feat(system): suppress 5 CodeQL false positives and enable Dependabot

Co-Authored-By: @devpulse <devpulse@aipass>

.claude/hooks/pre_edit_gate.py

@@ -37,7 +37,7 @@ def _get_branch(file_path: str) -> str:
 
 
 def _block(reason: str) -> None:
-    print(json.dumps({"decision": "block", "reason": reason}))
+    print(json.dumps({"decision": "block", "reason": reason}))  # lgtm[py/clear-text-logging-sensitive-data]
     sys.exit(2)
 
 

setup.py

@@ -109,7 +109,7 @@ def step_secrets() -> None:
             secrets_dir.chmod(0o700)
         except OSError:
             pass  # Best-effort on non-POSIX filesystems
-    print(f"  Created: {secrets_dir}")
+    print(f"  Created: {secrets_dir}")  # lgtm[py/clear-text-logging-sensitive-data]
 
 
 def step_env() -> None:

src/aipass/aipass/.claude/hooks/pre_edit_gate.py

@@ -37,7 +37,7 @@ def _get_branch(file_path: str) -> str:
 
 
 def _block(reason: str) -> None:
-    print(json.dumps({"decision": "block", "reason": reason}))
+    print(json.dumps({"decision": "block", "reason": reason}))  # lgtm[py/clear-text-logging-sensitive-data]
     sys.exit(2)
 
 

src/aipass/aipass/status/.claude/hooks/pre_edit_gate.py

@@ -37,7 +37,7 @@ def _get_branch(file_path: str) -> str:
 
 
 def _block(reason: str) -> None:
-    print(json.dumps({"decision": "block", "reason": reason}))
+    print(json.dumps({"decision": "block", "reason": reason}))  # lgtm[py/clear-text-logging-sensitive-data]
     sys.exit(2)
 
 

src/aipass/devpulse/.claude/hooks/pre_edit_gate.py

@@ -37,7 +37,7 @@ def _get_branch(file_path: str) -> str:
 
 
 def _block(reason: str) -> None:
-    print(json.dumps({"decision": "block", "reason": reason}))
+    print(json.dumps({"decision": "block", "reason": reason}))  # lgtm[py/clear-text-logging-sensitive-data]
     sys.exit(2)