Update logging to display more locals #105
There are no files selected for viewing
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
|
|
@@ -10,66 +10,65 @@ class ContextUpdater(ContextHook): | |
|
|
||
| @override | ||
| def hook(self, context: dict[Any, Any]) -> dict[Any, Any]: | ||
| context["uv_version"] = "0.9.21" | ||
| context["pnpm_version"] = "10.27.0" | ||
coderabbitai[bot] marked this conversation as resolved.
Show resolved
Hide resolved
|
||
| context["pre_commit_version"] = "4.5.0" | ||
| context["pyright_version"] = ">=1.1.407" | ||
| context["pytest_version"] = ">=9.0.2" | ||
| context["pytest_randomly_version"] = ">=4.0.1" | ||
| context["pytest_cov_version"] = ">=7.0.0" | ||
| context["ty_version"] = ">=0.0.9" | ||
|
There was a problem hiding this comment. The PR description states "updates structlog config to include more information" and mentions updating logging to display more locals, but there are no visible changes to structlog configuration files (such as logger_config.py) in this diff. The primary change appears to be the ty package version bump from 0.0.2 to 0.0.9, along with other dependency updates. If the logging configuration was actually changed, those changes may not be included in this PR. Otherwise, the PR description should be updated to accurately reflect that this is primarily a dependency update PR. |
||
| context["copier_version"] = "==9.11.0" | ||
| context["copier_template_extensions_version"] = "==0.3.3" | ||
| context["sphinx_version"] = "9.0.4" | ||
| context["pulumi_version"] = ">=3.214.1" | ||
| context["pulumi_aws_version"] = ">=7.15.0" | ||
| context["pulumi_aws_native_version"] = ">=1.47.0" | ||
| context["pulumi_command_version"] = ">=1.1.3" | ||
| context["pulumi_github_version"] = ">=6.10.0" | ||
| context["pulumi_okta_version"] = ">=6.2.0" | ||
| context["boto3_version"] = ">=1.42.11" | ||
| context["ephemeral_pulumi_deploy_version"] = ">=0.0.6" | ||
| context["pydantic_version"] = ">=2.12.5" | ||
| context["pyinstaller_version"] = ">=6.17.0" | ||
| context["setuptools_version"] = "80.7.1" | ||
| context["strawberry_graphql_version"] = ">=0.287.0" | ||
| context["fastapi_version"] = ">=0.128.0" | ||
| context["fastapi_offline_version"] = ">=1.7.4" | ||
| context["uvicorn_version"] = ">=0.40.0" | ||
| context["lab_auto_pulumi_version"] = ">=0.1.18" | ||
| context["ariadne_codegen_version"] = ">=0.17.0" | ||
| context["pytest_mock_version"] = ">=3.15.1" | ||
| context["uuid_utils_version"] = ">=0.12.0" | ||
| context["syrupy_version"] = ">=5.0.0" | ||
| context["structlog_version"] = ">=25.5.0" | ||
| context["httpx_version"] = "0.28.1" | ||
| context["python_kiota_bundle_version"] = ">=1.9.8" | ||
| context["vcrpy_version"] = ">=8.1.1" | ||
| context["pytest_recording_version"] = ">=0.13.4" | ||
| context["pytest_asyncio_version"] = ">=1.3.0" | ||
| context["pytest_reserial_version"] = ">=0.6.0" | ||
|
|
||
| context["default_node_version"] = "24.11.1" | ||
|
Contributor
There was a problem hiding this comment. 🧩 Analysis chain🏁 Script executed: #!/bin/bash
# Check for any remaining references to the old key name
echo "=== Searching for old 'node_version' references (excluding default_node_version) ==="
rg -n 'node_version' --type-add 'jinja:*.jinja' --type-add 'jinja:*.j2' -g '!extensions/context.py' | grep -v 'default_node_version' || echo "No old references found"
echo ""
echo "=== Verifying new 'default_node_version' usage ==="
rg -n 'default_node_version' --type-add 'jinja:*.jinja' --type-add 'jinja:*.j2'
echo ""
echo "=== Checking templates more broadly (*.html, *.j2, *.jinja) ==="
find . -type f \( -name "*.jinja" -o -name "*.j2" -o -name "*.html" \) -exec grep -l 'node_version\|default_node_version' {} \;Repository: LabAutomationAndScreening/copier-nuxt-python-intranet-app Length of output: 1197 Templates still reference old Verification found that templates have NOT been updated to use the new
Additionally, 🤖 Prompt for AI Agents |
||
| context["nuxt_ui_version"] = "^4.3.0" | ||
| context["nuxt_version"] = "^4.2.2" | ||
| context["nuxt_icon_version"] = "^2.1.1" | ||
| context["typescript_version"] = "^5.9.3" | ||
| context["playwright_version"] = "^1.57.0" | ||
| context["vue_version"] = "^3.5.26" | ||
| context["vue_tsc_version"] = "^3.2.1" | ||
| context["vue_devtools_api_version"] = "^8.0.0" | ||
| context["vue_router_version"] = "^4.6.4" | ||
| context["dotenv_cli_version"] = "^11.0.0" | ||
| context["faker_version"] = "^10.2.0" | ||
| context["vitest_version"] = "^3.2.4" | ||
| context["eslint_version"] = "~9.38.0" | ||
| context["nuxt_eslint_version"] = "^1.12.1" | ||
| context["zod_version"] = "^4.3.5" | ||
| context["zod_from_json_schema_version"] = "^0.5.1" | ||
| context["nuxt_apollo_version"] = "5.0.0-alpha.15" | ||
| context["graphql_codegen_cli_version"] = "^6.1.0" | ||
| context["graphql_codegen_typescript_version"] = "^5.0.7" | ||
| context["graphql_tools_mock_version"] = "^9.1.0" | ||
| context["tailwindcss_version"] = "^4.1.11" | ||
| context["iconify_vue_version"] = "^5.0.0" | ||
|
|
@@ -79,7 +78,7 @@ def hook(self, context: dict[Any, Any]) -> dict[Any, Any]: | |
| context["vue_test_utils_version"] = "^2.4.6" | ||
| context["nuxt_test_utils_version"] = "3.19.1" | ||
| context["vue_eslint_parser_version"] = "^10.1.3" | ||
| context["happy_dom_version"] = "^20.0.11" | ||
| context["node_kiota_bundle_version"] = "1.0.0-preview.99" | ||
|
|
||
| context["gha_checkout"] = "v6.0.1" | ||
|
|
||
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
🧩 Analysis chain
🏁 Script executed:
Repository: LabAutomationAndScreening/copier-nuxt-python-intranet-app
Length of output: 126
🏁 Script executed:
Repository: LabAutomationAndScreening/copier-nuxt-python-intranet-app
Length of output: 1961
🏁 Script executed:
Repository: LabAutomationAndScreening/copier-nuxt-python-intranet-app
Length of output: 294
🌐 Web query:
typos v1 release crate-ci github💡 Result:
Here are the relevant pages and how to reference a v1 release of crate-ci/typos in CI:
If you want, tell me which exact v1.* release you need and I’ll fetch its release notes and downloadable assets.
Sources:
[1] crate-ci/typos — Releases (GitHub).
[2] crate-ci/typos — README (GitHub).
[3] jas docs — example pinning typos to a v1.* release.
🌐 Web query:
check-jsonschema 0.36.0 release💡 Result:
check-jsonschema 0.36.0 was released in mid‑December 2025 — the PyPI artifacts were uploaded Dec 15, 2025. Key changes: updated many vendored schemas (bitbucket-pipelines, buildkite, circle-ci, dependabot, gitlab-ci, mergify, readthedocs, renovate, snapcraft) and added a GitHub Discussion category forms schema and pre-commit hook. [1][2][3]
Sources:
🌐 Web query:
check-json5 v1.0.1 release💡 Result:
json5 v1.0.1 was released on March 18, 2018. [1][2]
Sources:
🌐 Web query:
ruff v0.14.10 release security💡 Result:
Short answer: ruff v0.14.10 was released (Dec 18, 2025) and there are no public/security advisories affecting v0.14.10 that the major trackers show — upgrade to 0.14.10 to get the latest fixes/features. [1][2][4]
Notes / sources:
If you want, I can fetch the exact changelog entries for 0.14.10 or check specific CVE databases (NVD, GH Security Advisories) for additional confirmation.
🌐 Web query:
typos check-jsonschema check-json5 ruff security advisories 2025 2026💡 Result:
Short summary of known security advisories (2024–Jan 5, 2026) for the packages you listed:
check-jsonschema — Cache-confusion vulnerability (CVE-2024-53848). Fixed by upgrading to >= 0.30.0; workarounds: --no-cache or use local schema files. [1][2]
check-json5 / json5 — Known prototype-pollution advisory (GHSA published Dec 2022; patched in later json5 releases). Project security policy and advisories are on the repo. Watch json5 GitHub advisories for updates. [3][4]
ruff — Multiple advisories in 2025 (including GHSA/CVE-related fixes such as CVE-2025-4574 / rebuilds to pick safe crossbeam-channel versions and other downstream fixes); distributions published sec updates (Fedora advisories). Follow ruff releases/changelog for patched versions. [5][6]
typos (and action-typos) — supply-chain incident: reviewdog/action-setup compromise (CVE-2025-30154, published March 2025) affected reviewdog actions including action-typos; follow reviewdog/typos advisories and avoid unpinned use of vulnerable actions. Package scanners show no direct typos package code vulnerability as of latest advisories, but the GitHub Actions compromise is the main concern. [7][8][9]
If you want, I can:
Sources:
[1] Snyk / check-jsonschema advisory (CVE-2024-53848).
[2] CVE / CVE details / Debian tracker for CVE-2024-53848.
[3] json5 GitHub advisory (Prototype Pollution GHSA).
[4] JSON5 SECURITY policy / project security page.
[5] Fedora / ruff security update (CVE-2025-4574 / GHSA).
[6] Fedora / Tenable/Nessus reporting on ruff-related updates.
[7] NVD / CVE-2025-30154 (reviewdog/action-setup compromise affecting action-typos).
[8] Tenable / CVE-2025-30154 writeup.
[9] SafetyDB / typos package status.
Update check-json5 to a more recent version to address potential prototype-pollution vulnerability.
While the commit SHAs are valid and correspond to their frozen versions, check-json5 v1.0.1 (released March 2018) wraps the underlying json5 package, which has a known prototype-pollution advisory (GHSA, December 2022). Upgrade to a newer release of check-json5 to pull in patched json5 dependencies.
The other revisions are safe: