chore(deps): update all dependencies #4565

renovate · 2025-10-13T01:53:10Z

This PR contains the following updates:

Package	Type	Update	Change	Pending
ansible/ansible-lint	repository	patch	`v25.9.1` -> `v25.9.2`
asottile/add-trailing-comma	repository	major	`v3.2.0` -> `v4.0.0`
astral-sh/ruff-pre-commit	repository	minor	`v0.13.3` -> `v0.14.1`
astral-sh/uv-pre-commit	repository	minor	`0.8.23` -> `0.9.4`	`0.9.5`
biomejs/pre-commit	repository	patch	`v2.2.5` -> `v2.2.6`
coverage	dependency-groups	minor	`7.10.7` -> `7.11.0`
pycqa/pylint	repository	major	`v3.3.9` -> `v4.0.1`	`v4.0.2`
python	uses-with	minor	`3.13` -> `3.14`
rhysd/actionlint	repository	patch	`v1.7.7` -> `v1.7.8`
ruff (source, changelog)	dependency-groups	patch	`0.14.0` -> `0.14.1`
tombi-toml/tombi-pre-commit	repository	patch	`v0.6.21` -> `v0.6.35`	`v0.6.37` (+1)
		lockFileMaintenance	All locks refreshed

Note: The pre-commit manager in Renovate is not supported by the pre-commit maintainers or community. Please do not report any problems there, instead create a Discussion in the Renovate repository if you have any questions.

Release Notes

ansible/ansible-lint (ansible/ansible-lint)

`v25.9.2`

Compare Source

Fixes

fix: avoid using unreleased dependency constraints (#4802) @ssbarnea

Maintenance

chore: rename sonar config file (#4810) @ssbarnea
chore: switch to reusable workflow (#4809) @ssbarnea
chore(deps): update all dependencies (#4808) @renovate[bot]
chore(deps): update all dependencies (#4805) @renovate[bot]
chore(deps): update all dependencies (#4787) @renovate[bot]

asottile/add-trailing-comma (asottile/add-trailing-comma)

`v4.0.0`

Compare Source

astral-sh/ruff-pre-commit (astral-sh/ruff-pre-commit)

`v0.14.1`

Compare Source

See: https://github.com/astral-sh/ruff/releases/tag/0.14.1

`v0.14.0`

Compare Source

See: https://github.com/astral-sh/ruff/releases/tag/0.14.0

astral-sh/uv-pre-commit (astral-sh/uv-pre-commit)

biomejs/pre-commit (biomejs/pre-commit)

`v2.2.6`

Compare Source

nedbat/coveragepy (coverage)

`v7.11.0`

Compare Source

Dropped support for Python 3.9, declared support for Python 3.15 alpha.

.. _changes_7-10-7:

pycqa/pylint (pycqa/pylint)

`v4.0.1`

Compare Source

What's new in Pylint 4.0.1?

Release date: 2025-10-14

False Positives Fixed

Exclude __all__ and __future__.annotations from unused-variable.

Closes #10019
Fix false-positive for bare-name-capture-pattern if a case guard is used.

Closes #10647
Check enums created with the Enum() functional syntax to pass against the
--class-rgx for the invalid-name check, like other enums.

Closes #10660

`v4.0.0`

Compare Source

Pylint now supports Python 3.14.
Pylint's inference engine (astroid) is now much more precise,
understanding implicit booleanness and ternary expressions. (Thanks @zenlyj!)

Consider this example:

class Result:
    errors: dict | None = None

result = Result()
if result.errors:
    result.errors[field_key]

### inference engine understands result.errors cannot be None
### pylint no longer raises unsubscriptable-object

The required astroid version is now 4.0.0. See the astroid changelog for additional fixes, features, and performance improvements applicable to pylint.

Handling of invalid-name at the module level was patchy. Now,
module-level constants that are reassigned are treated as variables and checked
against --variable-rgx rather than --const-rgx. Module-level lists,
sets, and objects can pass against either regex.

Here, LIMIT is reassigned, so pylint only uses --variable-rgx:

LIMIT = 500  # [invalid-name]
if sometimes:
    LIMIT = 1  # [invalid-name]

If this is undesired, refactor using exclusive assignment so that it is
evident that this assignment happens only once:

if sometimes:
    LIMIT = 1
else:
    LIMIT = 500  # exclusive assignment: uses const regex, no warning

Lists, sets, and objects still pass against either const-rgx or variable-rgx
even if reassigned, but are no longer completely skipped:

MY_LIST = []
my_list = []
My_List = []  # [invalid-name]

Remember to adjust the regexes and allow lists to your liking.

Breaking Changes

invalid-name now distinguishes module-level constants that are assigned only once
from those that are reassigned and now applies --variable-rgx to the latter. Values
other than literals (lists, sets, objects) can pass against either the constant or
variable regexes (e.g. "LOGGER" or "logger" but not "LoGgEr").

Remember that --good-names or --good-names-rgxs can be provided to explicitly
allow good names.

Closes #3585
The unused pylintrc argument to PyLinter.__init__() is deprecated
and will be removed.

Refs #6052
Commented out code blocks such as # bar() # TODO: remove dead code will no longer emit fixme.

Refs #9255
pyreverse Run was changed to no longer call sys.exit() in its __init__.
You should now call Run(args).run() which will return the exit code instead.
Having a class that always raised a SystemExit exception was considered a bug.

Normal usage of pyreverse through the CLI will not be affected by this change.

Refs #9689
The suggestion-mode option was removed, as pylint now always emits user-friendly hints instead
of false-positive error messages. You should remove it from your conf if it's defined.

Refs #9962
The async.py checker module has been renamed to async_checker.py since async is a Python keyword
and cannot be imported directly. This allows for better testing and extensibility of the async checker functionality.

Refs #10071
The message-id of continue-in-finally was changed from E0116 to W0136. The warning is
now emitted for every Python version since it will raise a syntax warning in Python 3.14.
See PEP 765 - Disallow return/break/continue that exit a finally block.

Refs #10480
Removed support for nmp.NaN alias for numpy.NaN being recognized in ':ref:nan-comparison'. Use np or numpy instead.

Refs #10583
Version requirement for isort has been bumped to >=5.0.0.
The internal compatibility for older isort versions exposed via pylint.utils.IsortDriver has
been removed.

Refs #10637

New Features

comparison-of-constants now uses the unicode from the ast instead of reformatting from
the node's values preventing some bad formatting due to utf-8 limitation. The message now uses
" instead of ' to better work with what the python ast returns.

Refs #8736
Enhanced pyreverse to properly distinguish between UML relationship types (association, aggregation, composition) based on object ownership semantics. Type annotations without assignment are now treated as associations, parameter assignments as aggregations, and object instantiation as compositions.

Closes #9045
Closes #9267
The fixme check can now search through docstrings as well as comments, by using
check-fixme-in-docstring = true in the [tool.pylint.miscellaneous] section.

Closes #9255
The use-implicit-booleaness-not-x checks now distinguish between comparisons
used in boolean contexts and those that are not, enabling them to provide more accurate refactoring suggestions.

Closes #9353
The verbose option now outputs the filenames of the files that have been checked.
Previously, it only included the number of checked and skipped files.

Closes #9357
colorized reporter now colorizes messages/categories that have been configured as fail-on in red inverse.
This makes it easier to quickly find the errors that are causing pylint CI job failures.

Closes #9898
Enhanced support for @property decorator in pyreverse to correctly display return types of annotated properties when generating class diagrams.

Closes #10057
Add --max-depth option to pyreverse to control diagram complexity. A depth of 0 shows only top-level packages, 1 shows one level of subpackages, etc.
This helps manage visualization of large codebases by limiting the depth of displayed packages and classes.

Refs #10077
Handle deferred evaluation of annotations in Python 3.14.

Closes #10149
Enhanced pyreverse to properly detect aggregations for comprehensions (list, dict, set, generator).

Closes #10236
pyreverse: add support for colorized output when using output format mmd (MermaidJS) and html.

Closes #10242
pypy 3.11 is now officially supported.

Refs #10287
Add support for Python 3.14.

Refs #10467
Add naming styles for ParamSpec and TypeVarTuple that align with the TypeVar style.

Refs #10541

New Checks

Add match-statements checker and the following message:
bare-name-capture-pattern.
This will emit an error message when a name capture pattern is used in a match statement which would make the remaining patterns unreachable.
This code is a SyntaxError at runtime.

Closes #7128
Add new check async-context-manager-with-regular-with to detect async context managers used with regular with statements instead of async with.

Refs #10408
Add break-in-finally warning. Using break inside the finally clause
will raise a syntax warning in Python 3.14.
See PEP 765 - Disallow return/break/continue that exit a finally block <https://peps.python.org/pep-0765/>_.

Refs #10480
Add new checks for invalid uses of class patterns in :keyword:match.
- :ref:invalid-match-args-definition is emitted if :py:data:object.__match_args__ isn't a tuple of strings.
- :ref:too-many-positional-sub-patterns if there are more positional sub-patterns than specified in :py:data:object.__match_args__.
- :ref:multiple-class-sub-patterns if there are multiple sub-patterns for the same attribute.
Refs #10559
Add additional checks for suboptimal uses of class patterns in :keyword:match.
- :ref:match-class-bind-self is emitted if a name is bound to self instead of
  using an as pattern.
- :ref:match-class-positional-attributes is emitted if a class pattern has positional
  attributes when keywords could be used.
Refs #10587
Add a consider-math-not-float message. float("nan") and float("inf") are slower
than their counterpart math.inf and math.nan by a factor of 4 (notwithstanding
the initial import of math) and they are also not well typed when using mypy.
This check also catches typos in float calls as a side effect.

The :ref:pylint.extensions.code_style need to be activated for this check to work.

Refs #10621

False Positives Fixed

Fix a false positive for used-before-assignment when a variable defined under
an if and via a named expression (walrus operator) is used later when guarded
under the same if test.

Closes #10061
Fix :ref:no-name-in-module for members of concurrent.futures with Python 3.14.

Closes #10632

False Negatives Fixed

Fix false negative for used-before-assignment when a TYPE_CHECKING import is used as a type annotation prior to erroneous usage.

Refs #8893
Match cases are now counted as edges in the McCabe graph and will increase the complexity accordingly.

Refs #9667
Check module-level constants with type annotations for invalid-name.
Remember to adjust const-naming-style or const-rgx to your liking.

Closes #9770
Fix false negative where function-redefined (E0102) was not reported for functions with a leading underscore.

Closes #9894
We now raise a logging-too-few-args for format string with no
interpolation arguments at all (i.e. for something like logging.debug("Awaiting process %s")
or logging.debug("Awaiting process {pid}")). Previously we did not raise for such case.

Closes #9999
Fix false negative for used-before-assignment when a function is defined inside a TYPE_CHECKING guard block and used later.

Closes #10028
Fix a false negative for possibly-used-before-assignment when a variable is conditionally defined
and later assigned to a type-annotated variable.

Closes #10421
Fix false negative for deprecated-module when a __import__ method is used instead of import sentence.

Refs #10453
Count match cases for too-many-branches check.

Refs #10542
Fix false-negative where :ref:unused-import was not reported for names referenced in a preceding global statement.

Refs #10633

Other Bug Fixes

When displaying unicode with surrogates (or other potential UnicodeEncodeError),
pylint will now display a '?' character (using encode(encoding="utf-8", errors="replace"))
instead of crashing. The functional tests classes are also updated to handle this case.

Closes #8736
Fixed unidiomatic-typecheck only checking left-hand side.

Closes #10217
Fix a crash caused by malformed format strings when using .format with keyword arguments.

Closes #10282
Fix false positive inconsistent-return-statements when using quit() or exit() functions.

Closes #10508
Fix a crash in :ref:nested-min-max when using builtins.min or builtins.max
instead of min or max directly.

Closes #10626
Fixed a crash in :ref:unnecessary-dict-index-lookup when the index of an enumerated list
was deleted inside a for loop.

Closes #10627

Other Changes

Remove support for launching pylint with Python 3.9.
Code that supports Python 3.9 can still be linted with the --py-version=3.9 setting.

Refs #10405

Internal Changes

Modified test framework to allow for different test output for different Python versions.

Refs #10382

actions/python-versions (python)

`v3.14.0`: 3.14.0

Compare Source

Python 3.14.0

rhysd/actionlint (rhysd/actionlint)

`v1.7.8`

Compare Source

Support models permission in permissions section. (#531, thanks @muzimuzhi)
Support job.check_run_id property. (#576, thanks @muzimuzhi for fixing the type at #577)
Support node24 runtime at using section in action metadata. (#561, thanks @salmanmkc)
Add support for the following runner labels
- macos-26 and macos-26-large (#572, thanks @muzimuzhi)
- macos-15 (#572, thanks @muzimuzhi)
Drop support for the following runner labels.
- ubuntu-20.04 (#534, thanks @shogo82148)
- windows-2019 (#572, thanks @muzimuzhi)
Support deprecationMessage in action inputs. (#540, thanks @saansh45)
Support windows-11-arm runner. (#542, thanks @trim21)
Handle ubuntu-latest runner label as ubuntu-24.04 and macos-latest runner label as macos-15.
Report mixing Intel Mac labels and Arm Mac labels as error.
Add new types to issues and pull_request_target webhooks.
Update the popular actions data set to the latest and add more actions to it (thanks @sethvargo for fixing the go generate scripts)
- actions/create-github-app-token
- actions/attest-sbom
- actions/ai-inference
- peter-evans/create-or-update-comment
- release-drafter/release-drafter
- SamKirkland/FTP-Deploy-Action
Fix the version value in actionlint -version can be empty.
Fix outdated URL links in some error messages and documents.
Homebrew formula in this repository is deprecated and Homebrew cask is newly added instead because GoReleaser no longer supports Homebrew formula update. Note that Homebrew's official actionlint formula is still maintained. Please read the documentation for more details.
Drop support for Go 1.23 and earlier because they are no longer maintained officially. Go 1.24 and later are supported to build actionlint.
Replace go-yaml/yaml@v3 package with yaml/go-yaml@v4 package. go-yaml/yaml was used for parsing workflow files however it was unmaintained. yaml/go-yaml is a successor of the library officially maintained by YAML organization. (#575)
Improve error messages on parsing workflow and action metadata files.

[Changes][v1.7.8]

astral-sh/ruff (ruff)

`v0.14.1`

Compare Source

Released on 2025-10-16.

Preview features

[formatter] Remove parentheses around multiple exception types on Python 3.14+ (#20768)
[flake8-bugbear] Omit annotation in preview fix for B006 (#20877)
[flake8-logging-format] Avoid dropping implicitly concatenated pieces in the G004 fix (#20793)
[pydoclint] Implement docstring-extraneous-parameter (DOC102) (#20376)
[pyupgrade] Extend UP019 to detect typing_extensions.Text (UP019) (#20825)
[pyupgrade] Fix false negative for TypeVar with default argument in non-pep695-generic-class (UP046) (#20660)

Bug fixes

Fix false negatives in Truthiness::from_expr for lambdas, generators, and f-strings (#20704)
Fix syntax error false positives for escapes and quotes in f-strings (#20867)
Fix syntax error false positives on parenthesized context managers (#20846)
[fastapi] Fix false positives for path parameters that FastAPI doesn't recognize (FAST003) (#20687)
[flake8-pyi] Fix operator precedence by adding parentheses when needed (PYI061) (#20508)
[ruff] Suppress diagnostic for f-string interpolations with debug text (RUF010) (#20525)

Rule changes

[airflow] Add warning to airflow.datasets.DatasetEvent usage (AIR301) (#20551)
[flake8-bugbear] Mark B905 and B912 fixes as unsafe (#20695)
Use DiagnosticTag for more rules - changes display in editors (#20758,#20734)

Documentation

Update Python compatibility from 3.13 to 3.14 in README.md (#20852)
Update lint.flake8-type-checking.quoted-annotations docs (#20765)
Update setup instructions for Zed 0.208.0+ (#20902)
[flake8-datetimez] Clarify docs for several rules (#20778)
Fix typo in RUF015 description (#20873)

Other changes

Reduce binary size (#20863)
Improved error recovery for unclosed strings (including f- and t-strings) (#20848)

Contributors

tombi-toml/tombi-pre-commit (tombi-toml/tombi-pre-commit)

`v0.6.35`

Compare Source

See: https://github.com/tombi-toml/tombi/releases/tag/v0.6.35

`v0.6.34`

Compare Source

See: https://github.com/tombi-toml/tombi/releases/tag/v0.6.34

`v0.6.32`

Compare Source

See: https://github.com/tombi-toml/tombi/releases/tag/v0.6.32

`v0.6.31`

Compare Source

See: https://github.com/tombi-toml/tombi/releases/tag/v0.6.31

`v0.6.30`

Compare Source

See: https://github.com/tombi-toml/tombi/releases/tag/v0.6.30

`v0.6.29`

Compare Source

See: https://github.com/tombi-toml/tombi/releases/tag/v0.6.29

`v0.6.28`

Compare Source

See: https://github.com/tombi-toml/tombi/releases/tag/v0.6.28

`v0.6.27`

Compare Source

See: https://github.com/tombi-toml/tombi/releases/tag/v0.6.27

`v0.6.26`

Compare Source

See: https://github.com/tombi-toml/tombi/releases/tag/v0.6.26

`v0.6.25`

Compare Source

See: https://github.com/tombi-toml/tombi/releases/tag/v0.6.25

`v0.6.24`

Compare Source

See: https://github.com/tombi-toml/tombi/releases/tag/v0.6.24

`v0.6.23`

Compare Source

See: https://github.com/tombi-toml/tombi/releases/tag/v0.6.23

`v0.6.22`

Compare Source

See: https://github.com/tombi-toml/tombi/releases/tag/v0.6.22

Configuration

📅 Schedule: Branch creation - "before 4am on monday" in timezone UTC, Automerge - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) in timezone UTC.

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate · 2025-10-22T14:11:43Z

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

renovate bot added chore dependencies Pull requests that update a dependency file labels Oct 13, 2025

renovate bot requested a review from a team as a code owner October 13, 2025 01:53

renovate bot enabled auto-merge (squash) October 13, 2025 01:53

github-project-automation bot added this to 🧰 devtools project board Oct 13, 2025

renovate bot had a problem deploying to ack October 13, 2025 01:53 Error

renovate bot temporarily deployed to ack October 13, 2025 01:53 Inactive

github-actions bot added chore and removed chore labels Oct 13, 2025

ansibuddy approved these changes Oct 13, 2025

View reviewed changes

github-project-automation bot moved this to Review in 🧰 devtools project board Oct 13, 2025

renovate bot force-pushed the renovate/all branch from d0f9e11 to d9de975 Compare October 13, 2025 04:52

renovate bot temporarily deployed to ack October 13, 2025 04:52 Inactive

github-actions bot added chore and removed chore labels Oct 13, 2025

ansibuddy approved these changes Oct 13, 2025

View reviewed changes

renovate bot force-pushed the renovate/all branch from d9de975 to bf23644 Compare October 13, 2025 14:11

renovate bot temporarily deployed to ack October 13, 2025 14:11 Inactive

github-actions bot added chore and removed chore labels Oct 13, 2025

ansibuddy approved these changes Oct 13, 2025

View reviewed changes

renovate bot force-pushed the renovate/all branch from bf23644 to 3f490ce Compare October 13, 2025 16:25

renovate bot temporarily deployed to ack October 13, 2025 16:25 Inactive

github-actions bot added chore and removed chore labels Oct 13, 2025

ansibuddy approved these changes Oct 13, 2025

View reviewed changes

renovate bot force-pushed the renovate/all branch from 3f490ce to a8f1c85 Compare October 14, 2025 17:05

renovate bot temporarily deployed to ack October 14, 2025 17:05 Inactive

github-actions bot added chore and removed chore labels Oct 14, 2025

github-actions bot added chore and removed chore labels Oct 18, 2025

ansibuddy approved these changes Oct 18, 2025

View reviewed changes

renovate bot force-pushed the renovate/all branch from a59020a to 762fcf9 Compare October 18, 2025 21:10

renovate bot temporarily deployed to ack October 18, 2025 21:10 Inactive

github-actions bot added chore and removed chore labels Oct 18, 2025

ansibuddy approved these changes Oct 18, 2025

View reviewed changes

renovate bot force-pushed the renovate/all branch from 762fcf9 to efa555f Compare October 21, 2025 02:27

renovate bot temporarily deployed to ack October 21, 2025 02:27 Inactive

github-actions bot added chore and removed chore labels Oct 21, 2025

ansibuddy approved these changes Oct 21, 2025

View reviewed changes

chore(deps): update all dependencies

7544de6

renovate bot force-pushed the renovate/all branch from efa555f to 7544de6 Compare October 21, 2025 11:48

renovate bot temporarily deployed to ack October 21, 2025 11:48 Inactive

github-actions bot added chore and removed chore labels Oct 21, 2025

ansibuddy approved these changes Oct 21, 2025

View reviewed changes

Apply suggestion from @Qalthos

ec37681

Qalthos temporarily deployed to ack October 22, 2025 14:11 — with GitHub Actions Inactive

github-actions bot added chore and removed chore labels Oct 22, 2025

ansibuddy approved these changes Oct 22, 2025

View reviewed changes

Qalthos approved these changes Oct 22, 2025

View reviewed changes

github-project-automation bot moved this from In Progress to Review in 🧰 devtools project board Oct 22, 2025

ansibuddy merged commit 1cbba77 into main Oct 22, 2025
22 checks passed

ansibuddy deleted the renovate/all branch October 22, 2025 14:24

github-project-automation bot moved this from Review to Done in 🧰 devtools project board Oct 22, 2025

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): update all dependencies #4565

chore(deps): update all dependencies #4565

renovate bot commented Oct 13, 2025 •

edited

Loading

Uh oh!

renovate bot commented Oct 22, 2025

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

chore(deps): update all dependencies #4565

chore(deps): update all dependencies #4565

Conversation

renovate bot commented Oct 13, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Fixes

Maintenance

What's new in Pylint 4.0.1?

False Positives Fixed

Breaking Changes

New Features

New Checks

False Positives Fixed

False Negatives Fixed

Other Bug Fixes

Other Changes

Internal Changes

v3.14.0: 3.14.0

Preview features

Bug fixes

Rule changes

Documentation

Other changes

Contributors

Configuration

Uh oh!

renovate bot commented Oct 22, 2025

Edited/Blocked Notification

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

renovate bot commented Oct 13, 2025 •

edited

Loading

`v3.14.0`: 3.14.0