From 6a7da08002d20ba87f6a8adab5560c499e547ecd Mon Sep 17 00:00:00 2001 From: Lilleman auf Larv Date: Wed, 14 Oct 2026 13:11:08 +0200 Subject: [PATCH] =?UTF-8?q?Answer=20architecture=20round=204:=200=20?= =?UTF-8?q?=F0=9F=94=B4,=200=20=F0=9F=9F=A1;=20an=20entry=20with=20no=20su?= =?UTF-8?q?mmary=20files=20without=20a=20bare=20colon?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- release-tooling/file_vulnerabilities.py | 3 ++- release-tooling/file_vulnerabilities_test.py | 4 +++- 2 files changed, 5 insertions(+), 2 deletions(-) diff --git a/release-tooling/file_vulnerabilities.py b/release-tooling/file_vulnerabilities.py index ae060cd..6db3942 100644 --- a/release-tooling/file_vulnerabilities.py +++ b/release-tooling/file_vulnerabilities.py @@ -105,7 +105,8 @@ def detail(module: Module) -> str: lines = [] for osv in sorted(module.osvs.values(), key=lambda o: o["id"]): aliases = f" ({', '.join(osv['aliases'])})" if osv["aliases"] else "" - lines.append(f"- {osv['id']}{aliases}: {osv['summary']}") + summary = f": {osv['summary']}" if osv["summary"] else "" + lines.append(f"- {osv['id']}{aliases}{summary}") return f"govulncheck found these in {module.carried}:\n\n" + "\n".join(lines) + "\n" diff --git a/release-tooling/file_vulnerabilities_test.py b/release-tooling/file_vulnerabilities_test.py index 2f4b244..be5fe99 100644 --- a/release-tooling/file_vulnerabilities_test.py +++ b/release-tooling/file_vulnerabilities_test.py @@ -39,6 +39,7 @@ OSVS = ( {"id": "GO-2026-0002", "summary": "Denial of service in net/http", "aliases": ["GHSA-2222", "CVE-2026-2"]}, {"id": "GO-2026-0001", "summary": "Cross-site scripting in html/template", "aliases": ["CVE-2026-1"]}, {"id": "GO-2026-0003", "summary": "Panic in x/text"}, + {"id": "GO-2026-0004"}, ) STDLIB = ( ("GO-2026-0002", "stdlib", "v1.27.1", "v1.27.2"), @@ -110,7 +111,8 @@ class FileItems(unittest.TestCase): self.assertIn("| 8 | 0.2.0 | security | **Raise `golang.org/x/text`", todo) def test_a_vulnerability_no_version_fixes_names_no_target(self): - todo, _ = file(TODO, *STDLIB, ("GO-2026-0003", "stdlib", "v1.27.1", "")) + todo, _ = file(TODO, *STDLIB, ("GO-2026-0004", "stdlib", "v1.27.1", "")) + self.assertIn("- GO-2026-0004\n", todo) self.assertIn( "| 7 | 0.2.0 | security | **Ship no release while fejkdata carries Go 1.27.1, some of whose known" " vulnerabilities no version fixes yet.** |",