ruff: Enable lots of rules.

Signed-off-by: Anders Kaseorg <anders@zulip.com>

Author: andersk

pyproject.toml

@@ -94,14 +94,60 @@ pythonpath = [
 
 [tool.ruff]
 select = [
+    "B", # bugbear
+    "C4", # comprehensions
+    "COM", # trailing comma
+    "DTZ", # naive datetime
     "E", # style errors
+    "EXE", # shebang
     "F", # flakes
+    "FLY", # string formatting
+    "G", # logging format
     "I", # import sorting
+    "ICN", # import conventions
+    "INT", # gettext
+    "ISC", # string concatenation
+    "N", # naming
+    "PERF", # performance
+    "PGH", # pygrep-hooks
+    "PIE", # miscellaneous
+    "PL", # pylint
+    "PYI", # typing stubs
+    "Q", # quotes
+    "RSE", # raise
+    "RUF", # Ruff
+    "S", # security
+    "SLF", # self
+    "SLOT", # slots
+    "SIM", # simplify
+    "T10", # debugger
+    "TID", # tidy imports
+    "TRY", # try
+    "UP", # upgrade
+    "W", # style warnings
+    "YTT", # sys.version
 ]
 ignore = [
+    "C408", # Unnecessary `dict` call (rewrite as a literal)
+    "COM812", # Trailing comma missing
     "E402", # Module level import not at top of file
     "E501", # Line too long
     "E731", # Do not assign a `lambda` expression, use a `def`
+    "PERF203", # `try`-`except` within a loop incurs performance overhead
+    "PLR0911", # Too many return statements
+    "PLR0912", # Too many branches
+    "PLR0913", # Too many arguments in function definition
+    "PLR0915", # Too many statements
+    "PLR2004", # Magic value used in comparison, consider replacing with a constant variable
+    "RUF001", # String contains ambiguous character
+    "S101", # Use of `assert` detected
+    "S113", # Probable use of requests call without timeout
+    "S603", # `subprocess` call: check for execution of untrusted input
+    "S606", # Starting a process without a shell
+    "S607", # Starting a process with a partial executable path
+    "SIM117", # Use a single `with` statement with multiple contexts instead of nested `with` statements
+    "TRY003", # Avoid specifying long messages outside the exception class
+    "TRY400", # Use `logging.exception` instead of `logging.error`
 ]
 src = [
     "tools",

tools/deploy

@@ -112,7 +112,7 @@ def upload(options: argparse.Namespace) -> None:
     if not os.path.exists(file_path):
         print(f"upload: Could not find bot package at {file_path}.")
         sys.exit(1)
-    files = {"file": open(file_path, "rb")}
+    files = {"file": open(file_path, "rb")}  # noqa: SIM115
     headers = {"key": options.token}
     url = urllib.parse.urljoin(options.server, "bots/upload")
     response = requests.post(url, files=files, headers=headers)

zulip/integrations/bridge_with_matrix/matrix_bridge.py

@@ -353,7 +353,7 @@ async def handle_media(self, msg: str) -> Tuple[Optional[List[Dict[str, Any]]],
                 continue
 
             try:
-                with urllib.request.urlopen(self.server_url + result["url"]) as response:
+                with urllib.request.urlopen(self.server_url + result["url"]) as response:  # noqa: S310
                     file_content: bytes = response.read()
                     mimetype: str = response.headers.get_content_type()
             except Exception:

zulip/integrations/google/get-google-credentials

@@ -14,7 +14,7 @@ flags = argparse.ArgumentParser(parents=[tools.argparser]).parse_args()
 SCOPES = "https://www.googleapis.com/auth/calendar.readonly"
 # This file contains the information that google uses to figure out which application is requesting
 # this client's data.
-CLIENT_SECRET_FILE = "client_secret.json"
+CLIENT_SECRET_FILE = "client_secret.json"  # noqa: S105
 APPLICATION_NAME = "Zulip Calendar Bot"
 HOME_DIR = os.path.expanduser("~")
 

zulip/integrations/google/google-calendar

@@ -27,7 +27,7 @@ sys.path.append(os.path.join(os.path.dirname(__file__), "../../"))
 import zulip
 
 SCOPES = "https://www.googleapis.com/auth/calendar.readonly"
-CLIENT_SECRET_FILE = "client_secret.json"
+CLIENT_SECRET_FILE = "client_secret.json"  # noqa: S105
 APPLICATION_NAME = "Zulip"
 HOME_DIR = os.path.expanduser("~")
 

zulip/integrations/rss/rss-bot

@@ -156,7 +156,7 @@ def strip_tags(html: str) -> str:
 def compute_entry_hash(entry: Dict[str, Any]) -> str:
     entry_time = entry.get("published", entry.get("updated"))
     entry_id = entry.get("id", entry.get("link"))
-    return hashlib.md5((entry_id + str(entry_time)).encode()).hexdigest()
+    return hashlib.md5((entry_id + str(entry_time)).encode()).hexdigest()  # noqa: S324
 
 
 def unwrap_text(body: str) -> str:

zulip/integrations/zephyr/check-mirroring

@@ -64,7 +64,7 @@ if options.sharded:
     for stream, test in test_streams:
         if stream == "message":
             continue
-        assert hashlib.sha1(stream.encode("utf-8")).hexdigest().startswith(test)
+        assert hashlib.sha1(stream.encode("utf-8")).hexdigest().startswith(test)  # noqa: S324
 else:
     test_streams = [
         ("message", "p"),

zulip/integrations/zephyr/zephyr_ctypes.py

@@ -31,7 +31,7 @@
 # --- glibc/sysdeps/unix/sysv/linux/bits/socket.h ---
 
 
-class sockaddr(Structure):
+class sockaddr(Structure):  # noqa: N801
     _fields_ = (
         ("sa_family", sa_family_t),
         ("sa_data", c_char * 14),
@@ -44,11 +44,11 @@ class sockaddr(Structure):
 in_addr_t = c_uint32
 
 
-class in_addr(Structure):
+class in_addr(Structure):  # noqa: N801
     _fields_ = (("s_addr", in_addr_t),)
 
 
-class sockaddr_in(Structure):
+class sockaddr_in(Structure):  # noqa: N801
     _fields_ = (
         ("sin_family", sa_family_t),
         ("sin_port", in_port_t),
@@ -57,11 +57,11 @@ class sockaddr_in(Structure):
     )
 
 
-class in6_addr(Structure):
+class in6_addr(Structure):  # noqa: N801
     _fields_ = (("s6_addr", c_uint8 * 16),)
 
 
-class sockaddr_in6(Structure):
+class sockaddr_in6(Structure):  # noqa: N801
     _fields_ = (
         ("sin6_family", sa_family_t),
         ("sin6_port", in_port_t),
@@ -95,7 +95,7 @@ class _ZTimeval(Structure):
     )
 
 
-class ZUnique_Id_t(Structure):
+class ZUnique_Id_t(Structure):  # noqa: N801
     _fields_ = (
         ("zuid_addr", in_addr),
         ("tv", _ZTimeval),
@@ -113,7 +113,7 @@ class _ZSenderSockaddr(Union):
     )
 
 
-class ZNotice_t(Structure):
+class ZNotice_t(Structure):  # noqa: N801
     _fields_ = (
         ("z_packet", c_char_p),
         ("z_version", c_char_p),
@@ -146,7 +146,7 @@ class ZNotice_t(Structure):
     )
 
 
-class ZSubscription_t(Structure):
+class ZSubscription_t(Structure):  # noqa: N801
     _fields_ = (
         ("zsub_recipient", c_char_p),
         ("zsub_class", c_char_p),

zulip/integrations/zephyr/zephyr_mirror_backend.py

@@ -259,7 +259,7 @@ def update_subscriptions() -> None:
     classes_to_subscribe = set()
     for stream in public_streams:
         zephyr_class = stream
-        if options.shard is not None and not hashlib.sha1(
+        if options.shard is not None and not hashlib.sha1(  # noqa: S324
             zephyr_class.encode("utf-8")
         ).hexdigest().startswith(options.shard):
             # This stream is being handled by a different zephyr_mirror job.

zulip/zulip/__init__.py

@@ -128,7 +128,7 @@ def fail(self) -> None:
         # Exponential growth with ratio sqrt(2); compute random delay
         # between x and 2x where x is growing exponentially
         delay_scale = int(2 ** (self.number_of_retries / 2.0 - 1)) + 1
-        delay = min(delay_scale + random.randint(1, delay_scale), self.delay_cap)
+        delay = min(delay_scale + random.randint(1, delay_scale), self.delay_cap)  # noqa: S311
         message = f"Sleeping for {delay}s [max {delay_scale * 2}] before retrying."
         try:
             logger.warning(message)