+ House of M #1-8 (2005)
+ House of M #1{dash}4 Free Download
+ DOWNLOAD NOW
+ House of M #5{dash}8 Free Download
+ DOWNLOAD NOW
+ """
+ artifacts = parse_release_html(html, source_url="https://getcomics.org/marvel/pack/")
+ assert [a.coverage.issue_numbers for a in artifacts] == [
+ ["1", "2", "3", "4"],
+ ["5", "6", "7", "8"],
+ ]
+ assert [len(a.mirrors) for a in artifacts] == [1, 1]
+
+
+@pytest.mark.parametrize(
+ "heading",
+ [
+ "House of M Free Download",
+ "House of M #1-8 Free Download unavailable",
+ "House of M #1-8 and other comics Free Download",
+ ],
+)
+def test_download_suffix_never_borrows_page_coverage(heading: str) -> None:
+ html = f"""
+ {series} #1-{count} Free Download
+ Language : English | Year : {year} | Size : 400 MB
+ DOWNLOAD NOW
+ MEGA"""
+
+ service = GetComicsProviderService(page_fetcher=pages)
+ candidates = await service.search(
+ SearchIntent(
+ series_title=series,
+ normalized_title=series.casefold(),
+ issue_number=str(target),
+ year=year,
+ ),
+ limit=1,
+ )
+ expected = [str(n) for n in range(1, count + 1)]
+ assert candidates[0].parsed.issue_numbers == expected
+ artifacts = await service.resolve(candidates[0].provider_candidate_id)
+ assert len(artifacts) == 1
+ assert artifacts[0].coverage.issue_numbers == expected
+ assert artifacts[0].coverage.description == series
+ assert str(target) in artifacts[0].coverage.issue_numbers
+ assert [m.host_kind for m in artifacts[0].mirrors] == ["generic_https", "mega"]
+
+
class _Pages:
def __init__(self) -> None:
self.urls: list[str] = []
diff --git a/tests/unit/test_provider_release_metadata.py b/tests/unit/test_provider_release_metadata.py
index 33aa798..b90d850 100644
--- a/tests/unit/test_provider_release_metadata.py
+++ b/tests/unit/test_provider_release_metadata.py
@@ -16,7 +16,7 @@ def test_security_release_versions_and_bundled_libgen_dependency_agree() -> None
name: tomllib.loads((ROOT / "providers" / name / "pyproject.toml").read_text())["project"]
for name in ("getcomics", "annas_archive", "libgen")
}
- assert projects["getcomics"]["version"] == "1.0.3"
+ assert projects["getcomics"]["version"] == "1.0.4"
assert projects["annas_archive"]["version"] == "1.0.4"
assert projects["libgen"]["version"] == "1.0.2"
assert "pullbox-provider-libgen==1.0.2" in projects["annas_archive"]["dependencies"]
@@ -43,12 +43,12 @@ def _load_latest_module():
def test_tag_release_maps_getcomics_to_both_registry_names() -> None:
release = _load_module().resolve_release(
repository_owner="pullboxapp",
- tag="getcomics-v1.0.3",
+ tag="getcomics-v1.0.4",
)
assert release.provider == "getcomics"
- assert release.version == "1.0.3"
- assert release.release_tag == "getcomics-v1.0.3"
+ assert release.version == "1.0.4"
+ assert release.release_tag == "getcomics-v1.0.4"
assert release.is_release is True
assert release.is_prerelease is False
assert release.dockerfile == "docker/Dockerfile.getcomics"
diff --git a/tests/unit/test_vulnerability_baseline.py b/tests/unit/test_vulnerability_baseline.py
index 3703d68..b6deb86 100644
--- a/tests/unit/test_vulnerability_baseline.py
+++ b/tests/unit/test_vulnerability_baseline.py
@@ -377,9 +377,10 @@ def test_repository_baseline_is_current_and_documents_every_exception() -> None:
baseline = json.loads(REPOSITORY_BASELINE.read_text(encoding="utf-8"))
assert baseline["schema_version"] == 2
- assert baseline["reviewed_on"] == "2026-09-27"
+ assert baseline["reviewed_on"] == "2026-10-17"
+ assert baseline["expires_on"] == "2026-10-31"
assert baseline["base_image"] == (
- "python:3.14-slim-trixie@sha256:51dafde81dbdb6ebde285137a295cf18a47ca95234fe388a343719cb97305b3d"
+ "python:3.14.8-slim-trixie@sha256:a2b82f3c48559aa0a8446d9af49826b6e2b2016f4cd2afabfe6013ec53729170"
)
assert date.fromisoformat(baseline["expires_on"]) >= date.today()
assert set(baseline["images"]) == {
@@ -395,6 +396,32 @@ def test_repository_baseline_is_current_and_documents_every_exception() -> None:
assert all(finding["severity"] in {"High", "Critical"} for finding in findings)
+def test_repository_baseline_limits_october_approval_to_exact_gcc_versions() -> None:
+ baseline = json.loads(REPOSITORY_BASELINE.read_text(encoding="utf-8"))
+ findings = baseline["profiles"]["python-3.14-slim"]
+
+ assert len(findings) == 55
+ assert all(finding["reviewed_on"] == "2026-10-17" for finding in findings)
+ assert all(finding["expires_on"] == "2026-10-31" for finding in findings)
+ gcc_findings = [
+ finding for finding in findings if finding["id"] in {"CVE-2026-102010", "CVE-2026-95619"}
+ ]
+ assert {
+ (finding["id"], finding["package"], finding["version"]) for finding in gcc_findings
+ } == {
+ (cve, package, "14.2.0-19")
+ for cve in ("CVE-2026-102010", "CVE-2026-95619")
+ for package in ("gcc-14-base", "libgcc-s1", "libstdc++6")
+ }
+ assert len(gcc_findings) == 6
+ for finding in gcc_findings:
+ assert finding["severity"] == "High"
+ assert finding["type"] == "deb"
+ assert finding["namespace"] == "debian:distro:debian:13"
+ assert finding["platforms"] == ["linux/amd64", "linux/arm64"]
+ assert finding["fix_state"] == "wont-fix"
+
+
def test_repository_baseline_does_not_retain_fixed_python_or_openssl_findings() -> None:
baseline = json.loads(REPOSITORY_BASELINE.read_text(encoding="utf-8"))
findings = {