Skip to content

Integration tests for uv audit#18673

Merged
woodruffw merged 6 commits intomainfrom
ww/uv-audit-it
Mar 27, 2026
Merged

Integration tests for uv audit#18673
woodruffw merged 6 commits intomainfrom
ww/uv-audit-it

Conversation

@woodruffw
Copy link
Copy Markdown
Member

Summary

Atop #18511. See #18506.

This adds an initial set of integration tests for uv audit, exercising expected user flows (no findings, some findings, multiple findings for a dep, etc.).

To make these reproducible, I've used MockServer instances and --service-url.

Test Plan

This PR 🙂

@woodruffw woodruffw self-assigned this Mar 23, 2026
@woodruffw woodruffw added the testing Internal testing of behavior label Mar 23, 2026
@woodruffw woodruffw changed the title Ww/uv audit it Integration tests for uv audit Mar 23, 2026
@woodruffw woodruffw mentioned this pull request Mar 23, 2026
21 tasks
@woodruffw woodruffw requested review from konstin and zanieb March 23, 2026 16:08
@woodruffw woodruffw marked this pull request as ready for review March 23, 2026 16:42
@codspeed-hq
Copy link
Copy Markdown

codspeed-hq bot commented Mar 25, 2026

Merging this PR will not alter performance

✅ 5 untouched benchmarks


Comparing ww/uv-audit-it (840e775) with main (944f009)

Open in CodSpeed

Found no known vulnerabilities and no adverse project statuses in 2 packages
");

// --only-group lint: prod deps + only the "lint" group (iniconfig + sniffio = 2).
Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

That option should work like in uv sync:

      --only-group <ONLY_GROUP>
          Only include dependencies from the specified dependency group.
          
          The project and its dependencies will be omitted.
          
          May be provided multiple times. Implies `--no-default-groups`.

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Base automatically changed from ww/uv-audit-filter to main March 26, 2026 14:28
@woodruffw woodruffw requested a review from konstin March 26, 2026 14:58
Signed-off-by: William Woodruff <william@astral.sh>
Signed-off-by: William Woodruff <william@astral.sh>
Signed-off-by: William Woodruff <william@astral.sh>
Signed-off-by: William Woodruff <william@astral.sh>
Signed-off-by: William Woodruff <william@astral.sh>
Signed-off-by: William Woodruff <william@astral.sh>
@woodruffw woodruffw merged commit a4ee36e into main Mar 27, 2026
55 checks passed
@woodruffw woodruffw deleted the ww/uv-audit-it branch March 27, 2026 10:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

testing Internal testing of behavior

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants