Skip to content

chore(deps): Bump ruff from 0.16.10 to 0.17.1 - #160

Merged
DoRmAmMu1997 merged 2 commits into
mainfrom
dependabot/pip/ruff-0.17.1
Oct 21, 2026
Merged

DoRmAmMu1997 merged 2 commits into
mainfrom
dependabot/pip/ruff-0.17.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 19, 2026 •

Copy link
Copy Markdown
Contributor

Keep Ruff 0.17.1 aligned between the pinned development dependency and its check-only pre-commit hook. The dependency-only bump left the hook at v0.16.10, which violates the repository's pin-alignment policy; the hook now uses v0.17.1.

Merge current main (9ded279292cb7f12d0c22af2358f69240a381869) into the existing Dependabot branch. The final diff changes only the Ruff constraint and matching official hook revision. Ruff's Python target remains explicitly py312 and its rule set remains explicit; no Python source edits or automatic fixes are needed. Release review covered the 0.17.0 changes and 0.17.1 changes.

Validation at 386bf5b6e2572118f52fe9c0586d99fe214536f6:

  • Reproduced the previous hook mismatch with the existing policy test, then passed all 29 supply-chain policy tests with the matching hook.
  • Isolated Python 3.12 environment: all 29 direct pins match constraints; pip check passes.
  • Pre-commit config validation, compileall, full Ruff source scan, mypy, Bandit, dependency audit, and diff check pass.
  • Full isolated Python 3.12 suite: 2,311 passed, two skipped, 90.60% coverage, above the 89% floor including app.py, across twelve commit-locked groups.
  • Hosted Python 3.12, 3.13, 3.14 quality/supply-chain jobs and Docker/Compose smoke pass on this exact head: run 39467841693. Both CodeQL analyses also pass.

Independent code/security diff review found no additional findings. Commit includes Co-authored-by: Codex <codex@openai.com>.

The PR remains open for review. No GitHub PR merge or deployment is included.

Bumps [ruff](https://github.com/astral-sh/ruff) from 0.16.10 to 0.17.1.
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.16.10...0.17.1)

---
updated-dependencies:
- dependency-name: ruff
  dependency-version: 0.17.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Oct 19, 2026
Keep Ruff 0.17.1 aligned between constraints and its check-only pre-commit hook while incorporating the latest main dependency pins. The policy test reproduced the previous mismatch and now passes with the matching hook.

Full Ruff scan and 29 policy tests pass; pre-commit config, compileall, mypy, Bandit and dependency audit pass. Full pytest/coverage and hosted checks follow this coherent candidate.

Co-authored-by: Codex <codex@openai.com>
@DoRmAmMu1997
DoRmAmMu1997 merged commit 24df19f into main Oct 21, 2026
7 checks passed
@DoRmAmMu1997
DoRmAmMu1997 deleted the dependabot/pip/ruff-0.17.1 branch October 21, 2026 16:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant