chore(deps): upgrade requests to 2.33.0 and refresh locked security updates and bump codeclone version

Author: orenlab

CHANGELOG.md

@@ -2,6 +2,13 @@
 
 ## [2.0.0b1]
 
+Fixed:
+
+- Upgrade requests to 2.33.0 for extract_zipped_paths security fix (CVE-2026-25645)
+
+
+## [2.0.0b1] - 20260325
+
 Major upgrade: CodeClone evolves from a structural clone detector into a
 **baseline-aware code-health and CI governance tool** for Python.
 

README.md

@@ -197,7 +197,7 @@ Dynamic/runtime false positives are resolved via explicit inline suppressions, n
 {
   "report_schema_version": "2.1",
   "meta": {
-    "codeclone_version": "2.0.0b1",
+    "codeclone_version": "2.0.0b2",
     "project_name": "...",
     "scan_root": ".",
     "report_mode": "full",

benchmarks/run_docker_benchmark.sh

@@ -2,7 +2,7 @@
 set -euo pipefail
 
 ROOT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
-IMAGE_TAG="${IMAGE_TAG:-codeclone-benchmark:2.0.0b1}"
+IMAGE_TAG="${IMAGE_TAG:-codeclone-benchmark:2.0.0b2}"
 OUT_DIR="${OUT_DIR:-$ROOT_DIR/.cache/benchmarks}"
 OUTPUT_BASENAME="${OUTPUT_BASENAME:-codeclone-benchmark.json}"
 CPUSET="${CPUSET:-0}"

codeclone.baseline.json

@@ -2,7 +2,7 @@
   "meta": {
     "generator": {
       "name": "codeclone",
-      "version": "2.0.0b1"
+      "version": "2.0.0b2"
     },
     "schema_version": "2.0",
     "fingerprint_version": "1",

docs/book/08-report.md

@@ -2,7 +2,7 @@
 
 ## Purpose
 
-Define report contracts in `2.0.0b1`: canonical JSON (`report_schema_version=2.1`)
+Define report contracts in `2.0.0b2`: canonical JSON (`report_schema_version=2.1`)
 plus deterministic TXT/Markdown/SARIF projections.
 
 ## Public surface

docs/book/appendix/b-schema-layouts.md

@@ -2,14 +2,14 @@
 
 ## Purpose
 
-Compact structural layouts for baseline/cache/report contracts in `2.0.0b1`.
+Compact structural layouts for baseline/cache/report contracts in `2.0.0b2`.
 
 ## Baseline schema (`2.0`)
 
 ```json
 {
   "meta": {
-    "generator": { "name": "codeclone", "version": "2.0.0b1" },
+    "generator": { "name": "codeclone", "version": "2.0.0b2" },
     "schema_version": "2.0",
     "fingerprint_version": "1",
     "python_tag": "cp313",
@@ -83,7 +83,7 @@ Notes:
 {
   "report_schema_version": "2.1",
   "meta": {
-    "codeclone_version": "2.0.0b1",
+    "codeclone_version": "2.0.0b2",
     "project_name": "codeclone",
     "scan_root": ".",
     "analysis_mode": "full",
@@ -264,7 +264,7 @@ Notes:
       "tool": {
         "driver": {
           "name": "codeclone",
-          "version": "2.0.0b1",
+          "version": "2.0.0b2",
           "rules": [
             {
               "id": "CCLONE001",

pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "codeclone"
-version = "2.0.0b1"
+version = "2.0.0b2"
 description = "Structural code quality analysis for Python"
 readme = { file = "README.md", content-type = "text/markdown" }
 license = "MIT"

tests/test_report.py

@@ -491,7 +491,7 @@ def test_report_sarif_uses_representative_and_related_locations() -> None:
     }
     sarif_payload = json.loads(
         to_sarif_report(
-            meta={"codeclone_version": "2.0.0b1", "scan_root": "/repo"},
+            meta={"codeclone_version": "2.0.0b2", "scan_root": "/repo"},
             func_groups=groups,
             block_groups={},
             segment_groups={},

tests/test_report_contract_coverage.py

@@ -427,7 +427,7 @@ def _rich_report_document() -> dict[str, object]:
         ),
     )
     meta = {
-        "codeclone_version": "2.0.0b1",
+        "codeclone_version": "2.0.0b2",
         "project_name": "codeclone",
         "scan_root": "/repo/codeclone",
         "python_version": "3.13.11",
@@ -1251,7 +1251,7 @@ def test_render_sarif_report_document_without_srcroot_keeps_relative_payload() -
     payload = {
         "report_schema_version": "2.1",
         "meta": {
-            "codeclone_version": "2.0.0b1",
+            "codeclone_version": "2.0.0b2",
             "analysis_mode": "ci",
             "report_mode": "full",
             "runtime": {},