Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update dependency ruff from 0.4.8 to v0.4.9 (requirements-lint.txt) #10406

Merged
merged 1 commit into from
Jun 14, 2024

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Jun 14, 2024

Mend Renovate

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
ruff (source, changelog) ==0.4.8 -> ==0.4.9 age adoption passing confidence

Release Notes

astral-sh/ruff (ruff)

v0.4.9

Compare Source

Preview features
  • [pylint] Implement consider-dict-items (C0206) (#​11688)
  • [refurb] Implement repeated-global (FURB154) (#​11187)
Rule changes
  • [pycodestyle] Adapt fix for E203 to work identical to ruff format (#​10999)
Formatter
  • Fix formatter instability for lines only consisting of zero-width characters (#​11748)
Server
  • Add supported commands in server capabilities (#​11850)
  • Use real file path when available in ruff server (#​11800)
  • Improve error message when a command is run on an unavailable document (#​11823)
  • Introduce the ruff.printDebugInformation command (#​11831)
  • Tracing system now respects log level and trace level, with options to log to a file (#​11747)
CLI
  • Handle non-printable characters in diff view (#​11687)
Bug fixes
  • [refurb] Avoid suggesting starmap when arguments are used outside call (FURB140) (#​11830)
  • [flake8-bugbear] Avoid panic in B909 when checking large loop blocks (#​11772)
  • [refurb] Fix misbehavior of operator.itemgetter when getter param is a tuple (FURB118) (#​11774)

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

@renovate renovate bot added the dependencies Pull requests that update a dependency file label Jun 14, 2024
Copy link

dryrunsecurity bot commented Jun 14, 2024

Hi there 👋, @DryRunSecurity here, below is a summary of our analysis and findings.

DryRun Security Status Findings
Configured Codepaths Analyzer 0 findings
IDOR Analyzer 0 findings
Sensitive Files Analyzer 0 findings
SQL Injection Analyzer 0 findings
Authn/Authz Analyzer 0 findings
Secrets Analyzer 0 findings

Note

🟢 Risk threshold not exceeded.

Change Summary (click to expand)

The following is a summary of changes in this pull request made by me, your security buddy 🤖. Note that this summary is auto-generated and not meant to be a definitive list of security issues but rather a helpful summary from a security perspective.

Summary:

The code changes in this GitHub Pull Request are focused on updating the version of the ruff Python package in the requirements-lint.txt file. This is a minor version update, from 0.4.8 to 0.4.9, which typically includes bug fixes and small improvements rather than major new features or functionality.

From an application security perspective, this change does not raise any immediate concerns. Version updates for Python packages are common and often include security fixes, so this change is generally benign. However, it's always a good practice to review the release notes for the new version of ruff to ensure there are no known security vulnerabilities that have been addressed. Additionally, it's important to ensure that the application's dependencies are regularly updated to the latest secure versions, as this helps mitigate the risk of known vulnerabilities being exploited in the application.

Files Changed:

  • requirements-lint.txt: This file has been updated to use the ruff package version 0.4.9 instead of the previous version 0.4.8. This is a minor version update that likely includes bug fixes and small improvements.

Powered by DryRun Security

Copy link
Contributor

@mtesauro mtesauro left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Approved

@mtesauro mtesauro merged commit f4c99b9 into dev Jun 14, 2024
125 checks passed
@renovate renovate bot deleted the renovate/ruff-0.x branch June 14, 2024 21:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants