Repository navigation
chore(deps-dev): bump ruff from 0.17.0 to 0.17.1 - #301
Closed
dependabot[bot] wants to merge 1 commit into
Closed
dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
Bumps [ruff](https://github.com/astral-sh/ruff) from 0.17.0 to 0.17.1. - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.17.0...0.17.1) --- updated-dependencies: - dependency-name: ruff dependency-version: 0.17.1 dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
![claude[bot]](https://avatars.githubusercontent.com/in/1236702?s=60&v=4){kind=small}
There was a problem hiding this comment.
LGTM. This is a one-line patch bump to the ruff dev dependency.
What was reviewed:
- The ruff pin in requirements-dev.txt changes from 0.17.0 to 0.17.1. The pyproject.toml constraint (ruff>=0.15.0) still allows it, and the pip-compile file has no hashes that would also need updating.
- The 0.17.1 release notes list bug fixes, one preview-only rule change and a mutable-container rule tweak. A new ruff finding could fail the CI lint job (
ruff check src/), but it can't change runtime behavior.
Extended reasoning...
The change bumps one pinned version in requirements-dev.txt, a dev-only lock file generated by pip-compile, and touches no source code. It touches no security-sensitive surface such as auth, crypto or data handling. The new version stays within the existing pyproject.toml constraint, no CODEOWNERS file covers the path, and the PR timeline has no reviewer objections.
Contributor
Author
|
Superseded by #309. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps ruff from 0.17.0 to 0.17.1.
Release notes
Sourced from ruff's releases.
... (truncated)
Changelog
Sourced from ruff's changelog.
Commits
4683270Bump version to 0.17.1 (#29420)3514027[ty] Update typing conformance suite pin (#29417)8294556Update referenced PR security-review workflow (#29237)d1e1b1f[ty] Preserve recursive aliases when rebuilding intersections (#29057)9352615[perflint] Avoid invalid comprehension suggestions (PERF401,PERF403) (...83a3afcFix dedent with multiple leading comments (#29382)b42a873[ty] Clarify object attribute write-contract rationale (#29384)d01678e[ty] Clarify object attribute write-contract rationale (#29384)355b42a[ty] Avoid writable override contracts from object (#29373)e26e6d2[ty] Collect intersection inference through constraint relations (#28677)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)