Skip to content

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Jun 22, 2023

Bumps ruff from 0.0.257 to 0.0.274.

Release notes

Sourced from ruff's releases.

v0.0.274

What's Changed

Follow-up release to v0.0.273 to fix a panic in cache accesses.

Bug Fixes

Full Changelog: astral-sh/ruff@v0.0.273...v0.0.274

v0.0.273

What's Changed

Highlights include:

  • Autofix capabilities for rules like flake8-import-conventions, which require symbol renames across a file.
  • Significant decrease in Ruff's cache size (e.g., a ~50% decrease for FastAPI).
  • Dozens and dozens of bug fixes + performance improvements.

Rules

Settings

... (truncated)

Changelog

Sourced from ruff's changelog.

Breaking Changes

0.0.268

The keep-runtime-typing setting has been removed (#4427)

Enabling the keep-runtime-typing option, located under the pyupgrade section, is equivalent to ignoring the UP006 and UP007 rules via Ruff's standard ignore mechanism. As there's no need for a dedicated setting to disable these rules, the keep-runtime-typing option has been removed.

0.0.267

update-check is no longer a valid configuration option (#4313)

The update-check functionality was deprecated in #2530, in that the behavior itself was removed, and Ruff was changed to warn when that option was enabled.

Now, Ruff will throw an error when update-check is provided via a configuration file (e.g., update-check = false) or through the command-line, since it has no effect. Users should remove this option from their configuration.

0.0.265

--fix-only now exits with a zero exit code, unless --exit-non-zero-on-fix is specified (#4146)

Previously, --fix-only would exit with a non-zero exit code if any fixes were applied. This behavior was inconsistent with --fix, and further, meant that --exit-non-zero-on-fix was effectively ignored when --fix-only was specified.

Now, --fix-only will exit with a zero exit code, unless --exit-non-zero-on-fix is specified, in which case it will exit with a non-zero exit code if any fixes were applied.

0.0.260

Fixes are now represented as a list of edits (#3709)

Previously, Ruff represented each fix as a single edit, which prohibited Ruff from automatically fixing violations that required multiple edits across a file. As such, Ruff now represents each fix as a list of edits.

This primarily affects the JSON API. Ruff's JSON representation used to represent the fix field as a single edit, like so:

{
    "message": "Remove unused import: `sys`",
    "content": "",
    "location": {"row": 1, "column": 0},
    "end_location": {"row": 2, "column": 0}
</tr></table> 

... (truncated)

Commits
  • a332f07 Checkout repo to support release tag validation (#5238)
  • e0339b5 Bump version to 0.0.274 (#5230)
  • 07b6b74 Move copyright rules to flake8_copyright module (#5236)
  • 1db7d9e Avoid erroneous RUF013 violations for quoted annotations (#5234)
  • 621e9ac Use package roots rather than package members for cache initialization (#5233)
  • f9f77cf Revert change to RUF010 to remove unnecessary str calls (#5232)
  • 1a2bd98 Avoid .unwrap() on cache access (#5229)
  • 4717d07 Complete flake8-debugger documentation (#5223)
  • 07409ce Fixed typo in numpy deprecated type alias rule documentation (#5224)
  • 2c0ec97 Use cpython with fuzzer corpus (#5183)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [ruff](https://github.com/astral-sh/ruff) from 0.0.257 to 0.0.274.
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/BREAKING_CHANGES.md)
- [Commits](astral-sh/ruff@v0.0.257...v0.0.274)

---
updated-dependencies:
- dependency-name: ruff
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Jun 22, 2023
@dependabot @github
Copy link
Author

dependabot bot commented on behalf of github Jun 23, 2023

Superseded by #25.

@dependabot dependabot bot closed this Jun 23, 2023
@dependabot dependabot bot deleted the dependabot/pip/ruff-0.0.274 branch June 23, 2023 00:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant