diff --git a/.github/ISSUE_TEMPLATE/config.yml b/.github/ISSUE_TEMPLATE/config.yml index 42ab042..f17a4d3 100644 --- a/.github/ISSUE_TEMPLATE/config.yml +++ b/.github/ISSUE_TEMPLATE/config.yml @@ -2,8 +2,8 @@ name: Issue templates blank_issues_enabled: false contact_links: - name: Architecture overview - url: https://github.com/askmy-stack/Tool-Semantics/blob/main/docs/architecture.md + url: https://github.com/askmy-stack/tool-semantics/blob/main/docs/architecture.md about: Read how snapshots, diffs, and reports fit together before proposing large changes. - name: Roadmap - url: https://github.com/askmy-stack/Tool-Semantics/blob/main/ROADMAP.md + url: https://github.com/askmy-stack/tool-semantics/blob/main/ROADMAP.md about: Check planned milestones to avoid duplicate proposals. diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 0000000..11cd5df --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,20 @@ +version: 2 +updates: + - package-ecosystem: github-actions + directory: / + schedule: + interval: weekly + groups: + github-actions: + patterns: + - "*" + + - package-ecosystem: pip + directory: / + schedule: + interval: weekly + groups: + python-minor-patch: + update-types: + - minor + - patch diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md index 9db3459..64b416f 100644 --- a/CONTRIBUTING.md +++ b/CONTRIBUTING.md @@ -21,6 +21,10 @@ mypy src pytest --cov=tool_semantics ``` +## Dependency updates + +Dependabot opens weekly PRs for GitHub Actions and Python dependencies. These updates are welcome — review CI results and merge when green. + ## Typing The package ships a `py.typed` marker. Keep public APIs fully typed; `mypy` runs in strict mode on `src/`. diff --git a/README.md b/README.md index 8f441ed..4f18457 100644 --- a/README.md +++ b/README.md @@ -13,10 +13,10 @@
--- @@ -171,8 +171,15 @@ from tool_semantics.probes import Probe, ProbeKind, evaluate_probes snapshot = capture_manifest(Path("examples/github_server_v1.json")) report = evaluate_probes( snapshot, - [Probe(id="search", intent="find issues", expected_tool="search_issues", - required_params=["query"], kind=ProbeKind.POSITIVE)], + [ + Probe( + id="search", + intent="find issues", + expected_tool="search_issues", + required_params=["query"], + kind=ProbeKind.POSITIVE, + ) + ], ) assert report.passed ``` @@ -196,7 +203,7 @@ We welcome issues and PRs — especially documentation fixes, tests, and compati - Read [CONTRIBUTING.md](CONTRIBUTING.md) - Follow the [Code of Conduct](CODE_OF_CONDUCT.md) -- Browse [good first issues](https://github.com/askmy-stack/Tool-Semantics/issues?q=is%3Aissue+is%3Aopen+label%3A%22good+first+issue%22) +- Browse [good first issues](https://github.com/askmy-stack/tool-semantics/issues?q=is%3Aissue+is%3Aopen+label%3A%22good+first+issue%22) ## Security diff --git a/SECURITY.md b/SECURITY.md index 7a04af0..450d9c5 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -12,6 +12,6 @@ Treat MCP metadata, tool descriptions, outputs, and generated probes as **untrus Tool-Semantics must not automatically execute discovered tools in the MVP. -Please report security issues privately via [GitHub Security Advisories](https://github.com/askmy-stack/Tool-Semantics/security/advisories/new). Do not open a public issue for vulnerabilities that could enable remote code execution, secret leakage, or unsafe tool invocation. +Please report security issues privately via [GitHub Security Advisories](https://github.com/askmy-stack/tool-semantics/security/advisories/new). Do not open a public issue for vulnerabilities that could enable remote code execution, secret leakage, or unsafe tool invocation. We aim to acknowledge reports within 7 days. diff --git a/pyproject.toml b/pyproject.toml index b00d76f..9ac2da9 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -38,10 +38,10 @@ dependencies = [ ] [project.urls] -Homepage = "https://github.com/askmy-stack/Tool-Semantics" -Repository = "https://github.com/askmy-stack/Tool-Semantics" -Issues = "https://github.com/askmy-stack/Tool-Semantics/issues" -Changelog = "https://github.com/askmy-stack/Tool-Semantics/blob/main/CHANGELOG.md" +Homepage = "https://github.com/askmy-stack/tool-semantics" +Repository = "https://github.com/askmy-stack/tool-semantics" +Issues = "https://github.com/askmy-stack/tool-semantics/issues" +Changelog = "https://github.com/askmy-stack/tool-semantics/blob/main/CHANGELOG.md" [project.optional-dependencies] dev = [