Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Bumps [ruff](https://github.com/astral-sh/ruff) from 0.14.2 to 0.14.8.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/astral-sh/ruff/releases">ruff's releases</a>.</em></p>
<blockquote>
<h2>0.14.8</h2>
<h2>Release Notes</h2>
<p>Released on 2025-12-04.</p>
<h3>Preview features</h3>
<ul>
<li>[<code>flake8-bugbear</code>] Catch <code>yield</code> expressions within other statements (<code>B901</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/21200">#21200</a>)</li>
<li>[<code>flake8-use-pathlib</code>] Mark fixes unsafe for return type changes (<code>PTH104</code>, <code>PTH105</code>, <code>PTH109</code>, <code>PTH115</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/21440">#21440</a>)</li>
</ul>
<h3>Bug fixes</h3>
<ul>
<li>Fix syntax error false positives for <code>await</code> outside functions (<a href="https://redirect.github.com/astral-sh/ruff/pull/21763">#21763</a>)</li>
<li>[<code>flake8-simplify</code>] Fix truthiness assumption for non-iterable arguments in tuple/list/set calls (<code>SIM222</code>, <code>SIM223</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/21479">#21479</a>)</li>
</ul>
<h3>Documentation</h3>
<ul>
<li>Suggest using <code>--output-file</code> option in GitLab integration (<a href="https://redirect.github.com/astral-sh/ruff/pull/21706">#21706</a>)</li>
</ul>
<h3>Other changes</h3>
<ul>
<li>[syntax-error] Default type parameter followed by non-default type parameter (<a href="https://redirect.github.com/astral-sh/ruff/pull/21657">#21657</a>)</li>
</ul>
<h3>Contributors</h3>
<ul>
<li><a href="https://github.com/kieran-ryan"><code>@kieran-ryan</code></a></li>
<li><a href="https://github.com/11happy"><code>@11happy</code></a></li>
<li><a href="https://github.com/danparizher"><code>@danparizher</code></a></li>
<li><a href="https://github.com/ntBre"><code>@ntBre</code></a></li>
</ul>
<h2>Install ruff 0.14.8</h2>
<h3>Install prebuilt binaries via shell script</h3>
<pre lang="sh"><code>curl --proto '=https' --tlsv1.2 -LsSf https://github.com/astral-sh/ruff/releases/download/0.14.8/ruff-installer.sh | sh
</code></pre>
<h3>Install prebuilt binaries via powershell script</h3>
<pre lang="sh"><code>powershell -ExecutionPolicy Bypass -c "irm https://github.com/astral-sh/ruff/releases/download/0.14.8/ruff-installer.ps1 | iex"
</code></pre>
<h2>Download ruff 0.14.8</h2>
<table>
<thead>
<tr>
<th>File</th>
<th>Platform</th>
<th>Checksum</th>
</tr>
</thead>
<tbody>
<tr>
<td><a href="https://github.com/astral-sh/ruff/releases/download/0.14.8/ruff-aarch64-apple-darwin.tar.gz">ruff-aarch64-apple-darwin.tar.gz</a></td>
<td>Apple Silicon macOS</td>
<td><a href="https://github.com/astral-sh/ruff/releases/download/0.14.8/ruff-aarch64-apple-darwin.tar.gz.sha256">checksum</a></td>
</tr>
<tr>
<td><a href="https://github.com/astral-sh/ruff/releases/download/0.14.8/ruff-x86_64-apple-darwin.tar.gz">ruff-x86_64-apple-darwin.tar.gz</a></td>
<td>Intel macOS</td>
<td><a href="https://github.com/astral-sh/ruff/releases/download/0.14.8/ruff-x86_64-apple-darwin.tar.gz.sha256">checksum</a></td>
</tr>
</tbody>
</table>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md">ruff's changelog</a>.</em></p>
<blockquote>
<h2>0.14.8</h2>
<p>Released on 2025-12-04.</p>
<h3>Preview features</h3>
<ul>
<li>[<code>flake8-bugbear</code>] Catch <code>yield</code> expressions within other statements (<code>B901</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/21200">#21200</a>)</li>
<li>[<code>flake8-use-pathlib</code>] Mark fixes unsafe for return type changes (<code>PTH104</code>, <code>PTH105</code>, <code>PTH109</code>, <code>PTH115</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/21440">#21440</a>)</li>
</ul>
<h3>Bug fixes</h3>
<ul>
<li>Fix syntax error false positives for <code>await</code> outside functions (<a href="https://redirect.github.com/astral-sh/ruff/pull/21763">#21763</a>)</li>
<li>[<code>flake8-simplify</code>] Fix truthiness assumption for non-iterable arguments in tuple/list/set calls (<code>SIM222</code>, <code>SIM223</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/21479">#21479</a>)</li>
</ul>
<h3>Documentation</h3>
<ul>
<li>Suggest using <code>--output-file</code> option in GitLab integration (<a href="https://redirect.github.com/astral-sh/ruff/pull/21706">#21706</a>)</li>
</ul>
<h3>Other changes</h3>
<ul>
<li>[syntax-error] Default type parameter followed by non-default type parameter (<a href="https://redirect.github.com/astral-sh/ruff/pull/21657">#21657</a>)</li>
</ul>
<h3>Contributors</h3>
<ul>
<li><a href="https://github.com/kieran-ryan"><code>@kieran-ryan</code></a></li>
<li><a href="https://github.com/11happy"><code>@11happy</code></a></li>
<li><a href="https://github.com/danparizher"><code>@danparizher</code></a></li>
<li><a href="https://github.com/ntBre"><code>@ntBre</code></a></li>
</ul>
<h2>0.14.7</h2>
<p>Released on 2025-11-28.</p>
<h3>Preview features</h3>
<ul>
<li>[<code>flake8-bandit</code>] Handle string literal bindings in suspicious-url-open-usage (<code>S310</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/21469">#21469</a>)</li>
<li>[<code>pylint</code>] Fix <code>PLR1708</code> false positives on nested functions (<a href="https://redirect.github.com/astral-sh/ruff/pull/21177">#21177</a>)</li>
<li>[<code>pylint</code>] Fix suppression for empty dict without tuple key annotation (<code>PLE1141</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/21290">#21290</a>)</li>
<li>[<code>ruff</code>] Add rule <code>RUF066</code> to detect unnecessary class properties (<a href="https://redirect.github.com/astral-sh/ruff/pull/21535">#21535</a>)</li>
<li>[<code>ruff</code>] Catch more dummy variable uses (<code>RUF052</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/19799">#19799</a>)</li>
</ul>
<h3>Bug fixes</h3>
<ul>
<li>[server] Set severity for non-rule diagnostics (<a href="https://redirect.github.com/astral-sh/ruff/pull/21559">#21559</a>)</li>
<li>[<code>flake8-implicit-str-concat</code>] Avoid invalid fix in (<code>ISC003</code>) (<a href="https://redirect.github.com/astral-sh/ruff/pull/21517">#21517</a>)</li>
<li>[<code>parser</code>] Fix panic when parsing IPython escape command expressions (<a href="https://redirect.github.com/astral-sh/ruff/pull/21480">#21480</a>)</li>
</ul>
<h3>CLI</h3>
<ul>
<li>Show partial fixability indicator in statistics output (<a href="https://redirect.github.com/astral-sh/ruff/pull/21513">#21513</a>)</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/astral-sh/ruff/commit/9d4f1c6ae24b75642a586531f4c668213fbac3fb"><code>9d4f1c6</code></a> Bump 0.14.8 (<a href="https://redirect.github.com/astral-sh/ruff/issues/21791">#21791</a>)</li>
<li><a href="https://github.com/astral-sh/ruff/commit/326025d45f87548caba9a56c5606d80f85abc5ff"><code>326025d</code></a> [ty] Always register rename provider if client doesn't support dynamic regist...</li>
<li><a href="https://github.com/astral-sh/ruff/commit/3aefe85b32ff698b1a2086c2b50ff38af5c9dbed"><code>3aefe85</code></a> [ty] Ensure <code>rename</code> <code>CursorTest</code> calls <code>can_rename</code> before renaming (<a href="https://redirect.github.com/astral-sh/ruff/issues/21790">#21790</a>)</li>
<li><a href="https://github.com/astral-sh/ruff/commit/b8ecc83a54fd5d7955bf1ab4fb82fe18dcb52283"><code>b8ecc83</code></a> Fix clippy errors on <code>main</code> (<a href="https://redirect.github.com/astral-sh/ruff/issues/21788">#21788</a>)</li>
<li><a href="https://github.com/astral-sh/ruff/commit/6491932757ca6365bd11b8241266d81c045f7a8b"><code>6491932</code></a> [ty] Fix crash when hovering an unknown string annotation (<a href="https://redirect.github.com/astral-sh/ruff/issues/21782">#21782</a>)</li>
<li><a href="https://github.com/astral-sh/ruff/commit/a9f2bb41bd802c9f4db417e3fec8324cf6207868"><code>a9f2bb4</code></a> [ty] Don't send publish diagnostics for clients supporting pull diagnostics (...</li>
<li><a href="https://github.com/astral-sh/ruff/commit/e2b72fbf99920c5621243ee67e1028844a841d35"><code>e2b72fb</code></a> [ty] cleanup test path (<a href="https://redirect.github.com/astral-sh/ruff/issues/21781">#21781</a>)</li>
<li><a href="https://github.com/astral-sh/ruff/commit/14fce0d44003ea30c30eb555344bd319da511380"><code>14fce0d</code></a> [ty] Improve the display of various special-form types (<a href="https://redirect.github.com/astral-sh/ruff/issues/21775">#21775</a>)</li>
<li><a href="https://github.com/astral-sh/ruff/commit/8ebecb2a88d664a6291af71805b8f6876f414815"><code>8ebecb2</code></a> [ty] Add subdiagnostic hint if the user wrote <code>X = Any</code> rather than <code>X: Any</code> ...</li>
<li><a href="https://github.com/astral-sh/ruff/commit/45ac30a4d762c9c564d45bb66df813666682e78e"><code>45ac30a</code></a> [ty] Teach <code>ty</code> the meaning of desperation (try ancestor <code>pyproject.toml</code>s as...</li>
<li>Additional commits viewable in <a href="https://github.com/astral-sh/ruff/compare/0.14.2...0.14.8">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Bumps ruff from 0.14.2 to 0.14.8.
Release notes
Sourced from ruff's releases.
... (truncated)
Changelog
Sourced from ruff's changelog.
... (truncated)
Commits
9d4f1c6Bump 0.14.8 (#21791)326025d[ty] Always register rename provider if client doesn't support dynamic regist...3aefe85[ty] EnsurerenameCursorTestcallscan_renamebefore renaming (#21790)b8ecc83Fix clippy errors onmain(#21788)6491932[ty] Fix crash when hovering an unknown string annotation (#21782)a9f2bb4[ty] Don't send publish diagnostics for clients supporting pull diagnostics (...e2b72fb[ty] cleanup test path (#21781)14fce0d[ty] Improve the display of various special-form types (#21775)8ebecb2[ty] Add subdiagnostic hint if the user wroteX = Anyrather thanX: Any...45ac30a[ty] Teachtythe meaning of desperation (try ancestorpyproject.tomls as...Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)