Bump ruff from 0.8.0 to 0.8.4

[dependabot]

Bumps ruff from 0.8.0 to 0.8.4.

Release notes

Sourced from ruff's releases.

0.8.4

Release Notes

Preview features

• [airflow] Extend AIR302 with additional functions and classes (#15015)
• [airflow] Implement moved-to-provider-in-3 for modules that has been moved to Airflow providers (AIR303) (#14764)
• [flake8-use-pathlib] Extend check for invalid path suffix to include the case "." (PTH210) (#14902)
• [perflint] Fix panic in PERF401 when list variable is after the for loop (#14971)
• [perflint] Simplify finding the loop target in PERF401 (#15025)
• [pylint] Preserve original value format (PLR6104) (#14978)
• [ruff] Avoid false positives for RUF027 for typing context bindings (#15037)
• [ruff] Check for ambiguous pattern passed to pytest.raises() (RUF043) (#14966)

Rule changes

• [flake8-bandit] Check S105 for annotated assignment (#15059)
• [flake8-pyi] More autofixes for redundant-none-literal (PYI061) (#14872)
• [pydocstyle] Skip leading whitespace for D403 (#14963)
• [ruff] Skip SQLModel base classes for mutable-class-default (RUF012) (#14949)

Bug

• [perflint] Parenthesize walrus expressions in autofix for manual-list-comprehension (PERF401) (#15050)

Server

• Check diagnostic refresh support from client capability which enables dynamic configuration for various editors (#15014)

Contributors

• @​AlexWaygood
• @​Daverball
• @​DimitriPapadopoulos
• @​InSyncWithFoo
• @​Lee-W
• @​MichaReiser
• @​TheBits
• @​cake-monotone
• @​carljm
• @​dcreager
• @​dhruvmanila
• @​dylwil3
• @​github-actions
• @​kiran-4444
• @​krishnan-chandra
• @​rchen152
• @​renovate
• @​sharkdp
• @​tarasmatsyk
• @​w0nder1ng

... (truncated)

Changelog

Sourced from ruff's changelog.

0.8.4

Preview features

• [airflow] Extend AIR302 with additional functions and classes (#15015)
• [airflow] Implement moved-to-provider-in-3 for modules that has been moved to Airflow providers (AIR303) (#14764)
• [flake8-use-pathlib] Extend check for invalid path suffix to include the case "." (PTH210) (#14902)
• [perflint] Fix panic in PERF401 when list variable is after the for loop (#14971)
• [perflint] Simplify finding the loop target in PERF401 (#15025)
• [pylint] Preserve original value format (PLR6104) (#14978)
• [ruff] Avoid false positives for RUF027 for typing context bindings (#15037)
• [ruff] Check for ambiguous pattern passed to pytest.raises() (RUF043) (#14966)

Rule changes

• [flake8-bandit] Check S105 for annotated assignment (#15059)
• [flake8-pyi] More autofixes for redundant-none-literal (PYI061) (#14872)
• [pydocstyle] Skip leading whitespace for D403 (#14963)
• [ruff] Skip SQLModel base classes for mutable-class-default (RUF012) (#14949)

Bug

• [perflint] Parenthesize walrus expressions in autofix for manual-list-comprehension (PERF401) (#15050)

Server

• Check diagnostic refresh support from client capability which enables dynamic configuration for various editors (#15014)

0.8.3

Preview features

• Fix fstring formatting removing overlong implicit concatenated string in expression part (#14811)
• [airflow] Add fix to remove deprecated keyword arguments (AIR302) (#14887)
• [airflow]: Extend rule to include deprecated names for Airflow 3.0 (AIR302) (#14765 and #14804)
• [flake8-bugbear] Improve error messages for except* (B025, B029, B030, B904) (#14815)
• [flake8-bugbear] itertools.batched() without explicit strict (B911) (#14408)
• [flake8-use-pathlib] Dotless suffix passed to Path.with_suffix() (PTH210) (#14779)
• [pylint] Include parentheses and multiple comparators in check for boolean-chained-comparison (PLR1716) (#14781)
• [ruff] Do not simplify round() calls (RUF046) (#14832)
• [ruff] Don't emit used-dummy-variable on function parameters (RUF052) (#14818)
• [ruff] Implement if-key-in-dict-del (RUF051) (#14553)
• [ruff] Mark autofix for RUF052 as always unsafe (#14824)
• [ruff] Teach autofix for used-dummy-variable about TypeVars etc. (RUF052) (#14819)

Rule changes

• [flake8-bugbear] Offer unsafe autofix for no-explicit-stacklevel (B028) (#14829)
• [flake8-pyi] Skip all type definitions in string-or-bytes-too-long (PYI053) (#14797)
• [pyupgrade] Do not report when a UTF-8 comment is followed by a non-UTF-8 one (UP009) (#14728)

... (truncated)

Commits

• 3bb0dac Bump version to 0.8.4 (#15064)
• 40cba5d [red-knot] Cleanup various todo_type!() messages (#15063)
• 596d80c [perflint] Parenthesize walrus expressions in autofix for `manual-list-comp...
• d8b9a36 Disable actionlint hook by default when running pre-commit locally (#15061)
• 85e71ba [flake8-bandit] Check S105 for annotated assignment (#15059)
• 2802cbd Don't special-case class instances in unary expression inference (#15045)
• ed2bce6 [red-knot] Report invalid exceptions (#15042)
• f0012df Fix typos in RUF043.py (#15044)
• 0fc4e8f Introduce InferContext (#14956)
• ac81c72 [ruff] Ambiguous pattern passed to pytest.raises() (RUF043) (#14966)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dryrunsecurity]

DryRun Security Summary

A GitHub Pull Request updates the ruff package version from 0.8.1 to 0.8.4 in the requirements-lint.txt file, representing a minor version update with potential bug fixes and improvements.

Expand for full summary

Summary:

The changes in this GitHub Pull Request are focused on updating the version of the ruff package in the requirements-lint.txt file, which is likely used for a linting tool or process. The patch updates the version from 0.8.1 to 0.8.4, which is a minor version update that typically includes bug fixes and improvements, but does not introduce major changes or new features.

From an application security perspective, this change is relatively low-risk, as linting tools are not directly involved in the application's runtime functionality or security-critical components. However, it is always a good practice to review the changelog or release notes for the updated package to ensure that there are no known security vulnerabilities or other issues that could impact the application's security posture. Additionally, it is recommended to thoroughly test the application after such updates to verify that the linting process and its results are still valid and do not introduce any regressions.

Files Changed:

• requirements-lint.txt: This file has been updated to change the version of the ruff package from 0.8.1 to 0.8.4.

Code Analysis

We ran 9 analyzers against 1 file and 0 analyzers had findings. 9 analyzers had no findings.

View PR in the DryRun Dashboard.