Skip to content

Bump ruff from 0.13.0 to 0.13.1#2710

Merged
liquidsec merged 1 commit into
devfrom
dependabot/pip/dev/ruff-0.13.1
Sep 24, 2025
Merged

Bump ruff from 0.13.0 to 0.13.1#2710
liquidsec merged 1 commit into
devfrom
dependabot/pip/dev/ruff-0.13.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 22, 2025

Copy link
Copy Markdown
Contributor

Bumps ruff from 0.13.0 to 0.13.1.

Release notes

Sourced from ruff's releases.

0.13.1

Release Notes

Released on 2025-09-18.

Preview features

  • [flake8-simplify] Detect unnecessary None default for additional key expression types (SIM910) (#20343)
  • [flake8-use-pathlib] Add fix for PTH123 (#20169)
  • [flake8-use-pathlib] Fix PTH101, PTH104, PTH105, PTH121 fixes (#20143)
  • [flake8-use-pathlib] Make PTH111 fix unsafe because it can change behavior (#20215)
  • [pycodestyle] Fix E301 to only trigger for functions immediately within a class (#19768)
  • [refurb] Mark single-item-membership-test fix as always unsafe (FURB171) (#20279)

Bug fixes

  • Handle t-strings for token-based rules and suppression comments (#20357)
  • [flake8-bandit] Fix truthiness: dict-only ** displays not truthy for shell (S602, S604, S609) (#20177)
  • [flake8-simplify] Fix diagnostic to show correct method name for str.rsplit calls (SIM905) (#20459)
  • [flynt] Use triple quotes for joined raw strings with newlines (FLY002) (#20197)
  • [pyupgrade] Fix false positive when class name is shadowed by local variable (UP008) (#20427)
  • [pyupgrade] Prevent infinite loop with I002 and UP026 (#20327)
  • [ruff] Recognize t-strings, generators, and lambdas in invalid-index-type (RUF016) (#20213)

Rule changes

  • [RUF102] Respect rule redirects in invalid rule code detection (#20245)
  • [flake8-bugbear] Mark the fix for unreliable-callable-check as always unsafe (B004) (#20318)
  • [ruff] Allow dataclass attribute value instantiation from nested frozen dataclass (RUF009) (#20352)

CLI

  • Add fixes to output-format=sarif (#20300)
  • Treat panics as fatal diagnostics, sort panics last (#20258)

Documentation

  • [ruff] Add analyze.string-imports-min-dots to settings (#20375)
  • Update README.md with Albumentations new repository URL (#20415)

Other changes

  • Bump MSRV to Rust 1.88 (#20470)
  • Enable inline noqa for multiline strings in playground (#20442)

Contributors

... (truncated)

Changelog

Sourced from ruff's changelog.

0.13.1

Released on 2025-09-18.

Preview features

  • [flake8-simplify] Detect unnecessary None default for additional key expression types (SIM910) (#20343)
  • [flake8-use-pathlib] Add fix for PTH123 (#20169)
  • [flake8-use-pathlib] Fix PTH101, PTH104, PTH105, PTH121 fixes (#20143)
  • [flake8-use-pathlib] Make PTH111 fix unsafe because it can change behavior (#20215)
  • [pycodestyle] Fix E301 to only trigger for functions immediately within a class (#19768)
  • [refurb] Mark single-item-membership-test fix as always unsafe (FURB171) (#20279)

Bug fixes

  • Handle t-strings for token-based rules and suppression comments (#20357)
  • [flake8-bandit] Fix truthiness: dict-only ** displays not truthy for shell (S602, S604, S609) (#20177)
  • [flake8-simplify] Fix diagnostic to show correct method name for str.rsplit calls (SIM905) (#20459)
  • [flynt] Use triple quotes for joined raw strings with newlines (FLY002) (#20197)
  • [pyupgrade] Fix false positive when class name is shadowed by local variable (UP008) (#20427)
  • [pyupgrade] Prevent infinite loop with I002 and UP026 (#20327)
  • [ruff] Recognize t-strings, generators, and lambdas in invalid-index-type (RUF016) (#20213)

Rule changes

  • [RUF102] Respect rule redirects in invalid rule code detection (#20245)
  • [flake8-bugbear] Mark the fix for unreliable-callable-check as always unsafe (B004) (#20318)
  • [ruff] Allow dataclass attribute value instantiation from nested frozen dataclass (RUF009) (#20352)

CLI

  • Add fixes to output-format=sarif (#20300)
  • Treat panics as fatal diagnostics, sort panics last (#20258)

Documentation

  • [ruff] Add analyze.string-imports-min-dots to settings (#20375)
  • Update README.md with Albumentations new repository URL (#20415)

Other changes

  • Bump MSRV to Rust 1.88 (#20470)
  • Enable inline noqa for multiline strings in playground (#20442)

Contributors

... (truncated)

Commits
  • 706be0a Add pyproject.toml to rooster config version_files and bump to 0.13.1 (#2...
  • 7b40428 Bump 0.13.1 (#20473)
  • b9b5755 Upgrade to the latest rooster version and include contributors in CHANGELOG (...
  • b4b5d67 [flynt] Use triple quotes for joined raw strings with newlines (FLY002) (...
  • 0b60584 Bump MSRV to Rust 1.88 (#20470)
  • 821b2f8 [refurb] Mark single-item-membership-test fix as always unsafe (FURB171...
  • 1758f26 Update rust toolchain to 1.90 (#20469)
  • 2502ff7 [ty] Make TypeIs invariant in its type argument (#20428)
  • 144373f [flake8-use-pathlib] Fix PTH101, PTH104, PTH105, PTH121 fixes (#20143)
  • 91995aa [pyupgrade] Fix false positive when class name is shadowed by local variabl...
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Sep 22, 2025
@github-actions

github-actions Bot commented Sep 22, 2025

Copy link
Copy Markdown
Contributor

📊 Performance Benchmark Report

Comparing dev (baseline) vs dependabot/pip/dev/ruff-0.13.1 (current)

📈 Detailed Results (All Benchmarks)

📋 Complete results for all benchmarks - includes both significant and insignificant changes

🧪 Test Name 📏 Base 📏 Current 📈 Change 🎯 Status
Bloom Filter Dns Mutation Tracking Performance 4.17ms 4.27ms +2.3%
Bloom Filter Large Scale Dns Brute Force 17.68ms 17.84ms +0.9%
Large Closest Match Lookup 348.51ms 341.66ms -2.0%
Realistic Closest Match Workload 187.62ms 189.52ms +1.0%
Event Validation Full Scan Startup Small Batch 444.99ms 447.57ms +0.6%
Event Validation Full Scan Startup Large Batch 779.10ms 776.99ms -0.3%
Make Event Autodetection Small 31.42ms 30.71ms -2.3%
Make Event Autodetection Large 316.89ms 315.04ms -0.6%
Make Event Explicit Types 14.00ms 13.91ms -0.7%
Excavate Single Thread Small 4.028s 4.019s -0.2%
Excavate Single Thread Large 9.331s 9.310s -0.2%
Excavate Parallel Tasks Small 4.176s 4.173s -0.1%
Excavate Parallel Tasks Large 7.185s 7.222s +0.5%
Is Ip Performance 3.19ms 3.15ms -1.0%
Make Ip Type Performance 11.26ms 11.42ms +1.4%
Mixed Ip Operations 4.40ms 4.47ms +1.6%
Typical Queue Shuffle 62.28µs 61.63µs -1.0%
Priority Queue Shuffle 710.56µs 695.06µs -2.2%

🎯 Performance Summary

No significant performance changes detected (all changes <10%)


🐍 Python Version 3.11.13

@liquidsec

Copy link
Copy Markdown
Collaborator

@dependabot recreate

1 similar comment
@liquidsec

Copy link
Copy Markdown
Collaborator

@dependabot recreate

@dependabot
dependabot Bot force-pushed the dependabot/pip/dev/ruff-0.13.1 branch 2 times, most recently from 578f1f0 to 4b28d7e Compare September 23, 2025 22:33
Bumps [ruff](https://github.com/astral-sh/ruff) from 0.13.0 to 0.13.1.
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.13.0...0.13.1)

---
updated-dependencies:
- dependency-name: ruff
  dependency-version: 0.13.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/pip/dev/ruff-0.13.1 branch from 4b28d7e to 3eccb67 Compare September 23, 2025 23:44
@liquidsec
liquidsec merged commit 336774c into dev Sep 24, 2025
17 checks passed
@liquidsec
liquidsec deleted the dependabot/pip/dev/ruff-0.13.1 branch September 24, 2025 03:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant