Bump ruff from 0.6.4 to 0.6.5 #10909
Conversation
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
Bumps [ruff](https://github.com/astral-sh/ruff) from 0.6.4 to 0.6.5. - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.6.4...0.6.5) --- updated-dependencies: - dependency-name: ruff dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]>
dependabot
bot
added
dependencies
DryRun Security SummaryThe pull request updates the "ruff" Python linter to version 0.6.5 in the "requirements-lint.txt" file, which is a routine update that does not introduce any significant security concerns. Expand for full summarySummary: The changes in this pull request appear to be a simple version update for the "ruff" Python linter, updating the "requirements-lint.txt" file to use version 0.6.5 instead of the previous version 0.6.4. From an application security perspective, this change does not introduce any significant security concerns, as version updates for development tools and dependencies are generally considered low-risk, focusing on bug fixes, performance improvements, and new features rather than security vulnerabilities. However, it's always a good practice to review the release notes or change logs for the updated dependency to ensure that there are no known security issues that have been addressed in the new version. Additionally, it's recommended to have a process in place to regularly review and update all dependencies to the latest stable versions, as this helps mitigate the risk of potential vulnerabilities being introduced over time. Overall, this code change appears to be a routine update and does not raise any immediate security concerns. Files Changed:
Code AnalysisWe ran Riskiness🟢 Risk threshold not exceeded. |
Bumps ruff from 0.6.4 to 0.6.5.
Release notes
Sourced from ruff's releases.
... (truncated)
Changelog
Sourced from ruff's changelog.
Commits
8558126Bump version to 0.6.5 (#13346)9bd9981Create insta snapshot for SARIF output (#13345)21bfab9Playground: Add Copy as pyproject.toml/ruff.toml and paste from TOML (#13328)43a5922[red-knot] add BitSet::is_empty and BitSet::union (#13333)175d067[red-knot] add initial Type::is_equivalent_to and Type::is_assignable_to (#13...4dc2c25[red-knot] Fix type inference forexcept*definitions (#13320)b72d49bAdd support for extensionless Python files for server (#13326)eded78a[pyupgrade] Fix broken doc link and clarify that deprecated aliases were re...a7b8cc0[red-knot] Fix.to_instance()for union types (#13319)b93d0ab[red-knot] Add control flow forforloops (#13318)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)