Merge pull request #2765 from theupdateframework/dependabot/pip/test-and-lint-dependencies-982229149a

build(deps): bump ruff from 0.8.6 to 0.9.1 in the test-and-lint-dependencies group

Author: jku

requirements/lint.txt

@@ -6,7 +6,7 @@
 # Lint tools
 # (We are not so interested in the specific versions of the tools: the versions
 # are pinned to prevent unexpected linting failures when tools update)
-ruff==0.8.6
+ruff==0.9.1
 mypy==1.14.1
 
 # Required for type stubs

tuf/api/_payload.py

@@ -1222,7 +1222,7 @@ def __init__(
         self.number_of_bins = 2**bit_length
         # suffix_len is calculated based on "number_of_bins - 1" as the name
         # of the last bin contains the number "number_of_bins -1" as a suffix.
-        self.suffix_len = len(f"{self.number_of_bins-1:x}")
+        self.suffix_len = len(f"{self.number_of_bins - 1:x}")
 
     def __eq__(self, other: object) -> bool:
         if not isinstance(other, SuccinctRoles):

tuf/api/serialization/json.py

@@ -8,6 +8,9 @@
 verification.
 """
 
+# We should not have shadowed stdlib json but that milk spilled already
+# ruff: noqa: A005
+
 import json
 from typing import Optional