maziggy 9d35a4e8c6 Mark four test-side bandit false positives ...

The PR gate reported four new alerts, all in test code. A fixture's
/tmp/x.3mf is a column value the migration under test UPDATEs, not a
path anything opens. Two f-string statements interpolate column names
from a literal list declared two lines above, with the id bound - a
column name cannot be a bind parameter, which is why it is written into
the string at all. The two joins move onto their own lines because a
trailing marker would have taken line 64 past the 120-character limit.

The fourth is a near miss rather than a finding: the line below it
already carries the marker, as do four other wildcard sites in the same
file. The wildcard is what that test exists to assert about.

2026-08-29 15:25:26 +02:00

..

__init__.py

…

test_advanced_auth_api.py

…

test_ams_drying_latch_persistence.py

Stop the AMS temperature alert firing for heat the user asked for (#1802)

2026-08-16 11:45:46 +02:00

test_ams_history_api.py

…

test_ams_labels_api.py

…

test_ams_slot_material_2902.py

Let a filled or foamed filament keep its own name (issue #2902)

2026-08-23 10:36:50 +02:00

test_ams_slot_sub_brand_none_2987.py

Send AMS tray colours as uppercase hex (issue #2987)

2026-08-28 12:18:27 +02:00

test_api_key_cloud_access.py

…

test_api_key_owner_authority_1894.py

Let API clients resolve user ids to names (#1894)

2026-08-10 11:43:23 +02:00

test_archive_purge_api.py

fix(archives): bulk and auto purge now honour the soft / hard delete choice from #1343 (#1390 follow-up)

2026-05-17 10:54:28 +02:00

test_archives_api.py

Add printer video downloads and range selection (#2853)

2026-08-22 13:22:56 +02:00

test_auth_api.py

Let API clients resolve user ids to names (#1894)

2026-08-10 11:43:23 +02:00

test_auth_apikey_rbac.py

Let API keys read and run slicer pipelines (#1425 follow-up)

2026-08-15 10:38:51 +02:00

test_available_filaments.py

…

test_background_dispatch_api.py

feat: Unify print dispatch through the scheduler (#1625)

2026-06-26 12:31:48 +02:00

test_camera_api.py

fix(camera): release DB connection before streaming, not after (#2572)

2026-07-16 08:38:42 +02:00

test_camwall_api.py

feat(camwall): serve the Cam Wall at /camwall, and on a token-authenticated kiosk

2026-07-11 13:38:15 +02:00

test_client_ip.py

…

test_cloud_auth.py

fix(cloud): complete the CSRF handshake on Bambu Cloud TOTP sign-in (#2696)

2026-07-28 15:05:28 +02:00

test_cloud_token_auth_migration.py

fix(cloud): log expected preset misses at DEBUG, keep real faults at WARNING

2026-07-10 08:24:20 +02:00

test_color_catalog_extras.py

fix(queue): extend Charcoal-style label fix to Specific-Printer panel (#1718 round 3)

2026-06-11 14:49:52 +02:00

test_color_map_api.py

Name an AMS slot's colour by its material, not its hex alone (issue #2875)

2026-08-19 09:06:11 +02:00

test_completion_guard_wiring_2829.py

Match a print completion to its queue job the way the printer names it (#2829)

2026-08-14 14:26:30 +02:00

test_cost_statistics.py

fix(cost): top-up untracked filament at default rate so multi-color

2026-05-15 15:43:37 +02:00

test_deleted_printer_keeps_name_2873.py

Keep the printer's name on statistics after it is deleted (issue #2873)

2026-08-18 14:04:18 +02:00

test_design_settings_plates.py

Take the layer height from the plate that actually printed

2026-08-18 16:23:32 +02:00

test_discovery_api.py

…

test_drying_screen_only.py

fix(drying): P1 AMS drying is screen-only — stop offering it (#2533)

2026-07-11 09:33:52 +02:00

test_endpoint_auth.py

…

test_external_folders_api.py

fix(library): sort File Manager by real filesystem mtime, recursively (#2680)

2026-07-27 11:01:43 +02:00

test_external_links_api.py

…

test_failure_reason_vocabulary_migration.py

Mark four test-side bandit false positives

2026-08-29 15:25:26 +02:00

test_fallback_archive_photos_1820.py

Repair no-3MF archives' photos and their silent filament writes (#1820)

2026-08-14 15:32:40 +02:00

test_filaments_api.py

…

test_finance_api.py

implemented pr (minor) feedback

2026-08-06 20:28:16 +02:00

test_github_backup_api.py

security(github-backup): refuse to save against a non-private repository

2026-05-17 15:30:05 +02:00

test_github_restore_api.py

fix(backup): gate every restore category on the permission owning its rows (#2656)

2026-08-05 16:10:04 -04:00

test_groups_api.py

…

test_ha_sensors_api_1148.py

[Feature]: Bind Home Assistant sensors to storage locations (dryboxes/bins) (#2827)

2026-08-25 12:17:23 +02:00

test_inventory_assign.py

Attribute filament correctly when AMS backup swaps spools mid-print

2026-08-13 08:37:16 +02:00

test_inventory_bulk.py

feat(inventory): batch / mass edit on the Filament tab (#1795)

2026-06-23 11:34:15 +02:00

test_inventory_csv.py

feat(inventory): CSV import/export for the inventory page (#1576) (#1659)

2026-06-08 09:30:16 +02:00

test_inventory_from_slot_no_tag.py

fix(inventory): stop popping the unknown-tag modal for slots with no RFID

2026-06-25 09:57:15 +02:00

test_labels.py

Allow Avery label sheets to start at an unused position (#2879) (#2918)

2026-08-26 08:57:44 +02:00

test_ldap_group_sync.py

…

test_ldap_provision.py

fix: create a personal cost center also on first LDAP login

2026-06-25 20:10:25 +02:00

test_library_api.py

Open multi-plate G-code on the plate that was asked for

2026-08-11 11:49:30 +02:00

test_library_slice_api.py

Stop offering server-side slicing for STEP files

2026-08-10 13:09:24 +02:00

test_library_tags_api.py

feat(file-manager): user-authored tags for cross-cutting filtering (#1268)

2026-06-22 12:27:58 +02:00

test_library_trash_api.py

fix(queue): stop a library-file delete from destroying the jobs queued against it (#2819)

2026-08-13 10:26:59 +02:00

test_library_variants_api.py

Add variant-group endpoints and cross-model queue creation (#671, #2570)

2026-08-03 11:10:11 +02:00

test_local_login_gate.py

fix(oidc): strip the required BAMBUDDY_OIDC_* values and register the local-login bypass

2026-08-01 11:37:01 +02:00

test_location_ha_sensors_api.py

[Feature]: Bind Home Assistant sensors to storage locations (dryboxes/bins) (#2827)

2026-08-25 12:17:23 +02:00

test_locations_api.py

[Feature]: Bind Home Assistant sensors to storage locations (dryboxes/bins) (#2827)

2026-08-25 12:17:23 +02:00

test_long_lived_tokens_api.py

…

test_main_plug_pick_2830.py

Show the plug that powers the printer in the card's Power row (#2830)

2026-08-14 14:49:55 +02:00

test_maintenance_api.py

fix(maintenance): #1596 persist wiki_url on Custom Type create + correct

2026-06-02 14:58:10 +02:00

test_makerworld_apikey_auth.py

fix(cloud): stop reporting an expired Bambu Cloud sign-in as connected (issue #2562)

2026-07-14 11:29:56 +02:00

test_metrics_api.py

…

test_mfa_api.py

fix(oidc): #1569 populate User.email from standard 'email' claim when email_claim is preferred_username

2026-06-02 10:23:21 +02:00

test_mode_switch_preserves_assignments_2812.py

Keep both modes' slot assignments across an inventory mode switch (issue #2812)

2026-08-25 17:17:26 +02:00

test_notifications_api.py

Mark four test-side bandit false positives

2026-08-29 15:25:26 +02:00

test_obico_api.py

Do not report a printer as Safe when nothing is checking it (issue #2952)

2026-08-25 08:49:24 +02:00

test_oidc_env_apply.py

fix(oidc): reject an unrecognized boolean instead of guessing

2026-08-01 09:17:33 +00:00

test_oidc_env_lock.py

feat(oidc): refuse API writes to the env-managed provider

2026-07-28 21:05:29 +00:00

test_oidc_env_startup.py

feat(oidc): apply the env provider during startup

2026-07-28 21:05:29 +00:00

test_oidc_icon_api.py

…

test_oidc_icon_blob_roundtrip.py

fix(backup): preserve NOT NULL/DEFAULT/FK/UNIQUE in Postgres→SQLite backup (#2526)

2026-07-09 09:02:34 +02:00

test_oidc_icon_deferred_load.py

…

test_oidc_relogin.py

…

test_orca_cloud_device.py

feat(orca-cloud): pair via RFC 8628 device flow, replacing the paste-based sign-in

2026-07-17 08:16:35 +02:00

test_overlay_status_api.py

Add temperatures to the streaming overlay and a URL builder (#1422)

2026-08-04 12:38:36 +02:00

test_ownership_permissions.py

Add batch orders with a quantity per plate (#342)

2026-08-04 11:11:36 +02:00

test_pending_upload_display_name.py

…

test_pipeline_runs_api.py

Let API keys read and run slicer pipelines (#1425 follow-up)

2026-08-15 10:38:51 +02:00

test_plate_clear_notification.py

feat(mqtt): publish the plate-clear gate and add a notification for it (#2525)

2026-07-28 13:36:55 +02:00

test_print_batch_orders.py

Keep the last run a batch order can re-queue a plate from

2026-08-26 10:11:55 +02:00

test_print_lifecycle.py

bugfix (aborted prints were not billed in specific cases)

2026-07-30 21:51:13 +02:00

test_print_queue_api.py

Do not close a queue item on a completion for another print

2026-08-11 12:50:42 +02:00

test_printers_api.py

Ask which nozzle to feed when a Filament Track Switch is fitted

2026-08-26 12:04:42 +02:00

test_projects_api.py

Nest projects under a master project and roll their figures up (#1264)

2026-08-06 10:00:45 +02:00

test_queue_creation_attribution.py

Let API clients resolve user ids to names (#1894)

2026-08-10 11:43:23 +02:00

test_queue_nozzle_rack_choice_api_1784.py

Choose which rack nozzle each filament prints from on an H2C (#1784)

2026-08-14 11:27:50 +02:00

test_queue_start_user_attribution.py

test(security-fixtures): nosec B104/B108 on new 0.2.4.6 test code

2026-06-09 13:32:15 +02:00

test_queue_variants_api.py

Fix cross-model queue items being misrepresented and editable into a broken state (#671)

2026-08-03 12:33:19 +02:00

test_read_permission_backfill_migration.py

fix(permissions): self-heal Administrators to ALL_PERMISSIONS on upgrade + Pipelines runs dashboard polish

2026-06-28 11:18:18 +02:00

test_scheduler_budget_reservation.py

Let API keys read and run slicer pipelines (#1425 follow-up)

2026-08-15 10:38:51 +02:00

test_scheduler_nozzle_rack_dispatch_1784.py

Let API keys read and run slicer pipelines (#1425 follow-up)

2026-08-15 10:38:51 +02:00

test_security_headers.py

Replace the embedded G-code viewer with the slicer's own renderer

2026-08-09 14:10:18 +02:00

test_security.py

fix(security): GHSA-6mf4-q26m-47pv — fail-closed on auth-probe DB errors (CVSS 9.8)

2026-05-30 13:49:09 +02:00

test_session_policy.py

feat(auth): admin-configurable session lifetime ceiling (#1706)

2026-06-16 12:00:27 +02:00

test_settings_api_key_scrubbing.py

…

test_settings_api.py

Give the AMS temperature alarm its own threshold (issue #2905) (#2943)

2026-08-25 15:03:34 +02:00

test_settings_electricity_price.py

…

test_settings_ui_preferences.py

feat(humidity): per-filament humidity threshold for auto-drying + alarms (#1605)

2026-06-21 11:55:37 +02:00

test_sjf_scheduling.py

…

test_slice_archive_output_path_2832.py

Build the slice output's path from a name a folder can have (#2832)

2026-08-14 16:02:53 +02:00

test_slicer_pipelines_api.py

feat(slicer): Slicer Pipelines — save & reuse a preset bundle in one click (#1425 PR A)

2026-06-27 13:56:18 +02:00

test_slot_spool_defaults.py

Configure a spool's filament preset and K profile per nozzle

2026-08-27 13:03:15 +02:00

test_smart_plugs_api.py

…

test_sponsor_prompt_api.py

feat(sponsor-prompt): in-app toast at earned milestones

2026-06-20 15:50:58 +02:00

test_spool_by_tag_lookup.py

feat(inventory): by-tag spool lookup, readable with Manage-Inventory keys (#1663) (#1700)

2026-06-22 10:14:31 +02:00

test_spool_filament_preset_endpoints.py

Configure a spool's filament preset and K profile per nozzle

2026-08-27 13:03:15 +02:00

test_spool_reset_usage.py

refactor(inventory): rename /reset-usage to /reset-consumed-counter to match what it actually does (issue #1644)

2026-06-05 09:22:05 +02:00

test_spoolbuddy_spoolman_nfc.py

…

test_spoolbuddy.py

fix(spoolbuddy): route weight sync by inventory mode exclusively (#1530)

2026-05-26 10:36:37 +02:00

test_spoolman_ams_sync_broadcast.py

Show the spool that is in the AMS slot, not the one that was

2026-08-29 13:26:09 +02:00

test_spoolman_ams_sync.py

…

test_spoolman_api.py

fix(spoolman): decide spool assignability from the slot-assignment ledger, not extra.tag (#1122)

2026-05-21 09:33:47 +02:00

test_spoolman_cost_preserved_2591.py

Price a print from the spool that fed it, not the default rate (issue #2591)

2026-08-25 16:45:50 +02:00

test_spoolman_filament_patch.py

…

test_spoolman_inventory_api.py

Let a clear spool stay clear on the way to Spoolman (issue #2912) (#2924)

2026-08-25 13:45:57 +02:00

test_spoolman_inventory_bulk.py

feat(inventory): batch / mass edit on the Filament tab (#1795)

2026-06-23 11:34:15 +02:00

test_spoolman_k_profiles.py

feat(inventory): structured storage locations catalog (#1505)

2026-06-17 11:33:23 +02:00

test_spoolman_slot_assignment_mqtt.py

feat(inventory): structured storage locations catalog (#1505)

2026-06-17 11:33:23 +02:00

test_spoolman_slot_assignments.py

Keep both modes' slot assignments across an inventory mode switch (issue #2812)

2026-08-25 17:17:26 +02:00

test_spoolman_slot_concurrency.py

fix(spoolman): clear stale fallback-tag links on assign + link, prefer slot-assignment over tag-link in UI (#1457)

2026-05-20 11:00:54 +02:00

test_spoolman_status_2903.py

Register a Spoolman extra field with its own write (issue #2903)

2026-08-22 12:26:18 +02:00

test_spoolman_tracking_slot_fallback.py

fix(spoolman): per-print weight tracker falls back to local slot-assignment table for tag-less spools (#1459)

2026-05-20 11:16:56 +02:00

test_static_html_cache_headers.py

…

test_stats_reconciled_duration_2592.py

fix(stats): don't bank the disconnect gap as print time on reconnect (#2592)

2026-07-18 09:58:21 +02:00

test_stranded_printing_recovery_2829.py

Match a print completion to its queue job the way the printer names it (#2829)

2026-08-14 14:26:30 +02:00

test_support_api.py

feat(system): log-health scanner + Add/Edit-Printer setup pre-flight

2026-05-22 16:31:16 +02:00

test_system_api.py

feat(system): NTP-gate state on /api/v1/system/appliance

2026-06-22 14:23:30 +02:00

test_tailscale_api.py

…

test_timelapse_scan_session.py

Stop a print with no 3MF borrowing another model's data (#2843)

2026-08-17 09:26:13 +02:00

test_trace_middleware.py

…

test_updates_api.py

Show the compose directory in the Docker update command (#2664)

2026-08-03 15:12:02 +02:00

test_user_notifications_api.py

…

test_users_auth_cleanup.py

…

test_users_groups_privilege_escalation.py

test(users/groups): generate privilege-escalation test password at runtime

2026-06-12 13:27:17 +02:00

test_users_slim_1894.py

Let API clients resolve user ids to names (#1894)

2026-08-10 11:43:23 +02:00

test_virtual_printer_api.py

feat(gcode-injection): per-VP opt-in auto-print injection toggle (#1516) (#1656)

2026-06-19 11:29:07 +02:00

test_webhook_printer_status.py

fix(webhook): #1584 PrinterState dataclass attribute access in status / stop / cancel

2026-06-02 12:57:51 +02:00

test_webhook_start_print.py

feat(print-options): add "Auto" state to bed levelling, flow & nozzle-offset calibration

2026-07-20 17:55:56 +02:00