Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 24, 2025

Bumps ruff from 0.12.12 to 0.14.2.

Release notes

Sourced from ruff's releases.

0.14.2

Release Notes

Released on 2025-10-23.

Preview features

  • [flake8-gettext] Resolve qualified names and built-in bindings (INT001, INT002, INT003) (#19045)

Bug fixes

  • Avoid reusing nested, interpolated quotes before Python 3.12 (#20930)
  • Catch syntax errors in nested interpolations before Python 3.12 (#20949)
  • [fastapi] Handle ellipsis defaults in FAST002 autofix (#20810)
  • [flake8-simplify] Skip SIM911 when unknown arguments are present (#20697)
  • [pyupgrade] Always parenthesize assignment expressions in fix for f-string (UP032) (#21003)
  • [pyupgrade] Fix UP032 conversion for decimal ints with underscores (#21022)
  • [fastapi] Skip autofix for keyword and __debug__ path params (FAST003) (#20960)

Rule changes

  • [flake8-bugbear] Skip B905 and B912 for fewer than two iterables and no starred arguments (#20998)
  • [ruff] Use DiagnosticTag for more pyflakes and pandas rules (#20801)

CLI

  • Improve JSON output from ruff rule (#20168)

Documentation

  • Add source to testimonial (#20971)
  • Document when a rule was added (#21035)

Other changes

  • [syntax-errors] Name is parameter and global (#20426)
  • [syntax-errors] Alternative match patterns bind different names (#20682)

Contributors

Install ruff 0.14.2

... (truncated)

Changelog

Sourced from ruff's changelog.

0.14.2

Released on 2025-10-23.

Preview features

  • [flake8-gettext] Resolve qualified names and built-in bindings (INT001, INT002, INT003) (#19045)

Bug fixes

  • Avoid reusing nested, interpolated quotes before Python 3.12 (#20930)
  • Catch syntax errors in nested interpolations before Python 3.12 (#20949)
  • [fastapi] Handle ellipsis defaults in FAST002 autofix (#20810)
  • [flake8-simplify] Skip SIM911 when unknown arguments are present (#20697)
  • [pyupgrade] Always parenthesize assignment expressions in fix for f-string (UP032) (#21003)
  • [pyupgrade] Fix UP032 conversion for decimal ints with underscores (#21022)
  • [fastapi] Skip autofix for keyword and __debug__ path params (FAST003) (#20960)

Rule changes

  • [flake8-bugbear] Skip B905 and B912 for fewer than two iterables and no starred arguments (#20998)
  • [ruff] Use DiagnosticTag for more pyflakes and pandas rules (#20801)

CLI

  • Improve JSON output from ruff rule (#20168)

Documentation

  • Add source to testimonial (#20971)
  • Document when a rule was added (#21035)

Other changes

  • [syntax-errors] Name is parameter and global (#20426)
  • [syntax-errors] Alternative match patterns bind different names (#20682)

Contributors

0.14.1

... (truncated)

Commits

Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Important

Bump ruff version in pyproject.toml to allow newer versions up to 0.14.2.

  • Dependencies:
    • Bump ruff version in pyproject.toml from >=0.1.8,<0.13.0 to >=0.1.8,<0.15.0 to allow newer versions.
  • Misc:
    • No code changes, only dependency version update.

This description was created by Ellipsis for 059048b. You can customize this summary. It will automatically update as commits are pushed.

Disclaimer: Experimental PR review

Greptile Overview

Updated On: 2025-10-24 05:13:26 UTC

Greptile Summary

This PR bumps the ruff linter from version 0.12.12 to 0.14.2, a minor version upgrade that includes bug fixes and rule improvements without breaking changes.

Key Changes:

  • Updated pyproject.toml to allow ruff versions up to 0.15.0 (was 0.13.0)
  • Updated poetry.lock with ruff 0.14.2 binaries and checksums for all supported platforms
  • Poetry version metadata updated from 1.8.4 to 2.2.1 in lock file

Ruff 0.14.2 Improvements:

  • Bug fixes for Python 3.12 f-string handling and nested interpolations
  • Improvements to flake8-bugbear, pyupgrade, fastapi, and flake8-simplify rules
  • Enhanced JSON output from ruff rule command
  • Better syntax error detection and reporting

Compatibility Assessment:
The upgrade is backward compatible with existing ruff configurations (ruff.toml and ci.ruff.toml). The changes are primarily bug fixes and rule improvements that should not introduce new linting failures or break existing workflows.

Confidence Score: 5/5

  • This PR is safe to merge with minimal risk
  • This is a routine dependency update managed by Dependabot that bumps ruff from 0.12.12 to 0.14.2. The version change includes only bug fixes and rule improvements without breaking changes. The ruff configuration files (ruff.toml and ci.ruff.toml) remain compatible with the new version. The CI workflow uses ruff-action which will automatically use the correct version. No code changes are required, and the upgrade improves linting accuracy with better error detection.
  • No files require special attention

Important Files Changed

File Analysis

Filename Score Overview
pyproject.toml 5/5 Updated ruff version constraint from <0.13.0 to <0.15.0 to allow 0.14.2
poetry.lock 5/5 Updated ruff from 0.12.12 to 0.14.2 with hash updates for all platform wheels

Sequence Diagram

sequenceDiagram
    participant Dev as Developer/Dependabot
    participant Poetry as Poetry Dependency Manager
    participant PyPI as PyPI Repository
    participant Ruff as Ruff Linter
    
    Dev->>Poetry: Update ruff constraint to <0.15.0
    Poetry->>PyPI: Resolve ruff dependencies
    PyPI-->>Poetry: Return ruff 0.14.2 package
    Poetry->>Poetry: Update poetry.lock with new hashes
    Dev->>Ruff: Run linting with new version
    Ruff-->>Dev: Apply bug fixes and rule improvements
Loading

@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Oct 24, 2025
Copy link
Contributor

@greptile-apps greptile-apps bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

1 file reviewed, no comments

Edit Code Review Agent Settings | Greptile

@dependabot dependabot bot force-pushed the dependabot/pip/ruff-0.14.2 branch 2 times, most recently from e0b84be to 78577a8 Compare November 5, 2025 05:07
@dependabot dependabot bot force-pushed the dependabot/pip/ruff-0.14.2 branch 2 times, most recently from ab5c763 to b28e267 Compare November 14, 2025 05:08
Bumps [ruff](https://github.com/astral-sh/ruff) from 0.12.12 to 0.14.2.
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.12.12...0.14.2)

---
updated-dependencies:
- dependency-name: ruff
  dependency-version: 0.14.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/pip/ruff-0.14.2 branch from b28e267 to d160e2e Compare November 19, 2025 05:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant