Files
ragflow/lefthook.yml
Zhichang Yu 4c54cefd29 Port 14 upstream agent security / correctness fixes to Go canvas (#16455)
Mirrors 14 merged upstream PRs into the Go agent port.

PRs ported:
  - #15609 ExeSQL SSRF guard + DNS pin
  - #15436 HTTP timeout on external API tools
  - #16363 be_output restore + DeepL error path
  - #15644 switch no longer matches empty condition
  - #15374 session_id bind to path agent_id (DAO idor guard)
  - #16169 sandbox artifact ownership gate
  - #15457 tenant ownership on agentbots
  - #15145 rerun agent document access check
- #15446 thinking switch (component portion; provider policy lives in
internal/llm)
  - #15426 Invoke URL/proxy SSRF + DNS pin + no-redirects
  - #15238 agentbot thinking-logs beta endpoint
  - #14589 UserFillUp SSE event propagation
  - #14890 anonymous webhook opt-in
- #15068 PipelineChunker new component (text/file_ref/parser_id
dispatch; file-format extraction is a follow-up)

40 files, +2355 / -58 lines. 33 new tests, all targeted package suites
pass (1721 + 4 skipped); 1 pre-existing flaky test unrelated.
2026-06-30 16:28:48 +08:00

48 lines
1.5 KiB
YAML

pre-commit:
parallel: true
jobs:
- name: check-yaml
run: python3 tools/hooks/check_files.py yaml
stage_fixed: true
- name: check-json
run: python3 tools/hooks/check_files.py json
stage_fixed: true
- name: end-of-file-fixer
run: python3 tools/hooks/check_files.py eof --fix
stage_fixed: true
- name: trailing-whitespace
run: python3 tools/hooks/check_files.py trailing-whitespace --fix
stage_fixed: true
- name: check-case-conflict
run: python3 tools/hooks/check_files.py case-conflict
stage_fixed: true
- name: check-merge-conflict
run: python3 tools/hooks/check_files.py merge-conflict
stage_fixed: true
- name: mixed-line-ending
run: python3 tools/hooks/check_files.py mixed-line-ending --fix
stage_fixed: true
- name: check-symlinks
run: python3 tools/hooks/check_files.py symlinks
stage_fixed: true
- name: ruff
glob: "*.py"
run: ruff check --fix {staged_files}
stage_fixed: true
- name: ruff-format
glob: "*.py"
run: ruff format {staged_files}
stage_fixed: true
- name: gofmt
glob: "*.go"
run: gofmt -w {staged_files}
stage_fixed: true
- name: web-prettier
glob: "web/**/*.{css,less,json,js,jsx,ts,tsx}"
run: npx --prefix web prettier --write --ignore-unknown {staged_files}
stage_fixed: true
- name: web-eslint
glob: "web/**/*.{js,jsx,ts,tsx}"
run: npx --prefix web eslint --fix {staged_files}
stage_fixed: true