📦 deps(thirdparty): update snapshots

2026-06-29 16:09:10 +00:00
parent 90c6c04c3f
commit f7f50d9fea
314 changed files with 31913 additions and 351 deletions
@@ -52,6 +52,7 @@ const LOCAL_TEST_COMMANDS = [
  [path.join(TOOL_SCRIPTS, "run-python.js"), path.join(TOOL_TESTS, "test_skill_source_metadata.py")],
  [path.join(TOOL_SCRIPTS, "run-python.js"), path.join(TOOL_TESTS, "test_validation_warning_budget.py")],
  [path.join(TOOL_SCRIPTS, "run-python.js"), path.join(TOOL_TESTS, "test_whatsapp_config_logging_security.py")],
+  [path.join(TOOL_SCRIPTS, "run-python.js"), path.join(TOOL_TESTS, "test_weaviate_conn_logging_security.py")],
  [path.join(TOOL_SCRIPTS, "run-python.js"), path.join(TOOL_TESTS, "test_maintainer_audit.py")],
  [path.join(TOOL_SCRIPTS, "run-python.js"), path.join(TOOL_TESTS, "test_validate_skills_headings.py")],
  [path.join(TOOL_SCRIPTS, "run-python.js"), path.join(TOOL_TESTS, "test_validate_skills_strict.py")],
@@ -0,0 +1,136 @@
+import contextlib
+import importlib.util
+import io
+import os
+import sys
+import types
+import unittest
+from pathlib import Path
+from unittest.mock import patch
+
+
+REPO_ROOT = Path(__file__).resolve().parents[3]
+
+
+class FakeWeaviateClient:
+    def close(self):
+        pass
+
+
+class FakeAuth:
+    @staticmethod
+    def api_key(value):
+        return {"api_key": value}
+
+
+class FakeAdditionalConfig:
+    def __init__(self, **kwargs):
+        self.kwargs = kwargs
+
+
+class FakeTimeout:
+    def __init__(self, **kwargs):
+        self.kwargs = kwargs
+
+
+def load_module(relative_path: str, module_name: str):
+    module_path = REPO_ROOT / relative_path
+    spec = importlib.util.spec_from_file_location(module_name, module_path)
+    module = importlib.util.module_from_spec(spec)
+    assert spec.loader is not None
+
+    fake_weaviate = types.ModuleType("weaviate")
+    fake_weaviate.connect_to_weaviate_cloud = lambda **kwargs: FakeWeaviateClient()
+
+    fake_classes = types.ModuleType("weaviate.classes")
+    fake_init = types.ModuleType("weaviate.classes.init")
+    fake_init.Auth = FakeAuth
+    fake_init.AdditionalConfig = FakeAdditionalConfig
+    fake_init.Timeout = FakeTimeout
+
+    fake_client = types.ModuleType("weaviate.client")
+    fake_client.WeaviateClient = FakeWeaviateClient
+
+    with patch.dict(
+        sys.modules,
+        {
+            "weaviate": fake_weaviate,
+            "weaviate.classes": fake_classes,
+            "weaviate.classes.init": fake_init,
+            "weaviate.client": fake_client,
+        },
+    ):
+        spec.loader.exec_module(module)
+
+    return module
+
+
+class WeaviateConnectionLoggingSecurityTests(unittest.TestCase):
+    MODULE_PATHS = [
+        ("skills/weaviate/scripts/weaviate_conn.py", "weaviate_conn_root"),
+        (
+            "plugins/antigravity-awesome-skills/skills/weaviate/scripts/weaviate_conn.py",
+            "weaviate_conn_codex_plugin",
+        ),
+        (
+            "plugins/antigravity-awesome-skills-claude/skills/weaviate/scripts/weaviate_conn.py",
+            "weaviate_conn_claude_plugin",
+        ),
+    ]
+
+    ENV = {
+        "WEAVIATE_URL": "https://example.weaviate.cloud",
+        "WEAVIATE_API_KEY": "weaviate-secret-value",
+        "OPENAI_API_KEY": "openai-secret-value",
+        "AWS_SECRET_KEY": "aws-secret-value",
+    }
+
+    FORBIDDEN_OUTPUT = [
+        "WEAVIATE_API_KEY",
+        "OPENAI_API_KEY",
+        "AWS_SECRET_KEY",
+        "weaviate-secret-value",
+        "openai-secret-value",
+        "aws-secret-value",
+    ]
+
+    def _capture_stderr(self, callback):
+        stderr = io.StringIO()
+        with patch.dict(os.environ, self.ENV, clear=True):
+            with contextlib.redirect_stderr(stderr):
+                callback()
+        return stderr.getvalue()
+
+    def test_context_manager_verbose_output_omits_secret_names_and_values(self):
+        for relative_path, module_name in self.MODULE_PATHS:
+            with self.subTest(relative_path=relative_path):
+                module = load_module(relative_path, module_name)
+
+                def run_client():
+                    with module.get_client(verbose=True):
+                        pass
+
+                output = self._capture_stderr(run_client)
+
+                self.assertIn("Detected 2 providers.", output)
+                self.assertIn("Connecting to Weaviate...", output)
+                for forbidden in self.FORBIDDEN_OUTPUT:
+                    self.assertNotIn(forbidden, output)
+
+    def test_connect_client_verbose_output_omits_secret_names_and_values(self):
+        for relative_path, module_name in self.MODULE_PATHS:
+            with self.subTest(relative_path=relative_path):
+                module = load_module(relative_path, module_name)
+
+                output = self._capture_stderr(
+                    lambda: module.connect_client(verbose=True).close()
+                )
+
+                self.assertIn("Detected 2 providers.", output)
+                self.assertIn("Connected.", output)
+                for forbidden in self.FORBIDDEN_OUTPUT:
+                    self.assertNotIn(forbidden, output)
+
+
+if __name__ == "__main__":
+    unittest.main()