Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Aug 15, 2025

Bumps ruff from 0.5.7 to 0.12.9.

Release notes

Sourced from ruff's releases.

0.12.9

Release Notes

Preview features

  • [airflow] Add check for airflow.secrets.cache.SecretCache (AIR301) (#17707)
  • [ruff] Offer a safe fix for multi-digit zeros (RUF064) (#19847)

Bug fixes

  • [flake8-blind-except] Fix BLE001 false-positive on raise ... from None (#19755)
  • [flake8-comprehensions] Fix false positive for C420 with attribute, subscript, or slice assignment targets (#19513)
  • [flake8-simplify] Fix handling of U+001C..U+001F whitespace (SIM905) (#19849)

Rule changes

  • [pylint] Use lowercase hex characters to match the formatter (PLE2513) (#19808)

Documentation

  • Fix lint.future-annotations link (#19876)

Other changes

  • Build riscv64 binaries for release (#19819)
  • Add rule code to error description in GitLab output (#19896)

Contributors

... (truncated)

Changelog

Sourced from ruff's changelog.

0.12.9

Preview features

  • [airflow] Add check for airflow.secrets.cache.SecretCache (AIR301) (#17707)
  • [ruff] Offer a safe fix for multi-digit zeros (RUF064) (#19847)

Bug fixes

  • [flake8-blind-except] Fix BLE001 false-positive on raise ... from None (#19755)
  • [flake8-comprehensions] Fix false positive for C420 with attribute, subscript, or slice assignment targets (#19513)
  • [flake8-simplify] Fix handling of U+001C..U+001F whitespace (SIM905) (#19849)

Rule changes

  • [pylint] Use lowercase hex characters to match the formatter (PLE2513) (#19808)

Documentation

  • Fix lint.future-annotations link (#19876)

Other changes

  • Build riscv64 binaries for release (#19819)
  • Add rule code to error description in GitLab output (#19896)

0.12.8

Preview features

  • [flake8-use-pathlib] Expand PTH201 to check all PurePath subclasses (#19440)

Bug fixes

  • [flake8-blind-except] Change BLE001 to correctly parse exception tuples (#19747)
  • [flake8-errmsg] Exclude typing.cast from EM101 (#19656)
  • [flake8-simplify] Fix raw string handling in SIM905 for embedded quotes (#19591)
  • [flake8-import-conventions] Avoid false positives for NFKC-normalized __debug__ import aliases in ICN001 (#19411)
  • [isort] Fix syntax error after docstring ending with backslash (I002) (#19505)
  • [pylint] Mark PLC0207 fixes as unsafe when *args unpacking is present (#19679)
  • [pyupgrade] Prevent infinite loop with I002 (UP010, UP035) (#19413)
  • [ruff] Parenthesize generator expressions in f-strings (RUF010) (#19434)

Rule changes

  • [eradicate] Don't flag pyrefly pragmas as unused code (ERA001) (#19731)

Documentation

  • Replace "associative" with "commutative" in docs for RUF036 (#19706)

... (truncated)

Commits
  • ef42246 Bump 0.12.9 (#19917)
  • dc2e8ab [ty] support kw_only=True for dataclass() and field() (#19677)
  • 9aaa82d Feature/build riscv64 bin (#19819)
  • 3288ac2 [ty] Add caching to CodeGeneratorKind::matches() (#19912)
  • 1167ed6 [ty] Rename functionArgumentNames to callArgumentNames inlay hint setting...
  • 2ee47d8 [ty] Default ty.inlayHints.* server settings to true (#19910)
  • d324ced [ty] Remove py-fuzzer skips for seeds that are no longer slow (#19906)
  • 5a570c8 [ty] fix deferred name loading in PEP695 generic classes/functions (#19888)
  • baadb5a [ty] Add some additional type safety to CycleDetector (#19903)
  • df0648a [flake8-blind-except] Fix BLE001 false-positive on raise ... from None ...
  • Additional commits viewable in compare view

Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Important

Bump ruff version in pyproject.toml to >=0.1.8,<0.13.0 with new features, bug fixes, and rule changes.

  • Dependencies:
    • Bump ruff version in pyproject.toml from >=0.1.8,<0.6.0 to >=0.1.8,<0.13.0.
  • Features:
    • Add check for airflow.secrets.cache.SecretCache (AIR301).
    • Offer a safe fix for multi-digit zeros (RUF064).
  • Bug Fixes:
    • Fix BLE001 false-positive on raise ... from None.
    • Fix false positive for C420 with attribute, subscript, or slice assignment targets.
    • Fix handling of U+001C..U+001F whitespace (SIM905).
  • Rule Changes:
    • Use lowercase hex characters to match the formatter (PLE2513).
  • Misc:
    • Build riscv64 binaries for release.
    • Add rule code to error description in GitLab output.

This description was created by Ellipsis for 222d093. You can customize this summary. It will automatically update as commits are pushed.

Disclaimer: Experimental PR review

Greptile Summary

This PR updates the Ruff linter dependency from version 0.5.7 to 0.12.9 in the pyproject.toml file. This is a significant version jump spanning 7 major versions (0.6.x through 0.12.x), bringing numerous bug fixes, performance improvements, new linting rules, and enhancements to the code formatter and linter.

The change modifies the version constraint from >=0.1.8,<0.6.0 to >=0.1.8,<0.13.0, allowing the project to use the latest Ruff version while preventing automatic updates to the next major version (0.13.x). This approach provides flexibility for receiving patch and minor version updates while maintaining stability.

The project's existing Ruff configuration is minimal and conservative, which reduces the risk of this update causing issues. The ruff.toml file only enables docstring rules (D and D401) for local development and excludes API files, while the CI configuration (ci.ruff.toml) likely has even fewer rules enabled. The .pre-commit-config.yaml shows the project uses Ruff version 0.3.2 in pre-commit hooks, which is separate from the main dependency.

This upgrade brings the project up to date with the latest linting capabilities, bug fixes, and performance improvements. Since the project uses a conservative rule selection approach, most new rules introduced in the intervening versions won't affect the codebase unless explicitly enabled in the configuration files.

Confidence score: 4/5

  • This PR is generally safe to merge with low risk due to conservative Ruff configuration
  • Score reflects the significant version jump but mitigated by minimal rule selection in project configuration
  • Pay close attention to CI pipeline results and any new linting errors that may surface

Bumps [ruff](https://github.com/astral-sh/ruff) from 0.5.7 to 0.12.9.
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.5.7...0.12.9)

---
updated-dependencies:
- dependency-name: ruff
  dependency-version: 0.12.9
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Aug 15, 2025
Copy link
Contributor

@greptile-apps greptile-apps bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

1 file reviewed, no comments

Edit Code Review Bot Settings | Greptile

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Aug 22, 2025

Superseded by #1307.

@dependabot dependabot bot closed this Aug 22, 2025
@dependabot dependabot bot deleted the dependabot/pip/ruff-0.12.9 branch August 22, 2025 05:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant