sankalp/DevGen
1
0 Fork 0
Code Issues Pull Requests 8 Actions Packages Projects Releases 12 Wiki Activity
224 Commits 9 Branches 12 Tags
dependabot/github_actions/main/actions/setup-python-7
Commit Graph
224 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
dependabot[bot] b03c13ae62 build(deps): bump actions/setup-python from 6 to 7 
Bumps [actions/setup-python](https://github.com/actions/setup-python) from 6 to 7.
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](https://github.com/actions/setup-python/compare/v6...v7)

---
updated-dependencies:
- dependency-name: actions/setup-python
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-24 01:13:41 +00:00
sankalp e69de1d99a Merge pull request #63 from S4NKALP/dependabot/github_actions/main/actions/checkout-7 
build(deps): bump actions/checkout from 6 to 7
V.0.3.0 		2026-07-03 19:07:59 +05:45
dependabot[bot] e5f22bca85 build(deps): bump actions/checkout from 6 to 7 
Bumps [actions/checkout](https://github.com/actions/checkout) from 6 to 7.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v6...v7)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-03 12:45:02 +00:00
sankalp 277f197a71 fix(.github/workflows): change fail-on-scopes to runtime 
Update CI to enforce runtime dependency reviews, improving coverage of actual runtime packages.
 2026-07-03 18:26:35 +05:45
sankalp 2edbf95ed5 feat(provider): refactor Gemini provider to use struct schema 
Improves validation and aligns with latest API changes.
 2026-07-03 18:24:48 +05:45
sankalp 109fcd584f feat(root): bump version to 0.3.0 and update dependencies 
Update metadata and pin production dependencies for reproducible builds.
 2026-07-03 18:23:37 +05:45
sankalp 61e51b5187 chore(deps): bump dependency versions 
Upgrade to latest stable releases for security and compatibility.
 2026-07-03 18:21:18 +05:45
sankalp d4b694e77d fix(devgen): handle missing git binary gracefully 
Ensure the function returns an empty list when git is not found, avoiding crashes.
 2026-07-03 18:08:00 +05:45
sankalp 261d04c56f refactor(devgen/providers): centralize retry and quota handling in BaseProvider 
Move retry logic and quota detection from provider-specific code to BaseProvider to reduce duplication and simplify error handling.
 2026-07-03 18:07:43 +05:45
sankalp f7001d4243 feat(devgen/modules): streamline provider guard and enhance ManifestInspector flexibility 
Add token‑limit error handling and switch git diff to null‑delimited output for reliable file detection.
 2026-07-03 18:07:26 +05:45
sankalp 11a9db7986 feat(devgen): extend header regex to include deps and wip scopes and ignore markdown fences 
Prevent false positives on markdown fences and enable parsing of dependency-related commit types.
 2026-07-03 17:02:18 +05:45
sankalp 34f5d090ce chore(devgen): extend commit message regex to include perf and revert 
Update the regex in devgen/utils.py to recognize `perf` and `revert` as valid Conventional Commit types, ensuring alignment with the specification and preventing false negatives in automated analysis.
 2026-07-03 16:46:05 +05:45
sankalp d20a31bf38 feat(devgen/templates/commit): update commit_message.tpl with expanded conventional commit format 
Add detailed format description, examples, and diff handling to improve commit message clarity.
 2026-07-03 16:45:47 +05:45
sankalp a43e09e924 feat(.github/workflows): enable auto-merge for dependabot 
Allow automatic merging of Dependabot PRs to keep the repository up‑to‑date without manual intervention.
 2026-06-16 15:43:46 +05:45
sankalp fca0e34422 chore(root): bump version to 0.2.9 
Updated version and dependency constraints for release.
V.0.2.9 		2026-06-16 15:12:54 +05:45
sankalp c4992cce57 formating 2026-06-16 15:05:07 +05:45
sankalp 957dda9d49 refactor: remove jinja2 dependency, use simple template engine 
- Replace jinja2 with custom render_template() helper
- Support {{ var }} substitution and {% if %}...{% endif %} conditionals
- Remove jinja2 from pyproject.toml and requirements.txt
- Simplifies dependency tree and reduces install size
 2026-06-16 14:58:25 +05:45
sankalp 869aa37f0c update 2026-06-16 14:45:55 +05:45
sankalp 51ede1a7da fix: address 7 security and reliability issues 
- Prevent path traversal in gitignore template names (Critical)
- Fix TOCTOU races in file operations with try/except pattern (High)
- Add timeout to HuggingFace API requests (Medium)
- Add missing %x00 separator in changelog fallback format (Medium)
- Filter unsanitized kwargs before passing to OpenAI SDK (High)
- Use context managers for proper client cleanup in providers (High)
- Exit with non-zero code on commit engine failure (Low)
 2026-06-16 14:43:52 +05:45
sankalp ede489c219 fix: resolve 8 bugs affecting real users 
- Fix KeyError 'root' in FileGrouper when merging groups with no root-level files
- Fix changelog commit parsing breaking on multiline bodies (use %x00 separator)
- Add empty choices/content checks in OpenAI, Anthropic, OpenRouter providers
- Fix config edit crash when config is empty
- Fix validate command using wrong color for 'no staged files'
- Add type check for corrupted YAML config (non-dict returns empty dict)
 2026-06-16 14:36:19 +05:45
sankalp a56fe0a6ee update 2026-06-13 15:17:42 +05:45
sankalp e13e763cf2 chore(.github/workflows): upgrade dependency-review-action to v4.6.0 
Upgrade to the latest stable version to receive security fixes and new features.
 2026-06-13 15:16:22 +05:45
sankalp 79294f1df0 Merge pull request #61 from S4NKALP/dependabot/pip/main/openai-2.41.1 
build(deps): bump openai from 2.41.0 to 2.41.1
 2026-06-13 15:15:43 +05:45
sankalp 187ad00e99 Merge branch 'main' into dependabot/pip/main/openai-2.41.1 2026-06-13 15:15:19 +05:45
sankalp 35e02ddf7d Merge pull request #60 from S4NKALP/dependabot/pip/main/pre-commit-4.6.0 
build(deps): bump pre-commit from 4.5.0 to 4.6.0
 2026-06-13 15:14:51 +05:45
sankalp 93f09c9d74 Merge pull request #62 from S4NKALP/dependabot/pip/main/anthropic-0.109.1 
build(deps): bump anthropic from 0.105.2 to 0.109.1
 2026-06-13 15:14:34 +05:45
sankalp ab9527df33 Merge pull request #59 from S4NKALP/dependabot/pip/main/ruff-0.15.17 
build(deps): bump ruff from 0.15.16 to 0.15.17
 2026-06-13 15:14:13 +05:45
sankalp 186d952fda Merge pull request #58 from S4NKALP/dependabot/github_actions/main/github/codeql-action-4 
build(deps): bump github/codeql-action from 3 to 4
 2026-06-13 15:13:59 +05:45
sankalp deba25b055 Merge pull request #57 from S4NKALP/dependabot/github_actions/main/actions/dependency-review-action-5 
build(deps): bump actions/dependency-review-action from 4 to 5
 2026-06-13 15:13:40 +05:45
dependabot[bot] 9e6c846790 build(deps): bump actions/dependency-review-action from 4 to 5 
Bumps [actions/dependency-review-action](https://github.com/actions/dependency-review-action) from 4 to 5.
- [Release notes](https://github.com/actions/dependency-review-action/releases)
- [Commits](https://github.com/actions/dependency-review-action/compare/v4...v5)

---
updated-dependencies:
- dependency-name: actions/dependency-review-action
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-13 09:28:12 +00:00
sankalp f007c7c579 chore(.github/workflows):switch fail-on-scopes from changes to direct 2026-06-13 15:11:43 +05:45
dependabot[bot] 363b8ec398 build(deps): bump pre-commit from 4.5.0 to 4.6.0 
Bumps [pre-commit](https://github.com/pre-commit/pre-commit) from 4.5.0 to 4.6.0.
- [Release notes](https://github.com/pre-commit/pre-commit/releases)
- [Changelog](https://github.com/pre-commit/pre-commit/blob/main/CHANGELOG.md)
- [Commits](https://github.com/pre-commit/pre-commit/compare/v4.5.0...v4.6.0)

---
updated-dependencies:
- dependency-name: pre-commit
  dependency-version: 4.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-13 09:25:52 +00:00
dependabot[bot] 0c5ec5da0a build(deps): bump openai from 2.41.0 to 2.41.1 
Bumps [openai](https://github.com/openai/openai-python) from 2.41.0 to 2.41.1.
- [Release notes](https://github.com/openai/openai-python/releases)
- [Changelog](https://github.com/openai/openai-python/blob/main/CHANGELOG.md)
- [Commits](https://github.com/openai/openai-python/compare/v2.41.0...v2.41.1)

---
updated-dependencies:
- dependency-name: openai
  dependency-version: 2.41.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-13 09:25:29 +00:00
dependabot[bot] 4f679bc90d build(deps): bump anthropic from 0.105.2 to 0.109.1 
Bumps [anthropic](https://github.com/anthropics/anthropic-sdk-python) from 0.105.2 to 0.109.1.
- [Release notes](https://github.com/anthropics/anthropic-sdk-python/releases)
- [Changelog](https://github.com/anthropics/anthropic-sdk-python/blob/main/CHANGELOG.md)
- [Commits](https://github.com/anthropics/anthropic-sdk-python/compare/v0.105.2...v0.109.1)

---
updated-dependencies:
- dependency-name: anthropic
  dependency-version: 0.109.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-13 09:25:28 +00:00
dependabot[bot] f21b090b56 build(deps): bump ruff from 0.15.16 to 0.15.17 
Bumps [ruff](https://github.com/astral-sh/ruff) from 0.15.16 to 0.15.17.
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](https://github.com/astral-sh/ruff/compare/0.15.16...0.15.17)

---
updated-dependencies:
- dependency-name: ruff
  dependency-version: 0.15.17
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-13 09:24:55 +00:00
dependabot[bot] 8c63406126 build(deps): bump github/codeql-action from 3 to 4 
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3 to 4.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/v3...v4)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: '4'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-13 09:24:51 +00:00
sankalp 91500f634a chore(.github/workflows): remove vuln-check-non-vulnerable-refs flag 
Removed the flag that disabled vulnerability checks for non‑vulnerable refs; allow default security behavior.
 2026-06-13 15:07:07 +05:45
sankalp cb3a1662d9 refactor(devgen/cli): reorder config merge to preserve key order 
Preserves insertion order and prevents accidental overwriting of existing keys
 2026-06-06 21:36:37 +05:45
sankalp 70e9068082 fix: None crash in providers, _merge_deepest loop, lock-file false positives, stage() race, cache TTL, config merge, changelog indent, template check V.0.2.8 2026-06-06 21:33:51 +05:45
sankalp fb87bfa146 fix: handle deleted files in stage() — use git rm for missing paths V.0.2.7 2026-06-06 21:21:10 +05:45
sankalp 69bd79e0fa bump version to 0.2.6 V.0.2.6 2026-06-06 20:57:00 +05:45
sankalp a86dcc93ee update readme V.0.2.5 2026-06-06 17:43:22 +05:45
sankalp 456040ed2b feat(root): revamp README and add gitignore/license commands 
Updated project overview, removed emojis, and introduced new CLI subcommands for managing .gitignore and license templates. Added architecture and custom template documentation.

New Features
- Added `devgen gitignore list` and `devgen gitignore add <name> …` commands.
- Added `devgen license list` and `devgen license add <spdx>` commands.
- Introduced support for custom commit templates via `.tpl` files.

Enhancements
- Rewrote README with clearer description and updated badges.
- Removed emojis and streamlined formatting throughout documentation.
- Added sections for custom templates, architecture overview, and contribution guide.
- Clarified dependency installation and CI workflow references.

Bug Fixes
- Fixed formatting issues in badge links and stray hyphens.
- Resolved truncated documentation sections and improved readability.
 2026-06-06 17:39:25 +05:45
sankalp df1d1765d1 ci: drop pyright typecheck job in favour of ruff 
The project uses ruff for lint+format, and pyright was redundant and
slow. The previous pyright run surfaced ~30 false positives from running
outside the venv plus 5 real-but-minor typing issues that don't justify
the extra CI minutes on a 0.2.x CLI.

CI now runs only ruff check, ruff format --check, and the import/CLI
smoke matrix on 3.10/3.11/3.12/3.13.
 2026-06-06 17:38:01 +05:45
sankalp 09ba5e9644 ci: add CodeQL, lint/typecheck/smoke CI, and dependency review 
- ci.yml: ruff check + format check, pyright typecheck, and import/CLI
  smoke test on Python 3.10/3.11/3.12/3.13 matrix. Uses uv like the
  existing pre-commit workflow for consistency.
- codeql.yml: weekly + push/PR Python security-and-quality analysis.
- dependency-review.yml: fail PRs adding high+ severity CVEs or copyleft
  licenses that would taint GPL-3.0 (AGPL, SSPL, BUSL).
 2026-06-06 17:31:31 +05:45
sankalp 850e88972e ci(dependabot): merge directly via squash instead of use-github-auto-merge 
The previous config required branch protection with required status checks,
but main has no protection rules configured, so auto-merge never fired and
PRs had to be merged manually.

Switch to direct squash merge in the action itself, which works regardless
of branch protection settings.
 2026-06-06 17:24:10 +05:45
sankalp 96e776f7cc chore(root):ignore .tpl files in Linguist language stats to prevent inflated language statistics. 2026-06-06 17:10:34 +05:45
sankalp f70b5208ec refactor(devgen/providers): shared provider base class 
Abstract out generate validation and error handling into BaseProvider, eliminating duplicated logic across Anthropic, OpenRouter, and OpenAI providers.
 2026-06-06 17:10:30 +05:45
sankalp e2ec269f16 refactor(modules): restructure changelog and release note generation 
Refactor to improve readability and separate concerns,
use Section enum and ordered traversal for consistent output.
 2026-06-06 17:10:30 +05:45
sankalp 90ca0c0f59 refactor(devgen/modules): rename commit_message template from .j2 to .tpl 
Bug Fixes:
- Updated template reference to use .tpl extension, resolving missing template error.
 2026-06-06 16:56:14 +05:45