build(deps-dev): bump the dev-tools group across 1 directory with 2 updates - #32
build(deps-dev): bump the dev-tools group across 1 directory with 2 updates#32dependabot[bot] wants to merge 1 commit into
Conversation
…pdates Updates the requirements on [ruff](https://github.com/astral-sh/ruff) and [mypy](https://github.com/python/mypy) to permit the latest version. Updates `ruff` to 0.16.0 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.15.5...0.16.0) Updates `mypy` to 2.3.0 - [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md) - [Commits](python/mypy@v1.13.0...v2.3.0) --- updated-dependencies: - dependency-name: ruff dependency-version: 0.16.0 dependency-type: direct:development dependency-group: dev-tools - dependency-name: mypy dependency-version: 2.3.0 dependency-type: direct:development dependency-group: dev-tools ... Signed-off-by: dependabot[bot] <support@github.com>
LabelsThe following labels could not be found: Please fix the above issues or remove invalid values from |
WalkthroughDevelopment dependency constraints in ChangesDevelopment Tool Constraints
Estimated code review effort: 1 (Trivial) | ~2 minutes 🚥 Pre-merge checks | ✅ 5✅ Passed checks (5 passed)
✨ Finishing Touches🧪 Generate unit tests (beta)
Comment |
![coderabbitai[bot]](https://avatars.githubusercontent.com/in/347564?s=60&v=4){kind=small}
There was a problem hiding this comment.
Actionable comments posted: 2
🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
Inline comments:
In `@pyproject.toml`:
- Around line 25-26: Update the dependency installation step in ci-quality.yml
to honor the bounded ruff and mypy versions declared in pyproject.toml. Install
the project’s dev extras or explicitly apply those same constraints instead of
installing unconstrained ruff and mypy packages.
- Around line 25-26: Update the ruff and mypy lower bounds in the project
development dependencies to ruff >=0.16.0,<0.17.0 and mypy >=2.3.0,<3.0. Also
update the corresponding unconstrained installs in ci-quality.yml to use these
same version ranges.
🪄 Autofix (Beta)
Fix all unresolved CodeRabbit comments on this PR:
- Push a commit to this branch (recommended)
- Create a new PR with the fixes
ℹ️ Review info
⚙️ Run configuration
Configuration used: Path: .coderabbit.yaml
Review profile: ASSERTIVE
Plan: Pro
Run ID: d16a0232-2bba-4cf3-98eb-48e67d9f1096
📒 Files selected for processing (1)
pyproject.toml
| ruff = ">=0.15.5,<0.17.0" | ||
| mypy = ">=1.13,<3.0" |
There was a problem hiding this comment.
🗄️ Data Integrity & Integration | 🟠 Major | ⚡ Quick win
Ensure every CI lane honors these bounds.
.github/workflows/ci-quality.yml currently runs pip install ruff mypy, bypassing these declarations and allowing arbitrary latest versions. Install the project’s dev extras or repeat the bounded constraints there so CI validates the versions defined by pyproject.toml.
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
In `@pyproject.toml` around lines 25 - 26, Update the dependency installation step
in ci-quality.yml to honor the bounded ruff and mypy versions declared in
pyproject.toml. Install the project’s dev extras or explicitly apply those same
constraints instead of installing unconstrained ruff and mypy packages.
🎯 Functional Correctness | 🟡 Minor | ⚡ Quick win
🧩 Analysis chain
🏁 Script executed:
#!/bin/bash
set -euo pipefail
printf '\n== pyproject.toml (relevant lines) ==\n'
nl -ba pyproject.toml | sed -n '1,80p'
printf '\n== CI workflow references to ruff/mypy ==\n'
rg -n "ruff|mypy|pyproject|pip install|uv|poetry" .github/workflows -S || true
printf '\n== Any explicit version pins in repo ==\n'
rg -n 'ruff = "|mypy = "|ruff[ =]|mypy[ =]' -S pyproject.toml .github/workflows README.md . 2>/dev/null || trueRepository: cryptoxdog/l9-codegraph
Length of output: 240
🏁 Script executed:
#!/bin/bash
set -euo pipefail
printf '\n== pyproject.toml (first 90 lines with numbers) ==\n'
awk 'NR<=90 { printf "%4d %s\n", NR, $0 }' pyproject.toml
printf '\n== CI workflow references to ruff/mypy ==\n'
rg -n "ruff|mypy|pyproject|pip install|uv|poetry" .github/workflows -S || true
printf '\n== explicit version constraints in repo ==\n'
rg -n 'ruff = "|mypy = "|ruff[ =]|mypy[ =]' -S pyproject.toml .github/workflows README.md . 2>/dev/null || trueRepository: cryptoxdog/l9-codegraph
Length of output: 6184
Raise the dev-tool lower bounds to the versions this PR targets. ruff = ">=0.16.0,<0.17.0" and mypy = ">=2.3.0,<3.0" keep fresh installs aligned with the updated toolchain; ci-quality.yml also installs both tools without constraints, so it should use the same pins.
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
In `@pyproject.toml` around lines 25 - 26, Update the ruff and mypy lower bounds
in the project development dependencies to ruff >=0.16.0,<0.17.0 and mypy
>=2.3.0,<3.0. Also update the corresponding unconstrained installs in
ci-quality.yml to use these same version ranges.
Source: MCP tools
Updates the requirements on ruff and mypy to permit the latest version.
Updates
ruffto 0.16.0Release notes
Sourced from ruff's releases.
... (truncated)
Changelog
Sourced from ruff's changelog.
... (truncated)
Commits
a2635fdBump 0.16.0 (#27136)3433449[ty] Reuse full call diagnostics for implicit setter calls (#27115)2240070Reflectruff: ignoreand--add-ignorestabilization in documentation (#27...17ef711Stabilize--add-ignore(#27125)ef912bbAdd newly stabilized rules to defaults (#27055)b30f040Stabilize new default rules (#27035)bcd70c5Exclude Markdown files fromformat-devruns (#27052)87e51e2Fixformat --checkspans for syntax errors (#27045)afe2723[flake8-gettext] Stabilize qualified-name and built-in binding resolution (...a9702d8[flake8-bandit] Stabilize string literal binding resolution (S310) (#26944)Updates
mypyto 2.3.0Changelog
Sourced from mypy's changelog.
... (truncated)
Commits
8aabf84Drop +dev from version4d8ad2aUpdate changelog for 2.3 release (#21728)2c21546[mypyc] Update documentation of race conditions under free threading (#21726)a9f62a3[mypyc] Make attribute access memory safe on free-threaded builds (#21705)0faa413UsePYODIDEenvironment variable for Emscripten cross-compilation detection...3d75cdb[mypyc] Borrow final attributes more aggressively (#21702)24c237d[mypyc] Improve documentation of Final (#21713)b5be217[mypyc] Update free threading Python compatibility docs (#21711)cbcb51aNarrow for frozendict membership check (#21709)af2bc0fSync typeshed (#21707)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditionsSummary by CodeRabbit