Skip to content

Bump ruff from 0.15.18 to 0.16.1 - #233

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/ruff-0.16.0
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/ruff-0.16.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 1, 2026 •

Copy link
Copy Markdown
Contributor

Bumps ruff from 0.15.18 to 0.16.1.

Release notes

Sourced from ruff's releases.

0.16.1

Release Notes

Released on 2026-07-30.

Preview features

  • Add an option to opt out of human-readable names (#27160)
  • [flake8-pytest-style] Make fixes safe by default and unsafe only when comments are present (PT018) (#27201)
  • [pyupgrade] Skip fix when a defaulted TypeVar precedes a non-defaulted one (UP040, UP046, UP047) (#27133)
  • [ruff] Fix false positive with unpacked arguments (RUF065) (#26959)

Bug fixes

  • Bump gen-lsp-types to gracefully handle unknown enumeration values in LSP messages (#27230)
  • [flake8-bugbear] Mark range as immutable (B008) (#27247)
  • [flake8-comprehensions] NFKC-normalize keyword names in C408 fix (#26813)
  • [flake8-return] Fix false positive when variable is read in finally clause (RET504) (#25441)
  • [pydocstyle] Skip section detection inside RST directive bodies (D214, D405, D413) (#23635)
  • [refurb] Parenthesize yield arguments in the FURB192 fix (#27192)

Rule changes

  • [flake8-pytest-style] Mark PT022 fixes as unsafe (#26440)
  • [refurb] Mark fixes that remove unknown separators as unsafe (FURB105) (#27200)

Server

  • Fix indexing of excluded nested Ruff workspaces (#27303)
  • Lint TOML files in the LSP (#26862)

Documentation

  • Cover pycon Markdown formatting (#27153)
  • [flake8-bandit] Document TYPE_CHECKING exception (S101) (#27004)
  • [flake8-import-conventions] Document that extend-aliases can override default aliases (#27191)
  • [pylint] Add missing fix safety gotchas for non-augmented-assignment (PLR6104) (#27250)

Other changes

  • Reduce syntax error noise by swallowing dedents like indents (#27170)
  • Vendor latest annotate-snippets (#27033)

Contributors

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.1

Released on 2026-07-30.

Preview features

  • Add an option to opt out of human-readable names (#27160)
  • [flake8-pytest-style] Make fixes safe by default and unsafe only when comments are present (PT018) (#27201)
  • [pyupgrade] Skip fix when a defaulted TypeVar precedes a non-defaulted one (UP040, UP046, UP047) (#27133)
  • [ruff] Fix false positive with unpacked arguments (RUF065) (#26959)

Bug fixes

  • Bump gen-lsp-types to gracefully handle unknown enumeration values in LSP messages (#27230)
  • [flake8-bugbear] Mark range as immutable (B008) (#27247)
  • [flake8-comprehensions] NFKC-normalize keyword names in C408 fix (#26813)
  • [flake8-return] Fix false positive when variable is read in finally clause (RET504) (#25441)
  • [pydocstyle] Skip section detection inside RST directive bodies (D214, D405, D413) (#23635)
  • [refurb] Parenthesize yield arguments in the FURB192 fix (#27192)

Rule changes

  • [flake8-pytest-style] Mark PT022 fixes as unsafe (#26440)
  • [refurb] Mark fixes that remove unknown separators as unsafe (FURB105) (#27200)

Server

  • Fix indexing of excluded nested Ruff workspaces (#27303)
  • Lint TOML files in the LSP (#26862)

Documentation

  • Cover pycon Markdown formatting (#27153)
  • [flake8-bandit] Document TYPE_CHECKING exception (S101) (#27004)
  • [flake8-import-conventions] Document that extend-aliases can override default aliases (#27191)
  • [pylint] Add missing fix safety gotchas for non-augmented-assignment (PLR6104) (#27250)

Other changes

  • Reduce syntax error noise by swallowing dedents like indents (#27170)
  • Vendor latest annotate-snippets (#27033)

Contributors

... (truncated)

Commits
  • 80790b3 Bump 0.16.1 (#27330)
  • 63830f3 [ty] Borrow from constraint set storage less often (#27328)
  • f40dca9 [ty] Preserve forwarded expanded-variadic diagnostic sources (#27266)
  • 0d80497 Lint TOML files in the LSP (#26862)
  • d91586b Update prek dependencies (#27293)
  • 7da4b8b [ty] Respect bounds and constraints in generic materializations (#27228)
  • b20daf7 [ty] refactor: add helper function to send partial results (#27249)
  • 4d4c8fa [ty] Emit diagnostic when specializing a non-generic class (#26883)
  • 7c3e2db [ty] Fix enum class container assignability (#27318)
  • d5ef97f [flake8-return] Fix false positive when variable is read in finally claus...
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Aug 1, 2026
@rtibblesbot

rtibblesbot commented Aug 1, 2026 •

Copy link
Copy Markdown
Contributor

🔵 Review posted

Last updated: 2026-08-01 01:01 UTC

@rtibblesbot rtibblesbot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

PR #233 — dependency review: ruff 0.15.18 → 0.16.0, dev-only ([dependency-groups].dev), lockfile-only diff (21/21 lines in the ruff block, no new transitive deps).

Semver risk: 0.x minor — breaking under ruff's own versioning.

Breaking changes: the headline one is the default rule set expanding 59 → 413 rules. It does not apply here: pyproject.toml sets select = ["E", "F", "W", "C90", "I"], so defaults are never consulted, and the 18 rules dropped from defaults (E401, E402, E711, E712, E741, F403, F405, …) are still covered by the explicit E/F selectors. Also new: ruff format now formats Python code blocks in Markdown by default (0.16.0 walks 45 files vs 0.15.18's 42 — CHANGELOG.md, README.md, docs/README.md; all already conformant), and ruff: ignore comments (additive, unused here). No removed config options, no target-version impact.

Security fixes: none. Peer/transitive changes: none — ruff ships dependency-free wheels.

Compatibility: verified locally against this branch — ruff@0.16.0 check → all checks passed; ruff@0.16.0 format --check → 45 files already formatted. No code changes required.

CI: failing, but not from this bump. The Linting workflow fails on the rebuild-from-specs hook regenerating js/package.json 0.2.18 → 0.2.19 (setuptools-scm resolves a post-tag dev version on PR branches). All ruff-driven hooks passed in the same run. The identical failure reproduces on PR #230, which touches no Python tooling at all, and on #231/#232; main was last green at 3dc6503. Needs a separate fix (tag the release, or make version regeneration tolerate dev versions), not one inside this dependabot PR. Python tests was still queued at review time — worth a glance before merge.

Follow-up (out of scope): .pre-commit-config.yaml pins astral-sh/ruff-pre-commit at v0.15.7 and dependabot.yml registers no pre-commit ecosystem, so this bump only reaches make build — the hooks that actually gate CI stay on 0.15.7. Pre-existing skew, worth its own issue.

COMMENT rather than APPROVE solely because CI is red.


@rtibblesbot's comments are generated by an LLM, and should be evaluated accordingly

How was this generated?

Ran a dependency-update review pipeline over the version bump:

  • Classified the bump by semver (patch / minor / major) and dependency type (production vs. development)
  • Extracted the changelog and release notes across the version range
  • Assessed compatibility with this project's usage and whether any code changes are required
  • Treated CI as the primary safety net
  • Scaled the review depth to the update's risk
  • Chose the verdict from semver risk, changelog findings, and CI status

@rtibbles

Copy link
Copy Markdown
Member

@dependabot rebase

Bumps [ruff](https://github.com/astral-sh/ruff) from 0.15.18 to 0.16.1.
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.15.18...0.16.1)

---
updated-dependencies:
- dependency-name: ruff
  dependency-version: 0.16.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title Bump ruff from 0.15.18 to 0.16.0 Bump ruff from 0.15.18 to 0.16.1 Aug 11, 2026
@dependabot
dependabot Bot force-pushed the dependabot/uv/ruff-0.16.0 branch from db0b400 to a194c04 Compare August 11, 2026 18:40
@dependabot @github

dependabot Bot commented on behalf of github Sep 1, 2026

Copy link
Copy Markdown
Contributor Author

Superseded by #236.

@dependabot dependabot Bot closed this Sep 1, 2026
@dependabot
dependabot Bot deleted the dependabot/uv/ruff-0.16.0 branch September 1, 2026 00:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants