From c7fc80f3f5d9c300e8fef43ddb574b96587afa0c Mon Sep 17 00:00:00 2001 From: Abhinaysai Kamineni <66816045+askmy-stack@users.noreply.github.com> Date: Sun, 2 Aug 2026 14:40:06 -0400 Subject: [PATCH 1/2] Fix repo URLs and add Dependabot for supply-chain hygiene. Use canonical askmy-stack/tool-semantics paths in PyPI metadata, docs, and issue templates, and enable weekly Dependabot updates for GitHub Actions and pip dependencies. Co-authored-by: Cursor --- .github/ISSUE_TEMPLATE/config.yml | 4 ++-- .github/dependabot.yml | 20 ++++++++++++++++++++ CONTRIBUTING.md | 4 ++++ README.md | 6 +++--- SECURITY.md | 2 +- pyproject.toml | 8 ++++---- 6 files changed, 34 insertions(+), 10 deletions(-) create mode 100644 .github/dependabot.yml diff --git a/.github/ISSUE_TEMPLATE/config.yml b/.github/ISSUE_TEMPLATE/config.yml index 42ab042..f17a4d3 100644 --- a/.github/ISSUE_TEMPLATE/config.yml +++ b/.github/ISSUE_TEMPLATE/config.yml @@ -2,8 +2,8 @@ name: Issue templates blank_issues_enabled: false contact_links: - name: Architecture overview - url: https://github.com/askmy-stack/Tool-Semantics/blob/main/docs/architecture.md + url: https://github.com/askmy-stack/tool-semantics/blob/main/docs/architecture.md about: Read how snapshots, diffs, and reports fit together before proposing large changes. - name: Roadmap - url: https://github.com/askmy-stack/Tool-Semantics/blob/main/ROADMAP.md + url: https://github.com/askmy-stack/tool-semantics/blob/main/ROADMAP.md about: Check planned milestones to avoid duplicate proposals. diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 0000000..11cd5df --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,20 @@ +version: 2 +updates: + - package-ecosystem: github-actions + directory: / + schedule: + interval: weekly + groups: + github-actions: + patterns: + - "*" + + - package-ecosystem: pip + directory: / + schedule: + interval: weekly + groups: + python-minor-patch: + update-types: + - minor + - patch diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md index 9db3459..64b416f 100644 --- a/CONTRIBUTING.md +++ b/CONTRIBUTING.md @@ -21,6 +21,10 @@ mypy src pytest --cov=tool_semantics ``` +## Dependency updates + +Dependabot opens weekly PRs for GitHub Actions and Python dependencies. These updates are welcome — review CI results and merge when green. + ## Typing The package ships a `py.typed` marker. Keep public APIs fully typed; `mypy` runs in strict mode on `src/`. diff --git a/README.md b/README.md index 8f441ed..2c3506c 100644 --- a/README.md +++ b/README.md @@ -13,10 +13,10 @@

- CI + CI Python 3.11+ License Apache-2.0 - Good first issues + Good first issues

--- @@ -196,7 +196,7 @@ We welcome issues and PRs — especially documentation fixes, tests, and compati - Read [CONTRIBUTING.md](CONTRIBUTING.md) - Follow the [Code of Conduct](CODE_OF_CONDUCT.md) -- Browse [good first issues](https://github.com/askmy-stack/Tool-Semantics/issues?q=is%3Aissue+is%3Aopen+label%3A%22good+first+issue%22) +- Browse [good first issues](https://github.com/askmy-stack/tool-semantics/issues?q=is%3Aissue+is%3Aopen+label%3A%22good+first+issue%22) ## Security diff --git a/SECURITY.md b/SECURITY.md index 7a04af0..450d9c5 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -12,6 +12,6 @@ Treat MCP metadata, tool descriptions, outputs, and generated probes as **untrus Tool-Semantics must not automatically execute discovered tools in the MVP. -Please report security issues privately via [GitHub Security Advisories](https://github.com/askmy-stack/Tool-Semantics/security/advisories/new). Do not open a public issue for vulnerabilities that could enable remote code execution, secret leakage, or unsafe tool invocation. +Please report security issues privately via [GitHub Security Advisories](https://github.com/askmy-stack/tool-semantics/security/advisories/new). Do not open a public issue for vulnerabilities that could enable remote code execution, secret leakage, or unsafe tool invocation. We aim to acknowledge reports within 7 days. diff --git a/pyproject.toml b/pyproject.toml index b00d76f..9ac2da9 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -38,10 +38,10 @@ dependencies = [ ] [project.urls] -Homepage = "https://github.com/askmy-stack/Tool-Semantics" -Repository = "https://github.com/askmy-stack/Tool-Semantics" -Issues = "https://github.com/askmy-stack/Tool-Semantics/issues" -Changelog = "https://github.com/askmy-stack/Tool-Semantics/blob/main/CHANGELOG.md" +Homepage = "https://github.com/askmy-stack/tool-semantics" +Repository = "https://github.com/askmy-stack/tool-semantics" +Issues = "https://github.com/askmy-stack/tool-semantics/issues" +Changelog = "https://github.com/askmy-stack/tool-semantics/blob/main/CHANGELOG.md" [project.optional-dependencies] dev = [ From bf885105cfaf5cedc93ddbdb20e480724ccdfd33 Mon Sep 17 00:00:00 2001 From: Abhinaysai Kamineni <66816045+askmy-stack@users.noreply.github.com> Date: Sun, 2 Aug 2026 19:26:37 -0400 Subject: [PATCH 2/2] Apply ruff format so CI format check passes. Co-authored-by: Cursor --- README.md | 11 +++++++++-- 1 file changed, 9 insertions(+), 2 deletions(-) diff --git a/README.md b/README.md index 2c3506c..4f18457 100644 --- a/README.md +++ b/README.md @@ -171,8 +171,15 @@ from tool_semantics.probes import Probe, ProbeKind, evaluate_probes snapshot = capture_manifest(Path("examples/github_server_v1.json")) report = evaluate_probes( snapshot, - [Probe(id="search", intent="find issues", expected_tool="search_issues", - required_params=["query"], kind=ProbeKind.POSITIVE)], + [ + Probe( + id="search", + intent="find issues", + expected_tool="search_issues", + required_params=["query"], + kind=ProbeKind.POSITIVE, + ) + ], ) assert report.passed ```