From bb4aaf8ae5a3a9b03b1009c92226b1170a90b989 Mon Sep 17 00:00:00 2001
From: The MMGen Project <mmgen@tuta.io>
Date: Sat, 15 Aug 2026 14:13:09 +0000
Subject: [PATCH] update Github workflows

---
 .github/workflows/{ruff.yaml => lint.yaml} | 33 +++++++++++++++-------
 README.md                                  |  2 +-
 mmgen/data/version                         |  2 +-
 3 files changed, 25 insertions(+), 12 deletions(-)
 rename .github/workflows/{ruff.yaml => lint.yaml} (51%)

diff --git a/.github/workflows/ruff.yaml b/.github/workflows/lint.yaml
similarity index 51%
rename from .github/workflows/ruff.yaml
rename to .github/workflows/lint.yaml
index bd8107df..47c34bc1 100644
--- a/.github/workflows/ruff.yaml
+++ b/.github/workflows/lint.yaml
@@ -1,9 +1,9 @@
-name: ruff
+name: lint (ruff+pylint+bandit)
 
 on:
   push:
     paths:
-      - '.github/workflows/ruff.yaml'
+      - '.github/workflows/lint.yaml'
       - '.github/build-requirements.txt'
       - 'pyproject.toml'
       - 'setup.cfg'
@@ -21,32 +21,45 @@ jobs:
         python-version: ["3.11", "3.12", "3.13", "3.14"]
 
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v6
 
     - name: Install Ubuntu package dependencies
       run: |
         sudo apt-get install libsecp256k1-dev
 
     - name: Set up Python ${{ matrix.python-version }}
-      uses: actions/setup-python@v4
+      uses: actions/setup-python@v7
       with:
         python-version: ${{ matrix.python-version }}
         cache: 'pip'
         cache-dependency-path: |
           .github/build-requirements.txt
           setup.cfg
+          **-requirements.txt
 
     - name: Install Python dependencies
       run: |
         python3 -m pip install pip setuptools build wheel
-        python3 -m pip install gmpy2 cryptography pynacl ecdsa aiohttp requests pexpect scrypt semantic-version
-        python3 -m pip install pycryptodome pysocks pycoin ipaddress varint ruff
-        python3 -m pip install lxml py-ecc monero eth-keys pure-protobuf
+        python3 -m pip install gmpy2 cryptography pynacl aiohttp requests lxml scrypt semantic-version
+        python3 -m pip install pycryptodome pure-protobuf pysocks
+        python3 -m pip install pexpect ecdsa pyaes pycoin monero eth-keys ruff pylint bandit
         python3 setup.py build_ext --inplace
 
-    - name: Check the code with Ruff static code analyzer
-      env:
-        PYTHONPATH: .
+    - name: Check the code with Ruff static analyzer
       run: |
         ruff check --output-format=github mmgen
         ruff check --output-format=github test
+        ruff check --output-format=github examples
+
+    - name: Check the code with Pylint static analyzer
+      env:
+        PYTHONPATH: .
+      run: |
+        pylint mmgen
+        pylint test
+        pylint --disable=relative-beyond-top-level test/cmdtest_d
+        pylint examples
+
+    - name: Check code vulnerabilities with Bandit static analyzer
+      run: |
+        bandit --silent --recursive --severity-level=medium --configfile=pyproject.toml mmgen
diff --git a/README.md b/README.md
index 8e90bfaa..d8a414c8 100644
--- a/README.md
+++ b/README.md
@@ -3,7 +3,7 @@
 ##### A terminal-based online/offline cryptocurrency wallet
 
 ![build](https://github.com/mmgen/mmgen-wallet/workflows/build/badge.svg)
-![ruff](https://github.com/mmgen/mmgen-wallet/workflows/ruff/badge.svg)
+![lint](https://github.com/mmgen/mmgen-wallet/workflows/lint/badge.svg)
 
 ### Description
 
diff --git a/mmgen/data/version b/mmgen/data/version
index 4c4cdcf2..0fbb11b9 100644
--- a/mmgen/data/version
+++ b/mmgen/data/version
@@ -1 +1 @@
-16.2.dev8
+16.2.dev9