Update all dependencies#65
Open
renovate[bot] wants to merge 1 commit into
Open
Conversation
b2ea717 to
1de70e5
Compare
1de70e5 to
a37722c
Compare
a37722c to
5868cfe
Compare
496ca9c to
8eba457
Compare
1ecf877 to
23fcabe
Compare
f3242b5 to
aaae1a3
Compare
2f44e26 to
019c492
Compare
019c492 to
88b3352
Compare
390516c to
0d2d39f
Compare
0d2d39f to
cd36e0d
Compare
cd36e0d to
bc6126e
Compare
bc6126e to
f0c68b7
Compare
1cae755 to
5284c15
Compare
cc75f9e to
eb6ff6d
Compare
eb6ff6d to
f9f76b2
Compare
f9f76b2 to
505afa6
Compare
f03525e to
ce46521
Compare
ce46521 to
a30dcae
Compare
a30dcae to
7d8102d
Compare
7d8102d to
066f259
Compare
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
066f259 to
25db451
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
v4→v6v4→v8v5→v6v4→v7^3.0.0→^4.0.0^0.5.0→^0.6.0Release Notes
actions/checkout (actions/checkout)
v6.0.3Compare Source
v6.0.2Compare Source
v6.0.1Compare Source
v6.0.0Compare Source
v6Compare Source
v5.0.1Compare Source
What's Changed
Full Changelog: actions/checkout@v5...v5.0.1
v5.0.0Compare Source
What's Changed
v2.327.1
Release Notes
Make sure your runner is updated to this version or newer to use this release.
Full Changelog: actions/checkout@v4...v5.0.0
v5Compare Source
actions/download-artifact (actions/download-artifact)
v8.0.1Compare Source
What's Changed
Full Changelog: actions/download-artifact@v8...v8.0.1
v8.0.0Compare Source
v8 - What's new
Direct downloads
To support direct uploads in
actions/upload-artifact, the action will no longer attempt to unzip all downloaded files. Instead, the action checks theContent-Typeheader ahead of unzipping and skips non-zipped files. Callers wishing to download a zipped file as-is can also set the newskip-decompressparameter tofalse.Enforced checks (breaking)
A previous release introduced digest checks on the download. If a download hash didn't match the expected hash from the server, the action would log a warning. Callers can now configure the behavior on mismatch with the
digest-mismatchparameter. To be secure by default, we are now defaulting the behavior toerrorwhich will fail the workflow run.ESM
To support new versions of the @actions/* packages, we've upgraded the package to ESM.
What's Changed
errorby @danwkennedy in #461Full Changelog: actions/download-artifact@v7...v8.0.0
v8Compare Source
v7.0.0Compare Source
v7 - What's new
Node.js 24
This release updates the runtime to Node.js 24. v6 had preliminary support for Node 24, however this action was by default still running on Node.js 20. Now this action by default will run on Node.js 24.
What's Changed
New Contributors
Full Changelog: actions/download-artifact@v6.0.0...v7.0.0
v7Compare Source
v6.0.0Compare Source
What's Changed
BREAKING CHANGE: this update supports Node
v24.x. This is not a breaking change per-se but we're treating it as such.@actions/artifacttov4.0.0v6.0.0by @danwkennedy in #438New Contributors
Full Changelog: actions/download-artifact@v5...v6.0.0
v6Compare Source
v5.0.0Compare Source
What's Changed
v5.0.0
🚨 Breaking Change
This release fixes an inconsistency in path behavior for single artifact downloads by ID. If you're downloading single artifacts by ID, the output path may change.
What Changed
Previously, single artifact downloads behaved differently depending on how you specified the artifact:
name: my-artifact→ extracted topath/(direct)artifact-ids: 12345→ extracted topath/my-artifact/(nested)Now both methods are consistent:
name: my-artifact→ extracted topath/(unchanged)artifact-ids: 12345→ extracted topath/(fixed - now direct)Migration Guide
✅ No Action Needed If:
merge-multiple: trueas a workaroundYou download single artifacts by ID and your workflows expect the nested directory structure.
Before v5 (nested structure):
To maintain old behavior (if needed):
New Contributors
Full Changelog: actions/download-artifact@v4...v5.0.0
v5Compare Source
actions/setup-python (actions/setup-python)
v6.2.0Compare Source
v6.1.0Compare Source
What's Changed
Enhancements:
pip-installinput by @gowridurgad in #1201Dependency and Documentation updates:
allow-prereleasesby @yarikoptic in #979New Contributors
Full Changelog: actions/setup-python@v6...v6.1.0
v6.0.0Compare Source
What's Changed
Breaking Changes
Make sure your runner is on version v2.327.1 or later to ensure compatibility with this release. See Release Notes
Enhancements:
pip-versionby @priyagupta108 in #1129Bug fixes:
Dependency updates:
New Contributors
Full Changelog: actions/setup-python@v5...v6.0.0
v6Compare Source
actions/upload-artifact (actions/upload-artifact)
v7.0.1Compare Source
What's Changed
Full Changelog: actions/upload-artifact@v7...v7.0.1
v7.0.0Compare Source
v7 What's new
Direct Uploads
Adds support for uploading single files directly (unzipped). Callers can set the new
archiveparameter tofalseto skip zipping the file during upload. Right now, we only support single files. The action will fail if the glob passed resolves to multiple files. Thenameparameter is also ignored with this setting. Instead, the name of the artifact will be the name of the uploaded file.ESM
To support new versions of the
@actions/*packages, we've upgraded the package to ESM.What's Changed
New Contributors
Full Changelog: actions/upload-artifact@v6...v7.0.0
v7Compare Source
v6.0.0Compare Source
v6Compare Source
v5.0.0Compare Source
v5Compare Source
pylint-dev/pylint (pylint)
v4.0.6Compare Source
What's new in Pylint 4.0.6?
Release date: 2026-06-14
False Positives Fixed
implicit-str-concatis no longer emitted for an implicit concatenation ofa raw string with a non-raw one (e.g.
r"\d" "\n"). Such literals cannot bemerged into a single string, so the concatenation is intentional rather than a
forgotten comma.
Closes #6663
Fix a false positive for
invalid-name(C0103) where the defaulttypevar-rgxrejectedTypeVarnames containing digits, such asEc2T.Closes #8499
Fix a false positive for
too-many-argumentsin (non-static) methods and classmethods.Closes #8675
Fix a false positive for
no-memberwhen a value is inferred to severalpossible types and at least one of them defines a dynamic
__getattr__.Closes #9833
Fix a false positive for
function-redefined(E0102) when reusing names thatmatch
dummy-variables-rgx(such as_), which is common forpytest-bddstep definitions. This restores the behavior from before pylint4.0.0; as a consequence the false negative fixed in #9894 is reintroduced for
functions whose name matches
dummy-variables-rgx.Closes #10665
Fix
undefined-variablefalse positive when a name used as ametaclassargument in a nested class is referenced again later in the module.
Closes #10823
Fix a false positive for
unused-variablewhere global variables matchingdummy-variables-rgxwere still reported as unused whenallow-global-unused-variableswas disabled.Closes #10890
Fix a false positive for
bad-dunder-namewhen there is a user-defined__suppress_context__attribute on exception subclasses.Closes #10960
Fix
used-before-assignmentfalse positive for names bound byfrom X import *in every branch of anif/elif/elsechain.Refs #10980
Check for metaclass call signature when evaluating arguments of a class call.
Closes #11032
Fix false positive
method-hiddenwhencached_propertyis imported directly withfrom functools import cached_property.Refs #11037
Other Bug Fixes
Fix the suggestion of
unnecessary-comprehensionfor a dict comprehensionthat iterates a dict directly, e.g.
{a: b for a, b in d}. Iterating a dictyields its keys, so the suggestion is now
dict(d.keys())instead of theincorrect
dict(d), which would simply copyd.Closes #8256
Fix a crash in
consider-using-enumeratewhen theforloop target is an attribute (e.g.for self.idx in range(len(x))) rather than a simple variable name.Closes #10099
Fix crash when checking
attribute-defined-outside-initon classes that inherit from a base class pylint cannot fully analyze.Closes #10892
Fix
add_messagesilently overwriting an explicitcol_offset=0(or any other zero-valuedline/end_lineno/end_col_offset) with the AST node's value. The internal_add_one_messagehelper used a falsey check (if not col_offset:) to detect an omitted argument, which incorrectly treated a legitimate0the same asNone. It now uses an identity check againstNone.Refs #11020
Fix a crash in the name checker when a non-constant value is passed as the
covariantorcontravariantargument of aTypeVar.Closes #11022
Fix a crash in the variable checker when a name resolves to a dataclass-synthesized
__init__, which has no line number.Closes #11023
Fix a crash in the variables checker when
NotImplementedis used as the test of anifstatement, which raised aTypeErrorin a boolean context on Python 3.14.Closes #11025
Avoided a crash from the implicit booleaness checker for
len()calls without arguments.Closes #11028
Fix a crash in the variables checker when a class declares a metaclass whose
attribute-access chain does not bottom out at a name (e.g.
class C(metaclass=None._)).Originally reported as
pylint-dev/astroid#3066.Refs #11031
Fix a crash in the name checker when a chained assignment of a
TypeAliasvalue has a non-name target such as a
Subscript(for examplea[0] = b = TypeAlias).Closes #11056
Fix a crash in the deprecated checker when
__import__is called with anon-string constant argument (for example
__import__(1)).Closes #11059
Avoid crashing when enum member inference fails while checking enum subclasses.
Closes #11069
Prevent a crash in
unexpected-keyword-arganalysis wheninfer_call_result()raisesInferenceErrorwhile inspectingdecorator return signatures.
Closes #11070
Fix a crash in the typecheck checker when a class uses a non-class object
(for example a function) as its
metaclass=argument.Closes #11071
Allow digits in ParamSpec and TypeVarTuple names for
invalid-namecheck.The default
paramspec-rgxandtypevartuple-rgxpatterns rejected namescontaining digits (e.g.
Ec2P,S3Ts), emitting a falseinvalid-name(C0103). Allow digits in the lowercase segments, consistent with the
typevarandtypealiaspatterns.Closes #11090
Performance Improvements
The duplicate-code checker no longer runs when its message (R0801) is disabled, even if
reports=yesis set. Previously, the checker's report (RP0801) would cause the expensive similarity computation to run regardless.Closes #3443
v4.0.5Compare Source
What's new in Pylint 4.0.5?
Release date: 2026-02-20
False Positives Fixed
Fix possibly-used-before-assignment false positive when using self.fail() in tests.
Closes #10743
Fixed false positive for
logging-unsupported-formatwhen no arguments are provided to logging functions.According to Python's logging documentation, no formatting is performed when no arguments are supplied, so strings like
logging.error("%test")are valid.Closes #10752
Fix a false positive for
invalid-namewhere a dataclass field typed withFinalwas evaluated against the
class_constregex instead of theclass_attributeregex.Closes #10790
Avoid emitting
unspecified-encoding(W1514) whenpy-versionis 3.15+.Refs #10791
Other Bug Fixes
Fix
--known_third_partyconfig being ignored.Closes #10801
Fixed dynamic color mapping for "fail-on" messages when using multiple reporter/output formats.
Closes #10825
dependency on isort is now set to <9, permitting to use isort 8.
Closes #10857
v4.0.4Compare Source
What's new in Pylint 4.0.4?
Release date: 2025-11-30
False Positives Fixed
Fixed false positive for
invalid-namewhere module-level constants were incorrectly classified as variables when a class-level attribute with the same name exists.Closes #10719
Fix a false positive for
invalid-nameon an UPPER_CASED name inside anifbranch that assigns an object.Closes #10745
v4.0.3Compare Source
What's new in Pylint 4.0.3?
Release date: 2025-11-13
False Positives Fixed
Add Enum dunder methods
_generate_next_value_,_missing_,_numeric_repr_,_add_alias_, and_add_value_alias_to the list passed to--good-dunder-names.Closes #10435
Fixed false positive for
invalid-namewithtyping.Annotated.Closes #10696
Fix false positive for
f-string-without-interpolationwith template stringswhen using format spec.
Closes #10702
Fix a false positive when an UPPER_CASED class attribute was raising an
invalid-namewhen typed withFinal.Closes #10711
Fix a false positive for
unbalanced-tuple-unpackingwhen a tuple is assigned to a function call and the structure of the function's return value is ambiguous.Closes #10721
Other Bug Fixes
Make 'ignore' option work as expected again.
Closes #10669
Fix crash for
consider-using-assignment-exprwhen a variable annotation without assignmentis used as the
iftest expression.Closes #10707
Fix crash for
prefer-typing-namedtupleandconsider-math-not-floatwhena
sliceobject is called.Closes #10708
v4.0.2Compare Source
False Positives Fixed
Fix false positive for
invalid-nameon a partially uninferable module-level constant.Closes #10652
Fix a false positive for
invalid-nameon exclusive module-level assignmentscomposed of three or more branches. We won't raise
disallowed-nameon module-level names that can't be inferreduntil a further refactor to remove this false negative is done.
Closes #10664
Fix false positive for
invalid-nameforTypedDictinstances.Closes #10672
v4.0.1Compare Source
What's new in Pylint 4.0.1?
Release date: 2025-10-14
False Positives Fixed
Exclude
__all__and__future__.annotationsfromunused-variable.Closes #10019
Fix false-positive for
bare-name-capture-patternif a case guard is used.Closes #10647
Check enums created with the
Enum()functional syntax to pass against the--class-rgxfor theinvalid-namecheck, like other enums.Closes #10660
v4.0.0Compare Source
Pylint now supports Python 3.14.
Pylint's inference engine (
astroid) is now much more precise,understanding implicit booleanness and ternary expressions. (Thanks @zenlyj!)
Consider this example:
The required
astroidversion is now 4.0.0. See the astroid changelog for additional fixes, features, and performance improvements applicable to pylint.invalid-nameat the module level was patchy. Now,module-level constants that are reassigned are treated as variables and checked
against
--variable-rgxrather than--const-rgx. Module-level lists,sets, and objects can pass against either regex.
Here,
LIMITis reassigned, so pylint only uses--variable-rgx:If this is undesired, refactor using exclusive assignment so that it is
evident that this assignment happens only once:
Lists, sets, and objects still pass against either
const-rgxorvariable-rgxeven if reassigned, but are no longer completely skipped:
Remember to adjust the regexes and allow lists to your liking.
Breaking Changes
invalid-namenow distinguishes module-level constants that are assigned only oncefrom those that are reassigned and now applies
--variable-rgxto the latter. Valuesother than literals (lists, sets, objects) can pass against either the constant or
variable regexes (e.g. "LOGGER" or "logger" but not "LoGgEr").
Remember that
--good-namesor--good-names-rgxscan be provided to explicitlyallow good names.
Closes #3585
The unused
pylintrcargument toPyLinter.__init__()is deprecatedand will be removed.
Refs #6052
Commented out code blocks such as
# bar() # TODO: remove dead codewill no longer emitfixme.Refs #9255
pyreverseRunwas changed to no longer callsys.exit()in its__init__.You should now call
Run(args).run()which will return the exit code instead.Having a class that always raised a
SystemExitexception was considered a bug.Normal usage of pyreverse through the CLI will not be affected by this change.
Refs #9689
The
suggestion-modeoption was removed, as pylint now always emits user-friendly hints insteadof false-positive error messages. You should remove it from your conf if it's defined.
Refs #9962
The
async.pychecker module has been renamed toasync_checker.pysinceasyncis a Python keywordand cannot be imported directly. This allows for better testing and extensibility of the async checker functionality.
Refs #10071
The message-id of
continue-in-finallywas changed fromE0116toW0136. The warning isnow emitted for every Python version since it will raise a syntax warning in Python 3.14.
See PEP 765 - Disallow return/break/continue that exit a finally block.
Refs #10480
Removed support for
nmp.NaNalias fornumpy.NaNbeing recognized in ':ref:nan-comparison'. Usenpornumpyinstead.Refs #10583
Version requirement for
isorthas been bumped to >=5.0.0.The internal compatibility for older
isortversions exposed viapylint.utils.IsortDriverhasbeen removed.
Refs #10637
New Features
comparison-of-constantsnow uses the unicode from the ast instead of reformatting fromthe node's values preventing some bad formatting due to
utf-8limitation. The message now uses"instead of'to better work with what the python ast returns.Refs #8736
Enhanced pyreverse to properly distinguish between UML relationship types (association, aggregation, composition) based on object ownership semantics. Type annotations without assignment are now treated as associations, parameter assignments as aggregations, and object instantiation as compositions.
Closes #9045
Closes #9267
The
fixmecheck can now search through docstrings as well as comments, by usingcheck-fixme-in-docstring = truein the[tool.pylint.miscellaneous]section.Closes #9255
The
use-implicit-booleaness-not-xchecks now distinguish between comparisonsused in boolean contexts and those that are not, enabling them to provide more accurate refactoring suggestions.
Closes #9353
The verbose option now outputs the filenames of the files that have been checked.
Previously, it only included the number of checked and skipped files.
Closes #9357
colorized reporter now colorizes messages/categories that have been configured as
fail-onin red inverse.This makes it easier to quickly find the errors that are causing pylint CI job failures.
Closes #9898
Enhanced support for @property decorator in pyreverse to correctly display return types of annotated properties when generating class diagrams.
Closes #10057
Add --max-depth option to pyreverse to control diagram complexity. A depth of 0 shows only top-level packages, 1 shows one level of subpackages, etc.
This helps manage visualization of large codebases by limiting the depth of displayed packages and classes.
Refs #10077
Handle deferred evaluation of annotations in Python 3.14.
Closes #10149
Enhanced pyreverse to properly detect aggregations for comprehensions (list, dict, set, generator).
Closes #10236
pyreverse: add support for colorized output when using output formatmmd(MermaidJS) andhtml.Closes #10242
pypy 3.11 is now officially supported.
Refs #10287
Add support for Python 3.14.
Refs #10467
Add naming styles for
ParamSpecandTypeVarTuplethat align with theTypeVarstyle.Refs #10541
New Checks
Add
match-statementschecker and the following message:bare-name-capture-pattern.This will emit an error message when a name capture pattern is used in a match statement which would make the remaining patterns unreachable.
This code is a SyntaxError at runtime.
Closes #7128
Add new check
async-context-manager-with-regular-withto detect async context managers used with regularwithstatements instead ofasync with.Refs #10408
Add
break-in-finallywarning. Usingbreakinside thefinallyclausewill raise a syntax warning in Python 3.14.
See
PEP 765 - Disallow return/break/continue that exit a finally block <https://peps.python.org/pep-0765/>_.Refs #10480
Add new checks for invalid uses of class patterns in :keyword:
match.invalid-match-args-definitionis emitted if :py:data:object.__match_args__isn't a tuple of strings.too-many-positional-sub-patternsif there are more positional sub-patterns than specified in :py:data:object.__match_args__.multiple-class-sub-patternsif there are multiple sub-patterns for the same attribute.Refs #10559
Add additional checks for suboptimal uses of class patterns in :keyword:
match.match-class-bind-selfis emitted if a name is bound toselfinstead ofusing an
aspattern.match-class-positional-attributesis emitted if a class pattern has positionalattributes when keywords could be used.
Refs #10587
Add a
consider-math-not-floatmessage.float("nan")andfloat("inf")are slowerthan their counterpart
math.infandmath.nanby a factor of 4 (notwithstandingthe initial import of math) and they are also not well typed when using mypy.
This check also catches typos in float calls as a side effect.
The :ref:
pylint.extensions.code_styleneed to be activated for this check to work.Refs #10621
False Positives Fixed
Fix a false positive for
used-before-assignmentwhen a variable defined underan
ifand via a named expression (walrus operator) is used later when guardedunder the same
iftest.Closes #10061
Fix :ref:
no-name-in-modulefor members ofconcurrent.futureswith Python 3.14.Closes #10632
False Negatives Fixed
Fix false negative for
used-before-assignmentwhen aTYPE_CHECKINGimport is used as a type annotation prior to erroneous usage.Refs #8893
Match cases are now counted as edges in the McCabe graph and will increase the complexity accordingly.
Refs #9667
Check module-level constants with type annotations for
invalid-name.Remember to adjust
const-naming-styleorconst-rgxto your liking.Closes #9770
Fix false negative where function-redefined (E0102) was not reported for functions with a leading underscore.
Closes #9894
We now raise a
logging-too-few-argsfor format string with nointerpolation arguments at all (i.e. for something like
logging.debug("Awaiting process %s")or
logging.debug("Awaiting process {pid}")). Previously we did not raise for such case.Closes #9999
Fix false negative for
used-before-assignmentwhen a function is defined inside aTYPE_CHECKINGguard block and used later.Closes #10028
Fix a false negative for
possibly-used-before-assignmentwhen a variable is conditionally definedand later assigned to a type-annotated variable.
Closes #10421
Fix false negative for
deprecated-modulewhen a__import__method is used instead ofimportsentence.Refs #10453
Count match cases for
too-many-branchescheck.Refs #10542
Fix false-negative where :ref:
unused-importwas not reported for names referenced in a precedingglobalstatement.Refs #10633
Other Bug Fixes
When displaying unicode with surrogates (or other potential
UnicodeEncodeError),pylint will now display a '?' character (using
encode(encoding="utf-8", errors="replace"))instead of crashing. The functional tests classes are also updated to handle this case.
Closes #8736
Fixed unidiomatic-typecheck only checking left-hand side.
Closes #10217
Fix a crash caused by malformed format strings when using
.formatwith keyword arguments.Closes #10282
Fix false positive
inconsistent-return-statementswhen usingquit()orexit()functions.Closes #10508
Fix a crash in :ref:
nested-min-maxwhen usingbuiltins.minorbuiltins.maxinstead of
minormaxdirectly.Closes #10626
Fixed a crash in :ref:
unnecessary-dict-index-lookupwhen the index of an enumerated listwas deleted inside a for loop.
Closes #10627
Other Changes
Remove support for launching pylint with Python 3.9.
Code that supports Python 3.9 can still be linted with the
--py-version=3.9setting.Refs #10405
Internal Changes
Modified test framework to allow for different test output for different Python versions.
Refs #10382
sphinx-contrib/apidoc (sphinxcontrib-apidoc)
v0.6.0Compare Source
Configuration
📅 Schedule: (UTC)
* 0-3 * * 1)🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.