fix: qualify patched Python runtime and bounded DNS parsing

jlxq0 commented

2026-10-29 01:11:53 +00:00

Owner

The released image contained fixable findings in dnspython and in the Python base/pip vendor bundles. This carried fork infrastructure patch updates only dnspython in the app lock, uses the current digest-pinned Python3.13 Debian13 base and removes unused runtime pip/ensurepip. The complete application venv, MCP1/FastMCP API, authentication and no-send contracts remain unchanged. CI now checks the lock with --locked and audits the locked dependencies.

Validation:224 tests, Ruff, mypy and the buildcache guard pass; DNS negative/positive controls show the old parser accepts the excessive chain and the fixed parser refuses it. A local qualification OCI scanned125 packages:0 fixable HIGH/CRITICAL,0 Python findings,0 secrets;44 unfixed Debian HIGH findings remain. Actual Hermes SDK2.0 and candidate2.3 clients pass initialize/list67tools/read-about plus bad-auth, stolen-session and invalid-host refusals against an isolated synthetic upstream. No production or business writes.

Two fresh independent Claude reviews approved exact d115de9604, conditional on exact-head remote CI. The local artifact has an explicit qualification/dirty revision label and is not a release. A new immutable release with final artifact/provenance checks and the dedicated inbound auth/allowed-host/native Honoka proof are still required before promotion; the contained production route remains unchanged. This patch is maintained by this fork, not submitted upstream.

The released image contained fixable findings in dnspython and in the Python base/pip vendor bundles. This carried fork infrastructure patch updates only dnspython in the app lock, uses the current digest-pinned Python3.13 Debian13 base and removes unused runtime pip/ensurepip. The complete application venv, MCP1/FastMCP API, authentication and no-send contracts remain unchanged. CI now checks the lock with --locked and audits the locked dependencies. Validation:224 tests, Ruff, mypy and the buildcache guard pass; DNS negative/positive controls show the old parser accepts the excessive chain and the fixed parser refuses it. A local qualification OCI scanned125 packages:0 fixable HIGH/CRITICAL,0 Python findings,0 secrets;44 unfixed Debian HIGH findings remain. Actual Hermes SDK2.0 and candidate2.3 clients pass initialize/list67tools/read-about plus bad-auth, stolen-session and invalid-host refusals against an isolated synthetic upstream. No production or business writes. Two fresh independent Claude reviews approved exact d115de9604b4de80768e54b0de1b9492990b39b5, conditional on exact-head remote CI. The local artifact has an explicit qualification/dirty revision label and is not a release. A new immutable release with final artifact/provenance checks and the dedicated inbound auth/allowed-host/native Honoka proof are still required before promotion; the contained production route remains unchanged. This patch is maintained by this fork, not submitted upstream.

jlxq0 added 2 commits

2026-10-29 01:11:53 +00:00

fix: qualify patched Python runtime and bounded DNS parsing ff9541a229

docs: reconcile runtime and locked dependency commands

CI / python (pull_request) Successful in 42s

Details

CI / docker (pull_request) Successful in 43s

Details

d115de9604

jlxq0 merged commit 89f1302ea9 into master

2026-10-29 01:20:11 +00:00

jlxq0 referenced this pull request from a commit

2026-10-29 01:20:12 +00:00

Merge pull request 'fix: qualify patched Python runtime and bounded DNS parsing' (#15) from fix/qualified-runtime-20261029 into master

Rows
Columns

fix: qualify patched Python runtime and bounded DNS parsing #15