gitgalaxy 2.3.40__tar.gz → 2.3.43__tar.gz

{gitgalaxy-2.3.40 → gitgalaxy-2.3.43}/.github/workflows/gitgalaxy-artifacts.yml

@@ -51,12 +51,12 @@ jobs:
           mv *_llm.md gitgalaxy_architecture_brief.md 2>/dev/null || true
 
       - name: Upload SARIF to GitHub Security Tab
-        uses: github/codeql-action/upload-sarif@v4
+        uses: github/codeql-action/upload-sarif@v4.37.0
         with:
           sarif_file: gitgalaxy-results_sarif.json
 
       - name: Upload SBOM as Build Artifact
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: gitgalaxy-sbom
           path: gitgalaxy-sbom.json

{gitgalaxy-2.3.40 → gitgalaxy-2.3.43}/.github/workflows/gitgalaxy-audit.yml

@@ -38,13 +38,13 @@ jobs:
           
       - name: Upload SARIF to GitHub Security Tab
         if: always()
-        uses: github/codeql-action/upload-sarif@v4
+        uses: github/codeql-action/upload-sarif@v4.37.0
         with:
           sarif_file: gitgalaxy-results_sarif.json
 
       - name: Upload SARIF as Build Artifact (Backup)
         if: always()
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: gitgalaxy-sarif-report
           path: gitgalaxy-results_sarif.json

{gitgalaxy-2.3.40 → gitgalaxy-2.3.43}/.github/workflows/muninn.yml

@@ -31,6 +31,6 @@ jobs:
 
       - name: Upload SARIF
         if: always() && hashFiles('muninn.sarif') != ''
-        uses: github/codeql-action/upload-sarif@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4
+        uses: github/codeql-action/upload-sarif@99df26d4f13ea111d4ec1a7dddef6063f76b97e9 # v4
         with:
           sarif_file: muninn.sarif

{gitgalaxy-2.3.40 → gitgalaxy-2.3.43}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: gitgalaxy
-Version: 2.3.40
+Version: 2.3.43
 Summary: An AST-free, LLM-free zero-trust static analysis engine for mapping architectural risk, securing CI/CD pipelines, and modernizing legacy monoliths.
 Author: Joe Esquibel
 Project-URL: Homepage, https://gitgalaxy.io

{gitgalaxy-2.3.40 → gitgalaxy-2.3.43}/bitbucket-pipelines.yml

@@ -44,8 +44,8 @@ pipelines:
 
           # 3. Dynamic Execution
           - |
-            echo "Running: ${GG_TOOL} ${GG_TARGET}${GG_ARGS}"
-            ${GG_TOOL} ${GG_TARGET}${GG_ARGS}
+            echo "Running: ${GG_TOOL} ${GG_TARGET} ${GG_ARGS}"
+            ${GG_TOOL} ${GG_TARGET} ${GG_ARGS}
             
           # 4. Bitbucket Code Insights Native Integration
           # Automatically translates the SARIF output into inline Pull Request annotations
@@ -87,11 +87,11 @@ pipelines:
                 pip install networkx tiktoken xgboost pandas numpy
               fi
             - |
-              echo "Running: ${GG_TOOL} ${GG_TARGET}${GG_ARGS}"
-              ${GG_TOOL} ${GG_TARGET}${GG_ARGS}
+              echo "Running: ${GG_TOOL} ${GG_TARGET} ${GG_ARGS}"
+              ${GG_TOOL} ${GG_TARGET} ${GG_ARGS}
             - |
               if [ -f "templates/bitbucket/bitbucket_insights.py" ]; then
                 python templates/bitbucket/bitbucket_insights.py gitgalaxy-results_sarif.json
               fi
           artifacts:
-            - gitgalaxy-results_sarif.json
+            - gitgalaxy-results_sarif.json

{gitgalaxy-2.3.40 → gitgalaxy-2.3.43}/gitgalaxy/requirements.txt

@@ -2,15 +2,15 @@ asttokens==3.0.1
 attrs==26.1.0
 babel==2.18.0
 backcall==0.2.0
-backrefs==6.2
-beautifulsoup4==4.14.3
+backrefs==7.0
+beautifulsoup4==4.15.0
 bleach==6.4.0
 blinker==1.9.0
 build==1.4.3
 certifi==2026.2.25
 cffi==2.0.0
 charset-normalizer==3.4.7
-click==8.3.3
+click==8.4.2
 colorama==0.4.6
 contourpy==1.3.3
 coverage==7.14.0
@@ -41,7 +41,7 @@ Jinja2==3.1.6
 joblib==1.5.3
 jsonschema==4.26.0
 jsonschema-specifications==2025.9.1
-jupyter_client==8.8.0
+jupyter_client==8.9.1
 jupyter_core==5.9.1
 jupyterlab_pygments==0.3.0
 keyring==25.7.0
@@ -62,7 +62,7 @@ mkdocs-material==9.7.6
 mkdocs-material-extensions==1.3.1
 more-itertools==10.8.0
 narwhals==2.18.1
-nbclient==0.10.4
+nbclient==0.11.0
 nbconvert==7.17.1
 nbformat==5.10.4
 networkx==3.6.1
@@ -81,13 +81,13 @@ pexpect==4.9.0
 pickleshare==0.7.5
 pillow==12.3.0
 pipreqs==0.5.0
-platformdirs==4.9.4
+platformdirs==4.10.0
 plotly==6.8.0
 pluggy==1.6.0
 prompt_toolkit==3.0.52
 ptyprocess==0.7.0
 pure_eval==0.2.3
-pyan3==2.4.0
+pyan3==2.6.1
 pycodestyle==2.14.0
 pycparser==3.0
 pydeps==3.0.2
@@ -98,7 +98,7 @@ pynndescent==0.6.0
 pypandoc==1.17
 pyparsing==3.3.2
 pyproject_hooks==1.2.0
-pytest==9.0.3
+pytest==9.1.1
 pytest-cov==7.1.0
 python-dateutil==2.9.0.post0
 python-dotenv==1.2.2
@@ -124,7 +124,7 @@ stack-data==0.6.3
 stdlib-list==0.12.0
 stripe==14.4.1
 threadpoolctl==3.6.0
-tiktoken==0.12.0
+tiktoken==0.13.0
 tinycss2==1.4.0
 tornado==6.5.7
 tqdm==4.68.3

{gitgalaxy-2.3.40 → gitgalaxy-2.3.43}/gitgalaxy.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: gitgalaxy
-Version: 2.3.40
+Version: 2.3.43
 Summary: An AST-free, LLM-free zero-trust static analysis engine for mapping architectural risk, securing CI/CD pipelines, and modernizing legacy monoliths.
 Author: Joe Esquibel
 Project-URL: Homepage, https://gitgalaxy.io

gitgalaxy-2.3.43/gitgalaxy.egg-info/scm_version.json

@@ -0,0 +1,8 @@
+{
+  "tag": "2.3.43",
+  "distance": 0,
+  "node": "g8cfa3b24c9b2f199858980084154d88a6a318317",
+  "dirty": false,
+  "branch": "HEAD",
+  "node_date": "2026-07-17"
+}

{gitgalaxy-2.3.40 → gitgalaxy-2.3.43}/templates/bitbucket/bitbucket-pipelines.yml

@@ -41,8 +41,8 @@ pipelines:
             fi
 
           - |
-            echo "Running: ${GG_TOOL} ${GG_TARGET}${GG_ARGS}"
-            ${GG_TOOL} ${GG_TARGET}${GG_ARGS}
+            echo "Running: ${GG_TOOL} ${GG_TARGET} ${GG_ARGS}"
+            ${GG_TOOL} ${GG_TARGET} ${GG_ARGS}
                     
         artifacts:
-          - gitgalaxy-results_sarif.json
+          - gitgalaxy-results_sarif.json

{gitgalaxy-2.3.40 → gitgalaxy-2.3.43}/templates/bitbucket/bitbucket_insights.py

@@ -71,9 +71,18 @@ def publish_insights(sarif_path: str):
         })
 
     report_id = "gitgalaxy-audit-report"
-    base_url = f"http://localhost:29418/2.0/repositories/{workspace}/{repo}/commit/{commit}/reports/{report_id}"
+    # Bitbucket's proxy requires HTTP (not HTTPS) to automatically inject the Auth header
+    base_url = f"http://api.bitbucket.org/2.0/repositories/{workspace}/{repo}/commit/{commit}/reports/{report_id}"
     
-    # 4. Create the Parent Report (PUT)
+    # 4. Set up the Proxy Handler for Bitbucket Pipelines
+    proxy_handler = urllib.request.ProxyHandler({
+        'http': 'http://localhost:29418',
+        'https': 'http://localhost:29418'
+    })
+    opener = urllib.request.build_opener(proxy_handler)
+    urllib.request.install_opener(opener)
+    
+    # Create the Parent Report (PUT)
     report_payload = json.dumps({
         "title": "GitGalaxy Spectral Audit",
         "details": f"GitGalaxy mapped {len(bitbucket_annotations)} architectural threats.",
@@ -81,9 +90,9 @@ def publish_insights(sarif_path: str):
         "result": "FAILED" if any(a["severity"] == "HIGH" for a in bitbucket_annotations) else "PASSED"
     }).encode("utf-8")
 
-    # Enforce loopback destination boundaries to neutralize remote protocol exploits
-    if not base_url.startswith("http://localhost:29418/"):
-        print("❌ Security Violation: Invalid localized API destination.")
+    # Enforce API destination boundaries to neutralize remote protocol exploits
+    if not base_url.startswith("http://api.bitbucket.org/"):
+        print("❌ Security Violation: Invalid API destination.")
         sys.exit(1)
 
     req = urllib.request.Request(base_url, data=report_payload, method="PUT")
@@ -105,8 +114,8 @@ def publish_insights(sarif_path: str):
         chunk = bitbucket_annotations[i:i + chunk_size]
         chunk_payload = json.dumps(chunk).encode("utf-8")
         
-        if not annotations_url.startswith("http://localhost:29418/"):
-            print("❌ Security Violation: Invalid localized API destination.")
+        if not annotations_url.startswith("http://api.bitbucket.org/"):
+            print("❌ Security Violation: Invalid API destination.")
             sys.exit(1)
             
         req = urllib.request.Request(annotations_url, data=chunk_payload, method="POST")

gitgalaxy-2.3.40/gitgalaxy.egg-info/scm_version.json

@@ -1,8 +0,0 @@
-{
-  "tag": "2.3.40",
-  "distance": 0,
-  "node": "g5ca6edf4a47c8da4664daae484eb81a04888c09e",
-  "dirty": false,
-  "branch": "HEAD",
-  "node_date": "2026-07-16"
-}