Bump isort from 7.0.0 to 8.0.0 by dependabot[bot] · Pull Request #97 · Senzing/mapper-orbis

dependabot · 2026-03-12T16:45:11Z

Bumps isort from 7.0.0 to 8.0.0.

Release notes

8.0.0

Changes

Update CHANGELOG for version 8.0.0 (#2460) @DanielNoord

Fix edge case of __future__ import. (#2458) @skv0zsneg

Fix the Plone profile to be compatible with black (#2457) @ale-rt

typo fix (#2450) @jsta

Remove the setuptools plugin (#2427) @DanielNoord

Turn some warnings into errors in test suite (#2449) @DanielNoord

chore: replace black with ruff in clean.sh (#2448) @joao-faria-dev

feat!: remove old finders flag and legacy finder logic (#2446) @joao-faria-dev

Fix whitespace insensitive check triggering on tabs (#2437) @robsdedude

Fix line separator detection not considering form feed as white space (#2436) @robsdedude

Fix #1964: lines_before_import sometimes ignored (#1965) @robsdedude

Remove reference to 3.9 in README (#2434) @DanielNoord

🚀 Features

Ensure multiprocessing.Pool is always closed and joined (#2442) @DanielNoord

👷 Continuous Integration

Simplify CI by putting similar steps into a single action file (#2444) @DanielNoord

📦 Dependencies

Bump actions/checkout from 5 to 6 in the github-actions group (#2451) @dependabot[bot]

Bump astral-sh/setup-uv from 6 to 7 in the github-actions group (#2441) @dependabot[bot]

Changelog

Sourced from isort's changelog.

8.0.0 February 19 2026

Removed --old-finders and --magic-placement flags and old_finders configuration option. The legacy finder logic that relied on environment introspection has been removed (#2445) @joao-faria-dev

Update the plone profile to not clash with black (#2456) @ale-rt

6.1.0 October 1 2025

Add python 3.14 classifier and badge (#2409) @staticdev

Drop use of non-standard pkg_resources API (#2405) @dvarrazzo

6.0.1 Febuary 26 2025

Add OSError handling in find_imports_in_file (#2331) @kobarity

6.0.0 January 27 2025

Remove support for Python 3.8 (#2327) @DanielNoord

Python 3.13 support (#2306) @mayty

Speed up exists_case_sensitive calls (#2264) @correctmost

Ensure that split_on_trailing_comma works with as imports (#2340) @DanielNoord

Black profile: enable magic comma (#2236) @MrMino

Update line_length and single_line_exclusions in google profile (#2149) @jagapiou

Allow --diff to be used with --jobs (#2302) @mnakama

Fix wemake profile to have correct character limit (#2241) @sobolevn

Fix sort_reexports code mangling (#2283) @Helveg

Fix correct group by package tokenization (#2136) @glasnt

5.13.2 December 13 2023

Apply the bracket fix from issue #471 only for use_parentheses=True (#2184) @bp72

Confine pre-commit to stages (#2213) @davidculley

Fixed colors extras (#2212) @staticdev

5.13.1 December 11 2023

Fixed integration tests (#2208) @bp72

Fixed normalizing imports from more than one level of parent modules (issue/2152) (#2191) @bp72

Remove optional dependencies without extras (#2207) @staticdev

5.13.0 December 9 2023

Cleanup deprecated extras (#2089) @staticdev

Fixed #1989: settings lookup when working in stream based mode

Fixed 80 line length for wemake linter (#2183) @skatromb

Add support for Python 3.12 (#2175) @hugovk

Fixed: add newest version to pre-commit docs (#2190) @AzulGarza

Fixed assertions in test_git_hook (#2196) @mgorny

Removed check for include_trailing_comma for the Hanging Indent wrap mode (#2192) @bp72

Use the standard library tomllib on sufficiently new python (#2202) @eli-schwartz

Update pre-commit.md version number (#2197) @nicobako

... (truncated)

Commits

3459bde Merge pull request #2460 from PyCQA/DanielNoord-patch-1
6e70bb6 Update CHANGELOG for version 8.0.0
b0f2dab Merge pull request #2458 from skv0zsneg/issue/1882
313797b Fix lint.
7d3a6f5 Add ignore for cyclomatic complexity check.
6b9f895 Remove debug prints.
45f2497 Add tests for edge case future imports handler.
fe57bfd Add edge case future imports handler.
e8c127b Merge pull request #2457 from ale-rt/ale/2456/fix-plone-profile
293c201 Fix the Plone profile to be compatible with black
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Resolves #2460
Resolves #2458
Resolves #2457
Resolves #2450
Resolves #2427
Resolves #2449
Resolves #2448
Resolves #2446
Resolves #2437
Resolves #2436
Resolves #1964
Resolves #1965
Resolves #2434
Resolves #2442
Resolves #2444
Resolves #2451
Resolves #2441
Resolves #2445
Resolves #2456
Resolves #2409
Resolves #2405
Resolves #2331
Resolves #2327
Resolves #2306
Resolves #2264
Resolves #2340
Resolves #2236
Resolves #2149
Resolves #2302
Resolves #2241
Resolves #2283
Resolves #2136
Resolves #471
Resolves #2184
Resolves #2213
Resolves #2212
Resolves #2208
Resolves #2191
Resolves #2207
Resolves #2089
Resolves #1989
Resolves #2183
Resolves #2175
Resolves #2190
Resolves #2196
Resolves #2192
Resolves #2202
Resolves #2197

github-actions · 2026-03-12T16:45:45Z

🤖 Claude Code Review

PR Code Review

This PR bumps isort from 7.0.0 to 8.0.0 for Python > 3.11.

Code Quality

✅ No commented-out code
✅ Meaningful variable names (N/A)
✅ DRY principle followed (N/A)
✅ No defects or logic errors — straightforward dependency version bump
✅ CLAUDE.md looks appropriately general for any developer environment

Testing

✅ No new code logic requiring unit tests — dependency bump only
✅ Existing CI across Python versions (3.10–3.13) will validate compatibility

Documentation

❌ CHANGELOG.md — No changelog entry for this dependency bump. Dependency updates should be noted.

Security

✅ No hardcoded credentials
✅ No sensitive data
✅ No license files checked in

Summary

A minimal, clean dependency bump. The only notable gap is a missing `CHANGELOG.md` entry for the `isort` version update (`pyproject.toml:76`). Everything else looks fine.

Automated code review analyzing defects and coding standards

Bumps [isort](https://github.com/PyCQA/isort) from 7.0.0 to 8.0.0. - [Release notes](https://github.com/PyCQA/isort/releases) - [Changelog](https://github.com/PyCQA/isort/blob/main/CHANGELOG.md) - [Commits](PyCQA/isort@7.0.0...8.0.0) --- updated-dependencies: - dependency-name: isort dependency-version: 8.0.0 dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2026-03-12T18:43:56Z

🤖 Claude Code Review

PR Code Review

Summary: This is a minimal dependency bump — upgrading isort from 7.0.0 to 8.0.0 for Python > 3.11.

Code Quality

✅ Style guide: Single-line change in pyproject.toml, no style concerns.
✅ No commented-out code
✅ Meaningful variable names: N/A
✅ DRY principle: N/A
✅ Defects: No logic errors. The version constraint python_version > '3.11' is consistent with the existing pattern. Note that isort==8.0.0 is a major version bump and may introduce breaking changes to import sorting behavior — verify that CI passes with reformatted imports.
✅ CLAUDE.md: No issues.

Testing

✅ Unit/integration tests: N/A for a dependency version bump.
⚠️ Edge cases: As a major version bump (7.x → 8.x), isort may reorder imports differently. Recommend running isort src/ tests/ examples/ locally and confirming no unexpected diffs are introduced. CI linting checks should catch this.

Documentation

✅ README: No update needed for a dev-dependency bump.
✅ CHANGELOG.md: Not present in this diff. If the project maintains a changelog, a note for the dependency bump is recommended but not critical for a dev/lint dependency.
✅ Markdown formatting: N/A

Security

✅ No hardcoded credentials
✅ No sensitive data
✅ No license files (.lic) checked in
✅ No security concerns for this change.

Overall: ✅ Approved with a minor advisory. This is a straightforward dependency bump. The only risk is import ordering changes from the `isort` major version bump — ensure CI linting passes cleanly before merging.

Automated code review analyzing defects and coding standards

github-actions · 2026-03-12T18:50:19Z

🤖 Claude Code Review

PR Code Review

Code Quality

✅ Code follows style guide - Dependency version bumps are straightforward and follow existing patterns.

✅ No commented-out code - Clean diff.

✅ Meaningful variable names - N/A for this change.

✅ DRY principle followed - N/A for this change.

✅ No defects identified - The changes are simple version bumps for isort (7.0.0 → 8.0.0) and pylint (4.0.4 → 4.0.5) for Python > 3.11. No logic errors or security concerns.

✅ CLAUDE.md - The project instructions look appropriate and general enough for any developer.

Testing

✅ No new functions - This is a dependency update only; no new tests required.

Documentation

⚠️ CHANGELOG.md - Unable to verify if CHANGELOG.md was updated (not included in the diff). Dependency bumps typically warrant a changelog entry.

✅ README - No changes needed for dependency version bumps.

Security

✅ No hardcoded credentials - N/A.

✅ No license files (.lic) - None present.

Summary

This is a straightforward dependency bump PR:

isort 7.0.0 → 8.0.0 (minor version bump — note this is a major version change; confirm no breaking changes in isort 8.x affect import sorting behavior)
pylint 4.0.4 → 4.0.5 (patch version bump — safe)

One concern worth noting: `isort 8.0.0` is a major version bump from 7.x. Major version changes can introduce breaking changes or alter formatting behavior. It's worth verifying that existing code still passes `isort` checks after this upgrade, and that CI passes without any import ordering diffs.

Automated code review analyzing defects and coding standards

dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Mar 12, 2026

dependabot bot requested a review from a team as a code owner March 12, 2026 16:45

dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Mar 12, 2026

dependabot bot force-pushed the dependabot/pip/isort-8.0.0 branch from e247d08 to cf6835f Compare March 12, 2026 18:43

Update dependencies

e2d1657

docktermj self-assigned this Mar 12, 2026

docktermj approved these changes Mar 12, 2026

View reviewed changes

docktermj merged commit 538e9ba into main Mar 12, 2026
13 checks passed

docktermj deleted the dependabot/pip/isort-8.0.0 branch March 12, 2026 18:52

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump isort from 7.0.0 to 8.0.0#97

Bump isort from 7.0.0 to 8.0.0#97
docktermj merged 2 commits intomainfrom
dependabot/pip/isort-8.0.0

dependabot bot commented on behalf of github Mar 12, 2026 •

edited by github-actions bot

Loading

Uh oh!

github-actions bot commented Mar 12, 2026

Uh oh!

github-actions bot commented Mar 12, 2026

Uh oh!

github-actions bot commented Mar 12, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot bot commented on behalf of github Mar 12, 2026 • edited by github-actions bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

8.0.0

Changes

🚀 Features

👷 Continuous Integration

📦 Dependencies

8.0.0 February 19 2026

6.1.0 October 1 2025

6.0.1 Febuary 26 2025

6.0.0 January 27 2025

5.13.2 December 13 2023

5.13.1 December 11 2023

5.13.0 December 9 2023

Uh oh!

github-actions bot commented Mar 12, 2026

🤖 Claude Code Review

PR Code Review

Code Quality

Testing

Documentation

Security

Summary

A minimal, clean dependency bump. The only notable gap is a missing CHANGELOG.md entry for the isort version update (pyproject.toml:76). Everything else looks fine.

Uh oh!

github-actions bot commented Mar 12, 2026

🤖 Claude Code Review

PR Code Review

Code Quality

Testing

Documentation

Security

Overall: ✅ Approved with a minor advisory. This is a straightforward dependency bump. The only risk is import ordering changes from the isort major version bump — ensure CI linting passes cleanly before merging.

Uh oh!

github-actions bot commented Mar 12, 2026

🤖 Claude Code Review

PR Code Review

Code Quality

Testing

Documentation

Security

Summary

One concern worth noting: isort 8.0.0 is a major version bump from 7.x. Major version changes can introduce breaking changes or alter formatting behavior. It's worth verifying that existing code still passes isort checks after this upgrade, and that CI passes without any import ordering diffs.

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot bot commented on behalf of github Mar 12, 2026 •

edited by github-actions bot

Loading

A minimal, clean dependency bump. The only notable gap is a missing `CHANGELOG.md` entry for the `isort` version update (`pyproject.toml:76`). Everything else looks fine.

Overall: ✅ Approved with a minor advisory. This is a straightforward dependency bump. The only risk is import ordering changes from the `isort` major version bump — ensure CI linting passes cleanly before merging.

One concern worth noting: `isort 8.0.0` is a major version bump from 7.x. Major version changes can introduce breaking changes or alter formatting behavior. It's worth verifying that existing code still passes `isort` checks after this upgrade, and that CI passes without any import ordering diffs.