switch to gixy-ng

Skip the added if_is_evil check since it's overly aggressive and doesn't
permit if blocks with `rewrite ... permanent` despite it being safe.

Author: thestinger

.github/workflows/static.yml

@@ -13,7 +13,7 @@ jobs:
         cache: npm
     - uses: actions/setup-python@v5
       with:
-        python-version: '3.12'
+        python-version: '3.13'
         cache: pip
 
     - run: sudo apt-get update

process-static

@@ -57,7 +57,7 @@ done
 
 sed -i "$replace" static-tmp/**/*.html nginx-tmp/nginx.conf nginx-tmp/snippets/preload.conf
 
-gixy nginx-tmp/nginx.conf
+gixy --skips if_is_evil nginx-tmp/nginx.conf
 
 xmllint --noout static-tmp/**/*.@(html|svg|xml)
 java -jar node_modules/vnu-jar/build/dist/vnu.jar --errors-only static-tmp/**/*.html

requirements.in

@@ -1 +1 @@
-gixy
+gixy-ng

requirements.txt

@@ -4,22 +4,18 @@
 #
 #    pip-compile --generate-hashes
 #
-cached-property==2.0.1 \
-    --hash=sha256:484d617105e3ee0e4f1f58725e72a8ef9e93deee462222dbd51cd91230897641 \
-    --hash=sha256:f617d70ab1100b7bcf6e42228f9ddcb78c676ffa167278d9f730d1c2fba69ccb
-    # via gixy
 configargparse==1.7.1 \
     --hash=sha256:79c2ddae836a1e5914b71d58e4b9adbd9f7779d4e6351a637b7d2d9b6c46d3d9 \
     --hash=sha256:8b586a31f9d873abd1ca527ffbe58863c99f36d896e2829779803125e83be4b6
-    # via gixy
-gixy==0.1.21 \
-    --hash=sha256:55be805e0582ac95540f49ea7f80b2de0b5304cb63edd22e1e6520d18f3c184b \
-    --hash=sha256:e39c87401c73d33cd8965324caa3e1778ef22ed7ade179b459a3493bdfe0f88a
+    # via gixy-ng
+gixy-ng==0.2.7 \
+    --hash=sha256:0b5f95b1d1b6a665cbcc5d4d62847b77cc0d132153831e7bb7dc60101af18537 \
+    --hash=sha256:e7920f893a8e1e129881aee6fd2eebaa4185694753f6d438e1cc59da597cfc32
     # via -r requirements.in
 jinja2==3.1.6 \
     --hash=sha256:0137fb05990d35f1275a587e9aee6d56da821fc83491a0fb838183be43f66d6d \
     --hash=sha256:85ece4451f492d0c13c5dd7c13a64681a86afae63a5f347908daf103ce6d2f67
-    # via gixy
+    # via gixy-ng
 markupsafe==3.0.2 \
     --hash=sha256:0bff5e0ae4ef2e1ae4fdf2dfd5b76c75e5c2fa4132d05fc1b0dabcd20c7e28c4 \
     --hash=sha256:0f4ca02bea9a23221c0182836703cbf8930c5e9454bacce27e767509fa286a30 \
@@ -86,8 +82,8 @@ markupsafe==3.0.2 \
 pyparsing==2.4.7 \
     --hash=sha256:c203ec8783bf771a155b207279b9bccb8dea02d8f0c9e5f8ead507bc3246ecc1 \
     --hash=sha256:ef9d7589ef3c200abe66653d3f1ab1033c3c419ae9b9bdb1240a85b024efc88b
-    # via gixy
+    # via gixy-ng
 six==1.17.0 \
     --hash=sha256:4721f391ed90541fddacab5acf947aa0d3dc7d27b2e1e8eda2be8970586c3274 \
     --hash=sha256:ff70335d468e7eb6ec65b95b99d3a2836546063f63acc5171de367e834932a81
-    # via gixy
+    # via gixy-ng

setup

@@ -2,6 +2,6 @@
 
 npm ci --ignore-scripts
 
-python3.12 -m venv --clear venv
+python3 -m venv --clear venv
 source venv/bin/activate
 pip install --require-hashes --only-binary :all: -r requirements.txt