Enforce ruff lint / format in CI + pre-commit, clear the baseline, fix CodeQL findings - #346

Draft

lelia wants to merge 12 commits into

mainfrom

lelia/ruff-ci-precommit-mccabe

Commits on Sep 4, 2026

Enforce ruff in CI and pre-commit, and clear the existing violations

lelia
and
Claude (claude)
committed
35b64f2
Release 2.7.2

lelia
and
Claude (claude)
committed
ea36905

Commits on Sep 7, 2026

Make every __version__ consumer quote-agnostic

lelia
and
Claude (claude)
committed
a3acbc8
Determine SCM type from config instead of sniffing the Socket report URL

lelia
and
Claude (claude)
committed
3742c39

Commits on Sep 8, 2026

Merge remote-tracking branch 'origin/main' into lelia/ruff-ci-precommit-mccabe
lelia
committed
4886a34
Keep credentials out of log output

lelia
and
Claude (claude)
committed
8ee3bad
Add 2.7.3 changelog entries for the credential and manifest-link fixes

lelia
and
Claude (claude)
committed
72fdd20

Commits on Sep 9, 2026

Commits on Sep 10, 2026

ci: only enforce a version bump when the PR ships packaged content

lelia
and
Claude (claude)
committed
d947eb2

Commits on Sep 11, 2026

Merge main into the ruff/QoL branch and move the release to 2.8.1

lelia
and
Claude (claude)
committed
ebf39ca
Describe the log redaction by what it does rather than what it prevented

lelia
and
Claude (claude)
committed
d2fe20b