Dev-> 3.0 sync

.github/workflows/cla.yml

@@ -0,0 +1,97 @@
+name: "CLA Assistant"
+on:
+  issue_comment:
+    types: [created]
+  pull_request_target:
+    types: [opened, closed, synchronize]
+
+permissions:
+  pull-requests: write
+  statuses: write
+
+jobs:
+  CLAAssistant:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Generate token from GitHub App
+        id: app-token
+        uses: actions/create-github-app-token@v1
+        with:
+          app-id: ${{ secrets.APP_ID }}
+          private-key: ${{ secrets.APP_PRIVATE_KEY }}
+          owner: blacklanternsecurity
+
+      - name: Check all committers against org and allowlist
+        id: cla-check
+        env:
+          GH_TOKEN: ${{ steps.app-token.outputs.token }}
+        run: |
+          if [ "${{ github.event_name }}" = "pull_request_target" ]; then
+            PR_NUM="${{ github.event.pull_request.number }}"
+          else
+            PR_NUM="${{ github.event.issue.number }}"
+          fi
+
+          COMMITTERS=$(gh api "repos/${{ github.repository }}/pulls/$PR_NUM/commits" --paginate --jq '.[].author.login' | sort -u)
+          ALL_EXEMPT=true
+
+          for LOGIN in $COMMITTERS; do
+            # treat commits with no associated GitHub login as non-exempt
+            if [ -z "$LOGIN" ] || [ "$LOGIN" = "null" ]; then
+              echo "Unknown committer (no GitHub login) — not exempt"
+              ALL_EXEMPT=false
+              break
+            fi
+
+            EXEMPT=false
+
+            # check if account type is Bot (GitHub App accounts)
+            AUTHOR_TYPE=$(gh api "users/${LOGIN}" --jq '.type' 2>/dev/null || echo "Unknown")
+            if [ "$AUTHOR_TYPE" = "Bot" ]; then
+              echo "$LOGIN is a Bot account — exempt"
+              EXEMPT=true
+            fi
+
+            # check org membership
+            if [ "$EXEMPT" = "false" ]; then
+              if gh api "orgs/blacklanternsecurity/members/$LOGIN" > /dev/null 2>&1; then
+                echo "$LOGIN is an org member — exempt"
+                EXEMPT=true
+              fi
+            fi
+
+            if [ "$EXEMPT" = "false" ]; then
+              echo "$LOGIN is not exempt — CLA required"
+              ALL_EXEMPT=false
+              break
+            fi
+          done
+
+          echo "all_exempt=$ALL_EXEMPT" >> "$GITHUB_OUTPUT"
+
+      - name: Skip CLA when all committers are exempt
+        if: steps.cla-check.outputs.all_exempt == 'true' && github.event_name == 'pull_request_target'
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          gh api --method POST "repos/${{ github.repository }}/statuses/${{ github.event.pull_request.head.sha }}" \
+            -f state=success \
+            -f context="CLAAssistant" \
+            -f description="CLA check skipped — all committers are org members or bots"
+
+      - name: "CLA Assistant"
+        if: |
+          (steps.cla-check.outputs.all_exempt != 'true') &&
+          ((github.event.comment.body == 'recheck' || github.event.comment.body == 'I have read the CLA Document and I hereby sign the CLA') || github.event_name == 'pull_request_target')
+        uses: contributor-assistant/github-action@v2.6.1
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          PERSONAL_ACCESS_TOKEN: ${{ steps.app-token.outputs.token }}
+        with:
+          path-to-signatures: "signatures/version1/cla.json"
+          path-to-document: "https://github.com/blacklanternsecurity/CLA/blob/main/ICLA.md"
+          branch: "main"
+          allowlist: "dependabot[bot],github-actions[bot],renovate[bot]"
+          remote-organization-name: "blacklanternsecurity"
+          remote-repository-name: "CLA"
+          lock-pullrequest-aftermerge: "false"

bbot/core/helpers/names_generator.py

@@ -17,29 +17,45 @@
     "autistic",
     "awkward",
     "baby",
+    "bamboozled",
+    "based",
+    "befuddled",
     "begrudged",
     "benevolent",
     "bewildered",
     "bighuge",
     "black",
     "blazed",
     "bloodshot",
+    "bodacious",
+    "bonkers",
+    "bootleg",
+    "bricked",
     "brown",
+    "bussin",
+    "caffeinated",
+    "chaotic",
     "cheeky",
     "childish",
     "chiseled",
+    "chonky",
+    "clapped",
     "cold",
     "condescending",
     "considerate",
     "constipated",
     "contentious",
+    "cooked",
     "corrupted",
     "cosmic",
+    "cracked",
     "crafty",
+    "cranked",
     "crazed",
     "creamy",
     "crispy",
     "crumbly",
+    "crusty",
     "cryptic",
     "cuddly",
     "cursed",
@@ -63,6 +79,7 @@
     "diabolical",
     "difficult",
     "dilapidated",
+    "discombobulated",
     "dismal",
     "distilled",
     "disturbed",
@@ -83,10 +100,12 @@
     "expired",
     "exquisite",
     "extreme",
+    "feral",
     "fermented",
     "ferocious",
     "fiendish",
     "fierce",
+    "flabbergasted",
     "flamboyant",
     "fleecy",
     "flirtatious",
@@ -99,9 +118,13 @@
     "fuzzy",
     "gentle",
     "giddy",
+    "glitched",
     "glowering",
     "glutinous",
+    "goated",
+    "gobsmacked",
     "golden",
+    "goofy",
     "gothic",
     "grievous",
     "gummy",
@@ -137,6 +160,9 @@
     "intoxicated",
     "inventive",
     "irritable",
+    "jacked",
+    "janky",
+    "juiced",
     "large",
     "liquid",
     "loveable",
@@ -162,10 +188,12 @@
     "nautical",
     "nefarious",
     "negligent",
+    "nerfed",
     "neurotic",
     "nihilistic",
     "normal",
     "overattached",
+    "overclocked",
     "overcompensating",
     "overenthusiastic",
     "overmedicated",
@@ -213,6 +241,7 @@
     "savvy",
     "scheming",
     "schizophrenic",
+    "scuffed",
     "secretive",
     "sedated",
     "senile",
@@ -224,10 +253,12 @@
     "sly",
     "sneaky",
     "soft",
+    "soggy",
     "sophisticated",
     "spasmodic",
     "spicy",
     "spiteful",
+    "spooky",
     "squishy",
     "steamy",
     "sticky",
@@ -244,6 +275,7 @@
     "sunburned",
     "super",
     "surreal",
+    "sus",
     "suspicious",
     "sweet",
     "swole",
@@ -256,6 +288,8 @@
     "ticklish",
     "tiny",
     "tricky",
+    "turbo",
+    "turnt",
     "twitchy",
     "ugly",
     "unabated",
@@ -288,8 +322,11 @@
     "wild",
     "wispy",
     "witty",
+    "wonky",
     "woolly",
+    "yeeted",
     "zesty",
+    "zooted",
 ]
 
 names = [

pyproject.toml

@@ -77,7 +77,7 @@ dev = [
     "fastapi>=0.115.5,<0.129.0",
     "pytest-httpx>=0.35",
     "pytest-benchmark>=4,<6",
-    "ruff==0.15.2",
+    "ruff==0.15.10",
     "baddns~=2.0.0",
 ]
 docs = [