Alex fec180ea5c fix: handle parenthesized EXPLAIN options syntax; remove unused _seed_db ...

_validate_statement now strips parenthesized options from EXPLAIN (e.g.
EXPLAIN (ANALYZE) DELETE, EXPLAIN (ANALYZE, VERBOSE) DELETE) before
checking whether ANALYZE/ANALYSE is present — closing the bypass where
the options-list form was silently allowed in read-only mode.

Adds three new tests:
  - EXPLAIN (ANALYZE) DELETE  → blocked
  - EXPLAIN (ANALYZE, VERBOSE) DELETE  → blocked
  - EXPLAIN (VERBOSE) SELECT  → allowed

Also removes the unused _seed_db helper from test_nl2sql_security.py.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-04-07 09:17:34 -07:00

..

crewai

fix: address CI lint failures and remove unused import

2026-04-07 09:17:34 -07:00

crewai-files

feat: bump versions to 1.14.0a4

2026-04-07 23:22:58 +08:00

crewai-tools

fix: handle parenthesized EXPLAIN options syntax; remove unused _seed_db

2026-04-07 09:17:34 -07:00

devtools

feat: bump versions to 1.14.0a4

2026-04-07 23:22:58 +08:00