Skip to content

chore(ci): harden pipeline with pip-audit, stricter mypy, commit lint#65

Merged
robotlearning123 merged 3 commits intoagent-next:mainfrom
robotlearning123:chore/ci-hardening
Mar 16, 2026
Merged

chore(ci): harden pipeline with pip-audit, stricter mypy, commit lint#65
robotlearning123 merged 3 commits intoagent-next:mainfrom
robotlearning123:chore/ci-hardening

Conversation

@robotlearning123
Copy link
Member

Summary

  • Replace deprecated safety check with pip-audit --strict (free, maintained by PyPI)
  • Add --check-untyped-defs to mypy (catches bugs in untyped function bodies)
  • Add fail-fast: false to test matrix (all Python versions run even if one fails)
  • Add commit-lint job enforcing conventional commits on PRs
  • Add pr-size advisory job warning when PR exceeds 500 lines
  • Add security to build job dependencies
  • Fix 5 mypy errors exposed by stricter typecheck

Test plan

  • mypy passes with zero errors under --check-untyped-defs
  • 88 core tests pass
  • ruff lint + format clean
  • YAML validates

🤖 Generated with Claude Code

robotlearning123 and others added 3 commits March 16, 2026 10:22
- Replace deprecated `safety check` with `pip-audit --strict` in CI and Makefile
- Add `--check-untyped-defs` to mypy for stricter type checking
- Add `fail-fast: false` to test matrix so all Python versions run
- Add commit-lint job using commitizen for conventional commit enforcement
- Add advisory pr-size check job (warns if >500 lines changed)
- Include security job in build gate (`needs`)

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
- sdk.py: Add assert for _on_approval narrowing inside guarded block
- cli.py: Add attr-defined to type: ignore comment for dict iteration
- agent.py: Replace short-circuit logger.error with explicit callback
- agent.py: Add null guards for _evidence before emit_transcript/emit_dtmf

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
@robotlearning123 robotlearning123 merged commit d587aed into agent-next:main Mar 16, 2026
9 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant