chore(deps-dev): bump ruff from 0.15.21 to 0.15.22#247
Conversation
Bumps [ruff](https://github.com/astral-sh/ruff) from 0.15.21 to 0.15.22. - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.15.21...0.15.22) --- updated-dependencies: - dependency-name: ruff dependency-version: 0.15.22 dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
There was a problem hiding this comment.
LGTM — trivial dev-dependency lockfile bump.
Extended reasoning...
Overview
Single-line change in requirements-dev.txt, an auto-generated pip-compile lockfile. Bumps ruff (dev-only lint tool) from 0.15.21 to 0.15.22, a patch release. No application source files are touched.
Security risks
None. Ruff is a dev/lint tool, not a runtime dependency, and is not present in the shipped package. The version bump introduces no new transitive dependencies (no other lines changed in the lockfile).
Level of scrutiny
Minimal scrutiny is appropriate here — this is a mechanical, Dependabot-generated patch bump to a dev tool with no code path affecting production behavior.
Other factors
No CODEOWNERS-sensitive paths, no outstanding review comments on this PR, and no prior reviews to reconcile against.
Bumps ruff from 0.15.21 to 0.15.22.
Release notes
Sourced from ruff's releases.
... (truncated)
Changelog
Sourced from ruff's changelog.
Commits
0177a7eBump 0.15.22 (#26884)fe8ba85[pycodestyle] DocumentE731fix safety (#26847)f3cf7c8[ruff] Addrule-codes-in-selectors(RUF201) (#26772)d244fd7Document argfile support (#26803)f239758[flake8-pyi] Fix false positive in__all__(PYI053) (#26872)54acbcd[ty] SupportTypeVarTupleandUnpack(#25240)87fc38c[ty] Parallelize subtype hierarchy search (#26875)e454f91[ty] Share interned query keys across Salsa queries (#26794)6f361a7[ty] only collect expected types for files open in the editor (#25546)6d6b2b3[ty] Avoid allocations during Salsa interned lookups (#26877)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)