build(deps-dev): bump pylint from 4.0.8 to 4.0.9

[dependabot]

Bumps pylint from 4.0.8 to 4.0.9.

Release notes

Sourced from pylint's releases.

v4.0.9

What's new in Pylint 4.0.9?

Release date: 2026-09-23

Security Fixes

• Someone without access to the configuration or linted code, but with access to the cache directory (predictable PYLINT_HOME on a multi-user host) can no longer write a crafted pickle that will runs arbitrary code when pylint access its stat cache. The result cache is now stored as JSON instead of pickle, preventing code-execution. The workaround is upgrading or not pointing PYLINT_HOME to an untrusted, shared, or group-writable directory. The default value, ~/.cache/pylint, is writable only by the user running pylint. (CVE with the same information pending)

False Positives Fixed

• Fixed a false positive for no-self-use on a method that only uses self before a locally defined class (or other nested method), because the checker's could-be-a-function tracking state was not restored after visiting the nested method.

  Closes #3705

• Fix a false positive for :ref:not-callable when calling functions constructed with types.FunctionType or types.LambdaType.

  Closes #7500

• Fix a false positive for unnecessary-direct-lambda-call when a directly called lambda in a class body wraps a comprehension containing an assignment expression. PEP 572 makes that a SyntaxError without the lambda's scope, so following the message produced code that would not compile.

  Closes #9294

• Fix a false positive for :ref:unnecessary-ellipsis when an ellipsis is the sole body statement of a method defined on a Protocol.

  Closes #9319

• Fix a false positive for :ref:bad-exception-cause when the bases of the class being raised from cannot be inferred, such as an exception deriving from a C extension class. :ref:raising-non-exception and :ref:catching-non-exception already guard the same inherit_from_std_ex

... (truncated)

Commits

• 303703f Bump pylint to 4.0.9, update changelog (#11448)
• b342384 Fix block-scoped disable leaking into sibling elif/else blocks (#11429) (#11445)
• 58c87cf Store the results cache as JSON instead of pickle
• e3f4942 [Backport maintenance/4.0.x] Fix crash on failed attribute inference (#11443)
• faf47f9 [Backport maintenance/4.0.x] Fix false positive no-self-use when a method con...
• 20c7bb9 [Backport maintenance/4.0.x] Fix a crash in method-hidden for methods named a...
• 47e6757 [Backport maintenance/4.0.x] Fix bad-exception-cause false positive when the ...
• ae3ee53 [Backport maintenance/4.0.x] Fix not-callable false positive for types.Functi...
• 3e444be [Backport maintenance/4.0.x] Fix a crash in unnecessary-default-type-args for...
• 8f2dd4f [Backport maintenance/4.0.x] Fix declare-non-slot false positives for ClassVa...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[senzingdevops]

Automated: approving this pull request because it includes a patch update

[github-actions]

🤖 Claude Code Review

Review: bump pylint 4.0.8 → 4.0.9 (pyproject.toml)

This is a one-line patch bump of a dev/lint dependency, for Python > 3.11 only. I reviewed the diff only and didn't run the linters.

Code Quality

• ✅ Style: The change matches the surrounding pinned-version entries (pyproject.toml:61).
• ✅ Commented-out code: None.
• ✅ Variable names: Not applicable.
• ✅ DRY: Not applicable.
• ✅ Defects: The pin is exact and keeps its python_version > '3.11' marker. The <= '3.11' pin (3.3.9) is untouched, so the two branches can't conflict. A patch release carries low regression risk. It could introduce new or changed lint warnings, so CI's pylint python/ run is the check to watch.
• ✅ .claude/CLAUDE.md: Not modified. It contains no local-environment-specific content.

Testing

• ✅ Unit and integration tests: Not applicable, since there are no code changes. The existing python/tests suite and lint CI cover the bump.
• ✅ Edge cases and coverage: Not applicable.

Documentation

• ✅ README and API docs: No update needed.
• ✅ Inline comments: None needed.
• ✅ CHANGELOG.md: Dependabot dev-dependency bumps usually don't get an entry. Add one only if this repo's convention requires it.
• ✅ Markdown: No markdown files changed.

Security

• ✅ Credentials, input validation, error handling and logs: Nothing relevant in this change.
• ✅ License files: No .lic files or AQAAAD strings in the diff.

Summary

No blocking issues. Approve once CI (lint and python/tests) passes on Python > 3.11.

I didn't open the untracked files in the working tree (build-resources/, pr_diff.txt, prompt-header.md, prompt-temp.md, review.txt). They look like review-run artifacts and aren't part of the PR diff. Make sure none of them get committed.

Automated code review analyzing defects and coding standards