Skip to content

chore(deps-dev): bump ruff from 0.16.6 to 0.16.7 in /plugins/codex-security - #967

Merged
mldangelo-oai merged 2 commits into
mainfrom
dependabot/pip/plugins/codex-security/ruff-0.16.7
Sep 18, 2026
Merged

mldangelo-oai merged 2 commits into
mainfrom
dependabot/pip/plugins/codex-security/ruff-0.16.7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 18, 2026 •

Copy link
Copy Markdown
Contributor

Summary

Update the plugin's Ruff development dependency to 0.16.7 and keep its enforced version in sync so the plugin source checks can run.

Changes

  • Bump the Ruff test dependency from 0.16.6 to 0.16.7.
  • Update [tool.ruff].required-version to the same exact version. Dependabot changed only the dependency, leaving Ruff unable to load this configuration in CI.

Testing

  • Reproduced the failure before the fix with Ruff 0.16.7: the configuration still required 0.16.6.
  • python -m ruff check --config plugins/codex-security/pyproject.toml plugins/codex-security: passed.
  • python -m ruff format --check --config plugins/codex-security/pyproject.toml plugins/codex-security: passed; 139 files already formatted.
  • pnpm --dir sdk/typescript run build:ci: passed.
  • node .github/scripts/check_plugin_source_compatibility.mjs: passed.
  • node --test .github/scripts/test_check_plugin_source_compatibility.mjs: nine passed.

Risk and rollout

This updates a pinned development tool and its configuration. It does not change the plugin runtime, lint rule selection, or source formatting.

Public disclosure review

  • No customer, partner, prospect, or user identities, data, or identifying details are included.
  • No credentials, personal data, private source, scan findings, or nonpublic links or tickets are included.
  • I reviewed the branch name, title, description, commits, changes, comments, logs, screenshots, attachments, and links for public disclosure.

Bumps [ruff](https://github.com/astral-sh/ruff) from 0.16.6 to 0.16.7.
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.16.6...0.16.7)

---
updated-dependencies:
- dependency-name: ruff
  dependency-version: 0.16.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Sep 18, 2026
@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Sep 18, 2026 •

Copy link
Copy Markdown

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review ✅ Completed 2026-09-18T16:40:50.432173Z bbb6586 Manual request
🔒 Security Review ✅ Completed 2026-09-18T16:24:59.007629Z bbb6586 New commits
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

@mldangelo-oai

Copy link
Copy Markdown
Collaborator

@codex review the current head bbb6586.

@chatgpt-codex-connector

Copy link
Copy Markdown

Codex Review: Didn't find any major issues. 🎉

Reviewed commit: bbb6586756

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

@mldangelo-oai
mldangelo-oai merged commit c74ff02 into main Sep 18, 2026
94 of 97 checks passed
@mldangelo-oai
mldangelo-oai deleted the dependabot/pip/plugins/codex-security/ruff-0.16.7 branch September 18, 2026 16:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant