Skip to content

deps: bump ruff from 0.16.2 to 0.17.2 - #594

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/ruff-0.16.10
Closed

deps: bump ruff from 0.16.2 to 0.17.2#594
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/ruff-0.16.10

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 5, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps ruff from 0.16.2 to 0.17.2.

Release notes

Sourced from ruff's releases.

0.17.2

Release Notes

Released on 2026-10-22.

Preview features

  • [complexity] Add unnecessary-regular-expression-compile (#25533)

Bug fixes

  • Avoid syntax errors for type variables with starred constraints (UP040, UP046, UP047, RUF053) (#28362)
  • [pydocstyle] Treat backslash-escaped *args and **kwargs as documented (D417) (#29536)
  • [pylint] Avoid false positive on starred elements (PLE0643) (#29483)
  • [pylint] Mark fixes unsafe when deleting comments (PLR5501, PLW0120) (#29414)
  • [pyupgrade] Mark fix unsafe when deleting comments (UP035) (#29413)

Performance

  • Avoid intermediate names in lint name resolution (#29506)
  • Prefilter bidirectional Unicode checks by UTF-8 leading bytes (#29561)
  • Share postfix parsing and reduce expression copies (#29480)

Configuration

  • [pylint] Add a configurable allowlist for magic-value-comparison (PLR2004) (#18961)

Documentation

  • Clarify documentation and correct stale guidance (#29374)
  • [pyupgrade] Remove mentions of variance related to fix safety (UP040, UP047) (#29592)

Contributors

Install ruff 0.17.2

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ruff/releases/download/0.17.2/ruff-installer.sh | sh
</tr></table>

... (truncated)

Changelog

Sourced from ruff's changelog.

0.17.2

Released on 2026-10-22.

Preview features

  • [complexity] Add unnecessary-regular-expression-compile (#25533)

Bug fixes

  • Avoid syntax errors for type variables with starred constraints (UP040, UP046, UP047, RUF053) (#28362)
  • [pydocstyle] Treat backslash-escaped *args and **kwargs as documented (D417) (#29536)
  • [pylint] Avoid false positive on starred elements (PLE0643) (#29483)
  • [pylint] Mark fixes unsafe when deleting comments (PLR5501, PLW0120) (#29414)
  • [pyupgrade] Mark fix unsafe when deleting comments (UP035) (#29413)

Performance

  • Avoid intermediate names in lint name resolution (#29506)
  • Prefilter bidirectional Unicode checks by UTF-8 leading bytes (#29561)
  • Share postfix parsing and reduce expression copies (#29480)

Configuration

  • [pylint] Add a configurable allowlist for magic-value-comparison (PLR2004) (#18961)

Documentation

  • Clarify documentation and correct stale guidance (#29374)
  • [pyupgrade] Remove mentions of variance related to fix safety (UP040, UP047) (#29592)

Contributors

0.17.1

Released on 2026-10-15.

Preview features

  • [pycodestyle] Don't treat None, True, or False as keywords (E271-E274) (#29322)

... (truncated)

Commits
  • 30516b4 Bump version to 0.17.2 (#29637)
  • 59a9e85 [ty] Generalize nested types in inferred return types (#29488)
  • 0d562aa [ty] Check inherited attribute conflicts (#28559)
  • 48dcdd0 [ty] Restrict range implications from gradual equivalence (#29577)
  • 734d75a [ty] Check for unsatisfiable bodies before existentially quantifying (#29504)
  • b0f9526 [ty] Preserve checks for recursive descriptor setter types (#29148)
  • 32869b4 Avoid creating deployments for automation jobs (#29626)
  • ec891ba Link the commit in pull request report footers (#29621)
  • 8958748 [ty] Publish ecosystem reports from GitHub Actions (#29609)
  • 01f5394 [ty] Publish typing conformance reports from GitHub Actions (#29608)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Oct 5, 2026
@dependabot dependabot Bot mentioned this pull request Oct 5, 2026
Closed
@claude

claude Bot commented Oct 5, 2026 •
edited
Loading

Copy link
Copy Markdown

Claude finished @dependabot[bot]'s task in 18s —— View job

Reviewing PR #594

  • Gather context (dependency bump: ruff 0.16.2 → 0.16.10, uv.lock only)
  • Verify diff is trivial
  • Submit verdict

Summary

Trivial diff: only uv.lock changed (21/-21 lines), bumping the ruff version from 0.16.2 to 0.16.10 — just version strings, sdist/wheel URLs, and hashes. No logic or config changes to review.

Verdict: ✅ Approved.

claude[bot]
claude Bot previously approved these changes Oct 5, 2026
View reviewed changes

@claude claude Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Trivial dependency bump (ruff 0.16.2 → 0.16.10), only uv.lock hashes/version changed, no logic changes.

@mashkovd

mashkovd commented Oct 29, 2026

Copy link
Copy Markdown
Member

@dependabot rebase

@dependabot
deps: bump ruff from 0.16.2 to 0.17.2
5c452b6 
Bumps [ruff](https://github.com/astral-sh/ruff) from 0.16.2 to 0.17.2.
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.16.2...0.17.2)

---
updated-dependencies:
- dependency-name: ruff
  dependency-version: 0.16.10
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title deps: bump ruff from 0.16.2 to 0.16.10 deps: bump ruff from 0.16.2 to 0.17.2 Oct 29, 2026
@dependabot
dependabot Bot force-pushed the dependabot/uv/ruff-0.16.10 branch from 7354f66 to 5c452b6 Compare October 29, 2026 20:32
@claude

claude Bot commented Oct 29, 2026 •
edited
Loading

Copy link
Copy Markdown

Claude encountered an error after 2s —— View job

I'll analyze this and get back to you.

@claude

claude Bot commented Oct 29, 2026 •
edited
Loading

Copy link
Copy Markdown

Claude encountered an error after 0s —— View job

I'll analyze this and get back to you.

@github-actions

github-actions Bot commented Oct 29, 2026

Copy link
Copy Markdown
Contributor

Claude review failed to complete on both tokens (see the run log; the 'Reviewer failure diagnostics' group in the review job says why). Re-trigger with @claude review once the underlying issue is resolved.

@mashkovd

mashkovd commented Oct 29, 2026

Copy link
Copy Markdown
Member

@claude review

@claude

claude Bot commented Oct 29, 2026 •
edited
Loading

Copy link
Copy Markdown

Claude finished @mashkovd's task in 17s —— View job

Review of PR #594 (commit 5c452b6)

  • Read the pinned diff
  • Check the version constraint in pyproject.toml
  • Submit verdict

Verdict: approved. This is a dependency bump with no logic change.

  • Only uv.lock changed: the ruff version, wheel and sdist URLs, and hashes.
  • pyproject.toml pins ruff~=0.16, which allows 0.17.2, so the lock is consistent with the declared constraint.
  • The PR title and body say 0.16.2 → 0.17.2, but the branch name (ruff-0.16.10) is stale from before the rebase. It is cosmetic only.
  • The lockfile revision also moved from 3 to 5, so the lock was regenerated by a newer uv. If CI or local tooling uses an older uv, uv sync may reject the lock. I couldn't check the uv version CI uses.
  • 0.17 is a minor bump, so it may enable new default lint rules. I couldn't run ruff here, so the required CI lint check will show whether anything new fires.

P1: 0, P2: 0, P3: 0.

claude[bot]
claude Bot approved these changes Oct 29, 2026
View reviewed changes

@claude claude Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Dependency bump (ruff 0.16.2 -> 0.17.2) in uv.lock only; pyproject's ruff~=0.16 allows it. No P1/P2 findings (0 P3).

@dependabot @github

dependabot Bot commented on behalf of github Oct 29, 2026

Copy link
Copy Markdown
Contributor Author

Superseded by #898.

@dependabot dependabot Bot closed this Oct 29, 2026
@dependabot
dependabot Bot deleted the dependabot/uv/ruff-0.16.10 branch October 29, 2026 20:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@claude claude[bot] claude[bot] approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@mashkovd