github2gerrit 1.4.3__tar.gz → 1.4.4__tar.gz

github2gerrit-1.4.4/.aislop/config.yml

@@ -0,0 +1,28 @@
+# SPDX-License-Identifier: Apache-2.0
+# SPDX-FileCopyrightText: 2026 The Linux Foundation
+
+# aislop quality gate configuration.
+#
+# The pre-commit hook and CI both run `aislop ci` against this config.
+# Overly long functions and deeply nested code are refactored in the
+# source tree into focused helpers rather than suppressed.
+#
+# maxFileLoc is raised from the 400 default to 900: this codebase is
+# organised into cohesive single-responsibility modules (SSH discovery
+# and setup, gerrit REST/query, reconciliation, config, etc.) that
+# naturally sit in the 450-900 line range. 900 still flags egregiously
+# oversized modules.
+#
+# Three orchestration god-files remain above this threshold: core.py,
+# cli.py and gerrit_pr_closer.py. Their overly long functions and deep
+# nesting are decomposed here, but a full module/class split is a large,
+# self-contained refactor tracked as dedicated follow-up work; each
+# carries an in-file `aislop-ignore-file complexity/file-too-large` with
+# that rationale so the gate stays green in the meantime.
+version: 1
+
+quality:
+  maxFileLoc: 900
+
+ci:
+  failBelow: 100

{github2gerrit-1.4.3 → github2gerrit-1.4.4}/.pre-commit-config.yaml

@@ -3,7 +3,11 @@
 # SPDX-FileCopyrightText: 2025 The Linux Foundation
 
 ci:
-  skip: [pytest, gha-workflow-linter]
+  # pre-commit.ci sandbox prevents network calls; aislop runs engines
+  # that can call the network at scan time, so it cannot run there
+  # either. gha-workflow-linter validates action calls over the
+  # network; pytest runs the full suite.
+  skip: [pytest, gha-workflow-linter, aislop]
   autofix_commit_msg: |
     Chore: pre-commit autofixes
 
@@ -59,7 +63,7 @@ repos:
         types: [yaml]
 
   - repo: https://github.com/astral-sh/ruff-pre-commit
-    rev: 01a675ea018f2fb714478a5ffb83fcea8374bb06  # frozen: v0.15.21
+    rev: 2700fd5671c633760d912769c041bfcde2b9a01b  # frozen: v0.15.22
     hooks:
       - id: ruff
         files: ^(src|scripts|tests)/.+\.py$
@@ -89,7 +93,7 @@ repos:
       - id: shellcheck
 
   - repo: https://github.com/igorshubovych/markdownlint-cli
-    rev: a4d5d37e66ebcd6b3705204a1d6dbb56dea66338  # frozen: v0.49.0
+    rev: 5b5dddc4fb0f83c3ea1fc5616fa63e115dce83e0  # frozen: v0.49.1
     hooks:
       - id: markdownlint
         args: ["--fix", "--config", ".markdownlint.yaml"]
@@ -109,7 +113,7 @@ repos:
 
   # Check for misspellings in documentation files
   - repo: https://github.com/codespell-project/codespell
-    rev: 2ccb47ff45ad361a21071a7eedda4c37e6ae8c5a  # frozen: v2.4.2
+    rev: 57b21406f092110c18776e39b0bda50d37c945c8  # frozen: v2.4.3
     hooks:
       - id: codespell
 
@@ -121,10 +125,26 @@ repos:
         files: ^src/.+\.py$
 
   - repo: https://github.com/lfreleng-actions/gha-workflow-linter
-    rev: 4c3079dcb6e9e3c295f961ce5bd5b8585db698ca  # frozen: v1.2.2
+    rev: cec679e88cd818179079f52925ba80b9e6cb705c  # frozen: v1.2.3
     hooks:
       - id: gha-workflow-linter
 
+  # Catch AI slop developer-side before it reaches a pull request.
+  # Runs the full-repository quality gate, scored against
+  # .aislop/config.yml. A local hook installing the published npm
+  # package: the scanaislop/aislop git repository does not ship the
+  # built dist/, so its bundled pre-commit hook cannot install. Bump
+  # the pinned version here manually when new aislop releases ship.
+  - repo: local
+    hooks:
+      - id: aislop
+        name: aislop
+        entry: aislop ci --human
+        language: node
+        additional_dependencies: ["aislop@0.13.1"]
+        pass_filenames: false
+        always_run: true
+
   - repo: https://github.com/python-jsonschema/check-jsonschema
     rev: 1a4bb160cab6417b3045e1b37b6b72449243e658  # frozen: 0.37.4
     hooks:

{github2gerrit-1.4.3 → github2gerrit-1.4.4}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: github2gerrit
-Version: 1.4.3
+Version: 1.4.4
 Summary: Submit a GitHub pull request to a Gerrit repository.
 Project-URL: Homepage, https://github.com/lfreleng-actions/github2gerrit-action
 Project-URL: Repository, https://github.com/lfreleng-actions/github2gerrit-action

{github2gerrit-1.4.3 → github2gerrit-1.4.4}/action.yaml

@@ -217,7 +217,7 @@ runs:
       # yamllint disable-line rule:line-length
       if: steps.disabled-check.outputs.disabled != 'true' && inputs.SKIP_CHECKOUT != 'true'
       # yamllint disable-line rule:line-length
-      uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0  # v7.0.0
+      uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1  # v7.0.1
       with:
         fetch-depth: ${{ inputs.FETCH_DEPTH }}
         # Ensure we are on the PR's head SHA when triggered by PR events
@@ -230,7 +230,7 @@ runs:
     - name: "Setup Python"
       if: steps.disabled-check.outputs.disabled != 'true'
       # yamllint disable-line rule:line-length
-      uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1  # v6.3.0
+      uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97  # v7.0.0
       with:
         python-version-file: '${{ github.action_path }}/pyproject.toml'
 

{github2gerrit-1.4.3 → github2gerrit-1.4.4}/sitecustomize.py

@@ -55,6 +55,7 @@ def _debug_enabled() -> bool:
 def _dbg(msg: str) -> None:
     if _debug_enabled():
         try:
+            # aislop-ignore-next-line python-print-debug -- gated debug logger
             print(f"[sitecustomize] {msg}", file=sys.stderr)
         except Exception:
             # Debug logging must never disrupt interpreter startup; if
@@ -90,17 +91,17 @@ def _clean_stale_coverage_files(
     for base in bases:
         try:
             base = base.resolve()
-        except Exception:
+        except Exception as exc:
             # Use as-is if resolution fails
-            pass
+            _dbg(f"Failed to resolve base {base}: {exc}")
         for candidate in _iter_cov_candidates(base):
             try:
                 # Skip the protected target if present in candidates
                 if protected and str(candidate.resolve()) == protected:
                     continue
-            except Exception:
+            except Exception as exc:
                 # If resolve fails, fall through and try to remove
-                pass
+                _dbg(f"Failed to resolve candidate {candidate}: {exc}")
             _remove_path(candidate)
 
 
@@ -110,9 +111,9 @@ def _ensure_unique_coverage_file() -> Path:
     if existing:
         try:
             return Path(existing)
-        except Exception:
+        except Exception as exc:
             # Fall through to create a sane default
-            pass
+            _dbg(f"Invalid COVERAGE_FILE {existing!r}: {exc}")
     unique = (
         Path(tempfile.gettempdir())
         / f".coverage.pytest.{os.getpid()}.{uuid.uuid4().hex}"