maziggy 7c875b88ff chore(bandit): annotate tri-state migration SQL as a B608 false positive ...

The bed_levelling/flow_cali/nozzle_offset_cali boolean->tristate migration
builds two UPDATE statements with an f-string interpolating the column
name. Bandit flags these as B608 (SQL injection) at medium severity, which
failed the release-gate scan in test_security.sh.

The interpolated _col only ever iterates the hardcoded _tristate_cols tuple,
never user input, and SQL identifiers can't be passed as bound parameters.
Suppress with `# nosec B608` (matching the existing settings.py convention)
plus an inline rationale. No behavior change.

2026-07-24 11:24:25 +02:00

..

api

Security fix (security-issue #6)

2026-07-24 09:15:03 +02:00

core

chore(bandit): annotate tri-state migration SQL as a B608 false positive

2026-07-24 11:24:25 +02:00

data

[Feature]: HMS Actions (#1743)

2026-06-26 14:40:25 +02:00

i18n

…

models

fix(smart-plugs): don't blank printer state when an accessory plug switches off (#2629)

2026-07-22 09:57:27 +02:00

schemas

fix(smart-plugs): don't blank printer state when an accessory plug switches off (#2629)

2026-07-22 09:57:27 +02:00

services

Security fix (security-issue #6)

2026-07-24 09:15:03 +02:00

utils

follow-up(queue): cache per-plate 3MF metadata so queue polling stops re-parsing every row (#2573)

2026-07-17 08:26:23 +02:00

__init__.py

…

cli.py

fix(auth): let API keys manage projects via new can_manage_projects scope (#1893)

2026-07-05 09:58:16 +02:00

main.py

feat(ams): confirm spool assignments landed instead of fire-and-forget (#2582)

2026-07-21 08:46:02 +02:00