fix(safety): add pyproject.toml parser support for uv/poetry Dependabot PRs#67

Merged

j7an merged 24 commits into

mainfrom

fix/pyproject-toml-parser

May 24, 2026

Commits on May 24, 2026

fix(safety): scaffold pyproject-bump-extract helper with contract guards
j7an
committed
fix(safety): pyproject parser handles PEP 621 [project] dependencies bumps
j7an
committed
fix(safety): cover PEP 621 optional-deps, PEP 735 groups, uv constraint/override
j7an
committed
fix(safety): lock poetry main key=value and python-exclusion behavior
j7an
committed
fix(safety): lock poetry inline-table version-only bump behavior
j7an
committed
fix(safety): cover poetry group and legacy dev-dependencies tables
j7an
committed
fix(safety): cover subdir pyproject paths and multi-file independence
j7an
committed
fix(safety): lock disqualification rules with negative test fixtures
j7an
committed
fix(safety): comment and whitespace churn does not disqualify
j7an
committed
fix(safety): support escaped-quote markers + lock target-version extraction edge cases
j7an
committed
fix(safety): document diff-aware pyproject clearance in classifier header
j7an
committed
fix(safety): re-sync classify-touched-paths inline copies after docstring update
j7an
committed
fix(safety): wire pyproject helper + EFFECTIVE_TOUCHED into dependency-safety
j7an
committed
fix(safety): mirror pyproject wiring into dependency-cooldown workflow
j7an
committed
fix(safety): track pyproject-bump-extract inline copies in CI sync guard
j7an
committed
fix(safety): integration tests for pyproject helper composition
j7an
committed
fix(safety): clarify classifier's pyproject.toml unsupported test (path-only)
j7an
committed
fix(safety): list pyproject-bump-extract as an inlined helper in CLAUDE.md
j7an
committed
fix(safety): supply EFFECTIVE_TOUCHED to cooldown guard-runtime tests
j7an
committed
fix(safety): close five silent-green parser bugs (PR #67 review)
j7an
committed
fix(safety): re-sync pyproject-bump-extract inline copies after parser fixes
j7an
committed
fix(safety): reset current_key on closing ] to prevent post-close leak
j7an
committed
fix(safety): inline 31 unit-level pyproject parser fixtures as heredocs
j7an
committed
fix(safety): add diff builders for repetitive pyproject parser tests
j7an
committed