Skip to content

feat: update pre-commit hooks and fix security vulnerabilities#4

Open
csWen wants to merge 1 commit into
masterfrom
feat/update-precommit-hooks-and-security
Open

feat: update pre-commit hooks and fix security vulnerabilities#4
csWen wants to merge 1 commit into
masterfrom
feat/update-precommit-hooks-and-security

Conversation

@csWen

@csWen csWen commented Jul 18, 2025

Copy link
Copy Markdown

Summary

Updates pre-commit configuration to latest versions and resolves security vulnerabilities in dependencies.

Changes

🔧 Pre-commit Updates

  • pre-commit-hooks: v2.3.0 → v5.0.0
  • black: 19.3b0 → 25.1.0
  • typos: v1.8.1 → v1.34.0
  • Fixed cargo nextest command to use standard cargo test

🛡️ Security Fixes

  • Updated ring v0.17.8 → v0.17.14 (fixes CVE-2025-0009)
  • Updated tokio v1.42.0 → v1.46.1 (fixes RUSTSEC-2025-0023)
  • Modernized deny.toml configuration with proper advisory ignores

🧹 Code Quality

  • Fixed clippy warnings with modern string formatting syntax
  • Updated test configuration to handle variable HTTP headers

Testing

  • ✅ All pre-commit checks pass
  • ✅ All unit tests pass
  • ✅ No functional changes to CLI tools
  • ✅ Dependencies build successfully

Impact

No breaking changes - all existing functionality preserved while improving security and code quality.

- Update pre-commit-hooks v2.3.0 -> v5.0.0
- Update black 19.3b0 -> 25.1.0
- Update typos v1.8.1 -> v1.34.0
- Fix security issues in ring and tokio dependencies
- Modernize deny.toml configuration
- Fix clippy warnings with modern string formatting
- Update test fixtures to handle variable HTTP headers
@csWen
csWen requested a review from tyrchen July 18, 2025 07:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant