pull-request-fixer 0.1.3__tar.gz → 0.1.4__tar.gz

{pull_request_fixer-0.1.3 → pull_request_fixer-0.1.4}/PKG-INFO

@@ -1,10 +1,10 @@
 Metadata-Version: 2.4
 Name: pull-request-fixer
-Version: 0.1.3
+Version: 0.1.4
 Summary: Pull request formatter and fixer with GitHub integration
-Project-URL: Homepage, https://github.com/lfit/pull-request-fixer
-Project-URL: Repository, https://github.com/lfit/pull-request-fixer.git
-Project-URL: Bug Tracker, https://github.com/lfit/pull-request-fixer/issues
+Project-URL: Homepage, https://github.com/lfreleng-actions/pull-request-fixer
+Project-URL: Repository, https://github.com/lfreleng-actions/pull-request-fixer.git
+Project-URL: Bug Tracker, https://github.com/lfreleng-actions/pull-request-fixer/issues
 Author-email: The Linux Foundation <releng@linuxfoundation.org>
 License: Apache-2.0
 License-File: LICENSE
@@ -347,7 +347,7 @@ Automatically fixed pull request metadata:
 - **Pull request body** updated to match commit message
 
 ---
-*This fix was automatically applied by [pull-request-fixer](https://github.com/lfit/pull-request-fixer)*
+*This fix was automatically applied by [pull-request-fixer](https://github.com/lfreleng-actions/pull-request-fixer)*
 ```
 
 The comment includes the items that changed. For
@@ -617,7 +617,7 @@ If updates fail:
 ### Setup
 
 ```bash
-git clone https://github.com/lfit/pull-request-fixer.git
+git clone https://github.com/lfreleng-actions/pull-request-fixer.git
 cd pull-request-fixer
 uv venv
 source .venv/bin/activate
@@ -663,24 +663,24 @@ Apache-2.0
 ## Support
 
 - **Issues**:
-  <https://github.com/lfit/pull-request-fixer/issues>
+  <https://github.com/lfreleng-actions/pull-request-fixer/issues>
 - **Documentation**:
-  <https://github.com/lfit/pull-request-fixer/blob/main/IMPLEMENTATION.md>
+  <https://github.com/lfreleng-actions/pull-request-fixer/blob/main/IMPLEMENTATION.md>
 - **Changelog**:
-  <https://github.com/lfit/pull-request-fixer/blob/main/CHANGELOG.md>
+  <https://github.com/lfreleng-actions/pull-request-fixer/blob/main/CHANGELOG.md>
 
 ## Related Projects
 
 - [dependamerge](https://github.com/lfit/dependamerge) - Automatically merge
   automation PRs
-- [markdown-table-fixer](https://github.com/lfit/markdown-table-fixer) - Fix
-  markdown table formatting
+- [markdown-table-fixer][mtf-repo] - Fix markdown table formatting
 
 ## Acknowledgments
 
 This project uses patterns from:
 
-- [dependamerge](https://github.com/lfit/dependamerge) for efficient GitHub
-  organization scanning
-- [markdown-table-fixer](https://github.com/lfit/markdown-table-fixer) for
-  the initial codebase structure
+- [dependamerge](https://github.com/lfit/dependamerge) for efficient
+  GitHub organization scanning
+- [markdown-table-fixer][mtf-repo] for the initial codebase structure
+
+[mtf-repo]: https://github.com/lfreleng-actions/markdown-table-fixer

{pull_request_fixer-0.1.3 → pull_request_fixer-0.1.4}/README.md

@@ -305,7 +305,7 @@ Automatically fixed pull request metadata:
 - **Pull request body** updated to match commit message
 
 ---
-*This fix was automatically applied by [pull-request-fixer](https://github.com/lfit/pull-request-fixer)*
+*This fix was automatically applied by [pull-request-fixer](https://github.com/lfreleng-actions/pull-request-fixer)*
 ```
 
 The comment includes the items that changed. For
@@ -575,7 +575,7 @@ If updates fail:
 ### Setup
 
 ```bash
-git clone https://github.com/lfit/pull-request-fixer.git
+git clone https://github.com/lfreleng-actions/pull-request-fixer.git
 cd pull-request-fixer
 uv venv
 source .venv/bin/activate
@@ -621,24 +621,24 @@ Apache-2.0
 ## Support
 
 - **Issues**:
-  <https://github.com/lfit/pull-request-fixer/issues>
+  <https://github.com/lfreleng-actions/pull-request-fixer/issues>
 - **Documentation**:
-  <https://github.com/lfit/pull-request-fixer/blob/main/IMPLEMENTATION.md>
+  <https://github.com/lfreleng-actions/pull-request-fixer/blob/main/IMPLEMENTATION.md>
 - **Changelog**:
-  <https://github.com/lfit/pull-request-fixer/blob/main/CHANGELOG.md>
+  <https://github.com/lfreleng-actions/pull-request-fixer/blob/main/CHANGELOG.md>
 
 ## Related Projects
 
 - [dependamerge](https://github.com/lfit/dependamerge) - Automatically merge
   automation PRs
-- [markdown-table-fixer](https://github.com/lfit/markdown-table-fixer) - Fix
-  markdown table formatting
+- [markdown-table-fixer][mtf-repo] - Fix markdown table formatting
 
 ## Acknowledgments
 
 This project uses patterns from:
 
-- [dependamerge](https://github.com/lfit/dependamerge) for efficient GitHub
-  organization scanning
-- [markdown-table-fixer](https://github.com/lfit/markdown-table-fixer) for
-  the initial codebase structure
+- [dependamerge](https://github.com/lfit/dependamerge) for efficient
+  GitHub organization scanning
+- [markdown-table-fixer][mtf-repo] for the initial codebase structure
+
+[mtf-repo]: https://github.com/lfreleng-actions/markdown-table-fixer

{pull_request_fixer-0.1.3 → pull_request_fixer-0.1.4}/pyproject.toml

@@ -53,9 +53,9 @@ dev = [
 ]
 
 [project.urls]
-Homepage = "https://github.com/lfit/pull-request-fixer"
-Repository = "https://github.com/lfit/pull-request-fixer.git"
-"Bug Tracker" = "https://github.com/lfit/pull-request-fixer/issues"
+Homepage = "https://github.com/lfreleng-actions/pull-request-fixer"
+Repository = "https://github.com/lfreleng-actions/pull-request-fixer.git"
+"Bug Tracker" = "https://github.com/lfreleng-actions/pull-request-fixer/issues"
 
 [project.scripts]
 pull-request-fixer = "pull_request_fixer.cli:cli"
@@ -233,13 +233,11 @@ markers = [
 ]
 
 [tool.coverage.run]
-source = ["src/pull_request_fixer"]
+source = ["pull_request_fixer"]
 omit = [
     "*/tests/*",
     "*/test_*",
     "*/__pycache__/*",
-    "*/venv/*",
-    "*/.venv/*",
 ]
 
 [tool.coverage.report]
@@ -255,3 +253,9 @@ exclude_lines = [
     "class .*\\bProtocol\\):",
     "@(abc\\.)?abstractmethod",
 ]
+
+[tool.uv]
+# Supply-chain cooldown: do not resolve anything published in the last
+# 7 days (rolling window; uv records it as a relative span in uv.lock).
+# Requires uv >= 0.9.17 for the relative-duration ("7 days") form.
+exclude-newer = "7 days"

{pull_request_fixer-0.1.3 → pull_request_fixer-0.1.4}/src/pull_request_fixer/_version.py

@@ -18,7 +18,7 @@ version_tuple: tuple[int | str, ...]
 commit_id: str | None
 __commit_id__: str | None
 
-__version__ = version = '0.1.3'
-__version_tuple__ = version_tuple = (0, 1, 3)
+__version__ = version = '0.1.4'
+__version_tuple__ = version_tuple = (0, 1, 4)
 
 __commit_id__ = commit_id = None

{pull_request_fixer-0.1.3 → pull_request_fixer-0.1.4}/src/pull_request_fixer/cli.py

@@ -11,6 +11,7 @@ import logging
 import re
 import sys
 from typing import Any
+from urllib.parse import urlparse
 
 from dependamerge import get_default_workers
 from rich.console import Console
@@ -91,15 +92,19 @@ def parse_target(target: str) -> tuple[str, str]:
         # It's a specific PR URL
         return ("pr", target)
 
-    # Check if it's a GitHub URL
-    if "github.com" in target:
-        # Extract org from URL: https://github.com/ORG or https://github.com/ORG/...
-        parts = target.split("github.com/")
-        if len(parts) > 1:
-            # Get the part after github.com/
-            path = parts[1]
-            # Split by / and take first part (the org)
-            org = path.split("/")[0]
+    # Check if it's a GitHub URL by parsing it and validating the host.
+    # A substring check such as ``"github.com" in target`` is unsafe because
+    # a host like ``github.com.evil.example`` would also match, so parse the
+    # URL and compare the hostname against an explicit allowlist of the
+    # GitHub web hosts. URLs without a scheme (e.g. ``github.com/org``) are
+    # treated as network-path references for parsing.
+    parse_input = target if "://" in target else f"//{target}"
+    parsed = urlparse(parse_input)
+    hostname = (parsed.hostname or "").lower()
+    if hostname in ("github.com", "www.github.com"):
+        # Extract org from the URL path: /ORG or /ORG/...
+        org = parsed.path.lstrip("/").split("/")[0]
+        if org:
             return ("org", org)
 
     # Not a URL, return as organization
@@ -1715,8 +1720,7 @@ async def create_pr_comment(
             [
                 "",
                 "---",
-                "*This fix was automatically applied by "
-                "[pull-request-fixer](https://github.com/lfit/pull-request-fixer)*",
+                "*This fix was automatically applied by [pull-request-fixer](https://github.com/lfreleng-actions/pull-request-fixer)*",
             ]
         )
 
@@ -1828,8 +1832,7 @@ async def create_file_fix_comment(
         lines.extend(
             [
                 "---",
-                "*This fix was automatically applied by "
-                "[pull-request-fixer](https://github.com/lfit/pull-request-fixer)*",
+                "*This fix was automatically applied by [pull-request-fixer](https://github.com/lfreleng-actions/pull-request-fixer)*",
             ]
         )
 

{pull_request_fixer-0.1.3 → pull_request_fixer-0.1.4}/src/pull_request_fixer/pr_file_fixer.py

@@ -504,7 +504,7 @@ class PRFileFixer:
                     f"The commit has been amended with the fixes.\n\n"
                     f"---\n"
                     f"*Automatically fixed by [pull-request-fixer]"
-                    f"(https://github.com/lfit/pull-request-fixer)*"
+                    f"(https://github.com/lfreleng-actions/pull-request-fixer)*"
                 )
 
                 with suppress(Exception):
@@ -857,7 +857,7 @@ class PRFileFixer:
                     f"Changes applied via GitHub API.\n\n"
                     f"---\n"
                     f"*Automatically fixed by [pull-request-fixer]"
-                    f"(https://github.com/lfit/pull-request-fixer)*"
+                    f"(https://github.com/lfreleng-actions/pull-request-fixer)*"
                 )
 
                 try:

{pull_request_fixer-0.1.3 → pull_request_fixer-0.1.4}/src/pull_request_fixer/pr_scanner.py

@@ -284,8 +284,12 @@ class PRScanner:
                     break
                 yield item
         finally:
-            # Ensure producer completes
-            await producer_task
+            # Ensure the producer task completes and surface any exception it
+            # raised. ``gather`` wraps the single task so the cleanup is an
+            # explicit call expression: a bare ``await producer_task`` is
+            # functionally equivalent but CodeQL reports it as a statement
+            # with no effect.
+            await asyncio.gather(producer_task)
 
     async def _iter_org_repositories_with_open_prs(
         self, organization: str