Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Bump ruff from 0.8.1 to 0.9.0 #11536

Open
wants to merge 1 commit into
base: dev
Choose a base branch
from
Open

Bump ruff from 0.8.1 to 0.9.0 #11536

wants to merge 1 commit into from
+1 −1

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 10, 2025

Bumps ruff from 0.8.1 to 0.9.0.

Release notes

Sourced from ruff's releases.

0.9.0

Release Notes

Check out the blog post for a migration guide and overview of the changes!

Breaking changes

Ruff now formats your code according to the 2025 style guide. As a result, your code might now get formatted differently. See the formatter section for a detailed list of changes.

This release doesn’t remove or remap any existing stable rules.

Stabilization

The following rules have been stabilized and are no longer in preview:

The following behaviors have been stabilized:

The following fixes or improvements to fixes have been stabilized:

Formatter

This release introduces the new 2025 stable style (#13371), stabilizing the following changes:

  • Format expressions in f-string elements (#7594)
  • Alternate quotes for strings inside f-strings (#13860)
  • Preserve the casing of hex codes in f-string debug expressions (#14766)
  • Choose the quote style for each string literal in an implicitly concatenated f-string rather than for the entire string (#13539)
  • Automatically join an implicitly concatenated string into a single string literal if it fits on a single line (#9457)
  • Remove the ISC001 incompatibility warning (#15123)
  • Prefer parenthesizing the assert message over breaking the assertion expression (#9457)
  • Automatically parenthesize over-long if guards in match case clauses (#13513)
  • More consistent formatting for match case patterns (#6933)
  • Avoid unnecessary parentheses around return type annotations (#13381)

... (truncated)

Changelog

Sourced from ruff's changelog.

0.9.0

Check out the blog post for a migration guide and overview of the changes!

Breaking changes

Ruff now formats your code according to the 2025 style guide. As a result, your code might now get formatted differently. See the formatter section for a detailed list of changes.

This release doesn’t remove or remap any existing stable rules.

Stabilization

The following rules have been stabilized and are no longer in preview:

The following behaviors have been stabilized:

The following fixes or improvements to fixes have been stabilized:

Formatter

This release introduces the new 2025 stable style (#13371), stabilizing the following changes:

  • Format expressions in f-string elements (#7594)
  • Alternate quotes for strings inside f-strings (#13860)
  • Preserve the casing of hex codes in f-string debug expressions (#14766)
  • Choose the quote style for each string literal in an implicitly concatenated f-string rather than for the entire string (#13539)
  • Automatically join an implicitly concatenated string into a single string literal if it fits on a single line (#9457)
  • Remove the ISC001 incompatibility warning (#15123)
  • Prefer parenthesizing the assert message over breaking the assertion expression (#9457)
  • Automatically parenthesize over-long if guards in match case clauses (#13513)
  • More consistent formatting for match case patterns (#6933)
  • Avoid unnecessary parentheses around return type annotations (#13381)
  • Keep the opening parentheses on the same line as the if keyword for comprehensions where the condition has a leading comment (#12282)

... (truncated)

Commits
  • d0b2bbd Release 0.9.0 (#15371)
  • 8628f16 [ruff] Stop parsing diagnostics from other sources for code action requests...
  • 8bc11c4 [flake8-django] Recognize other magic methods (DJ012) (#15365)
  • bf5b0c2 [red-knot] Minor refactor of red_knot_vendored/build.rs (#15372)
  • 097aa04 [red-knot] Typeshed patching: use build.rs instead of workflow (#15370)
  • f706c3f Add f-string formatting to the docs (#15367)
  • 29f6653 [ruff] Stabilize useless-if-else (RUF034) (#15351)
  • d645525 [pylint]: Stabilize boolean-chained-comparison (PLR1716) (#15354)
  • 6dcf7b3 [ruff] Stabilize post-init-default (RUF033) (#15352)
  • 943d4fc Update formatter preview documentation (#15349)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot
Bump ruff from 0.8.1 to 0.9.0
bacbf31 
Bumps [ruff](https://github.com/astral-sh/ruff) from 0.8.1 to 0.9.0.
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.8.1...0.9.0)

---
updated-dependencies:
- dependency-name: ruff
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Jan 10, 2025
@dependabot dependabot bot mentioned this pull request Jan 10, 2025
Closed
@dryrunsecurity DryRunSecurity
Copy link

DryRun Security Summary

The pull request updates the Ruff linter package from version 0.8.1 to 0.9.0 in the requirements-lint.txt file, which appears to be a routine dependency update without immediate security concerns.

Expand for full summary

Summary:

The proposed changes in this pull request involve updating the ruff package version from 0.8.1 to 0.9.0 in the requirements-lint.txt file. Ruff is a Python linter, which is a tool used to analyze code and identify potential issues, such as style, syntax, and code quality problems. From an application security perspective, this update does not appear to introduce any immediate security concerns, as linter tools like Ruff are typically used to improve code quality and maintainability rather than directly impacting the application's security posture.

However, it is always recommended to review the release notes or changelog of any dependency updates to ensure that there are no known security vulnerabilities or breaking changes that could impact the application. In this case, it would be prudent to review the Ruff release notes for version 0.9.0 to understand any changes or improvements that may have been made, and how they could affect the project. Overall, this code change appears to be a routine update to a development dependency and does not raise any significant security concerns, as long as the update is tested and verified to not introduce any regressions or unexpected behavior.

Files Changed:

  • requirements-lint.txt: The primary change in this file is an update to the ruff package version from 0.8.1 to 0.9.0. Ruff is a Python linter, which is a tool used to analyze code and identify potential issues, such as style, syntax, and code quality problems.

Code Analysis

We ran 9 analyzers against 1 file and 0 analyzers had findings. 9 analyzers had no findings.

View PR in the DryRun Dashboard.

@kiblik kiblik mentioned this pull request Jan 10, 2025
Open
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
dependencies Pull requests that update a dependency file python Pull requests that update Python code
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
0 participants