v0.2.23 - weak_ssl_tls plugin, auto-fix mode, Python 3.6 pre-commit

v0.2.22 - Checkstyle formatter & security scanning

New features:
- Checkstyle XML output format for CI/CD integration (-f checkstyle)
- Bandit security scanner in pre-commit
- Hardcoded IP address pre-commit check (SonarCloud S1313)
- Path filters in GitHub Actions to skip tests on docs-only changes

v0.2.20 - Python 3.6 compatibility fixes

v0.2.19 - Quick fix support for IDE integration

fix(py36): Disable ruff UP021 rule to keep universal_newlines

The 'text' parameter in subprocess.run requires Python 3.7+.
Ruff was auto-fixing universal_newlines -> text which breaks Py3.6.
Bump to v0.2.18

fix: Actually fix Python 3.6 compat in test_cli.py

Previous commit missed the test file change (stashed by pre-commit).
Bump to v0.2.17

fix: Python 3.6 compat - use universal_newlines instead of text

- Fix test_cli.py: text=True requires Python 3.7+
- Add pre-commit hook to catch Python 3.6 incompatibilities
- Bump to v0.2.16