553b9dc28 pep8 2025-10-11 17:21:25 +02:00
Kovid Goyal
1798fb5439
Merge branch 'ruff-pylint' of https://github.com/un-pogaz/calibre 2025-10-11 08:35:13 +05:30
Kovid Goyal
8820bffc86
Only change CMakeLists.txt for headless if actually building with Qt >= 6.10 2025-10-11 08:26:28 +05:30
un-pogaz
2c3edf5ad7 repeated equality comparison (extra-edit) 2025-10-10 08:24:40 +02:00
un-pogaz
0dc4e67529 repeated equality comparison (auto-fix)
ruff 'PLR1714' --unsafe-fixes
2025-10-10 08:24:40 +02:00
un-pogaz
9ef0ef4a8b collapsible else if (auto-fix)
ruff 'PLR5501'
2025-10-10 08:24:40 +02:00
un-pogaz
a2e4515353 manual from import (auto-fix)
ruff 'PLR0402'
2025-10-10 08:24:39 +02:00
Kovid Goyal
13422da467
Require HSM for publish previews/betas as well 2025-10-10 09:43:55 +05:30
Kovid Goyal
a054cbb081
Ignore some ffmpeg CVEs in depscan 2025-10-10 07:37:08 +05:30
Kovid Goyal
92b80412bf
Abort publish early is HSM not available 2025-10-02 09:16:50 +05:30
un-pogaz
1ba1407c8b fix exception because try to read a byte object 2025-09-29 14:06:14 +02:00
Kovid Goyal
ebc4c3aff6
Arch now requires libwebp-utils for cwebp 2025-09-25 08:09:03 +05:30
Kovid Goyal
0fb0fade07
Also scan windows bundle 2025-09-24 10:29:44 +05:30
Kovid Goyal
0c72143691
Proper fix for permission error in depscan 2025-09-24 10:13:55 +05:30
Kovid Goyal
f47598f66f
... 2025-09-24 10:07:57 +05:30
Kovid Goyal
74bd44574f
Bump version of deps for CVEs 2025-09-23 17:09:57 +05:30
Kovid Goyal
9680ef23fe
Code to run grype to check dependencies for CVEs in CI 2025-09-23 16:30:27 +05:30
Kovid Goyal
5067e48eac
Also retry downloads used during bootstrap 2025-09-22 12:42:05 +05:30
Kovid Goyal
d3571561cc
Retry tx download in CI script 2025-09-22 12:24:14 +05:30
Kovid Goyal
461ec48174
Avoid extra interpreter startup in hook 2025-09-21 12:31:49 +05:30
Kovid Goyal
8d8580973d
... 2025-09-21 11:03:08 +05:30
Kovid Goyal
89652f81f0
Fix pre-commit hook filter 2025-09-21 06:13:02 +05:30
Kovid Goyal
cf725bee8c
handle missing follow_symlinks on windows 2025-09-21 06:06:17 +05:30
Kovid Goyal
74662373cb
Cleanup previous PR
Run the hooks using calibre-debug directly no need to go through sh
2025-09-20 16:51:15 +05:30
un-pogaz
2458e20dba add pre-commit git hook 2025-09-20 11:11:41 +02:00
un-pogaz
a589785ad2 support passing a file as argument for check
and quiet ruff
2025-09-20 11:11:41 +02:00
un-pogaz
5fed12a0ca windows want its executable as first parameter 2025-09-20 11:11:41 +02:00
un-pogaz
e7e1f86183 setup.py git_hooks
Install/uninstall git hooks
2025-09-20 11:11:41 +02:00
Kovid Goyal
b32e33777a
Rename git hook script
Its a commit message hook not a pre commit hook
2025-09-18 14:52:25 +05:30
Kovid Goyal
cb3ae447dc
Make CodeQL happy
Dont output github token to stdout during build
2025-09-15 14:47:46 +05:30