Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 1, 2025

Bumps the patch group with 3 updates in the / directory: pylint, flake8-pyproject and setuptools-scm[toml].

Updates pylint from 4.0.0 to 4.0.4

Commits
  • e16f942 Bump pylint to 4.0.4, update changelog
  • 657b386 [Backport maintenance/4.0.x] [invalid-name] Fix FP for exclusive assignment o...
  • 03f8a92 [Backport maintenance/4.0.x] fix: avoid false positive when module-level name...
  • 84b6552 Bump pylint to 4.0.3, update changelog (#10741)
  • 77b0cd8 [Backport maintenance/4.0.x] fix(expand_modules): pass ignore_list to modutil...
  • 755f2d0 [Backport maintenance/4.0.x] Upgrade astroid to 4.0.2 (#10733)
  • c96a9e4 [Backport maintenance/4.0.x] Fix crash when a variable annotation is used as ...
  • 108191e [Backport maintenance/4.0.x] Fix a false positive for class attribute typed w...
  • 0ed8172 [Backport maintenance/4.0.x] Fix crash when a slice object is called (#10728)
  • b128b7d [Backport maintenance/4.0.x] Fix a false positive for ``unbalanced-tuple-unpa...
  • Additional commits viewable in compare view

Updates flake8-pyproject from 1.2.3 to 1.2.4

Release notes

Sourced from flake8-pyproject's releases.

1.2.4

  • Fixes typo in name of meta variable in --toml-config help message. (#21)
  • Registers GitHub repo as trusted publisher for PyPI releases. (#38)
Commits
  • 3c516a9 Bumped version to 1.2.4.
  • df70f19 Added GitHub workflow for releases on PyPI.
  • d46e99c Only run scheduled test weekly instead of nightly.
  • da0b9ed Added link to GitHub releases as a project URL.
  • 8e4b87f Cosmetic changes to code format of dev tools in tools folder.
  • 4227bd4 Use longer names for dev tools in tools folder.
  • 3866f48 Mention early on that we need to be called in pyproject.toml folder.
  • 40bf639 Removed configuration and documentation of pre-commit hook.
  • 9df7abb Bump actions/checkout from 5 to 6 in the github-actions group
  • 2c23062 Fixed reporting of code coverage.
  • Additional commits viewable in compare view

Updates setuptools-scm[toml] from 9.2.0 to 9.2.2

Release notes

Sourced from setuptools-scm[toml]'s releases.

v9.2.2

What's Changed

Full Changelog: pypa/setuptools-scm@v9.2.1...v9.2.2

v9.2.1

What's Changed

New Contributors

Full Changelog: pypa/setuptools-scm@v9.2.0...v9.2.1

Changelog

Sourced from setuptools-scm[toml]'s changelog.

v9.2.2

Fixed

  • fix #1231: don't warn about tool.setuptools.dynamic.version when only using file finder. The warning about combining version guessing with setuptools dynamic versions should only be issued when setuptools-scm is performing version inference, not when it's only being used for its file finder functionality.

v9.2.1

Fixed

  • fix #1216: accept and create a warning for usages of version = attr: in setuptools config. unfortunately dozens of projects cargo-culted that antipattern
Commits
  • e56b78f Merge pull request #1232 from RonnyPfannschmidt/fix-1231-dont-warn-when-no-guess
  • 4f55e95 docs: update changelog for v9.2.2 patch release
  • 95a0c47 fix: don't warn about tool.setuptools.dynamic.version when only using file fi...
  • 338f562 Merge pull request #1226 from RonnyPfannschmidt/prepare-release
  • a893634 Prepare release v9.2.1
  • ad83282 Merge pull request #1225 from pypa/pre-commit-ci-update-config
  • 20a4464 [pre-commit.ci] pre-commit autoupdate
  • 70f6942 Merge pull request #1219 from RonnyPfannschmidt/fix-1216-explicitly-deprecate...
  • 14d85c0 Install Mercurial on Windows runners via Chocolatey
  • 8c5cec9 Fix API stability check workflow to install griffe and improve reporting
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the patch group with 3 updates in the / directory: [pylint](https://github.com/pylint-dev/pylint), [flake8-pyproject](https://github.com/john-hen/Flake8-pyproject) and [setuptools-scm[toml]](https://github.com/pypa/setuptools-scm).


Updates `pylint` from 4.0.0 to 4.0.4
- [Release notes](https://github.com/pylint-dev/pylint/releases)
- [Commits](pylint-dev/pylint@v4.0.0...v4.0.4)

Updates `flake8-pyproject` from 1.2.3 to 1.2.4
- [Release notes](https://github.com/john-hen/Flake8-pyproject/releases)
- [Commits](john-hen/Flake8-pyproject@1.2.3...1.2.4)

Updates `setuptools-scm[toml]` from 9.2.0 to 9.2.2
- [Release notes](https://github.com/pypa/setuptools-scm/releases)
- [Changelog](https://github.com/pypa/setuptools-scm/blob/main/CHANGELOG.md)
- [Commits](pypa/setuptools-scm@v9.2.0...v9.2.2)

---
updated-dependencies:
- dependency-name: pylint
  dependency-version: 4.0.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: patch
- dependency-name: flake8-pyproject
  dependency-version: 1.2.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: patch
- dependency-name: setuptools-scm[toml]
  dependency-version: 9.2.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added part:tooling Affects the development tooling (CI, deployment, dependency management, etc.) type:tech-debt Improves the project without visible changes for users labels Dec 1, 2025
@dependabot dependabot bot requested a review from a team as a code owner December 1, 2025 03:28
@dependabot dependabot bot added the part:tooling Affects the development tooling (CI, deployment, dependency management, etc.) label Dec 1, 2025
@dependabot dependabot bot added the type:tech-debt Improves the project without visible changes for users label Dec 1, 2025
@github-actions github-actions bot added the tool:auto-merged Auto-approved Dependabot PRs label Dec 1, 2025
github-actions[bot]
github-actions bot previously approved these changes Dec 1, 2025
@github-actions github-actions bot enabled auto-merge December 1, 2025 03:29
Constants should be in ALL_CAPS.

Signed-off-by: Leandro Lucarella <luca-frequenz@llucax.com>
@github-actions github-actions bot added the part:nox Affects the configuration of nox label Dec 4, 2025
@llucax llucax added the cmd:skip-release-notes It is not necessary to update release notes for this PR label Dec 4, 2025
@llucax
Copy link
Contributor

llucax commented Dec 4, 2025

Mmm, I see the new dependabot automerge action is not running after I added a commit. I wonder if this is good or bad. For one side I guess if there was some other code changes is good if some other human looks at it, but on the other hand I guess most times it will be changes that just fixes a new missing check or similar minor stuff. @Marenz

@llucax
Copy link
Contributor

llucax commented Dec 4, 2025

Anyway, this needs someone else's approval now.

@github-actions github-actions bot added this pull request to the merge queue Dec 4, 2025
@github-merge-queue github-merge-queue bot removed this pull request from the merge queue due to no response for status checks Dec 4, 2025
@Marenz Marenz added this pull request to the merge queue Dec 4, 2025
Merged via the queue into v0.x.x with commit fbe09b0 Dec 4, 2025
10 of 11 checks passed
@Marenz Marenz deleted the dependabot/pip/patch-a079d6ff1e branch December 4, 2025 18:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

cmd:skip-release-notes It is not necessary to update release notes for this PR part:nox Affects the configuration of nox part:tooling Affects the development tooling (CI, deployment, dependency management, etc.) tool:auto-merged Auto-approved Dependabot PRs type:tech-debt Improves the project without visible changes for users

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants