chore(deps): bump ruff from 0.15.16 to 0.15.21#23
Conversation
Bumps [ruff](https://github.com/astral-sh/ruff) from 0.15.16 to 0.15.21. - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.15.16...0.15.21) --- updated-dependencies: - dependency-name: ruff dependency-version: 0.15.21 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]>
dependabot
Bot
added
the
dependencies
LabelsThe following labels could not be found: Please fix the above issues or remove invalid values from |
## Why The 5 open Dependabot uv PRs (#21 click, #22 click*, #23 ruff, #24 pyright, #25 hypothesis + coverage) each failed CI with: ``` The lockfile at `uv.lock` needs to be updated, but `--locked` was provided. ``` Root cause: this repo routes installs through **Takumi Guard** (`pypi.flatt.tech`). Dependabot resolves against public PyPI and rewrites the lock's URLs to `files.pythonhosted.org`, so `uv sync --locked` (running behind the Takumi index) sees the lock as inconsistent and fails. It is **not** a code problem — `main` is green. ## What One relock via `uv lock --upgrade-package {click,coverage,hypothesis,pyright,ruff}` against the `pypi.flatt.tech` index, honoring the pinned `exclude-newer = 2026-07-22`. Only `uv.lock` changes; the index URLs stay on `pypi.flatt.tech` (0 pythonhosted leaks). Resolved: click 8.4.2 · coverage 7.15.2 · hypothesis 6.157.0 · pyright 1.1.411 · ruff 0.15.22. Supersedes #21, #22, #23, #24, #25. 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-authored-by: Claude Opus 4.8 <[email protected]>
|
Superseded by #26, which relocks these bumps against the Takumi Guard index (pypi.flatt.tech) in one consolidated uv.lock. Individual Dependabot PRs fail because they rewrite the lock URLs to files.pythonhosted.org. |
|
OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting If you change your mind, just re-open this PR and I'll resolve any conflicts on it. |
1 participant
Bumps ruff from 0.15.16 to 0.15.21.
Release notes
Sourced from ruff's releases.
... (truncated)
Changelog
Sourced from ruff's changelog.
... (truncated)
Commits
3e1f636Bump 0.15.21 (#26676)4059807[ty] Infer metaclass-declared attributes on class instances (#26512)013e5d0[ty] Use a dedicated project name type (#26665)7ad39ad[ty] Avoid allocating decorated parameter names (#26666)c36f662Improve performance of rendering edits in preview mode (#26565)ad26408[ty] Gate membership narrowing on__contains__semantics (#25964)4594ca7[ty] Add variant discriminators forCodeGeneratorKind(#26659)1af03da[ty] Pydantic: Fix float conversion in unions (#26655)a004a36[ty] Handle callable classes in solver (#26090)d8ef3b0[ty] Parse all supported Google docstring sections. (#26653)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)