Update OSIDB version to 5.18.2

[Elkasitu]

No description provided.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: ASSERTIVE

Plan: Enterprise

Run ID: 3361c1be-6969-42b7-a6f1-5bcf349b0d77

📥 Commits

Reviewing files that changed from the base of the PR and between 4f1691e and f292cbf.

⛔ Files ignored due to path filters (2)

• docs/CHANGELOG.md is excluded by !docs/CHANGELOG.md
• uv.lock is excluded by !**/*.lock

📒 Files selected for processing (4)

• config/settings.py
• openapi.yml
• osidb/__init__.py
• pyproject.toml

Included review availability: Your plan provides up to 12 included reviews per hour; 10 remain after this review.

📜 Recent review details

⏰ Context from checks skipped due to timeout. (4)

• GitHub Check: tests
• GitHub Check: detect-secrets
• GitHub Check: migrations
• GitHub Check: schema

🧰 Additional context used

📓 Path-based instructions (4)

Supply chain security (prodsec-skills): New deps: justify need, check license compatibility Pin exact versions; verify hashes where supported Flag known CVEs (cross-ref osv.dev) No pre-release or yanked versions in production SBOM: ensure b...

⚙️ CodeRabbit configuration file

Files:

• pyproject.toml

Injection prevention (prodsec-skills): SQL: parameterized queries only; no string concatenation Command: no shell=True, os.system, or backtick exec with user input LDAP/XPath: escape special characters in filters Path traversal: canonicaliz...

⚙️ CodeRabbit configuration file

Files:

• config/settings.py
• osidb/__init__.py

If this is a Kubernetes/OpenShift manifest or Helm template: securityContext: runAsNonRoot, readOnlyRootFilesystem, allowPrivilegeEscalation: false Drop ALL capabilities, add only what is required Resource limits (cpu, memory) on every cont...

⚙️ CodeRabbit configuration file

Files:

• openapi.yml

Python security (prodsec-skills): No pickle.loads, marshal.load, shelve.open on untrusted data (RCE) No eval, exec, compile on non-literal input; use ast.literal_eval No yaml.load without SafeLoader; require yaml.safe_load subprocess: list...

⚙️ CodeRabbit configuration file

Files:

• config/settings.py
• osidb/__init__.py

🪛 Checkov (3.3.16)

openapi.yml

[high] 1-21506: Ensure that the global security field has rules defined

(CKV_OPENAPI_4)

---

[high] 1-21506: Ensure that security operations is not empty.

(CKV_OPENAPI_5)

🔇 Additional comments (4)

pyproject.toml (1)

3-3: LGTM!

osidb/__init__.py (1)

5-5: LGTM!

config/settings.py (1)

305-305: LGTM!

openapi.yml (1)

4-4: LGTM!

---

📝 Summary

Summary by CodeRabbit

• Release
  • Updated the application, API schema, OpenAPI document, and project version to 5.18.2.

Walkthrough

The release version changed from 5.18.1 to 5.18.2 in project metadata, package metadata, DRF Spectacular settings, and the OpenAPI document.

Changes

Version alignment

Layer / File(s)	Summary
Update version declarations pyproject.toml, osidb/__init__.py, config/settings.py, openapi.yml	The project, package, schema, and OpenAPI versions changed from 5.18.1 to 5.18.2.

Priority: ⬇️ Low

Estimated code review effort: 1 (Trivial) | ~3 minutes

Change: Other

Suggested reviewers: costaconrado

Merge Risk: ⚪ Minimal · up to f292c

The release metadata and lockfile are aligned to 5.18.2, and the documentation-only update introduces no merge-blocking risk.

🚥 Pre-merge checks | ✅ 10 | ❌ 1

❌ Failed checks (1 inconclusive)

Check name	Status	Explanation	Resolution
Description check	❓ Inconclusive	No pull request description was provided, so the change context is not documented beyond the title.	Add a brief description stating that the project, API schema, OpenAPI document, and package version were updated from 5.18.1 to 5.18.2.

✅ Passed checks (10 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title clearly states the main change: updating the OSIDB version to 5.18.2.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 2…
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
No-Hardcoded-Secrets	✅ Passed	The pull request adds only version metadata: 5.18.2 in settings, OpenAPI metadata, package files, changelog, and uv.lock. No added API key, token, password, credential, private key, embedded-crede…
No-Weak-Crypto	✅ Passed	PASS. The pull request changes only version metadata and changelog content: config/settings.py, openapi.yml, osidb/__init__.py, pyproject.toml, uv.lock, and docs/CHANGELOG.md. The added an…
No-Injection-Vectors	✅ Passed	The pull request changes only static version metadata in config/settings.py, openapi.yml, osidb/__init__.py, pyproject.toml, uv.lock, and the changelog. The diff adds no SQL construction, sh…
Container-Privileges	✅ Passed	PASS: The pull request changes only version metadata, changelog text, and the generated OpenAPI version. It does not change a container or Kubernetes manifest. No changed file introduces privileged,…
No-Sensitive-Data-In-Logs	✅ Passed	The pull request changes only version metadata: 5.18.2 in settings, OpenAPI metadata, package metadata, osidb.__version__, the changelog, and uv.lock. The diff adds no logging statements or sens…
Ai-Attribution	✅ Passed	The review range contains one commit. Its subject and body do not mention AI tools. The commit has no trailers, including no Co-Authored-By, Assisted-by, or Generated-by trailer. The changed fil…

✨ Finishing Touches

📝 Generate docstrings

• Commit to this branch
• Create a new PR

🧪 Generate unit tests (beta)

• Commit to this branch
• Create a new PR

---

_{Comment @coderabbitai help to get the list of available commands.}