Bump isort from 7.0.0 to 8.0.0 by dependabot[bot] · Pull Request #80 · Senzing/mapper-npi

dependabot · 2026-03-13T13:13:08Z

Bumps isort from 7.0.0 to 8.0.0.

Release notes

8.0.0

Changes

Update CHANGELOG for version 8.0.0 (#2460) @DanielNoord

Fix edge case of __future__ import. (#2458) @skv0zsneg

Fix the Plone profile to be compatible with black (#2457) @ale-rt

typo fix (#2450) @jsta

Remove the setuptools plugin (#2427) @DanielNoord

Turn some warnings into errors in test suite (#2449) @DanielNoord

chore: replace black with ruff in clean.sh (#2448) @joao-faria-dev

feat!: remove old finders flag and legacy finder logic (#2446) @joao-faria-dev

Fix whitespace insensitive check triggering on tabs (#2437) @robsdedude

Fix line separator detection not considering form feed as white space (#2436) @robsdedude

Fix #1964: lines_before_import sometimes ignored (#1965) @robsdedude

Remove reference to 3.9 in README (#2434) @DanielNoord

🚀 Features

Ensure multiprocessing.Pool is always closed and joined (#2442) @DanielNoord

👷 Continuous Integration

Simplify CI by putting similar steps into a single action file (#2444) @DanielNoord

📦 Dependencies

Bump actions/checkout from 5 to 6 in the github-actions group (#2451) @dependabot[bot]

Bump astral-sh/setup-uv from 6 to 7 in the github-actions group (#2441) @dependabot[bot]

Changelog

Sourced from isort's changelog.

8.0.0 February 19 2026

Removed --old-finders and --magic-placement flags and old_finders configuration option. The legacy finder logic that relied on environment introspection has been removed (#2445) @joao-faria-dev

Update the plone profile to not clash with black (#2456) @ale-rt

6.1.0 October 1 2025

Add python 3.14 classifier and badge (#2409) @staticdev

Drop use of non-standard pkg_resources API (#2405) @dvarrazzo

6.0.1 Febuary 26 2025

Add OSError handling in find_imports_in_file (#2331) @kobarity

6.0.0 January 27 2025

Remove support for Python 3.8 (#2327) @DanielNoord

Python 3.13 support (#2306) @mayty

Speed up exists_case_sensitive calls (#2264) @correctmost

Ensure that split_on_trailing_comma works with as imports (#2340) @DanielNoord

Black profile: enable magic comma (#2236) @MrMino

Update line_length and single_line_exclusions in google profile (#2149) @jagapiou

Allow --diff to be used with --jobs (#2302) @mnakama

Fix wemake profile to have correct character limit (#2241) @sobolevn

Fix sort_reexports code mangling (#2283) @Helveg

Fix correct group by package tokenization (#2136) @glasnt

5.13.2 December 13 2023

Apply the bracket fix from issue #471 only for use_parentheses=True (#2184) @bp72

Confine pre-commit to stages (#2213) @davidculley

Fixed colors extras (#2212) @staticdev

5.13.1 December 11 2023

Fixed integration tests (#2208) @bp72

Fixed normalizing imports from more than one level of parent modules (issue/2152) (#2191) @bp72

Remove optional dependencies without extras (#2207) @staticdev

5.13.0 December 9 2023

Cleanup deprecated extras (#2089) @staticdev

Fixed #1989: settings lookup when working in stream based mode

Fixed 80 line length for wemake linter (#2183) @skatromb

Add support for Python 3.12 (#2175) @hugovk

Fixed: add newest version to pre-commit docs (#2190) @AzulGarza

Fixed assertions in test_git_hook (#2196) @mgorny

Removed check for include_trailing_comma for the Hanging Indent wrap mode (#2192) @bp72

Use the standard library tomllib on sufficiently new python (#2202) @eli-schwartz

Update pre-commit.md version number (#2197) @nicobako

... (truncated)

Commits

3459bde Merge pull request #2460 from PyCQA/DanielNoord-patch-1
6e70bb6 Update CHANGELOG for version 8.0.0
b0f2dab Merge pull request #2458 from skv0zsneg/issue/1882
313797b Fix lint.
7d3a6f5 Add ignore for cyclomatic complexity check.
6b9f895 Remove debug prints.
45f2497 Add tests for edge case future imports handler.
fe57bfd Add edge case future imports handler.
e8c127b Merge pull request #2457 from ale-rt/ale/2456/fix-plone-profile
293c201 Fix the Plone profile to be compatible with black
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Resolves #2460
Resolves #2458
Resolves #2457
Resolves #2450
Resolves #2427
Resolves #2449
Resolves #2448
Resolves #2446
Resolves #2437
Resolves #2436
Resolves #1964
Resolves #1965
Resolves #2434
Resolves #2442
Resolves #2444
Resolves #2451
Resolves #2441
Resolves #2445
Resolves #2456
Resolves #2409
Resolves #2405
Resolves #2331
Resolves #2327
Resolves #2306
Resolves #2264
Resolves #2340
Resolves #2236
Resolves #2149
Resolves #2302
Resolves #2241
Resolves #2283
Resolves #2136
Resolves #471
Resolves #2184
Resolves #2213
Resolves #2212
Resolves #2208
Resolves #2191
Resolves #2207
Resolves #2089
Resolves #1989
Resolves #2183
Resolves #2175
Resolves #2190
Resolves #2196
Resolves #2192
Resolves #2202
Resolves #2197

github-actions · 2026-03-13T13:13:56Z

🤖 Claude Code Review

Code Review

This PR bumps isort from 7.0.0 to 8.0.0 in development-requirements.txt.

Code Quality

✅ Style guide: Single-line change to a requirements file — no style concerns.
✅ No commented-out code
✅ Meaningful variable names: N/A
✅ DRY principle: N/A
✅ Defects: This is a major version bump (7.x → 8.x). Major version bumps can introduce breaking changes in behavior (import sorting rules, config options, CLI flags). If any CI configuration, pyproject.toml, .isort.cfg, or setup.cfg relies on isort 7.x-specific settings, those may behave differently or fail silently. Worth verifying isort 8.0.0 release notes for breaking changes before merging.
✅ No project CLAUDE.md found — nothing to evaluate.

Testing

✅ This is a dev tooling dependency (not a runtime dependency), so no unit/integration tests are expected for this change.
⚠️ Verify CI passes: As a major version bump, confirm that CI linting/formatting checks pass with isort 8.0.0 before merging.

Documentation

❌ CHANGELOG.md not updated: The CHANGELOG.md exists and tracks changes, but this dependency bump is not reflected in the [Unreleased] section. Dependency bumps that affect developer tooling should be noted.
✅ No README or API doc changes needed.

Security

✅ No hardcoded credentials
✅ No sensitive data
✅ No license files (.lic) or AQAAAD-prefixed strings

Summary

One issue to address:

CHANGELOG.md (CHANGELOG.md:9-11) — Add an entry under [Unreleased] for the isort version bump, e.g.:
```
- Bump isort from 7.0.0 to 8.0.0
```

Advisory: Since this is a major version bump, confirm isort 8.0.0 has no breaking changes affecting this project's import sorting configuration before merging.

Automated code review analyzing defects and coding standards

Bumps [isort](https://github.com/PyCQA/isort) from 7.0.0 to 8.0.0. - [Release notes](https://github.com/PyCQA/isort/releases) - [Changelog](https://github.com/PyCQA/isort/blob/main/CHANGELOG.md) - [Commits](PyCQA/isort@7.0.0...8.0.0) --- updated-dependencies: - dependency-name: isort dependency-version: 8.0.0 dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2026-03-13T13:15:54Z

🤖 Claude Code Review

PR Code Review: `isort` Bump 7.0.0 → 8.0.0

Summary: This is a single-line dependency version bump for isort in development-requirements.txt.

Code Quality

✅ Style guide — A single version bump in a requirements file; no code style concerns apply.
✅ No commented-out code — None present.
✅ Meaningful variable names — N/A.
✅ DRY principle — N/A.
✅ Defects / bugs / edge cases — No logic changes. However, isort 8.x is a major version bump and may introduce breaking changes to import sorting behavior. If CI passes (linting/formatting checks), this is safe to merge. Worth verifying that no existing source files would be reformatted differently under the new version.

Testing

✅ Unit/integration tests — No application logic changed; no new tests required.
✅ Test coverage — N/A for a dependency bump.

Documentation

❌ CHANGELOG.md not updated — The CHANGELOG.md exists (CHANGELOG.md:9) and has an [Unreleased] section, but this dependency bump is not reflected there. Dependency updates (especially major version bumps) should typically be noted. The entries currently in [Unreleased] appear to be placeholder text (Thing 5, Thing 4) suggesting the changelog may be a template that hasn't been maintained — but if the project convention is to track dependency changes, this should be updated.
✅ README / API docs — No changes needed for a dev-only dependency bump.
✅ Inline comments — N/A.
✅ Markdown formatting — N/A for this diff.

Security

✅ No hardcoded credentials — None.
✅ Input validation / error handling — N/A.
✅ No sensitive data in logs — N/A.
✅ No license files (.lic) checked in — None present in diff.

Summary

Category	Status
Code Quality	✅
Testing	✅
Documentation	⚠️ CHANGELOG not updated
Security	✅

Recommendation: Minor — consider adding an entry to `CHANGELOG.md` under `[Unreleased]` for the `isort` major version bump. Otherwise, this is a clean, minimal change appropriate for merging once CI validates compatibility.

Automated code review analyzing defects and coding standards

dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Mar 13, 2026

dependabot bot requested a review from a team as a code owner March 13, 2026 13:13

dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Mar 13, 2026

dependabot bot force-pushed the dependabot/pip/isort-8.0.0 branch from 473e143 to 8c5fdc6 Compare March 13, 2026 13:15

docktermj approved these changes Mar 13, 2026

View reviewed changes

docktermj merged commit 18a3b0d into main Mar 13, 2026
16 checks passed

docktermj deleted the dependabot/pip/isort-8.0.0 branch March 13, 2026 13:43

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump isort from 7.0.0 to 8.0.0#80

Bump isort from 7.0.0 to 8.0.0#80
docktermj merged 1 commit intomainfrom
dependabot/pip/isort-8.0.0

dependabot bot commented on behalf of github Mar 13, 2026 •

edited by github-actions bot

Loading

Uh oh!

github-actions bot commented Mar 13, 2026

Uh oh!

github-actions bot commented Mar 13, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot bot commented on behalf of github Mar 13, 2026 • edited by github-actions bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

8.0.0

Changes

🚀 Features

👷 Continuous Integration

📦 Dependencies

8.0.0 February 19 2026

6.1.0 October 1 2025

6.0.1 Febuary 26 2025

6.0.0 January 27 2025

5.13.2 December 13 2023

5.13.1 December 11 2023

5.13.0 December 9 2023

Uh oh!

github-actions bot commented Mar 13, 2026

🤖 Claude Code Review

Code Review

Code Quality

Testing

Documentation

Security

Summary

Advisory: Since this is a major version bump, confirm isort 8.0.0 has no breaking changes affecting this project's import sorting configuration before merging.

Uh oh!

github-actions bot commented Mar 13, 2026

🤖 Claude Code Review

PR Code Review: isort Bump 7.0.0 → 8.0.0

Code Quality

Testing

Documentation

Security

Summary

Recommendation: Minor — consider adding an entry to CHANGELOG.md under [Unreleased] for the isort major version bump. Otherwise, this is a clean, minimal change appropriate for merging once CI validates compatibility.

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot bot commented on behalf of github Mar 13, 2026 •

edited by github-actions bot

Loading

PR Code Review: `isort` Bump 7.0.0 → 8.0.0

Recommendation: Minor — consider adding an entry to `CHANGELOG.md` under `[Unreleased]` for the `isort` major version bump. Otherwise, this is a clean, minimal change appropriate for merging once CI validates compatibility.