From e195c833d0f9a681f333ce3a0915c98b443c2c35 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 19 Jan 2026 09:23:40 +0000 Subject: [PATCH 1/7] pip(deps): bump bandit[sarif] from 1.9.2 to 1.9.3 Bumps [bandit[sarif]](https://github.com/PyCQA/bandit) from 1.9.2 to 1.9.3. - [Release notes](https://github.com/PyCQA/bandit/releases) - [Commits](https://github.com/PyCQA/bandit/compare/1.9.2...1.9.3) --- updated-dependencies: - dependency-name: bandit[sarif] dependency-version: 1.9.3 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- requirements.txt | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/requirements.txt b/requirements.txt index 925cb85..c1e7bc3 100644 --- a/requirements.txt +++ b/requirements.txt @@ -12,9 +12,9 @@ attrs==25.4.0 \ # jschema-to-python # lsprotocol # sarif-om -bandit[sarif]==1.9.2 \ - --hash=sha256:32410415cd93bf9c8b91972159d5cf1e7f063a9146d70345641cd3877de348ce \ - --hash=sha256:bda8d68610fc33a6e10b7a8f1d61d92c8f6c004051d5e946406be1fb1b16a868 +bandit[sarif]==1.9.3 \ + --hash=sha256:4745917c88d2246def79748bde5e08b9d5e9b92f877863d43fab70cd8814ce6a \ + --hash=sha256:ade4b9b7786f89ef6fc7344a52b34558caec5da74cb90373aed01de88472f774 # via -r requirements.in cattrs==25.3.0 \ --hash=sha256:1ac88d9e5eda10436c4517e390a4142d88638fe682c436c93db7ce4a277b884a \ From 910992193afcf552c843a9c72fc8e74ded368b80 Mon Sep 17 00:00:00 2001 From: Eric Brown Date: Mon, 19 Jan 2026 13:42:24 -0800 Subject: [PATCH 2/7] Update MD5 hash documentation link in tests Signed-off-by: Eric Brown --- src/test/python_tests/test_server.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/test/python_tests/test_server.py b/src/test/python_tests/test_server.py index edc331d..1443a0d 100644 --- a/src/test/python_tests/test_server.py +++ b/src/test/python_tests/test_server.py @@ -59,7 +59,7 @@ def _handler(params): "severity": 1, "code": "B324:hashlib", "codeDescription": { - "href": "https://bandit.readthedocs.io/en/1.9.2/plugins/b324_hashlib.html" + "href": "https://bandit.readthedocs.io/en/1.9.3/plugins/b324_hashlib.html" }, "source": SERVER_INFO["name"], }, From 9d60158960ba1bf35bbfeda302cc77ae27b28e37 Mon Sep 17 00:00:00 2001 From: Eric Brown Date: Mon, 19 Jan 2026 13:53:11 -0800 Subject: [PATCH 3/7] Remove unnecessary empty line in lsp_jsonrpc.py Remove an empty line at the beginning of the file. Signed-off-by: Eric Brown --- bundled/tool/lsp_jsonrpc.py | 1 - 1 file changed, 1 deletion(-) diff --git a/bundled/tool/lsp_jsonrpc.py b/bundled/tool/lsp_jsonrpc.py index 8255206..c850253 100644 --- a/bundled/tool/lsp_jsonrpc.py +++ b/bundled/tool/lsp_jsonrpc.py @@ -2,7 +2,6 @@ # Licensed under the MIT License. """Light-weight JSON-RPC over standard IO.""" - import atexit import contextlib import io From c1aa0e3761362b434f5f2e060a376e4326864ce9 Mon Sep 17 00:00:00 2001 From: Eric Brown Date: Mon, 19 Jan 2026 13:53:35 -0800 Subject: [PATCH 4/7] Add a new line for module docstring Signed-off-by: Eric Brown --- bundled/tool/lsp_server.py | 1 + 1 file changed, 1 insertion(+) diff --git a/bundled/tool/lsp_server.py b/bundled/tool/lsp_server.py index d7f9ba2..aecdee7 100644 --- a/bundled/tool/lsp_server.py +++ b/bundled/tool/lsp_server.py @@ -1,6 +1,7 @@ # Copyright (c) Microsoft Corporation. All rights reserved. # Licensed under the MIT License. """Implementation of tool support over LSP.""" + from __future__ import annotations import copy From f25990f7daf17d8900bc357f777dc39dc9bd639b Mon Sep 17 00:00:00 2001 From: Eric Brown Date: Mon, 19 Jan 2026 13:53:51 -0800 Subject: [PATCH 5/7] Add a docstring for utility functions in lsp_utils.py Signed-off-by: Eric Brown --- bundled/tool/lsp_utils.py | 1 + 1 file changed, 1 insertion(+) diff --git a/bundled/tool/lsp_utils.py b/bundled/tool/lsp_utils.py index fb5f032..0179fff 100644 --- a/bundled/tool/lsp_utils.py +++ b/bundled/tool/lsp_utils.py @@ -1,6 +1,7 @@ # Copyright (c) Microsoft Corporation. All rights reserved. # Licensed under the MIT License. """Utility functions and classes for use with running tools over LSP.""" + from __future__ import annotations import contextlib From a143870ee073319c8ab20f8f7957454fb95aa0a0 Mon Sep 17 00:00:00 2001 From: Eric Brown Date: Mon, 19 Jan 2026 13:57:57 -0800 Subject: [PATCH 6/7] Update constants.py Signed-off-by: Eric Brown --- src/test/python_tests/lsp_test_client/constants.py | 1 + 1 file changed, 1 insertion(+) diff --git a/src/test/python_tests/lsp_test_client/constants.py b/src/test/python_tests/lsp_test_client/constants.py index 882df6e..8f33e13 100644 --- a/src/test/python_tests/lsp_test_client/constants.py +++ b/src/test/python_tests/lsp_test_client/constants.py @@ -3,6 +3,7 @@ """ Constants for use with tests. """ + import pathlib TEST_ROOT = pathlib.Path(__file__).parent.parent From 20767aa6c77ea1b8d36763f5a37e4dd9cc53faf1 Mon Sep 17 00:00:00 2001 From: Eric Brown Date: Mon, 19 Jan 2026 13:58:10 -0800 Subject: [PATCH 7/7] Update utils.py Signed-off-by: Eric Brown --- src/test/python_tests/lsp_test_client/utils.py | 1 + 1 file changed, 1 insertion(+) diff --git a/src/test/python_tests/lsp_test_client/utils.py b/src/test/python_tests/lsp_test_client/utils.py index df92fe4..c65d849 100644 --- a/src/test/python_tests/lsp_test_client/utils.py +++ b/src/test/python_tests/lsp_test_client/utils.py @@ -3,6 +3,7 @@ """ Utility functions for use with tests. """ + import json import os import pathlib