deadcode 2.6.0__py3-none-any.whl → 2.6.1__py3-none-any.whl

deadcode/actions/get_unused_names_error_message.py

@@ -26,14 +26,14 @@ def get_unused_names_error_message(unused_names: Iterable[CodeItem], args: Args)
     for item in unused_names:
         message = f'{item.filename_with_position} \033[91m{item.error_code}\033[0m '
         message += item.message or (
-            f"{item.type_.replace('_', ' ').capitalize()} " f"`\033[1m{item.name}\033[0m` " f"is never used"
+            f'{item.type_.replace("_", " ").capitalize()} `\033[1m{item.name}\033[0m` is never used'
         )
         if args.no_color:
             message = message.replace('\033[91m', '').replace('\033[1m', '').replace('\033[0m', '')
         messages.append(message)
 
     if args.fix:
-        message = f"\nRemoved \033[1m{len(messages)}\033[0m unused code item{'s' if len(messages) > 1 else ''}!"
+        message = f'\nRemoved \033[1m{len(messages)}\033[0m unused code item{"s" if len(messages) > 1 else ""}!'
         if args.no_color:
             message = message.replace('\x1b[1m', '').replace('\x1b[0m', '')
         messages.append(message)

deadcode/actions/merge_overlaping_file_parts.py

@@ -15,8 +15,8 @@ def does_include(bigger_part: Part, smaller_part: Part) -> bool:
 def sort_parts(bigger_part: Part, smaller_part: Part) -> tuple[Part, Part]:
     """Returns code part which begins first following by another code part."""
     # TODO: Column should go first (tuple comparison would be possible)
-    line_start_b, line_end_b, col_start_b, col_end_b = bigger_part
-    line_start_s, line_end_s, col_start_s, col_end_s = smaller_part
+    line_start_b, _line_end_b, col_start_b, _col_end_b = bigger_part
+    line_start_s, _line_end_s, col_start_s, _col_end_s = smaller_part
 
     # Pirmo pradžios eilutė ir stulpelis yra pirmiau.
     if (line_start_s < line_start_b) or ((line_start_s == line_start_b) and (col_start_s < col_start_b)):
@@ -27,8 +27,8 @@ def sort_parts(bigger_part: Part, smaller_part: Part) -> tuple[Part, Part]:
 def does_overlap(bigger_part: Part, smaller_part: Part) -> bool:
     bigger_part, smaller_part = sort_parts(bigger_part, smaller_part)
 
-    line_start_b, line_end_b, col_start_b, col_end_b = bigger_part
-    line_start_s, line_end_s, col_start_s, col_end_s = smaller_part
+    _line_start_b, line_end_b, _col_start_b, col_end_b = bigger_part
+    line_start_s, _line_end_s, col_start_s, _col_end_s = smaller_part
 
     # ar pirmo pabaiga perlipa antro pradžia
     return bool((line_end_b > line_start_s) or ((line_end_b == line_start_s) and (col_end_b > col_start_s)))

deadcode/actions/parse_abstract_syntax_tree.py

@@ -11,4 +11,4 @@ def parse_abstract_syntax_tree(file_content: FileContent, args: Args, filename:
     except:  # noqa: E722
         if not args.count and not args.quiet:
             print_safely(f'Error: Failed to parse {filename} file, ignoring it.')
-        return ast.Module()
+        return ast.Module(body=[], type_ignores=[])

deadcode/actions/parse_arguments.py

@@ -101,8 +101,7 @@ def parse_arguments(args: list[str] | None) -> Args:
     parser.add_argument(
         '--ignore-definitions',
         help=(
-            'Ignores definition (including name and body) if a '
-            'name of an expression matches any of the provided ones.'
+            'Ignores definition (including name and body) if a name of an expression matches any of the provided ones.'
         ),
         nargs='*',
         action='append',
@@ -226,9 +225,12 @@ def parse_arguments(args: list[str] | None) -> Args:
     for key, item in parse_pyproject_toml().items():
         if key not in parsed_args:
             continue
-        if isinstance(item, str) and isinstance(parsed_args[key], list):
-            item = [item]
-        parsed_args[key].extend(item)
+        if isinstance(parsed_args[key], list):
+            if isinstance(item, str):
+                item = [item]
+            parsed_args[key].extend(item)
+        elif item:
+            parsed_args[key] = item
 
     # Do not fix if dry option is provided:
     if parsed_args['dry']:

deadcode/visitor/code_item.py

@@ -11,17 +11,17 @@ class CodeItem:  # TODO: This should also be a dataclass, because hash and tuple
     """
 
     __slots__ = (
-        'name',
-        'type_',
-        'filename',
         'code_parts',
-        'scope',
+        'error_code',
+        'filename',
         'inherits_from',
-        'name_line',
-        'name_column',
         'message',
-        'error_code',
+        'name',
+        'name_column',
+        'name_line',
         'number_of_uses',
+        'scope',
+        'type_',
     )
 
     def __init__(

deadcode/visitor/dead_code_visitor.py

@@ -10,7 +10,7 @@ from logging import getLogger
 
 from pathlib import Path
 
-from typing import TextIO
+from typing import Any, TextIO, cast
 from collections.abc import Callable, Iterable
 from deadcode.constants import UnusedCodeType
 from deadcode.data_types import Args, Part
@@ -76,6 +76,7 @@ class DeadCodeVisitor(ast.NodeVisitor):
         self.bare_used_names: dict[str, set[str]] = {}
         self.wildcard_imports: dict[str, set[str]] = {}
         self.explicit_imports: dict[str, set[str]] = {}
+        self.qualified_imports: dict[str, dict[str, str]] = {}
 
         self.filename = Path()
         self.code: list[str] = []
@@ -149,6 +150,7 @@ class DeadCodeVisitor(ast.NodeVisitor):
                 filename = os.path.basename(file_path)
                 module_name = os.path.splitext(filename)[0]
                 self.module_name = module_name
+                self.qualified_imports[self.module_name] = {}
                 self.scope_parts = [module_name]
 
                 file_content = f.read()
@@ -242,6 +244,7 @@ class DeadCodeVisitor(ast.NodeVisitor):
             # We can't easily detect when "os.path" is used.
             name = name_and_alias.name.partition('.')[0]
             alias = name_and_alias.asname
+            self._record_qualified_import(node, name_and_alias)
             self._define(
                 self.defined_imports,
                 alias or name,
@@ -251,6 +254,32 @@ class DeadCodeVisitor(ast.NodeVisitor):
             if alias is not None:
                 self.add_used_name(name_and_alias.name)
 
+    def _record_qualified_import(self, node: ast.Import | ast.ImportFrom, name_and_alias: ast.alias) -> None:
+        """Record absolute imports so qualified names can be resolved."""
+        qualified_imports = self.qualified_imports.setdefault(self.module_name, {})
+        if isinstance(node, ast.Import):
+            if name_and_alias.asname:
+                qualified_imports[name_and_alias.asname] = name_and_alias.name
+            else:
+                top_level = name_and_alias.name.partition('.')[0]
+                qualified_imports[top_level] = top_level
+            return
+
+        if node.level > 0 or node.module is None or node.module == '__future__':
+            return
+        if name_and_alias.name == '*':
+            return
+        local_name = name_and_alias.asname or name_and_alias.name
+        qualified_imports[local_name] = f'{node.module}.{name_and_alias.name}'
+
+    def _resolve_qualified_expression(self, expression: str) -> str | None:
+        """Resolve the first component of a dotted expression through absolute imports."""
+        first_component, separator, remaining = expression.partition('.')
+        target = self.qualified_imports.get(self.module_name, {}).get(first_component)
+        if target is None:
+            return None
+        return f'{target}{separator}{remaining}' if separator else target
+
     def _collect_commented_out_code(self, file_content: bytes) -> None:
         """Collect comments whose text parses as Python code."""
         try:
@@ -363,7 +392,7 @@ class DeadCodeVisitor(ast.NodeVisitor):
 
     def _get_else_linenos(self, node: ast.If | ast.IfExp | ast.While, first_else_node: ast.AST) -> tuple[int, ...]:
         """Return line numbers of the `else` keyword preceding the first else statement."""
-        for lineno in range(first_else_node.lineno - 1, node.lineno, -1):
+        for lineno in range(int(cast('Any', first_else_node).lineno) - 1, int(cast('Any', node).lineno), -1):
             if 0 < lineno <= len(self.code) and self.code[lineno - 1].strip().startswith('else:'):
                 return (lineno,)
         return ()
@@ -388,8 +417,10 @@ class DeadCodeVisitor(ast.NodeVisitor):
                 or _match(self.filename, self.args.ignore_names_in_files)
                 or _match_many(decorator_names, self.args.ignore_names_if_decorated_with)
                 or _match_many(decorator_names, IGNORED_INTERFACE_DECORATOR_NAMES)
-                or (item_inherits_from := getattr(first_node, 'inherits_from', None))
-                and _match_many(item_inherits_from, self.args.ignore_names_if_inherits_from)
+                or (
+                    (item_inherits_from := getattr(first_node, 'inherits_from', None))
+                    and _match_many(item_inherits_from, self.args.ignore_names_if_inherits_from)
+                )
                 or self.should_ignore_new_definitions
                 or any(noqa.ignore_line(self.noqa_lines, lineno, ERROR_CODES[type_]) for lineno in linenos)
             )
@@ -399,19 +430,19 @@ class DeadCodeVisitor(ast.NodeVisitor):
 
         first_lineno = lines.get_first_line_number(first_node)
         last_lineno = lines.get_last_line_number(last_node)
-        name_line = last_node.lineno
+        name_line = int(cast('Any', last_node).lineno)
 
         removal_node_end_lineno = getattr(removal_node, 'end_lineno', None)
         if removal_node is not None and removal_node_end_lineno is not None:
             line_start = lines.get_first_line_number(removal_node)
             line_end = removal_node_end_lineno
-            col_start = removal_node.col_offset
-            col_end = removal_node.end_col_offset or 0
+            col_start = int(cast('Any', removal_node).col_offset)
+            col_end = int(cast('Any', removal_node).end_col_offset or 0)
         else:
             line_start = first_lineno
             line_end = last_lineno
-            col_start = last_node.col_offset
-            col_end = last_node.end_col_offset or 0
+            col_start = int(cast('Any', last_node).col_offset)
+            col_end = int(cast('Any', last_node).end_col_offset or 0)
 
         inherits_from = getattr(first_node, 'inherits_from', None)
         code_item = CodeItem(
@@ -421,7 +452,7 @@ class DeadCodeVisitor(ast.NodeVisitor):
             code_parts=[Part(line_start, line_end, col_start, col_end)],
             scope=self.scope,
             name_line=name_line,  # TODO: Maybe this should be a property?
-            name_column=last_node.col_offset,  # TODO: Maybe this should be a property?
+            name_column=int(cast('Any', last_node).col_offset),  # TODO: Maybe this should be a property?
             message=message,
             inherits_from=inherits_from,
         )
@@ -541,8 +572,15 @@ class DeadCodeVisitor(ast.NodeVisitor):
         )
 
     def _get_decorator_names(self, node: ast.AST) -> list[str]:
-        """Returns decorator names of the given node."""
-        return [utils.get_decorator_name(decorator) for decorator in getattr(node, 'decorator_list', ())]
+        """Returns decorator names of the given node, including resolved absolute imports."""
+        decorator_names = []
+        for decorator in getattr(node, 'decorator_list', ()):
+            name = utils.get_decorator_name(decorator)
+            decorator_names.append(name)
+            resolved = self._resolve_qualified_expression(name[1:])
+            if resolved is not None and '@' + resolved != name:
+                decorator_names.append('@' + resolved)
+        return decorator_names
 
     def get_inherits_from(self, node: ast.AST) -> list[str] | None:
         """Returns a set of base classes from any level in inheritance tree."""
@@ -550,7 +588,14 @@ class DeadCodeVisitor(ast.NodeVisitor):
         if not (bases_attr := getattr(node, 'bases', None)):
             return None
 
-        bases = [name for base in bases_attr for name in utils.get_base_class_names(base)]
+        bases = []
+        for base in bases_attr:
+            bases.extend(utils.get_base_class_names(base))
+            if isinstance(base, (ast.Name, ast.Attribute)):
+                source = ast.unparse(base)
+                resolved = self._resolve_qualified_expression(source)
+                if resolved is not None and resolved != source:
+                    bases.append(resolved)
         inherits_from = bases[:]
 
         for base in bases:
@@ -561,7 +606,7 @@ class DeadCodeVisitor(ast.NodeVisitor):
         return list(dict.fromkeys(inherits_from))
 
     def visit_ClassDef(self, node: ast.ClassDef) -> None:
-        decorator_names = [utils.get_decorator_name(decorator) for decorator in node.decorator_list]
+        decorator_names = self._get_decorator_names(node)
         for decorator in node.decorator_list:
             if _match(utils.get_decorator_name(decorator), self.ignore_decorators):
                 self._log(f'Ignoring class "{node.name}" (decorator whitelisted)')
@@ -577,7 +622,7 @@ class DeadCodeVisitor(ast.NodeVisitor):
 
     def visit_FunctionDef(self, node: ast.FunctionDef | ast.AsyncFunctionDef) -> None:
         self._record_annotation_names(node.returns)
-        decorator_names = [utils.get_decorator_name(decorator) for decorator in node.decorator_list]
+        decorator_names = self._get_decorator_names(node)
 
         first_arg = node.args.args[0].arg if node.args.args else None
 
@@ -631,6 +676,19 @@ class DeadCodeVisitor(ast.NodeVisitor):
                 if isinstance(elt, ast.Constant) and isinstance(elt.value, str):
                     self.add_used_name(elt.value)
 
+        if (
+            len(node.targets) == 1
+            and isinstance(node.targets[0], ast.Name)
+            and node.targets[0].id == 'MIDDLEWARE'
+            and len(self.scope_parts) == 1
+            and isinstance(node.value, (ast.List, ast.Tuple))
+        ):
+            for elt in node.value.elts:
+                if isinstance(elt, ast.Constant) and isinstance(elt.value, str):
+                    final_component = elt.value.rpartition('.')[2]
+                    if final_component:
+                        self.add_used_name(final_component)
+
     def visit_AnnAssign(self, node: ast.AnnAssign) -> None:
         self._record_annotation_names(node.annotation)
 

deadcode/visitor/ignore.py

@@ -31,6 +31,13 @@ UNITTEST_FUNCTION_NAMES = {
     'setUpModule',
     'tearDownModule',
 }
+DJANGO_METHOD_NAMES = {
+    'setUpTestData',
+    '_pre_setup',
+    '_post_teardown',
+    '_fixture_setup',
+    '_fixture_teardown',
+}
 # Built-in interface markers: abstract and overriding definitions are never reported, no option needed.
 IGNORED_INTERFACE_DECORATOR_NAMES: set[str] = {
     '@abstractmethod',
@@ -111,17 +118,24 @@ def _ignore_import(filename: Path, import_name: str) -> bool:
 def _ignore_function(filename: Path, function_name: str) -> bool:
     # Class-level lifecycle methods such as `def setUpClass(cls)` have no decorator and a first argument other
     # than `self`, so `visit_FunctionDef` classifies them as functions and they must be suppressed here as well.
+    # Django lifecycle methods are declared the same way.
     return (
         function_name in PYTEST_FUNCTION_NAMES
         or function_name in UNITTEST_METHOD_NAMES
         or function_name in UNITTEST_FUNCTION_NAMES
+        or function_name in DJANGO_METHOD_NAMES
         or function_name.startswith('test_')
     ) and _is_test_file(filename)
 
 
 def _ignore_method(filename: Path, method_name: str) -> bool:
     return _is_special_name(method_name) or (
-        (method_name in PYTEST_METHOD_NAMES or method_name in UNITTEST_METHOD_NAMES or method_name.startswith('test_'))
+        (
+            method_name in PYTEST_METHOD_NAMES
+            or method_name in UNITTEST_METHOD_NAMES
+            or method_name in DJANGO_METHOD_NAMES
+            or method_name.startswith('test_')
+        )
         and _is_test_file(filename)
     )
 

deadcode/visitor/lines.py

@@ -1,5 +1,7 @@
 import ast
 
+from typing import Any, cast
+
 
 def _get_last_child_with_lineno(node: ast.AST) -> ast.AST | None:
     """
@@ -52,14 +54,14 @@ def get_last_line_number(node: ast.AST) -> int:
     may lead to a path that ends with a node without line number.
 
     """
-    max_lineno = node.lineno
+    max_lineno = int(cast('Any', node).lineno)
     while True:
         last_child = _get_last_child_with_lineno(node)
         if last_child is None:
             return max_lineno
         else:
             try:
-                max_lineno = max(max_lineno, last_child.lineno)
+                max_lineno = max(max_lineno, int(cast('Any', last_child).lineno))
             except AttributeError:
                 pass
         node = last_child
@@ -78,4 +80,4 @@ def get_first_line_number(node: ast.AST) -> int:
     if decorators := getattr(node, 'decorator_list', []):
         lineno: int = decorators[0].lineno
         return lineno
-    return node.lineno
+    return int(cast('Any', node).lineno)

{deadcode-2.6.0.dist-info → deadcode-2.6.1.dist-info}/METADATA

@@ -1,12 +1,12 @@
 Metadata-Version: 2.5
 Name: deadcode
-Version: 2.6.0
-Summary: Find and remove dead code.
+Version: 2.6.1
+Summary: Find and fix unused Python code using command line.
 Project-URL: homepage, https://github.com/albertas/deadcode
 Project-URL: documentation, https://deadcode.readthedocs.io/
 Author-email: Albertas Gimbutas <albertasgim@gmail.com>
 License-File: LICENSE
-Classifier: Development Status :: 3 - Alpha
+Classifier: Development Status :: 4 - Beta
 Classifier: License :: OSI Approved :: GNU Affero General Public License v3
 Classifier: Natural Language :: English
 Classifier: Operating System :: OS Independent
@@ -20,15 +20,15 @@ Classifier: Programming Language :: Python :: 3.15
 Requires-Python: >=3.10
 Requires-Dist: tomli>=2.0.1; python_version < '3.11'
 Provides-Extra: test
-Requires-Dist: diff-cover==10.6.0; extra == 'test'
+Requires-Dist: diff-cover; extra == 'test'
 Requires-Dist: hatch; extra == 'test'
-Requires-Dist: mypy==1.10.1; extra == 'test'
+Requires-Dist: mypy; extra == 'test'
 Requires-Dist: pip-audit; extra == 'test'
 Requires-Dist: pre-commit; extra == 'test'
-Requires-Dist: pytest-cov==5.0.0; extra == 'test'
-Requires-Dist: pytest-xdist==3.8.0; extra == 'test'
-Requires-Dist: pytest==9.0.3; extra == 'test'
-Requires-Dist: ruff==0.5.1; extra == 'test'
+Requires-Dist: pytest; extra == 'test'
+Requires-Dist: pytest-cov; extra == 'test'
+Requires-Dist: pytest-xdist; extra == 'test'
+Requires-Dist: ruff; extra == 'test'
 Description-Content-Type: text/markdown
 
 [![Deadcode Logo](https://raw.githubusercontent.com/albertas/deadcode/main/docs/_static/deadcode-logo-readme.png)](https://deadcode.readthedocs.io/)
@@ -108,6 +108,43 @@ ignore-bodies-if-inherits-from = ["BaseModel"]
 Read the [FastAPI guide](https://deadcode.readthedocs.io/en/latest/fastapi.html) for common use cases, the complete example application,
 the dependency injection strategy, and the expected output with no wrong detections.
 
+## Using deadcode on a Django project
+
+Django registers models, views, admin classes, middleware, and signal handlers through base classes, decorators, settings strings, and URLconfs, so
+framework entry points look unused to a static analyser. Configure deadcode like this:
+
+```toml
+[tool.deadcode]
+ignore-definitions-if-decorated-with = [
+    "@django.contrib.admin.*",
+    "@django.contrib.auth.*",
+    "@django.dispatch.receiver",
+    "@django.utils.decorators.method_decorator",
+    "@django.views.decorators.http.require_*",
+    "@*register.*",
+]
+ignore-definitions-if-inherits-from = [
+    "django.apps.AppConfig",
+    "django.contrib.admin.*",
+    "django.core.management.base.BaseCommand",
+    "django.db.migrations.Migration",
+    "django.db.models.Model",
+    "django.forms.*Form",
+    "django.utils.deprecation.MiddlewareMixin",
+    "django.views.*View",
+]
+ignore-names-in-files = ["*/settings.py", "*/urls.py"]
+```
+
+The example targets Django 5.2 LTS (5.2.19). The Django REST Framework 3.18.3 entries are additions to the same two keys; see the
+[Django REST Framework section of the Django guide](https://deadcode.readthedocs.io/en/latest/django.html#django-rest-framework). The three keys replace the
+older overlapping name, body, and definition options: one inheritance entry hides a framework subclass name and body, and one decorator entry hides a
+decorated definition name and body. deadcode parses `MIDDLEWARE` registrations and resolves absolute-import qualified names, so a registered middleware
+name and a `models.Model` base need no separate name pattern.
+
+Read the [Django guide](https://deadcode.readthedocs.io/en/latest/django.html) for the framework areas, the current and legacy
+middleware forms, both import forms, database signals, the Django REST Framework entries, and the expected behaviour.
+
 ## Pre-commit hook
 Create a `.pre-commit-config.yaml` file in the root of your project directory, if it doesn't exist, and add the following to the file:
 
@@ -116,7 +153,7 @@ Create a `.pre-commit-config.yaml` file in the root of your project directory, i
 # See https://pre-commit.com/hooks.html for more hooks
 repos:
   - repo: https://github.com/albertas/deadcode
-    rev: v2.6.0
+    rev: v2.6.1
     hooks:
       - id: deadcode
 ```
@@ -148,6 +185,11 @@ run the same hook while developing deadcode itself, use `make pre-commit`.
 |`-V`, `--version`                          | -    | Shows `deadcode` version. |
 |`-v`, `--verbose`                          | -    | Shows verbose logging output. |
 
+### Glossary
+- `name` - variable, function or class name.
+- `body` - code block which follows after `:` in function or class definition. A body ignore suppresses every definition inside the expression, including nested classes and functions.
+- `definition` - whole class or function definition expression including its name and body.
+
 ### Decorator matching
 Decorator names are written as in the source, including the leading `@`; a pattern without `@` matches nothing.
 Entries are glob patterns matched with `fnmatch.fnmatchcase`, so `*`, `?` and `[seq]` apply and `*` also crosses dots
@@ -184,12 +226,6 @@ The status is independent of `--quiet`, `--count`, `--only`, `--dry`, and `--fix
 A `--fix` run exits `1` on the run that found items and `0` on a subsequent run
 over the cleaned tree.
 
-### Glossary
-- `name` - variable, function or class name.
-- `body` - code block which follows after `:` in function or class definition. A body ignore suppresses every definition inside the expression, including nested classes and functions.
-- `definition` - whole class or function definition expression including its name and body.
-
-
 ## Ignoring checks with noqa comments
 Inline `# noqa` comments can be used to ignore `deadcode` checks.
 E.g. unused `Foo` class wont be detected/fixed because `# noqa: DC03` comment is used:
@@ -230,6 +266,11 @@ A comment on the first decorator line is still accepted.
 `unittest` lifecycle methods (`setUp`, `tearDown`, `setUpClass`, `tearDownClass`, `asyncSetUp`, `asyncTearDown`, `setUpModule`, `tearDownModule`) declared in test files are ignored by default, alongside the existing pytest hooks.
 Declarations with those names outside test files are still reported as unused code.
 
+## Ignoring Django test lifecycle methods
+Django test lifecycle methods (`setUpTestData`, the `django.test.TestCase` class method invoked by the framework, and the internal hooks `_pre_setup`, `_post_teardown`, `_fixture_setup`, `_fixture_teardown`) declared in test files are ignored by default.
+Declarations with those names outside test files are still reported as unused code.
+Django helpers that your test code invokes itself are not suppressed, so an unreferenced `assertContains`, `assertNumQueries`, `settings`, `modify_settings`, or `captureOnCommitCallbacks` is still reported.
+
 ## Contributing
 
 Create a feature branch from `main`, open a pull request targeting `main`, and
@@ -241,6 +282,16 @@ commits are made by the maintainer on `main`.
   Set `PYTEST_XDIST_WORKERS` to change the worker count (`make test PYTEST_XDIST_WORKERS=2`), or pass
   `PYTEST_ME_PLEASE="-n 0"` to run serially.
 
+## Security
+
+The runtime dependencies in `requirements.txt` and the development dependencies in `requirements-dev.txt` are audited for known
+vulnerabilities with `pip-audit`. The `Vulnerability audit` workflow in `.github/workflows/vulnerability-audit.yml` runs on every pull request,
+on every push to `main`, and weekly on a schedule. Run the same audit locally with `make audit`, `make audit-runtime`, or
+`make audit-development`.
+
+Read the [security documentation](https://deadcode.readthedocs.io/en/latest/security.html) for how to read and fix a finding. The only accepted
+exception is `filelock==4.1.0` on Python 3.10, where the fix requires Python 3.11 or newer.
+
 ## Rationale
 [ruff](https://pypi.org/project/ruff/) and
 [flake8](https://pypi.org/project/flake8/) - don't have rules for unused global
@@ -314,10 +365,18 @@ A checked entry is implemented on `main` and is included in the next release; pu
 - [ ] Investigate ways of extracting and backporting Python3.10+ `ast` implementation to lower Python versions.
 
 ## Release notes
+- next:
+    - Features:
+        - Audit runtime and development dependencies for known vulnerabilities in CI on every pull request and weekly.
+        - Declare the package development status as Beta.
+        - Add a Django usage guide covering models, admin, views, forms, middleware, signals and more, plus Django `MIDDLEWARE` registration parsing and Django-aware qualified matching through absolute imports.
+        - Ignore Django test lifecycle methods in test files.
+        - Django `MIDDLEWARE` registrations are treated as used and absolute-import qualified expressions resolve to their modules.
+        - Support boolean flags such as `fix = true` and `dry = true` in `[tool.deadcode]` configuration.
 - **v2.6.0** `2026-11-08`:
     - Features:
         - Add support for Python 3.13, 3.14 and 3.15.
-        - Documentation is now published on Read the Docs at https://deadcode.readthedocs.io/.
+        - Documentation is now published on Read the Docs at [deadcode.readthedocs.io](https://deadcode.readthedocs.io/).
         - Add `-V` as a short alias for `--version`.
         - `--ignore-definitions-if-decorated-with` now ignores whole decorated definitions
         - `--ignore-bodies-of` now suppresses the bodies of matching classes and functions
@@ -357,6 +416,7 @@ A checked entry is implemented on `main` and is included in the next release; pu
         - Rules now sit under Ignoring checks with noqa comments, the Glossary under Command line options, and Decorator matching is more concise.
         - Python 3.10+ requirement is now shown as a badge in the README
 - **v2.5.0** `2026-11-07`:
+        - Stop Codecov report comments on pull requests with no coverage findings
     - Bugfixes:
         - Fix a crash when a decorator has no `id` attribute.
 - **v2.4.1** `2024-08-09`:

{deadcode-2.6.0.dist-info → deadcode-2.6.1.dist-info}/RECORD

@@ -11,10 +11,10 @@ deadcode/actions/find_python_filenames.py,sha256=Jh4J7asUte1_Ykso00BNITD6odXTFrv
 deadcode/actions/find_unused_names.py,sha256=odRoDI3lOZjZ4YTM7jgiUAIPtGbVEEmheexPgZSEFtA,497
 deadcode/actions/fix_or_show_unused_code.py,sha256=RB3BhxEVVqsZqub6wS_TL2ORXPiAjZsQjnsHRM2nt6o,3197
 deadcode/actions/get_unused_import_parts.py,sha256=zCMwPJLU7uiYih3zVBDMSUJgWAyH4w397lj7qUpwAhw,8870
-deadcode/actions/get_unused_names_error_message.py,sha256=dYgA2_f1eVvQqDBXn1cG8DxGnQhXzucGOU7STur2S8Y,1517
-deadcode/actions/merge_overlaping_file_parts.py,sha256=q4k_3H5ap3-YYMnTODemkv-nAsh9UMjam6hUIoN21Ew,3121
-deadcode/actions/parse_abstract_syntax_tree.py,sha256=oQpvPk3HN_GHRSZpgstH1VZITJHJjX0rRmKhA2gMXXY,607
-deadcode/actions/parse_arguments.py,sha256=FIuzKraeCHXikYRF6F8YRZbvFkF02L47nzcVrUgzFmI,7949
+deadcode/actions/get_unused_names_error_message.py,sha256=QqZIcMpw_jY6mjIA962wqgTl0DOzzAfXvl5VADKd7XA,1509
+deadcode/actions/merge_overlaping_file_parts.py,sha256=-d_usozdmCXSuxExikB-A4HYkpYBZSJqHki2ZH5G4p8,3129
+deadcode/actions/parse_abstract_syntax_tree.py,sha256=mtoJv3bb8TMpudYoaJeaST5xfyhFhm59hf9joIDDeZs,631
+deadcode/actions/parse_arguments.py,sha256=ecfQJNrG4lF81aEWEoT23cekavgL96qEw_5SJFS9mb0,8009
 deadcode/actions/remove_file_parts_from_content.py,sha256=EvqnAi-JbuDEXu-WMY3EFx3b0BoaqAX1MsTquEGrvXE,7495
 deadcode/utils/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 deadcode/utils/add_colors_to_diff.py,sha256=JSEtaHbyojIpCOBa2UNCaKDJr0a9hxkeDlRB4h-YpBI,423
@@ -24,16 +24,16 @@ deadcode/utils/nested_scopes.py,sha256=QknaU_lNmFYNBKCAV4zdwNJhcb31JTho_fGTlJ6y9
 deadcode/utils/print_ast.py,sha256=ovXtdOSgkjQGAeplFt3_LAv3K2r8iiRGu7c6RrflpUU,87
 deadcode/utils/print_safely.py,sha256=fCudNf-o9-kuceJOkC3HWYkzqemCPEIfx7yNw6X9e78,912
 deadcode/visitor/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
-deadcode/visitor/code_item.py,sha256=WwCfZ0nbSFppwED2oz7i5b6-2FujlTSoAdK5nVWSp1w,2258
-deadcode/visitor/dead_code_visitor.py,sha256=HmUnLkFjEmZ09QTk3ytKxSK6ikCI0320xVeOxSbLCko,32076
-deadcode/visitor/ignore.py,sha256=dIq1oB5aVCbhVnSeczKHGBz1sFGnC5s1La5ycTjH8Cc,4201
-deadcode/visitor/lines.py,sha256=DD3SQlMUFNeRIeCHDCNTv4DP6Hw1VqcqqIh6UYLCJBs,3191
+deadcode/visitor/code_item.py,sha256=2CWfuBCn9uH76kjqtYrbThcM-5DLbKk81JOpJEi714U,2258
+deadcode/visitor/dead_code_visitor.py,sha256=cBxXex2s1U7n240fgaDR8MEHKMHRsdajONxP2Ert4aI,34916
+deadcode/visitor/ignore.py,sha256=yrrsV5tLhrweDLMFeTEMvhRBeh1sQSIdL5yIbSHuRjE,4537
+deadcode/visitor/lines.py,sha256=OhMlmzvm-oN0ZT_3HWNjkdafe8WYrJm8mCWV9-rOytg,3275
 deadcode/visitor/module_exports.py,sha256=z4r5GImH0eDK8IcHlNFXMNZGu1NtpsE20xzmgyHl6U0,2933
 deadcode/visitor/noqa.py,sha256=7jM7-c_Ui0RAbzo5K0vdtct9Phm1fSebysHYcFWEJGg,2053
 deadcode/visitor/utils.py,sha256=miyXmyfoGsIv76cOJGGs6X5kTS0Qz_Z7Rdo6HgBMS8M,3702
 docs/conf.py,sha256=Rm3i-AFN1ywFcr-U55DpKuLU6-A9D1FpsCQ_qeiXUoY,462
-deadcode-2.6.0.dist-info/METADATA,sha256=RF0aRDlgEk9Q_9J8LqkCOQ3hzi737KVy_jJTEVkyrlI,24055
-deadcode-2.6.0.dist-info/WHEEL,sha256=2iZrJkDIkeDh0k9SikKMqFuRP-ua6mb4Ir1AsER4BEw,87
-deadcode-2.6.0.dist-info/entry_points.txt,sha256=efJLd6DwsjycmpPFhvnql1ziW6xGx6VtAvZXNlREQxg,53
-deadcode-2.6.0.dist-info/licenses/LICENSE,sha256=hIahDEOTzuHCU5J2nd07LWwkLW7Hko4UFO__ffsvB-8,34523
-deadcode-2.6.0.dist-info/RECORD,,
+deadcode-2.6.1.dist-info/METADATA,sha256=lNY5aLPhQP3u8bGwnmrVub_1nWB5AfY2UzjPx162FYc,27941
+deadcode-2.6.1.dist-info/WHEEL,sha256=2iZrJkDIkeDh0k9SikKMqFuRP-ua6mb4Ir1AsER4BEw,87
+deadcode-2.6.1.dist-info/entry_points.txt,sha256=efJLd6DwsjycmpPFhvnql1ziW6xGx6VtAvZXNlREQxg,53
+deadcode-2.6.1.dist-info/licenses/LICENSE,sha256=hIahDEOTzuHCU5J2nd07LWwkLW7Hko4UFO__ffsvB-8,34523
+deadcode-2.6.1.dist-info/RECORD,,