pre-commit-vauxoo 8.3.22__tar.gz → 8.3.24__tar.gz

{pre_commit_vauxoo-8.3.22 → pre_commit_vauxoo-8.3.24}/.bumpversion.cfg

@@ -1,5 +1,5 @@
 [bumpversion]
-current_version = 8.3.22
+current_version = 8.3.24
 commit = True
 tag = True
 sign_tags = True

{pre_commit_vauxoo-8.3.22 → pre_commit_vauxoo-8.3.24}/ChangeLog

@@ -1,6 +1,24 @@
 CHANGES
 =======
 
+v8.3.24
+-------
+
+* Bump version: 8.3.23 → 8.3.24
+* [IMP] cfg: report the removed, invalid and m2m label Odoo calls with ruff (#310)
+* [IMP] cfg: report a field declared twice in the same class with ruff (#309)
+* [IMP] cfg: Update oca-checks-odoo-module to v0.2.27 (#306)
+* [IMP] cfg: Update ruff-odoo to 0.17.0.35 (#308)
+* [IMP] cfg: converge the optional checks into the mandatory ones for ruff (#304)
+
+v8.3.23
+-------
+
+* Bump version: 8.3.22 → 8.3.23
+* [IMP] cfg: Update ruff-odoo to 0.16.3.35
+* [IMP] pre\_commit\_vauxoo: do not log every file of a "--files" list
+* [FIX] pre\_commit\_vauxoo: keep "--all" as the default scope
+
 v8.3.22
 -------
 

{pre_commit_vauxoo-8.3.22 → pre_commit_vauxoo-8.3.24}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: pre-commit-vauxoo
-Version: 8.3.22
+Version: 8.3.24
 Summary: pre-commit script to run automatically the configuration and variables custom from Vauxoo
 Home-page: https://github.com/Vauxoo/pre-commit-vauxoo
 Author: Vauxoo
@@ -439,6 +439,24 @@ without touching the package's own ``.bumpversion.cfg``.
 CHANGES
 =======
 
+v8.3.24
+-------
+
+* Bump version: 8.3.23 → 8.3.24
+* [IMP] cfg: report the removed, invalid and m2m label Odoo calls with ruff (#310)
+* [IMP] cfg: report a field declared twice in the same class with ruff (#309)
+* [IMP] cfg: Update oca-checks-odoo-module to v0.2.27 (#306)
+* [IMP] cfg: Update ruff-odoo to 0.17.0.35 (#308)
+* [IMP] cfg: converge the optional checks into the mandatory ones for ruff (#304)
+
+v8.3.23
+-------
+
+* Bump version: 8.3.22 → 8.3.23
+* [IMP] cfg: Update ruff-odoo to 0.16.3.35
+* [IMP] pre\_commit\_vauxoo: do not log every file of a "--files" list
+* [FIX] pre\_commit\_vauxoo: keep "--all" as the default scope
+
 v8.3.22
 -------
 

{pre_commit_vauxoo-8.3.22 → pre_commit_vauxoo-8.3.24}/README.rst

@@ -50,9 +50,9 @@ Overview
     :alt: Supported versions
     :target: https://pypi.org/project/pre-commit-vauxoo
 
-.. |commits-since| image:: https://img.shields.io/github/commits-since/Vauxoo/pre-commit-vauxoo/v8.3.22.svg
+.. |commits-since| image:: https://img.shields.io/github/commits-since/Vauxoo/pre-commit-vauxoo/v8.3.24.svg
     :alt: Commits since latest release
-    :target: https://github.com/Vauxoo/pre-commit-vauxoo/compare/v8.3.22...main
+    :target: https://github.com/Vauxoo/pre-commit-vauxoo/compare/v8.3.24...main
 
 
 

{pre_commit_vauxoo-8.3.22 → pre_commit_vauxoo-8.3.24}/docs/conf.py

@@ -18,7 +18,7 @@ project = "pre-commit-vauxoo"
 year = "2022"
 author = "Vauxoo"
 copyright = f"{year}, {author}"
-version = release = "8.3.22"
+version = release = "8.3.24"
 
 pygments_style = "trac"
 templates_path = ["."]

{pre_commit_vauxoo-8.3.22 → pre_commit_vauxoo-8.3.24}/resources/module_example1/__manifest__.py

@@ -13,7 +13,7 @@
     "depends": ["base"],
     # always loaded
     "data": [
-        # 'security/ir.model.access.csv',
+        "security/ir.model.access.csv",
         "views/views.xml",
     ],
     # only loaded in demonstration mode

{pre_commit_vauxoo-8.3.22 → pre_commit_vauxoo-8.3.24}/setup.py

@@ -37,7 +37,7 @@ def read(*names, **kwargs):
 
 setup(
     name="pre-commit-vauxoo",
-    version="8.3.22",
+    version="8.3.24",
     license="LGPL-3.0-or-later",
     description="pre-commit script to run automatically the configuration and variables custom from Vauxoo",
     long_description_content_type="text/x-rst",

pre_commit_vauxoo-8.3.24/src/pre_commit_vauxoo/__init__.py

@@ -0,0 +1 @@
+__version__ = "8.3.24"

{pre_commit_vauxoo-8.3.22 → pre_commit_vauxoo-8.3.24}/src/pre_commit_vauxoo/cfg/{% if not use_ruff %}no_ruff{% endif %}/.pylintrc-optional.jinja

@@ -32,9 +32,9 @@ enable=deprecated-method,
   use-symbolic-message-instead,
   useless-parent-delegation,
   # The following checks are migrated to ruff when it is enabled
-  # They keep the same optional level running from .config/.ruff-optional.toml, except the ones
-  # annotated as "mandatory .ruff.toml": those were also enabled by the "enable=all" of
-  # .config/.pylintrc so they keep the mandatory level
+  # They all run from .config/.ruff.toml there: the ruff optional configuration was merged into
+  # the mandatory one, so the "mandatory .ruff.toml" annotations below only record which ones
+  # were already enabled by the "enable=all" of .config/.pylintrc before that merge
   # The autofixable ones are also fixed from .config/.ruff-autofix.toml (annotated as "autofix")
   attribute-deprecated,  # ruff ODW8105
   attribute-string-redundant,  # ruff ODW8113 (autofix .ruff-autofix.toml)

pre_commit_vauxoo-8.3.22/src/pre_commit_vauxoo/cfg/{% if use_ruff %}ruff{% endif %}/.flake8-optional.jinja → pre_commit_vauxoo-8.3.24/src/pre_commit_vauxoo/cfg/{% if use_ruff %}ruff{% endif %}/.flake8.jinja

@@ -1,4 +1,25 @@
 [flake8]
+# The pyflakes (F) and most of the pycodestyle (E,W) checks were migrated to ruff (.config/.ruff.toml)
+# Only the continuation-line indentation rules (E12x/E13x) and E704 keep running here
+# since ruff does not implement them https://github.com/astral-sh/ruff/issues/2402
+# The optional flake8 configuration was merged into this one, so the bugbear checks without a
+# ruff implementation run from here too (B040, B042, B906, B908, B910 and any future one)
+# B = bugbear
+# B9 = bugbear opinionated (incl line length +10% tolerance)
+select = E12,E13,E704,B,B9
+# E123,E133 keep being ignored (same as before the ruff migration)
+# - B001 is covered by ruff E722 and B902 by ruff N804/N805 (both from .config/.ruff.toml)
+# - B037 is covered by the ruff return-in-init and yield-in-init, and B041 by the ruff
+#   multi-value-repeated-key-literal and multi-value-repeated-key-variable (the pyflakes F601/F602
+#   selected from the "F" of .config/.ruff.toml). Both were reported twice, by ruff and by bugbear
+# - B043 is implemented in ruff as del-attr-with-constant, now selected from .config/.ruff.toml
+# - B912: map(strict=True) only works in python >= 3.14 (same reason as B905)
+# - B023,B024,B036,B904,B905,B907 were already ignored before the ruff migration (see comments below)
+# - B950 (line length with a 10% tolerance) is reproduced by the ruff line-too-long selected in
+#   .config/.ruff.toml, where "line-length" is the 119 the formatter targets and
+#   [lint.pycodestyle] "max-line-length" the 130 where the check starts reporting
+# - The remaining B0xx/B9xx checks are implemented in ruff (.config/.ruff.toml)
+ignore = E123,E133,B001,B002,B003,B004,B005,B006,B007,B008,B009,B010,B011,B012,B013,B014,B015,B016,B017,B018,B019,B020,B021,B022,B023,B024,B025,B026,B027,B028,B029,B030,B031,B032,B033,B034,B035,B036,B037,B039,B041,B043,B901,B902,B903,B904,B905,B907,B909,B911,B912,B950
 max-line-length = 119
 # flake8 spells its parallel mode "auto", not 0 like pylint does: a numeric 0 is taken
 # literally as "0 jobs", which makes flake8 fall back to run_serial() and check every file
@@ -9,24 +30,3 @@ jobs = auto
 # Names injected at runtime, from LINT_ADDITIONAL_BUILTINS
 builtins = {{ additional_builtins | join(",") }}
 {%- endif %}
-# The E,W,F and most of the bugbear (B) checks were migrated to ruff
-# (.config/.ruff.toml for the mandatory ones and .config/.ruff-optional.toml for the optional ones)
-# Only the bugbear checks without a ruff implementation keep running here: B040, B042, B906,
-# B908, B910 and any future bugbear check
-# B = bugbear
-# B9 = bugbear opinionated (incl line length +10% tolerance)
-select = B,B9
-# - B001 is covered by ruff E722 and B902 by ruff N804/N805 (both mandatory .config/.ruff.toml)
-# - B037 is covered by the ruff return-in-init and yield-in-init, and B041 by the ruff
-#   multi-value-repeated-key-literal and multi-value-repeated-key-variable (the pyflakes F601/F602
-#   selected from the "F" of the mandatory .config/.ruff.toml). Both were reported twice, by ruff
-#   at the mandatory level and by bugbear at this one
-# - B043 is implemented in ruff as del-attr-with-constant, now selected from
-#   .config/.ruff-optional.toml so it keeps the very same optional level it had here
-# - B912: map(strict=True) only works in python >= 3.14 (same reason as B905)
-# - B023,B024,B036,B904,B905,B907 were already ignored before the ruff migration (see comments below)
-# - B950 (line length with a 10% tolerance) is reproduced by the ruff line-too-long selected in
-#   .config/.ruff-optional.toml, where "line-length" is the 119 the formatter targets and
-#   [lint.pycodestyle] "max-line-length" the 130 where the check starts reporting
-# - The remaining B0xx/B9xx checks are implemented in ruff (.config/.ruff-optional.toml)
-ignore = B001,B002,B003,B004,B005,B006,B007,B008,B009,B010,B011,B012,B013,B014,B015,B016,B017,B018,B019,B020,B021,B022,B023,B024,B025,B026,B027,B028,B029,B030,B031,B032,B033,B034,B035,B036,B037,B039,B041,B043,B901,B902,B903,B904,B905,B907,B909,B911,B912,B950

{pre_commit_vauxoo-8.3.22 → pre_commit_vauxoo-8.3.24}/src/pre_commit_vauxoo/cfg/{% if use_ruff %}ruff{% endif %}/.oca_hooks-autofix.cfg.jinja

@@ -3,6 +3,7 @@ enable=po-pretty-format,
 {%- if oca_hooks_matrix_value >= 20 %}
     prefer-readme-rst,
     xml-deprecated-qweb-directive-15,
+    xml-deprecated-res-groups-category-id,
     xml-field-bool-without-eval,
     xml-field-numeric-without-eval,
     xml-header-missing,

{pre_commit_vauxoo-8.3.22 → pre_commit_vauxoo-8.3.24}/src/pre_commit_vauxoo/cfg/{% if use_ruff %}ruff{% endif %}/.pre-commit-config-autofix.yaml.jinja

@@ -32,7 +32,7 @@ default_language_version:
   node: "26.7.0"
 repos:
   - repo: https://github.com/Vauxoo/ruff-odoo-pre-commit
-    rev: 0.16.3.34{# b2v-ruff #}
+    rev: 0.17.0.35{# b2v-ruff #}
     hooks:
       - id: ruff-check
         name: ruff-odoo autofix checks
@@ -45,7 +45,7 @@ repos:
         args:
           - --config=.config/.ruff-autofix.toml
   - repo: https://github.com/OCA/odoo-pre-commit-hooks
-    rev: v0.2.26
+    rev: v0.2.27
     hooks:
       - id: oca-checks-odoo-module
         args:

pre_commit_vauxoo-8.3.24/src/pre_commit_vauxoo/cfg/{% if use_ruff %}ruff{% endif %}/.pre-commit-config-optional.yaml.jinja

@@ -0,0 +1,42 @@
+exclude: |
+  (?x)(
+    # NOT INSTALLABLE ADDONS
+    # END NOT INSTALLABLE ADDONS
+    # Files and folders generated by bots, to avoid loops
+    ^setup/|/static/description/index\.html$|
+    # We don't want to mess with tool-generated files
+    .svg$|/tests/([^/]+/)?cassettes/|
+    # Maybe reactivate this when all README files include prettier ignore tags?
+    ^README\.md$|
+    # Library files can have extraneous formatting (even minimized)
+    /static/(src/)?lib/|
+    # Repos using Sphinx to generate docs don't need prettying
+    ^docs/_templates/.*\.html$|
+    # You don't usually want a bot to modify your legal texts
+    (LICENSE.*|COPYING.*)|
+    (\.travis\.yml|\.gitlab\-ci\.yml|\.pre\-commit\-config*\.yaml)|
+    # It was ignored from original MQT since that there is not init file
+    (/migrations/1[0-4])|
+    {% if exclude_lint_regex -%}
+    {{ "# EXCLUDE_LINT" }}
+    {{ exclude_lint_regex }}
+    {%- endif %}
+    (/doc/|/docs/)
+  )
+default_language_version:
+  python: python3
+  node: "26.7.0"
+repos:
+  # Every optional hook was converged into .pre-commit-config.yaml: the checks it used to run
+  # are reported by the mandatory ruff-odoo, flake8 and pylint hooks now, and the oca-checks,
+  # doc8 and commit-log hooks moved there as they were. Only the EXPERIMENTAL checks keep a
+  # level that does not affect the build status, which is what this configuration runs
+  - repo: https://github.com/Vauxoo/ruff-odoo-pre-commit
+    rev: 0.17.0.35{# b2v-ruff #}
+    hooks:
+      - id: ruff-check
+        name: ruff-odoo EXPERIMENTAL checks (Won't affect CI status)!
+        verbose: True  # exit-zero needs verbose
+        args:
+          - --config=.config/.ruff-experimental.toml
+          - --exit-zero

{pre_commit_vauxoo-8.3.22 → pre_commit_vauxoo-8.3.24}/src/pre_commit_vauxoo/cfg/{% if use_ruff %}ruff{% endif %}/.pre-commit-config.yaml.jinja

@@ -28,10 +28,10 @@ default_language_version:
   node: "26.7.0"
 repos:
   - repo: https://github.com/Vauxoo/ruff-odoo-pre-commit
-    rev: 0.16.3.34{# b2v-ruff #}
+    rev: 0.17.0.35{# b2v-ruff #}
     hooks:
       - id: ruff-check
-        name: ruff-odoo mandatory checks
+        name: ruff-odoo checks
         args:
           - --config=.config/.ruff.toml
   - repo: https://github.com/PyCQA/flake8
@@ -42,7 +42,12 @@ repos:
 {%- endif %}
     hooks:
       - id: flake8
-        name: flake8 mandatory checks
+        name: flake8 + bugbear checks
+{%- if flake8_matrix_value >= 20 %}
+        additional_dependencies: ["flake8-bugbear==25.11.29"]
+{%- else %}
+        additional_dependencies: ["flake8-bugbear==23.9.16"]
+{%- endif %}
         args:
           - --config=.config/.flake8
   - repo: https://github.com/OCA/pylint-odoo
@@ -53,13 +58,33 @@ repos:
 {%- endif %}
     hooks:
       - id: pylint_odoo
-        name: pylint mandatory checks
+        name: pylint checks
         args:
           - --rcfile=.config/.pylintrc
           - --disable={{ pylint_disable_checks | join(",") if pylint_disable_checks else "R0000" }}
 {%- if pylint_matrix_value >= 20 %}
           - --jobs=3
 {%- endif %}
+  - repo: https://github.com/OCA/odoo-pre-commit-hooks
+{%- if oca_hooks_matrix_value >= 20 %}
+    rev: v0.2.27
+{%- else %}
+    rev: v0.1.7
+{%- endif %}
+    hooks:
+      - id: oca-checks-odoo-module
+        args:
+          - --config=.config/.oca_hooks.cfg
+      - id: oca-checks-po
+        args:
+          - --config=.config/.oca_hooks.cfg
+  - repo: https://github.com/PyCQA/doc8
+    rev: v2.0.0
+    hooks:
+      - id: doc8
+        name: RST lint
+        args:
+          - --config=.config/doc8.ini
   - repo: https://github.com/pre-commit/mirrors-eslint
     rev: v10.8.1
     hooks:
@@ -84,6 +109,13 @@ repos:
         language: python
         types: [text]
         files: (^deactivate\.jinja$|/data/neutralize\.sql$)
+      - id: vx-check-commit-log
+        name: commit message range check
+        description: Validate commit messages from VERSION..HEAD using the Odoo/Vauxoo structure.
+        entry: vx-check-commit-log
+        language: python
+        pass_filenames: false
+        always_run: true
   - repo: https://github.com/pre-commit/pre-commit-hooks
 {%- if pre_commit_matrix_value >= 20 %}
     rev: v6.0.0

{pre_commit_vauxoo-8.3.22 → pre_commit_vauxoo-8.3.24}/src/pre_commit_vauxoo/cfg/{% if use_ruff %}ruff{% endif %}/.pylintrc.jinja

@@ -13,9 +13,21 @@ py-version={{ py_version }}
 
 
 [ODOOLINT]
+# The checks using license-allowed, manifest-required-authors and manifest-deprecated-keys are
+# migrated to ruff, so the values actually running are the [lint.odoo] ones of
+# .config/.ruff.toml, kept here in sync for the external scripts replacing this section
+license-allowed=AGPL-3,GPL-2,GPL-2 or any later version,
+   GPL-3,GPL-3 or any later version,LGPL-3,
+   Other OSI approved licence,Other proprietary,
+   OEEL-1, OPL-1,
 manifest-required-authors=Vauxoo,
    Odoo Community Association (OCA),
    Jarsa,
+manifest-deprecated-keys=active,
+   description,
+   {% if odoo_version and odoo_version|float >= 16.0 -%}
+   qweb,
+   {%- endif %}
 # External scripts odoo_lint replace
 
 [MESSAGES CONTROL]
@@ -37,8 +49,6 @@ disable=abstract-method,
    consider-using-ternary,
    consider-using-generator,
    cyclic-import,
-   deprecated-pragma,
-   deprecated-method,
    docstring-first-line-empty,
    duplicate-code,
    file-ignored,
@@ -80,17 +90,16 @@ disable=abstract-method,
    unused-private-member,
    use-dict-literal,
    use-implicit-booleaness-not-comparison-to-string,
-   use-implicit-booleaness-not-comparison-to-zero,
    useless-option-value,
    unknown-option-value,
-   use-symbolic-message-instead,
    useless-suppression,
    wrong-import-order,
    wrong-import-position,
    # Disabled here because enabled from Experimental
    manifest-superfluous-key,
    no-search-all,
-   # odoolint disable all to be enabled from optional
+   # odoolint checks reported by ruff-odoo from .config/.ruff.toml (they were the optional
+   # pylint-odoo ones before the optional configuration was merged into the mandatory one)
    # Comment to enable
    attribute-deprecated,
    attribute-string-redundant,
@@ -135,9 +144,7 @@ disable=abstract-method,
    use-vim-comment,
    website-manifest-key-not-valid-uri,
    # Checks migrated to ruff (see .config/.ruff.toml)
-   # They are disabled here to avoid duplicated reports since ruff runs them as mandatory checks,
-   # except the ones annotated with the configuration file running them (e.g. use-list-literal,
-   # which a single ruff rule reports together with the optional use-dict-literal)
+   # They are disabled here to avoid duplicated reports since ruff runs them as mandatory checks
    anomalous-backslash-in-string,  # ruff W605
    assert-on-string-literal,  # ruff PLW0129
    assert-on-tuple,  # ruff F631
@@ -324,7 +331,7 @@ disable=abstract-method,
    unused-variable,  # ruff F841
    use-a-generator,  # ruff C419
    use-implicit-booleaness-not-len,  # ruff PLC1802
-   use-list-literal,  # ruff C408 (moved to the optional level with use-dict-literal)
+   use-list-literal,  # ruff C408 (a single rule reports it together with use-dict-literal)
    use-maxsplit-arg,  # ruff PLC0207
    use-sequence-for-iteration,  # ruff PLC0208
    use-yield-from,  # ruff UP028

{pre_commit_vauxoo-8.3.22 → pre_commit_vauxoo-8.3.24}/src/pre_commit_vauxoo/cfg/{% if use_ruff %}ruff{% endif %}/.ruff-autofix.toml.jinja

@@ -21,9 +21,9 @@ line-ending = "lf"
 #   manifest-deprecated-key, use-vim-comment, unused-logger, attribute-string-redundant,
 #   prefer-env-translation, manifest-superfluous-key, header-comments, deprecated-self-cr,
 #   manifest-data-duplicated and translation-not-lazy
-# The remaining Odoo checks keep the same level they had in pylint-odoo: the mandatory ones from
-# .ruff.toml and the optional ones from .ruff-optional.toml. no-search-all is the exception: it
-# was experimental in pylint-odoo and now runs as mandatory from .ruff.toml
+# The remaining Odoo checks are reported from .ruff.toml, the mandatory ones of pylint-odoo and
+# the optional ones alike (the optional configuration was merged into it). no-search-all was
+# experimental in pylint-odoo and now runs as mandatory from .ruff.toml too
 # Version-dependent gating (prefer-env-translation only applies for odoo >= 18.0,
 # deprecated-self-cr for odoo >= 19.0 and translation-not-lazy for odoo >= 14.0) is handled
 # by ruff-odoo's internal logic when --odoo-version
@@ -146,7 +146,7 @@ ignore = [
                                     # reason). It is the only one of those with an autofix, so the
                                     # "ALL" above would keep rewriting the translation terms even
                                     # though no level reports it
-    "triple-single-quotes",  # Reported from the optional configuration (bad-docstring-quotes)
+    "triple-single-quotes",  # Reported from .ruff.toml (bad-docstring-quotes)
     "true-false-comparison",  # "var != True" is different than "not var"
     "type-alias-without-annotation",  # We are not using typing entirely yet
     "uncapitalized-environment-variables",  # It could generate issues and we are not using WIN

{pre_commit_vauxoo-8.3.22 → pre_commit_vauxoo-8.3.24}/src/pre_commit_vauxoo/cfg/{% if use_ruff %}ruff{% endif %}/.ruff-experimental.toml.jinja

@@ -2,6 +2,8 @@
 # It replaces the pylint-odoo and bandit experimental checks already implemented in ruff, keeping
 # the same level they had before the ruff migration (see .config/.pylintrc-experimental and
 # .config/.bandit-experimental.yml without ruff)
+# It is the only ruff configuration left with a level of its own: the optional one was merged
+# into the mandatory .config/.ruff.toml
 line-length = 119
 # Required to select the checks by name instead of by code (selecting rules by name requires
 # preview mode)
@@ -10,7 +12,7 @@ target-version = "{{ py_target_version }}"  # Mapped from the odoo version (VERS
 
 [lint]
 # Only the experimental checks are selected, the "all" default would report the mandatory
-# and optional ones twice
+# ones twice
 # manifest-superfluous-key was experimental too but it is autofixable, so it keeps running
 # from .ruff-autofix.toml (removing the superfluous keys is part of the autofixes enabled by
 # the compatibility version 30, see the --compatibility-version option)
@@ -55,14 +57,14 @@ ignore = [
     # and B311)
     "exec-builtin",  # mandatory from .ruff.toml
     "suspicious-eval-usage",  # mandatory from .ruff.toml
-    "try-except-pass",  # optional from .ruff-optional.toml, where it also replaces the
-                        # deprecated ruff-odoo except-pass, which reported the same handler
-    "unsafe-markup-use",  # optional from .ruff-optional.toml
-    # Moved to the optional configuration: both are worth a look on every merge request and not
-    # only when the developer opts into this hook, an assert being dropped by "python -O" and a
-    # Mersenne Twister random being unfit for anything secret
-    "assert",  # optional from .ruff-optional.toml
-    "suspicious-non-cryptographic-random-usage",  # optional from .ruff-optional.toml
+    "try-except-pass",  # mandatory from .ruff.toml, where it also replaces the deprecated
+                        # ruff-odoo except-pass, which reported the same handler
+    "unsafe-markup-use",  # mandatory from .ruff.toml
+    # Moved to the mandatory configuration: both are worth a look on every merge request and
+    # not only when the developer opts into this hook, an assert being dropped by "python -O"
+    # and a Mersenne Twister random being unfit for anything secret
+    "assert",  # mandatory from .ruff.toml
+    "suspicious-non-cryptographic-random-usage",  # mandatory from .ruff.toml
 ]
 
 [lint.per-file-ignores]