34108724099
100%

Ran 07 Sep 2026 10:01AM UTC

Jobs 1

Files 89

Run time 1min

Badge

Embed ▾

Committed 07 Sep 2026 09:55AM UTC coverage: 98.743%. Remained the same

Build # 34108724099

Build Type

push

github

Committed by

mbaehring

Commit Message

Answer six vulnerability alerts

PyO3 0.29.2 in the wheel, for an out-of-bounds read in `nth`/`nth_back` (high)
and a missing `Sync` bound on `PyCFunction::new_closure` (moderate). Both are
fixed in 0.29.0 rather than in a 0.24.x. Neither path is reachable from this
code - no `nth`/`nth_back`, no `new_closure`, not one mention of `PyList` or
`PyTuple` - but the alert is against what the wheel ships. Five minor versions
and no source change at all: the Rust side was already on the Bound API.

Flask 3.1.3 in the `server` extra, for the missing `Vary: Cookie` header.

marimo 0.24.0, which is the only way pymdown-extensions could move to 11.0.2:
0.23.13 caps it at <11 while the fixes are 11.0.0 and 11.0.1. That one is the
documentation toolchain and never reaches the published package.

Cargo.lock is not tracked, so the release resolves fresh from the manifest -
the range "0.29" now excludes everything vulnerable.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

Coverage Stats

7620 of 7717 relevant lines covered (98.74%)

0.99 hits per line

Jobs

ID	Job ID	Ran	Files	Coverage
1	34108724099.1	07 Sep 2026 10:01AM UTC	89	98.74	GitHub Action Run

transentis / bptk_py / 34108724099
100%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 34108724099

transentis / bptk_py / 34108724099 100%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 34108724099

transentis / bptk_py / 34108724099
100%

README BADGES
x