chore(deps-dev): bump ruff from 0.15.22 to 0.16.2 - #259
dependabot[bot] wants to merge 1 commit into
Conversation
Bumps [ruff](https://github.com/astral-sh/ruff) from 0.15.22 to 0.16.2. - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.15.22...0.16.2) --- updated-dependencies: - dependency-name: ruff dependency-version: 0.16.2 dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
![claude[bot]](https://avatars.githubusercontent.com/in/1236702?s=60&v=4){kind=small}
There was a problem hiding this comment.
LGTM — routine dev-dependency bump.
Extended reasoning...
Overview
Single-file change to requirements-dev.txt, a pip-compile-generated lockfile. It bumps ruff (a dev-only linter/formatter) from 0.15.22 to 0.16.2, a minor version bump with only bug fixes and server (LSP) changes per the changelog. No other pins were touched.
Security risks
None. ruff is a dev/CI-only tool, not a runtime dependency shipped to users, and does not touch auth, crypto, or data handling. Version comes from Dependabot against the official PyPI/GitHub release.
Level of scrutiny
Minimal scrutiny is appropriate: this is a mechanical, autogenerated lockfile diff for a dev tool, not application logic. No production code paths are affected.
Other factors
No prior reviews on this PR. Change is self-contained and low risk; nothing here warrants human review.
|
OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting If you change your mind, just re-open this PR and I'll resolve any conflicts on it. |
1 participant
Bumps ruff from 0.15.22 to 0.16.2.
Release notes
Sourced from ruff's releases.
... (truncated)
Changelog
Sourced from ruff's changelog.
... (truncated)
Commits
5b48a04Bump 0.16.2 (#27555)1b9e5fcUpdate Swatinem/rust-cache action to v2.9.2 (#27568)c4e86fc[ty] Add helper extension methods for half-range and equality constraints (#2...17a00de[ty] Reuse primer commands in memory reports (#27553)6ea296b[ty] Normalize type labels in structured docstrings (#26923)2fc445f[ty] Diagnose invalid getattr calls (#27502)22c7823[ty] Enable (but downrank) auto-import completion suggestions from stub-only ...05160d5[ty] Diagnose invalid descriptor__get__calls (#27400)baea3d0[ty] Expose strict analysis options in the playground (#27543)c88946e[ty] Bump ecosystem-analyzer for strict project settings (#27542)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)