[bundle] Update 7 worlds (worlds-wheels-2026-06-09)#21
Closed
oliver-the-multiworld-squirrel[bot] wants to merge 7 commits into
Closed
[bundle] Update 7 worlds (worlds-wheels-2026-06-09)#21oliver-the-multiworld-squirrel[bot] wants to merge 7 commits into
oliver-the-multiworld-squirrel[bot] wants to merge 7 commits into
Conversation
oliver-the-multiworld-squirrel
Bot
requested review from
TreZc0 and
lallaria
as code owners
Contributor
Karen: Quality Assurance ManagerHere to give a seal of quality to your APWorld, because no one wants to be a vector for an exploit.
|
| Check | Status | Notes |
|---|---|---|
schema |
✅ pass | archipelago.json looking good! |
manifest_consistency |
✅ pass | filename, url, and JSON shape are all consistent, nice! |
url_reachability |
✅ pass | 2 URLs are right where I looked |
dk64 — ✅ pass
| Check | Status | Notes |
|---|---|---|
schema |
✅ pass | archipelago.json looking good! |
manifest_consistency |
✅ pass | filename, url, and JSON shape are all consistent, nice! |
url_reachability |
✅ pass | 1 URLs are right where I looked |
huniepop — ✅ pass
| Check | Status | Notes |
|---|---|---|
schema |
✅ pass | archipelago.json looking good! |
manifest_consistency |
✅ pass | filename, url, and JSON shape are all consistent, nice! |
url_reachability |
✅ pass | 1 URLs are right where I looked |
oot — ✅ pass
| Check | Status | Notes |
|---|---|---|
schema |
✅ pass | archipelago.json looking good! |
manifest_consistency |
✅ pass | filename, url, and JSON shape are all consistent, nice! |
url_reachability |
✅ pass | 1 URLs are right where I looked |
ori_wotw — ✅ pass
| Check | Status | Notes |
|---|---|---|
schema |
✅ pass | archipelago.json looking good! |
manifest_consistency |
✅ pass | filename, url, and JSON shape are all consistent, nice! |
url_reachability |
✅ pass | 1 URLs are right where I looked |
papermario — ✅ pass
| Check | Status | Notes |
|---|---|---|
schema |
✅ pass | archipelago.json looking good! |
manifest_consistency |
✅ pass | filename, url, and JSON shape are all consistent, nice! |
url_reachability |
✅ pass | 1 URLs are right where I looked |
refunct — ✅ pass
| Check | Status | Notes |
|---|---|---|
schema |
✅ pass | archipelago.json looking good! |
manifest_consistency |
✅ pass | filename, url, and JSON shape are all consistent, nice! |
url_reachability |
✅ pass | 1 URLs are right where I looked |
All checks green, awesome job!
IGDB PR lookupKaren flagged this PR as needing an IGDB id. Pick a candidate from the list below, edit
|
Contributor
Karen: Isolated QA ChecksWorld generation (fuzzer) results
|
| Check | Status | Notes |
|---|---|---|
fuzzer |
✅ pass | success=10 failure=0 timeout=0 ignored=0 rom=0 real=0 total=10 |
bandit |
❌ fail | 7 issues(s), we should look it over. |
pip-audit |
skipped | not run in the offline sandbox |
size |
✅ pass | a very reasonable 0.1MB / cap 250MB |
rom |
✅ pass | no illegal games here |
net |
1 top-level network module imports, these are probably ok, but check them out. | |
ruff |
captured | 30 lint findings |
Findings
bandit
- /work/extracted/worlds/am2r/Client.py:372 [B310/MEDIUM] Audit url open for permitted schemes. Allowing use of file:/ or custom schemes is often unexpected.
- /work/extracted/worlds/am2r/init.py:38 [B310/MEDIUM] Audit url open for permitted schemes. Allowing use of file:/ or custom schemes is often unexpected.
- /work/extracted/worlds/am2r/init.py:41 [B310/MEDIUM] Audit url open for permitted schemes. Allowing use of file:/ or custom schemes is often unexpected.
- /work/extracted/worlds/am2r/init.py:57 [B323/MEDIUM] By default, Python will create a secure, verified ssl context for use in such classes as HTTPSConnection. However, it still allows using an insecure context via the _create_unverified_context that reverts to the previous behavior that does not validate certificates or perform hostname checks.
- /work/extracted/worlds/am2r/init.py:190 [B310/MEDIUM] Audit url open for permitted schemes. Allowing use of file:/ or custom schemes is often unexpected.
- /work/extracted/worlds/am2r/init.py:193 [B310/MEDIUM] Audit url open for permitted schemes. Allowing use of file:/ or custom schemes is often unexpected.
- /work/extracted/worlds/am2r/init.py:209 [B323/MEDIUM] By default, Python will create a secure, verified ssl context for use in such classes as HTTPSConnection. However, it still allows using an insecure context via the _create_unverified_context that reverts to the previous behavior that does not validate certificates or perform hostname checks.
net
- worlds/am2r/init.py: top-level
import urllib.requestat line 17
ruff
- /work/extracted/worlds/am2r/Client.py:9 F401
worlds.terrariaimported but unused - /work/extracted/worlds/am2r/Client.py:29 E711 Comparison to
Noneshould becond is not None - /work/extracted/worlds/am2r/Client.py:193 F541 f-string without any placeholders
- /work/extracted/worlds/am2r/Client.py:195 F541 f-string without any placeholders
- /work/extracted/worlds/am2r/Client.py:371 E401 Multiple imports on one line
- /work/extracted/worlds/am2r/Client.py:498 E722 Do not use bare
except - /work/extracted/worlds/am2r/Client.py:716 F841 Local variable
eis assigned to but never used - /work/extracted/worlds/am2r/Client.py:725 E712 Avoid equality comparisons to
True; usedata_decoded["Deathlinked"]:for truth checks - /work/extracted/worlds/am2r/Client.py:754 F541 f-string without any placeholders
- /work/extracted/worlds/am2r/Client.py:775 F541 f-string without any placeholders
- /work/extracted/worlds/am2r/Client.py:784 F541 f-string without any placeholders
- /work/extracted/worlds/am2r/Client.py:785 F541 f-string without any placeholders
- /work/extracted/worlds/am2r/Client.py:802 F541 f-string without any placeholders
- /work/extracted/worlds/am2r/Client.py:832 F541 f-string without any placeholders
- /work/extracted/worlds/am2r/Client.py:992 E722 Do not use bare
except - …and 10 more
dk64 — ❌ fail
| Check | Status | Notes |
|---|---|---|
fuzzer |
❌ fail | success=0 failure=0 timeout=10 ignored=0 rom=0 real=0 total=10 |
bandit |
❌ fail | 8 issues(s), we should look it over. |
pip-audit |
skipped | not run in the offline sandbox |
size |
✅ pass | a very reasonable 34.0MB / cap 250MB |
rom |
✅ pass | no illegal games here |
net |
1 top-level network module imports, these are probably ok, but check them out. | |
ruff |
captured | 6127 lint findings |
Findings
bandit
- /work/extracted/worlds/dk64/archipelago/client/common.py:171 [B310/MEDIUM] Audit url open for permitted schemes. Allowing use of file:/ or custom schemes is often unexpected.
- /work/extracted/worlds/dk64/archipelago/client/common.py:196 [B310/MEDIUM] Audit url open for permitted schemes. Allowing use of file:/ or custom schemes is often unexpected.
- /work/extracted/worlds/dk64/archipelago/client/common.py:263 [B310/MEDIUM] Audit url open for permitted schemes. Allowing use of file:/ or custom schemes is often unexpected.
- /work/extracted/worlds/dk64/randomizer/JsonReader.py:48 [B307/MEDIUM] Use of possibly insecure function - consider using safer ast.literal_eval.
- /work/extracted/worlds/dk64/randomizer/JsonReader.py:58 [B307/MEDIUM] Use of possibly insecure function - consider using safer ast.literal_eval.
- /work/extracted/worlds/dk64/randomizer/JsonReader.py:87 [B307/MEDIUM] Use of possibly insecure function - consider using safer ast.literal_eval.
- /work/extracted/worlds/dk64/randomizer/Patching/ApplyRandomizer.py:766 [B306/MEDIUM] Use of insecure and deprecated function (mktemp).
- /work/extracted/worlds/dk64/randomizer/Patching/ApplyRandomizer.py:767 [B306/MEDIUM] Use of insecure and deprecated function (mktemp).
net
- worlds/dk64/archipelago/client/common.py: top-level
import urllib.requestat line 7
ruff
- /work/extracted/worlds/dk64/init.py:5 F401
mathimported but unused - /work/extracted/worlds/dk64/init.py:36 F841 Local variable
retis assigned to but never used - /work/extracted/worlds/dk64/init.py:102 F841 Local variable
eis assigned to but never used - /work/extracted/worlds/dk64/init.py:142 F401
entrance_rando.disconnect_entrance_for_randomizationimported but unused - /work/extracted/worlds/dk64/init.py:149 F401
archipelago.Goals.GOAL_MAPPINGimported but unused - /work/extracted/worlds/dk64/init.py:149 F401
archipelago.Goals.QUANTITY_GOALSimported but unused - /work/extracted/worlds/dk64/init.py:149 F401
archipelago.Goals.calculate_quantityimported but unused - /work/extracted/worlds/dk64/init.py:151 F401
archipelago.Options.Goalimported but unused - /work/extracted/worlds/dk64/init.py:151 F401
archipelago.Options.SwitchSanityimported but unused - /work/extracted/worlds/dk64/init.py:151 F401
archipelago.Options.SelectStartingKongimported but unused - /work/extracted/worlds/dk64/init.py:159 F401
randomizer.Settings.Settingsimported but unused - /work/extracted/worlds/dk64/init.py:163 F401
randomizer.Patching.EnemyRando.randomize_enemies_0imported but unused - /work/extracted/worlds/dk64/init.py:175 F811 Redefinition of unused
Enemiesfrom line 168:Enemiesredefined here - /work/extracted/worlds/dk64/init.py:177 F401
randomizer.Enums.Settings.Itemsimported but unused - /work/extracted/worlds/dk64/init.py:179 F811 Redefinition of unused
Kongsfrom line 169:Kongsredefined here - …and 10 more
huniepop — ❌ fail
| Check | Status | Notes |
|---|---|---|
fuzzer |
❌ fail | success=3 failure=7 timeout=0 ignored=0 rom=0 real=7 total=10 |
bandit |
✅ pass | Bandit didn't make out with anything worth mentioning. |
pip-audit |
skipped | not run in the offline sandbox |
size |
✅ pass | a very reasonable 0.2MB / cap 250MB |
rom |
✅ pass | no illegal games here |
net |
✅ pass | Only network I see is the one I'm responding on. |
ruff |
captured | 34 lint findings |
Findings
ruff
- /work/extracted/worlds/huniepop/CustomOption.py:82 E741 Ambiguous variable name:
l - /work/extracted/worlds/huniepop/CustomOption.py:88 E741 Ambiguous variable name:
l - /work/extracted/worlds/huniepop/CustomOption.py:94 E741 Ambiguous variable name:
l - /work/extracted/worlds/huniepop/CustomOption.py:100 E741 Ambiguous variable name:
l - /work/extracted/worlds/huniepop/CustomOption.py:114 E741 Ambiguous variable name:
l - /work/extracted/worlds/huniepop/CustomOption.py:120 E741 Ambiguous variable name:
l - /work/extracted/worlds/huniepop/CustomOption.py:125 E741 Ambiguous variable name:
l - /work/extracted/worlds/huniepop/CustomOption.py:130 E741 Ambiguous variable name:
l - /work/extracted/worlds/huniepop/CustomOption.py:137 E741 Ambiguous variable name:
l - /work/extracted/worlds/huniepop/CustomOption.py:174 E741 Ambiguous variable name:
l - /work/extracted/worlds/huniepop/CustomOption.py:180 E741 Ambiguous variable name:
l - /work/extracted/worlds/huniepop/CustomOption.py:186 E741 Ambiguous variable name:
l - /work/extracted/worlds/huniepop/CustomOption.py:192 E741 Ambiguous variable name:
l - /work/extracted/worlds/huniepop/CustomOption.py:197 E741 Ambiguous variable name:
l - /work/extracted/worlds/huniepop/CustomOption.py:202 E741 Ambiguous variable name:
l - …and 10 more
oot — ❌ fail
| Check | Status | Notes |
|---|---|---|
fuzzer |
❌ fail | oot: no readable result.json (ENOENT: no such file or directory, open '/var/lib/mwgg-fuzz/21-oot-d28f9058a963-1/out/result.json'); container exit 125 — === fuzz oot === runs=10 per-gen-timeout=30s yamls=1-3 threads=1 wall=1080s |
ori_wotw — ✅ pass
| Check | Status | Notes |
|---|---|---|
fuzzer |
✅ pass | success=10 failure=0 timeout=0 ignored=0 rom=0 real=0 total=10 |
bandit |
✅ pass | Bandit didn't make out with anything worth mentioning. |
pip-audit |
skipped | not run in the offline sandbox |
size |
✅ pass | a very reasonable 2.8MB / cap 250MB |
rom |
✅ pass | no illegal games here |
net |
✅ pass | Only network I see is the one I'm responding on. |
ruff |
captured | 7004 lint findings |
Findings
ruff
- /work/extracted/worlds/ori_wotw/Rules.py:9 F403
from .RulesFunctions import *used; unable to detect undefined names - /work/extracted/worlds/ori_wotw/Rules.py:50 F405
has_enough_resourcesmay be undefined, or defined from star imports - /work/extracted/worlds/ori_wotw/Rules.py:55 F405
has_enough_resourcesmay be undefined, or defined from star imports - /work/extracted/worlds/ori_wotw/Rules.py:61 F405
has_enough_resourcesmay be undefined, or defined from star imports - /work/extracted/worlds/ori_wotw/Rules.py:63 F405
has_enough_resourcesmay be undefined, or defined from star imports - /work/extracted/worlds/ori_wotw/Rules.py:64 F405
has_enough_resourcesmay be undefined, or defined from star imports - /work/extracted/worlds/ori_wotw/Rules.py:67 F405
can_buy_mapmay be undefined, or defined from star imports - /work/extracted/worlds/ori_wotw/Rules.py:71 F405
has_enough_resourcesmay be undefined, or defined from star imports - /work/extracted/worlds/ori_wotw/Rules.py:73 F405
can_open_doormay be undefined, or defined from star imports - /work/extracted/worlds/ori_wotw/Rules.py:74 F405
has_enough_resourcesmay be undefined, or defined from star imports - /work/extracted/worlds/ori_wotw/Rules.py:78 F405
has_enough_resourcesmay be undefined, or defined from star imports - /work/extracted/worlds/ori_wotw/Rules.py:81 F405
has_enough_resourcesmay be undefined, or defined from star imports - /work/extracted/worlds/ori_wotw/Rules.py:85 F405
has_enough_resourcesmay be undefined, or defined from star imports - /work/extracted/worlds/ori_wotw/Rules.py:91 F405
has_enough_resourcesmay be undefined, or defined from star imports - /work/extracted/worlds/ori_wotw/Rules.py:92 F405
has_enough_resourcesmay be undefined, or defined from star imports - …and 10 more
papermario — ❌ fail
| Check | Status | Notes |
|---|---|---|
fuzzer |
❌ fail | success=0 failure=10 timeout=0 ignored=0 rom=0 real=10 total=10 |
bandit |
❌ fail | 4 issues(s), we should look it over. |
pip-audit |
skipped | not run in the offline sandbox |
size |
✅ pass | a very reasonable 2.5MB / cap 250MB |
rom |
✅ pass | no illegal games here |
net |
✅ pass | Only network I see is the one I'm responding on. |
ruff |
captured | 122 lint findings |
Findings
bandit
- /work/extracted/worlds/papermario/RuleParser.py:260 [B307/MEDIUM] Use of possibly insecure function - consider using safer ast.literal_eval.
- /work/extracted/worlds/papermario/RuleParser.py:271 [B307/MEDIUM] Use of possibly insecure function - consider using safer ast.literal_eval.
- /work/extracted/worlds/papermario/RuleParser.py:280 [B307/MEDIUM] Use of possibly insecure function - consider using safer ast.literal_eval.
- /work/extracted/worlds/papermario/RuleParser.py:406 [B307/MEDIUM] Use of possibly insecure function - consider using safer ast.literal_eval.
ruff
- /work/extracted/worlds/papermario/Entrance.py:40 E711 Comparison to
Noneshould becond is None - /work/extracted/worlds/papermario/ItemPool.py:4 F401
collections.namedtupleimported but unused - /work/extracted/worlds/papermario/ItemPool.py:5 F401
itertools.chainimported but unused - /work/extracted/worlds/papermario/ItemPool.py:7 F401
.data.chapter_logic.areas_by_chapterimported but unused - /work/extracted/worlds/papermario/ItemPool.py:11 F403
from .options import *used; unable to detect undefined names - /work/extracted/worlds/papermario/ItemPool.py:59 F405
SpiritRequirementsmay be undefined, or defined from star imports - /work/extracted/worlds/papermario/ItemPool.py:66 F405
SeedGoalmay be undefined, or defined from star imports - /work/extracted/worlds/papermario/ItemPool.py:120 F405
SpiritRequirementsmay be undefined, or defined from star imports - /work/extracted/worlds/papermario/ItemPool.py:139 F405
ShuffleKootFavorsmay be undefined, or defined from star imports - /work/extracted/worlds/papermario/ItemPool.py:141 F405
ShuffleKootFavorsmay be undefined, or defined from star imports - /work/extracted/worlds/papermario/ItemPool.py:148 F405
ShuffleKootFavorsmay be undefined, or defined from star imports - /work/extracted/worlds/papermario/ItemPool.py:155 F405
ShuffleLettersmay be undefined, or defined from star imports - /work/extracted/worlds/papermario/ItemPool.py:156 F405
ShuffleLettersmay be undefined, or defined from star imports - /work/extracted/worlds/papermario/ItemPool.py:158 F405
ShuffleLettersmay be undefined, or defined from star imports - /work/extracted/worlds/papermario/ItemPool.py:161 F405
ShuffleLettersmay be undefined, or defined from star imports - …and 10 more
refunct — ✅ pass
| Check | Status | Notes |
|---|---|---|
fuzzer |
✅ pass | success=10 failure=0 timeout=0 ignored=0 rom=0 real=0 total=10 |
bandit |
✅ pass | Bandit didn't make out with anything worth mentioning. |
pip-audit |
skipped | not run in the offline sandbox |
size |
✅ pass | a very reasonable 0.1MB / cap 250MB |
rom |
✅ pass | no illegal games here |
net |
✅ pass | Only network I see is the one I'm responding on. |
ruff |
captured | 32 lint findings |
Findings
ruff
- /work/extracted/worlds/refunct/Items.py:74 F541 f-string without any placeholders
- /work/extracted/worlds/refunct/Items.py:75 F541 f-string without any placeholders
- /work/extracted/worlds/refunct/Items.py:76 F541 f-string without any placeholders
- /work/extracted/worlds/refunct/Items.py:77 F541 f-string without any placeholders
- /work/extracted/worlds/refunct/Items.py:79 F541 f-string without any placeholders
- /work/extracted/worlds/refunct/Items.py:80 F541 f-string without any placeholders
- /work/extracted/worlds/refunct/Items.py:81 F541 f-string without any placeholders
- /work/extracted/worlds/refunct/Items.py:82 F541 f-string without any placeholders
- /work/extracted/worlds/refunct/Locations.py:238 F541 f-string without any placeholders
- /work/extracted/worlds/refunct/Options.py:4 F811 Redefinition of unused
Rangefrom line 1:Rangeredefined here - /work/extracted/worlds/refunct/Options.py:4 F401
Options.OptionSetimported but unused - /work/extracted/worlds/refunct/Options.py:4 F401
Options.Visibilityimported but unused - /work/extracted/worlds/refunct/Options.py:5 F401
collectionsimported but unused - /work/extracted/worlds/refunct/Options.py:6 F401
schema.Andimported but unused - /work/extracted/worlds/refunct/Options.py:7 F811 Redefinition of unused
OptionDictfrom line 1:OptionDictredefined here - …and 10 more
![karen-head-of-multiworld-qa[bot]](https://avatars.githubusercontent.com/in/3588863?s=60&v=4){kind=small}
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Hey folks, I found a bunch of new updates for 7 worlds. I'm gonna grab some info on them for y'all.
Location:
MultiworldGG/MultiworldGG-Beta@worlds-wheels-2026-06-09Release tag:
worlds-wheels-2026-06-09APWorlds:
am2r,dk64,huniepop,oot,ori_wotw,papermario,refunctam2r:worlds_am2r-1.4.5-py3-none-any.whl(37 KB)dk64:worlds_dk64-1.5.7-py3-none-any.whl(27.2 MB)huniepop:worlds_huniepop-2.3.0-py3-none-any.whl(38 KB)oot:worlds_oot-9.1.0-py3-none-any.whl(2.77 MB)ori_wotw:worlds_ori_wotw-0.5.5-py3-none-any.whl(202 KB)papermario:worlds_papermario-0.0.1-py3-none-any.whl(1.45 MB)refunct:worlds_refunct-1.2.2-py3-none-any.whl(24 KB)Karen Head of Multiworld QA bot is gathering the manifests for 7 worlds and cross referencing. She'll review them individually in a moment.