CI license gate fixed for SPDX OR expressions, header decode hardening, and strictness policy tightened

38 files · 499+ · 194-

4 files changed

check_licenses.py License validation script fixed to accept SPDX OR expressions
ci.yml CI workflow updated with corrected license gate step
REUSE.toml REUSE license metadata updated
test_check_licenses.py License check tests added covering OR expression syntax

License validation CI step was incorrectly rejecting valid SPDX identifiers using the OR operator (e.g., Apache-2.0 OR MIT); fixed to accept the full SPDX expression syntax remediate internal
3 files
- check_licenses.py
- ci.yml
- test_check_licenses.py

25 files changed

headers.py New headers.py: header decoding with timeout protection
middleware.py ASGI middleware updated to use hardened header decode path
websocket.py WebSocket handler updated for hardened context handling
propagation.py Trace context propagation edge cases hardened
provider.py TracerProvider hardened for edge cases
resilience.py Resilience module updated
setup.py Setup lifecycle updated
core.py Logger core updated
processors.py Log processors updated
fallback.py No-op fallback metrics updated
provider.py MeterProvider updated
test_header_helpers.py New tests for header decode helpers
test_middleware_and_setup.py ASGI middleware tests updated
test_hardening_features.py Hardening tests updated for decode and trace context cases
test_otlp_integration.py OTLP integration tests updated
test_provider_helpers.py Provider helper tests updated
test_setup_reinitialization.py Reinit integration tests updated
test_logger_build_handlers.py Handler build tests updated
test_logger_configuration.py Logger configuration tests updated
test_logger_core.py Logger core tests updated
test_metrics_core.py Metrics core tests updated
test_otel_extras.py OTel extras tests updated
test_event_name_properties.py Property-based event name tests updated
test_tracing_core.py Tracing core tests updated for trace context edge cases
test_openobserve_e2e.py End-to-end OpenObserve tests updated

headers.py added with timeout protection for header decode operations, preventing hangs on malformed or oversized headers instantiate behavioral
2 files
- headers.py
- test_header_helpers.py
Trace context propagation edge cases hardened — covers missing, malformed, and truncated W3C traceparent headers harden behavioral
3 files
- propagation.py
- provider.py
- test_tracing_core.py
ASGI middleware and WebSocket handler updated to use hardened header decode and context propagation paths harden behavioral
3 files
- middleware.py
- websocket.py
- test_middleware_and_setup.py

10 files changed

OPERATIONS.md Strictness policy documentation updated to reflect mutation testing requirements
README.md README updated with strict policy notes
ci.yml CI credential handling tightened
pymutant-policy-baseline.json Mutation policy baseline config added
pymutant-profiles.json Mutation testing profiles config added
pyproject.toml Project config updated
.gitignore Gitignore updated
run_performance_smoke.py Performance smoke script updated
uv.lock Dependency lockfile updated
conftest.py Shared test fixtures updated

Documentation aligned with strict telemetry mutation policy — requirements now explicit in OPERATIONS.md and README qualify internal
4 files
- OPERATIONS.md
- README.md
- pymutant-policy-baseline.json
- pymutant-profiles.json
CI credential handling tightened with stricter access controls in workflow harden internal
1 file
- ci.yml
Dependency lockfile updated baseline internal
2 files
- uv.lock
- pyproject.toml