Skip to content

build(deps-dev): bump the python-minor-patch group with 2 updates - #117

Merged
michelhonold merged 2 commits into
mainfrom
dependabot/pip/python-minor-patch-17a155b73e
Aug 31, 2026
Merged

build(deps-dev): bump the python-minor-patch group with 2 updates#117
michelhonold merged 2 commits into
mainfrom
dependabot/pip/python-minor-patch-17a155b73e

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 29, 2026

Copy link
Copy Markdown
Contributor

Bumps the python-minor-patch group with 2 updates: ruff and pyinstaller-hooks-contrib.

Updates ruff from 0.16.3 to 0.16.4

Release notes

Sourced from ruff's releases.

0.16.4

Release Notes

Released on 2026-08-20.

Preview features

  • [flake8-use-pathlib] Add autofix for PTH116 (#26460)
  • [refurb] Restrict delete-full-slice to lists (FURB131) (#27711)
  • [refurb] Skip FURB101 and FURB103 when the open argument is a file descriptor (#27643)

Bug fixes

  • Fix InvalidInstruction on Windows CPUs that do not support POPCNT (#27803)
  • [pyflakes] Emit semantic syntax errors in string type definitions as F722 (#27835)
  • [pylint] Allow os._exit imports in import-private-name (PLC2701) (#27738)

Rule changes

  • [syntax-errors] Align mixed t-string/bytes error message with CPython 3.14 (#27766)
  • [ruff] Add ctypes.LittleEndianStructure and related types to existing exception (RUF012) (#27753)
  • [syntax-errors] Detect duplicate keyword arguments (#17804)
  • [syntax-errors] Detect parameters declared nonlocal (#27628)

Server

  • Offer display-only fixes and mark safe fixes preferred (#27807)
  • Support pull diagnostics for notebook cells (#27779)

Documentation

  • Add default indicator to rules table (#27724)
  • Fix broken link to Python docs (#27757)

Other changes

  • Fix s390x stacker assembly in release builds (#27776)
  • Guarantee minimum stack size when parsing a module, standalone expression, and suites (#25464)
  • Reduce configuration deserialization code size (#27924)
  • Check packed AST index bounds (#27849)

Contributors

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.4

Released on 2026-08-20.

Preview features

  • [flake8-use-pathlib] Add autofix for PTH116 (#26460)
  • [refurb] Restrict delete-full-slice to lists (FURB131) (#27711)
  • [refurb] Skip FURB101 and FURB103 when the open argument is a file descriptor (#27643)

Bug fixes

  • Fix InvalidInstruction on Windows CPUs that do not support POPCNT (#27803)
  • [pyflakes] Emit semantic syntax errors in string type definitions as F722 (#27835)
  • [pylint] Allow os._exit imports in import-private-name (PLC2701) (#27738)

Rule changes

  • [syntax-errors] Align mixed t-string/bytes error message with CPython 3.14 (#27766)
  • [ruff] Add ctypes.LittleEndianStructure and related types to existing exception (RUF012) (#27753)
  • [syntax-errors] Detect duplicate keyword arguments (#17804)
  • [syntax-errors] Detect parameters declared nonlocal (#27628)

Server

  • Offer display-only fixes and mark safe fixes preferred (#27807)
  • Support pull diagnostics for notebook cells (#27779)

Documentation

  • Add default indicator to rules table (#27724)
  • Fix broken link to Python docs (#27757)

Other changes

  • Fix s390x stacker assembly in release builds (#27776)
  • Guarantee minimum stack size when parsing a module, standalone expression, and suites (#25464)
  • Reduce configuration deserialization code size (#27924)
  • Check packed AST index bounds (#27849)

Contributors

... (truncated)

Commits

Updates pyinstaller-hooks-contrib from 2026.6 to 2026.7

Release notes

Sourced from pyinstaller-hooks-contrib's releases.

v2026.7

Please see the changelog for more details

Changelog

Sourced from pyinstaller-hooks-contrib's changelog.

2026.7 (2026-08-24)

New hooks


* Add hook for ``procrastinate``, which loads its SQL data files via
  ``importlib.resources`` and its own distribution metadata via
  ``importlib.metadata``. (`[#1036](https://github.com/pyinstaller/pyinstaller-hooks-contrib/issues/1036)
  <https://github.com/pyinstaller/pyinstaller-hooks-contrib/issues/1036>`_)

Updated hooks

  • Add hook for timezonefinder_data to collect data files that were previously part of timezonefinder and were moved into dedicated package/dist with v8.3.0. ([#1041](https://github.com/pyinstaller/pyinstaller-hooks-contrib/issues/1041) <https://github.com/pyinstaller/pyinstaller-hooks-contrib/issues/1041>_)
  • Update pygraphviz hook for improved compatibility with pygraphviz 2.0 and its new binary wheels that are available for macOS, Windows, and Linux. ([#1031](https://github.com/pyinstaller/pyinstaller-hooks-contrib/issues/1031) <https://github.com/pyinstaller/pyinstaller-hooks-contrib/issues/1031>_)
  • Update tkinterdnd2 hook to detect Tcl/Tk 9 and collect the {platform}-{arch}-tcl9 sub-directory, which became available in tkinterdnd2 v0.6.0 wheels. ([#1033](https://github.com/pyinstaller/pyinstaller-hooks-contrib/issues/1033) <https://github.com/pyinstaller/pyinstaller-hooks-contrib/issues/1033>_)
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the python-minor-patch group with 2 updates: [ruff](https://github.com/astral-sh/ruff) and [pyinstaller-hooks-contrib](https://github.com/pyinstaller/pyinstaller-hooks-contrib).


Updates `ruff` from 0.16.3 to 0.16.4
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.16.3...0.16.4)

Updates `pyinstaller-hooks-contrib` from 2026.6 to 2026.7
- [Release notes](https://github.com/pyinstaller/pyinstaller-hooks-contrib/releases)
- [Changelog](https://github.com/pyinstaller/pyinstaller-hooks-contrib/blob/master/CHANGELOG.rst)
- [Commits](pyinstaller/pyinstaller-hooks-contrib@v2026.6...v2026.7)

---
updated-dependencies:
- dependency-name: ruff
  dependency-version: 0.16.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-minor-patch
- dependency-name: pyinstaller-hooks-contrib
  dependency-version: '2026.7'
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
The ruff bump arrived as two PRs, because Dependabot tracks the pip
dependency and the pre-commit repo as unrelated ecosystems. Landing
either alone leaves the hook and `make lint` on different ruff versions,
which is what the exact pin exists to prevent: a pre-1.0 patch can add
rules or change formatting, so a commit one side accepts fails the other.
Folded into one change so the two halves cannot separate.

Nothing caught the split. `make lint` runs poetry's ruff and never reads
the hook config, so both one-sided bumps pass CI on their own. The new
guard test compares the two and also holds the pin to an exact version,
since a range would reintroduce the drift the pin was chosen to avoid.

Verified against the version being adopted rather than the one installed:
`make ci-remote` runs the Pi's existing env and does not install the new
lock, so ruff 0.16.4 was run directly over openfollow/ and tests/ - clean
on all 351 files.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
@michelhonold
michelhonold merged commit 7c0b899 into main Aug 31, 2026
2 checks passed
@michelhonold
michelhonold deleted the dependabot/pip/python-minor-patch-17a155b73e branch August 31, 2026 12:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant