Make every __version__ consumer quote-agnostic

`ruff format` normalises string quotes to double, so `__version__` in
socketsecurity/__init__.py went from single to double quotes. Five places
parsed or rewrote that line assuming single quotes:

- version-check.yml stripped only `'`, so it read the version as `"2.7.2"`
  (quotes included) and failed to parse it. This is what broke on the PR.
- build_container.sh and build_container_flexible.sh would have produced a
  Docker tag containing literal quote characters.
- deploy-test-pypi.sh both read the version and rewrote it with a sed that
  matched single quotes only, so the rewrite would silently no-op.
- .hooks/sync_version.py read either quote style but always wrote single
  quotes, so it and the formatter would have rewritten the same line back
  and forth on every commit.

Readers now strip both quote characters and the hook writes double quotes
to match the formatter.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

Author: lelia

.github/workflows/version-check.yml

@@ -32,11 +32,11 @@ jobs:
           pip install packaging
 
           # Get version from current PR
-          PR_VERSION=$(grep -o "__version__.*" socketsecurity/__init__.py | awk '{print $3}' | tr -d "'")
+          PR_VERSION=$(grep -o "__version__.*" socketsecurity/__init__.py | awk '{print $3}' | tr -d "\"'")
           echo "PR_VERSION=$PR_VERSION" >> $GITHUB_ENV
 
           # Get version from main branch
-          MAIN_VERSION=$(git show origin/main:socketsecurity/__init__.py | grep -o "__version__.*" | awk '{print $3}' | tr -d "'")
+          MAIN_VERSION=$(git show origin/main:socketsecurity/__init__.py | grep -o "__version__.*" | awk '{print $3}' | tr -d "\"'")
           echo "MAIN_VERSION=$MAIN_VERSION" >> $GITHUB_ENV
 
           export PR_VERSION

.hooks/sync_version.py

@@ -105,7 +105,7 @@ def inject_version(version: str):
 
     # Update __init__.py
     init_content = INIT_FILE.read_text()
-    new_init_content = VERSION_PATTERN.sub(f"__version__ = '{version}'", init_content)
+    new_init_content = VERSION_PATTERN.sub(f'__version__ = "{version}"', init_content)
     INIT_FILE.write_text(new_init_content)
 
     # Update pyproject.toml

scripts/build_container.sh

@@ -1,5 +1,5 @@
 #!/bin/sh
-VERSION=$(grep -o "__version__.*" socketsecurity/__init__.py | awk '{print $3}' | tr -d "'")
+VERSION=$(grep -o "__version__.*" socketsecurity/__init__.py | awk '{print $3}' | tr -d "\"'")
 ENABLE_PYPI_BUILD=$1
 STABLE_VERSION=$2
 

scripts/build_container_flexible.sh

@@ -1,5 +1,5 @@
 #!/bin/sh
-VERSION=$(grep -o "__version__.*" socketsecurity/__init__.py | awk '{print $3}' | tr -d "'")
+VERSION=$(grep -o "__version__.*" socketsecurity/__init__.py | awk '{print $3}' | tr -d "\"'")
 ENABLE_PYPI_BUILD=$1
 STABLE_VERSION=$2
 GO_VERSION=${GO_VERSION:-"1.21"}

scripts/deploy-test-pypi.sh

@@ -4,7 +4,7 @@
 
 # Get version from __init__.py
 INIT_FILE="socketsecurity/__init__.py"
-ORIGINAL_VERSION=$(grep -o "__version__.*" $INIT_FILE | awk '{print $3}' | tr -d "'")
+ORIGINAL_VERSION=$(grep -o "__version__.*" $INIT_FILE | awk '{print $3}' | tr -d "\"'")
 BACKUP_FILE="${INIT_FILE}.bak"
 
 # Get existing versions from TestPyPI
@@ -37,7 +37,7 @@ echo "Deploying version ${VERSION} to Test PyPI"
 cp $INIT_FILE $BACKUP_FILE
 
 # Update version in __init__.py
-sed -i.tmp "s/__version__ = '${ORIGINAL_VERSION}'/__version__ = '${VERSION}'/" $INIT_FILE
+sed -i.tmp -E "s/__version__ = ['\"]${ORIGINAL_VERSION}['\"]/__version__ = \"${VERSION}\"/" $INIT_FILE
 rm "${INIT_FILE}.tmp"
 
 # Build and upload to test PyPI