From 7060939d6e828b617221d8e09240880228cc23c0 Mon Sep 17 00:00:00 2001 From: Binay Date: Tue, 18 Aug 2026 20:10:45 -0400 Subject: [PATCH] chore: bump the signetry-core pin to v0.7.0 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit v0.7.0 shipped Kotlin detection, Go SSRF, Go/Java path traversal, PHP XXE, the Aider executor and the SSRF precision fixes. These references still installed v0.6.0, so anything following them got an engine several rules behind. CHANGELOG entries are deliberately left at v0.6.0 — they record what a past release pinned and are not live install instructions. --- .pre-commit-hooks.yaml | 2 +- README.md | 2 +- demos/try-guard.sh | 2 +- universal/signetry-guard.sh | 4 ++-- 4 files changed, 5 insertions(+), 5 deletions(-) diff --git a/.pre-commit-hooks.yaml b/.pre-commit-hooks.yaml index 4d14e5d..f56e073 100644 --- a/.pre-commit-hooks.yaml +++ b/.pre-commit-hooks.yaml @@ -6,7 +6,7 @@ # hooks: # - id: signetry-guard # -# Requires: pip install "signetry-core @ git+https://github.com/Signetry/core@v0.6.0" +# Requires: pip install "signetry-core @ git+https://github.com/Signetry/core@v0.7.0" - id: signetry-guard name: Signetry guard (contract scope check) description: Block staged changes that fall outside .signetry/admission.yaml scope. diff --git a/README.md b/README.md index c474a8f..542e768 100644 --- a/README.md +++ b/README.md @@ -12,7 +12,7 @@ a deterministic pre-action check that blocks changes falling outside your repo's Part of the [Signetry platform](https://github.com/Signetry/signetry). -> Prerequisite: `pip install "signetry-core @ git+https://github.com/Signetry/core@v0.6.0"` and a `.signetry/admission.yaml` in +> Prerequisite: `pip install "signetry-core @ git+https://github.com/Signetry/core@v0.7.0"` and a `.signetry/admission.yaml` in > your repo (a conservative default applies without one). ## pre-commit diff --git a/demos/try-guard.sh b/demos/try-guard.sh index bb27da5..b682718 100755 --- a/demos/try-guard.sh +++ b/demos/try-guard.sh @@ -6,7 +6,7 @@ # .signetry/admission.yaml, showing forbidden paths/commands blocked and an in-scope # path allowed. Deterministic (signetry-core), never the model. # -# Requirements: bash, git, and `pip install "signetry-core @ git+https://github.com/Signetry/core@v0.6.0"`. +# Requirements: bash, git, and `pip install "signetry-core @ git+https://github.com/Signetry/core@v0.7.0"`. # # Usage: bash demos/try-guard.sh set -euo pipefail diff --git a/universal/signetry-guard.sh b/universal/signetry-guard.sh index ea523ae..68b927c 100755 --- a/universal/signetry-guard.sh +++ b/universal/signetry-guard.sh @@ -6,7 +6,7 @@ # or manually. It checks proposed file paths and/or a command against the repo's # .signetry/admission.yaml and exits non-zero (blocking) on a violation. # -# Requires: pip install "signetry-core @ git+https://github.com/Signetry/core@v0.6.0" +# Requires: pip install "signetry-core @ git+https://github.com/Signetry/core@v0.7.0" # # Usage: # signetry-guard.sh --path src/app.py @@ -17,7 +17,7 @@ set -euo pipefail if ! command -v signetry >/dev/null 2>&1; then - echo "signetry-guard: signetry-core not installed. Run: pip install 'signetry-core @ git+https://github.com/Signetry/core@v0.6.0'" >&2 + echo "signetry-guard: signetry-core not installed. Run: pip install 'signetry-core @ git+https://github.com/Signetry/core@v0.7.0'" >&2 # Fail open by default so this never blocks a commit unexpectedly; set # SIGNETRY_GUARD_STRICT=1 to fail closed when signetry is missing. [ "${SIGNETRY_GUARD_STRICT:-0}" = "1" ] && exit 1 || exit 0