chore: standardize all tool versions — ruff 0.15.5, pytest 8.3.5, mypy 1.14.0, py312; fix audit_engine.py syntax

[cryptoxdog]

Summary

Full version standardization sweep across all config files, workflows, and tooling.

🔧 Bug Fix

• tools/audit_engine.py L169 — fixed SyntaxError: mismatched quote in regex character class r'f["'].*LIMIT\s*\{'. Single quote inside the character class was terminating the raw string. Changed outer quotes to double-quoted strings.

📦 Python Package Pins (exact)

Tool	Version
ruff	==0.15.5
mypy	==1.14.0
pytest	==8.3.5
pytest-cov	==6.0.0
coverage	==7.6.0
bandit	==1.9.0
semgrep	==1.102.0
pip-audit	==2.9.0
pre-commit	==4.0.1
mutmut	==3.2.0

⚙️ Config Files

• pyproject.toml: target-version = "py312", python_version = "3.12", all dev deps pinned with ==
• mypy.ini: python_version = "3.12"
• .pre-commit-config.yaml: ruff hook → rev: v0.15.5

🤖 GitHub Actions Versions

Action	Before	After
actions/checkout	@v6	@v4
actions/upload-artifact	@v7	@v4
SonarSource/sonarcloud-github-action	@master	sonarqube-scan-action@v6
actions/setup-python	@v5	@v5 ✓
actions/github-script	@v7	@v7 ✓
actions/cache	@v4	@v4 ✓

🎨 Format

• ruff format . — 40 files reformatted to ruff 0.15.5 canonical style

Files Changed

• 9 workflow files updated
• pyproject.toml, mypy.ini, .pre-commit-config.yaml
• tools/audit_engine.py (syntax fix + reformat)
• 40 Python source files (ruff format)

[chatgpt-codex-connector]

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.

[coderabbitai]

Warning

Rate limit exceeded

@cryptoxdog has exceeded the limit for the number of commits that can be reviewed per hour. Please wait 9 minutes and 1 seconds before requesting another review.

⌛ How to resolve this issue?

After the wait time has elapsed, a review can be triggered using the @coderabbitai review command as a PR comment. Alternatively, push new commits to this PR.

We recommend that you space out your commits to avoid hitting the rate limit.

🚦 How do rate limits work?

CodeRabbit enforces hourly rate limits for each developer per organization.

Our paid plans have higher rate limits than the trial, open-source and free plans. In all cases, we re-allow further reviews after a brief timeout.

Please see our FAQ for further information.

ℹ️ Review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: ASSERTIVE

Plan: Pro

Run ID: e6d0d236-2e94-41f6-8096-63447c9c1ac0

📥 Commits

Reviewing files that changed from the base of the PR and between f9c37b8 and e51be84.

📒 Files selected for processing (52)

• .github/workflows/2_sbom_ci_workflow.yml
• .github/workflows/P3_3_slsa_build_l3.yml
• .github/workflows/P3_7_dependency_review.yml
• .github/workflows/ci-quality.yml
• .github/workflows/ci.yml
• .github/workflows/dependency-review.yml
• .github/workflows/perplexity-audit.yml
• .github/workflows/sbom.yml
• .github/workflows/slsa-build.yml
• .pre-commit-config.yaml
• chassis/action_registry.py
• chassis/actions.py
• chassis/audit.py
• chassis/auth/auth.py
• chassis/chassis_app.py
• chassis/errors.py
• chassis/health.py
• chassis/middleware.py
• chassis/orchestrator.py
• chassis/pii.py
• chassis/router.py
• chassis/types.py
• engine/P2_3_features.py
• engine/features.py
• engine/hashing.py
• engine/logging.py
• engine/main.py
• engine/metrics.py
• engine/security/5_llm_security.py
• engine/security/P2_9_llm_schemas.py
• engine/settings.py
• engine/transaction.py
• mypy.ini
• observability/1_observability_telemetry.py
• pyproject.toml
• scripts/perplexity_audit_agent.py
• tests/compliance/test_api_regression.py
• tests/compliance/test_banned_patterns.py
• tests/compliance/test_field_names.py
• tests/compliance/test_import_resolution.py
• tests/compliance/test_log_safety.py
• tests/compliance/test_test_quality.py
• tests/unit/test_chassis_app.py
• tests/unit/test_health.py
• tools/audit_dispatch.py
• tools/audit_engine.py
• tools/auditors/api_regression.py
• tools/auditors/base.py
• tools/auditors/log_safety.py
• tools/auditors/query_performance.py
• tools/auditors/test_quality.py
• tools/verify_contracts.py

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Post copyable unit tests in a comment
• Commit unit tests in branch chore/standardize-versions

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[cryptoxdog]

Automated PR patrol review — 2026-04-22 UTC

Patrol note only; not a human approval. This PR has been open for 1009.2h with no review.

• CI status: FAILURE
• Review decision: NONE
• Draft: False
• Files changed: 52 (python:40, config:11, other:1)
• Heuristic scan: error_handling=7, style=10

Top findings:

• tests/compliance/test_banned_patterns.py:55 — Bare except clause
• tools/audit_dispatch.py:105 — print() in production code
• tools/audit_dispatch.py:122 — print() in production code
• tools/audit_dispatch.py:124 — print() in production code
• tools/audit_dispatch.py:127 — print() in production code

Suggested next action: fix failing CI, then request review .