From efae6f74fc4af41ca95bf54682d594211ed81ae4 Mon Sep 17 00:00:00 2001
From: Guillaume Tauzin <4648633+gtauzin@users.noreply.github.com>
Date: Sun, 26 Jul 2026 10:28:14 +0200
Subject: [PATCH] fix(lint): broaden generated tests/** ruff S-ignore for
 common test patterns

The v0.34.0 fan-out surfaced ruff S findings in real test code that the template's
tests/** ignore did not cover, forcing per-repo triage: sklearn-wrap hit S105/S106/S107
(password-named fixtures), and kedro-dagster + kedro-azureml-pipeline hit S104/S108/S112
(bind-all-interfaces, hardcoded temp paths, try/except/continue). These are all
legitimate in test code. Add S104/S105/S106/S107/S108/S112 to the template's tests/**
per-file-ignore so future repos and fan-outs skip that triage. src/ still enforces every
S rule.
---
 template/pyproject.toml.jinja | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/template/pyproject.toml.jinja b/template/pyproject.toml.jinja
index 882546e..4645334 100644
--- a/template/pyproject.toml.jinja
+++ b/template/pyproject.toml.jinja
@@ -188,7 +188,7 @@ ignore = [
 ]
 
 [tool.ruff.lint.per-file-ignores]
-"tests/**/*" = ["ARG", "S101", "S110", "S301", "S311", "S603", "S607", "T201", "PLR2004"]  # Allow asserts, try/except/pass, pickle, non-crypto random, subprocess, prints, and magic values in tests
+"tests/**/*" = ["ARG", "S101", "S104", "S105", "S106", "S107", "S108", "S110", "S112", "S301", "S311", "S603", "S607", "T201", "PLR2004"]  # Insecure-looking patterns that are legitimate in tests: asserts; bind-all-interfaces; hardcoded passwords/temp paths; try/except pass/continue; pickle; non-crypto random; subprocess; prints; magic values
 # The template's documentation build tooling lives in docs_build/. Every script
 # there prints build progress and may hold per-build caches.
 #