Skip to content

deps: bump ruff from 0.16.3 to 0.16.4 - #43

Merged
helebest merged 2 commits into
mainfrom
dependabot/uv/ruff-0.16.4
Aug 24, 2026
Merged

deps: bump ruff from 0.16.3 to 0.16.4#43
helebest merged 2 commits into
mainfrom
dependabot/uv/ruff-0.16.4

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 24, 2026

Copy link
Copy Markdown
Contributor

Bumps ruff from 0.16.3 to 0.16.4.

Release notes

Sourced from ruff's releases.

0.16.4

Release Notes

Released on 2026-08-20.

Preview features

  • [flake8-use-pathlib] Add autofix for PTH116 (#26460)
  • [refurb] Restrict delete-full-slice to lists (FURB131) (#27711)
  • [refurb] Skip FURB101 and FURB103 when the open argument is a file descriptor (#27643)

Bug fixes

  • Fix InvalidInstruction on Windows CPUs that do not support POPCNT (#27803)
  • [pyflakes] Emit semantic syntax errors in string type definitions as F722 (#27835)
  • [pylint] Allow os._exit imports in import-private-name (PLC2701) (#27738)

Rule changes

  • [syntax-errors] Align mixed t-string/bytes error message with CPython 3.14 (#27766)
  • [ruff] Add ctypes.LittleEndianStructure and related types to existing exception (RUF012) (#27753)
  • [syntax-errors] Detect duplicate keyword arguments (#17804)
  • [syntax-errors] Detect parameters declared nonlocal (#27628)

Server

  • Offer display-only fixes and mark safe fixes preferred (#27807)
  • Support pull diagnostics for notebook cells (#27779)

Documentation

  • Add default indicator to rules table (#27724)
  • Fix broken link to Python docs (#27757)

Other changes

  • Fix s390x stacker assembly in release builds (#27776)
  • Guarantee minimum stack size when parsing a module, standalone expression, and suites (#25464)
  • Reduce configuration deserialization code size (#27924)
  • Check packed AST index bounds (#27849)

Contributors

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.4

Released on 2026-08-20.

Preview features

  • [flake8-use-pathlib] Add autofix for PTH116 (#26460)
  • [refurb] Restrict delete-full-slice to lists (FURB131) (#27711)
  • [refurb] Skip FURB101 and FURB103 when the open argument is a file descriptor (#27643)

Bug fixes

  • Fix InvalidInstruction on Windows CPUs that do not support POPCNT (#27803)
  • [pyflakes] Emit semantic syntax errors in string type definitions as F722 (#27835)
  • [pylint] Allow os._exit imports in import-private-name (PLC2701) (#27738)

Rule changes

  • [syntax-errors] Align mixed t-string/bytes error message with CPython 3.14 (#27766)
  • [ruff] Add ctypes.LittleEndianStructure and related types to existing exception (RUF012) (#27753)
  • [syntax-errors] Detect duplicate keyword arguments (#17804)
  • [syntax-errors] Detect parameters declared nonlocal (#27628)

Server

  • Offer display-only fixes and mark safe fixes preferred (#27807)
  • Support pull diagnostics for notebook cells (#27779)

Documentation

  • Add default indicator to rules table (#27724)
  • Fix broken link to Python docs (#27757)

Other changes

  • Fix s390x stacker assembly in release builds (#27776)
  • Guarantee minimum stack size when parsing a module, standalone expression, and suites (#25464)
  • Reduce configuration deserialization code size (#27924)
  • Check packed AST index bounds (#27849)

Contributors

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot
deps: bump ruff from 0.16.3 to 0.16.4
31f6d4a 
Bumps [ruff](https://github.com/astral-sh/ruff) from 0.16.3 to 0.16.4.
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.16.3...0.16.4)

---
updated-dependencies:
- dependency-name: ruff
  dependency-version: 0.16.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Aug 24, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: deps. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@helebest Claude

helebest commented Aug 24, 2026

Copy link
Copy Markdown
Contributor

Automated review: deps: bump ruff from 0.16.3 to 0.16.4

Step 1 — Code review

  • Consistency: PR description matches the diff — the only change is uv.lock re-pinning ruff from 0.16.3 to 0.16.4 (sdist/wheel URLs + hashes). No other files touched.
  • Correctness: pyproject.toml already constrains ruff>=0.16.3, so 0.16.4 satisfies the existing range; no manifest change was needed. Purely a lockfile update, no source or config changes.
  • Conventions: Matches repo convention of dependency bumps living in uv.lock only when the version range already covers the new version.
  • Security: Reviewed ruff's 0.16.4 release notes/changelog — bug fixes (Windows POPCNT crash, syntax-error detection), a few preview-rule tweaks, and doc/server fixes. No CVEs or security advisories associated with this release, and no behavior change affects dikw-plugins since it's a dev-only lint/format tool, not a runtime dependency.
  • Effectiveness: Achieves its stated purpose — picks up the patch release.
  • Test coverage: N/A — dev-tooling version bump with no application code change; no new tests required.

Step 2 — Regression verification
Ran locally against the PR branch:

  • uv sync --all-packages — resolves cleanly, ruff==0.16.4 installed.
  • uv run ruff check . — All checks passed! (no new lint violations surfaced under 0.16.4).
  • uv run pytest -q — full workspace suite passes (135 passed, 0 failed).

No regressions found.

Step 3 — CI
Monitoring the PR's CI checks (test (3.12), test (3.13), analyze) until green.

Generated by Claude Code

@helebest
helebest merged commit bd7344b into main Aug 24, 2026
4 checks passed
@helebest
helebest deleted the dependabot/uv/ruff-0.16.4 branch August 24, 2026 23:19
@helebest Claude

helebest commented Aug 24, 2026

Copy link
Copy Markdown
Contributor

Step 3 — CI: All checks passed on the up-to-date branch (CodeQL, analyze, test (3.12), test (3.13)). ✅

Step 4 — Merge: Squash-merged into main.

Generated by Claude Code

@helebest helebest mentioned this pull request Aug 24, 2026
Merged
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@helebest