📦 deps(thirdparty): update snapshots

This commit is contained in:
ci[bot]
2026-07-10 16:04:20 +00:00
parent 2bb0dc8c1d
commit 92c0c3f687
594 changed files with 55224 additions and 19038 deletions
@@ -77,7 +77,7 @@ SECURITY_PATTERNS: list[SecurityPattern] = [
),
SecurityPattern(
code="SEC007",
regex=r"\beval\s*\(",
regex=r"(?<!\$)\beval\s*\(",
severity="warning",
description="Dynamic eval() detected",
rationale="eval() can execute arbitrary code; acceptable only in controlled contexts.",
@@ -122,7 +122,12 @@ SECURITY_PATTERNS: list[SecurityPattern] = [
# Lines containing this marker are excluded from scanning (project convention).
# Prefix match covers both bare (<!-- security-allowlist -->) and colon forms
# (<!-- security-allowlist: reason -->) documented in skill-template.md.
_ALLOWLIST_MARKERS = ("# security-allowlist", "<!-- security-allowlist")
_ALLOWLIST_MARKERS = (
"# security-allowlist",
"// security-allowlist",
"<!-- security-allowlist",
"-- security-allowlist",
)
TEXT_EXTENSIONS = {".cjs", ".js", ".json", ".md", ".mjs", ".py", ".sh", ".ts", ".txt", ".yaml", ".yml"}
SUPPORT_FILE_PATTERN_CODES = {"SEC002", "SEC003", "SEC004", "SEC005", "SEC008"}