build(deps-dev): bump ruff from 0.15.20 to 0.16.1 - #69
Merged
Conversation
dependabot
Bot
added
dependencies
Bumps [ruff](https://github.com/astral-sh/ruff) from 0.15.20 to 0.16.1. - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.15.20...0.16.1) --- updated-dependencies: - dependency-name: ruff dependency-version: 0.16.1 dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
force-pushed
the
dependabot/uv/ruff-0.16.1
branch
from
August 5, 2026 00:35
54f5898 to
648ccc8
Compare
…ersion
Dependabot updated `pyproject.toml` and `uv.lock` and stopped there. Three
more pin sites carried 0.15.20, which is why `validation_lock_reproducible`
failed:
requirements-validation.lock
tests/test_validation_dependency_lock.py EXPECTED_VALIDATION_TOOLS
scripts/validate_release_python.py EXPECTED_TOOL_VERSIONS
Completing those is routine. What is not routine is what the bump does to
the lint gate. Measured, same scope (`src tests scripts`), same config:
ruff 0.15.20 All checks passed
ruff 0.16.1 937 errors
217 RUF100, 161 I001, 119 SIM117, 99 TRY004, 67 FURB162, 53 BLE001 and a
long tail. 0.16 widened its DEFAULT rule set, and this repository never
selected rules -- so the lint policy was silently whatever the installed
tool's default happened to be.
526 of those are auto-fixable, but the fixes land in `src/dumbmoney`,
including `ledger.py` and `calibration_ledger.py`, which are hash-pinned
into the published audit evidence. Adopting a broader rule set is a real
decision with a real diff and an evidence regeneration behind it. It does
not belong inside a version bump.
So the rule set is now pinned explicitly to ruff's historical defaults.
This RELAXES NOTHING: 0.15.20 still reports `All checks passed` under the
explicit list, which is the evidence that the list is exactly what was
already being enforced. 0.16.1 now passes too, and a future bump can no
longer rewrite the lint contract as a side effect.
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps ruff from 0.15.20 to 0.16.1.
Release notes
Sourced from ruff's releases.
... (truncated)
Changelog
Sourced from ruff's changelog.
... (truncated)
Commits
80790b3Bump 0.16.1 (#27330)63830f3[ty] Borrow from constraint set storage less often (#27328)f40dca9[ty] Preserve forwarded expanded-variadic diagnostic sources (#27266)0d80497Lint TOML files in the LSP (#26862)d91586bUpdate prek dependencies (#27293)7da4b8b[ty] Respect bounds and constraints in generic materializations (#27228)b20daf7[ty] refactor: add helper function to send partial results (#27249)4d4c8fa[ty] Emit diagnostic when specializing a non-generic class (#26883)7c3e2db[ty] Fix enum class container assignability (#27318)d5ef97f[flake8-return] Fix false positive when variable is read infinallyclaus...