mirrors/ruff
0
0 Fork 0
mirror of https://github.com/astral-sh/ruff.git synced 2026-10-28 10:45:37 +08:00
Code Activity
17,833 Commits 1,472 Branches 435 Tags
main
Commit Graph
392 Commits
Author SHA1 Message Date
renovate[bot] 832ba4c4e2 Update prek dependencies (#29773) 2026-10-27 17:25:59 -07:00
renovate[bot] 0912dfda18 Update uv to v0.13.6 (#29776) 2026-10-27 17:22:45 -07:00
Alex Waygood 10056500e0 Update uv to 0.13.5 (#29659) 2026-10-22 23:29:36 +00:00
zaniebotandAlex Waygood a7ad638dd7 Include the release workflow in formatting checks (#27884) 
Co-authored-by: Alex Waygood <alex.waygood@gmail.com>
 2026-10-22 20:08:53 +00:00
renovate[bot] 7dce6d505b Update prek dependencies (#29566) 
This PR contains the following updates:

| Package | Type | Update | Change | Pending |
|---|---|---|---|---|
|
[astral-sh/ruff-pre-commit](https://redirect.github.com/astral-sh/ruff-pre-commit)
| repository | patch | `v0.17.0` → `v0.17.1` | |
| [crate-ci/typos](https://redirect.github.com/crate-ci/typos) |
repository | patch | `v1.50.1` → `v1.50.2` | `v1.51.1` (+2) |
|
[rbubley/mirrors-prettier](https://redirect.github.com/rbubley/mirrors-prettier)
| repository | patch | `v3.9.6` → `v3.9.8` | `v3.9.10` (+1) |

Note: The `pre-commit` manager in Renovate is not supported by the
`pre-commit` maintainers or community. Please do not report any problems
there, instead [create a Discussion in the Renovate
repository](https://redirect.github.com/renovatebot/renovate/discussions/new)
if you have any questions.

---

### Release Notes

<details>
<summary>astral-sh/ruff-pre-commit</summary>

###
[`v0.17.1`](https://redirect.github.com/astral-sh/ruff-pre-commit/releases/tag/v0.17.1)

[Compare
Source](https://redirect.github.com/astral-sh/ruff-pre-commit/compare/v0.17.0...v0.17.1)

See: <https://github.com/astral-sh/ruff/releases/tag/0.17.1>

</details>

<details>
<summary>crate-ci/typos</summary>

###
[`v1.50.2`](https://redirect.github.com/crate-ci/typos/releases/tag/v1.50.2)

[Compare
Source](https://redirect.github.com/crate-ci/typos/compare/v1.50.1...v1.50.2)

#### \[1.50.2] - 2026-09-15

##### Fixes

- Don't panic when files being examined are removed

</details>

<details>
<summary>rbubley/mirrors-prettier</summary>

###
[`v3.9.8`](https://redirect.github.com/rbubley/mirrors-prettier/compare/v3.9.7...v3.9.8)

[Compare
Source](https://redirect.github.com/rbubley/mirrors-prettier/compare/v3.9.7...v3.9.8)

###
[`v3.9.7`](https://redirect.github.com/rbubley/mirrors-prettier/compare/v3.9.6...v3.9.7)

[Compare
Source](https://redirect.github.com/rbubley/mirrors-prettier/compare/v3.9.6...v3.9.7)

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - "before 4am on Wednesday"
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/astral-sh/ruff).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xNzEuMiIsInVwZGF0ZWRJblZlciI6IjQ0LjE3MS4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJpbnRlcm5hbCJdfQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-10-20 19:49:46 -07:00
Alex Waygood f71f169f6f Update uv after the eMudhra incident (#29551) 
The [eMudhra incident](https://emudhra.we-have-a-problem.com/)
compromised intermediate CA keys that could be used to impersonate HTTPS
sites. uv 0.13.4 removes the emSign root that anchors the affected
intermediates from its bundled trust store.

Update the uv versions used in CI and by the uv-lock hook, and the
locked uv dependency. A uv-specific cutoff allows the updated release
through the seven-day dependency waiting period.

Codex prepared this update.
 2026-10-20 20:44:34 +00:00
renovate[bot]andDavid Peter 0af0dbd59c Update uv to v0.13.1 (#29364) 
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [astral-sh/uv](https://redirect.github.com/astral-sh/uv) | | minor |
`0.12.23` → `0.13.1` |
|
[astral-sh/uv-pre-commit](https://redirect.github.com/astral-sh/uv-pre-commit)
| repository | minor | `0.12.23` → `0.13.1` |

Note: The `pre-commit` manager in Renovate is not supported by the
`pre-commit` maintainers or community. Please do not report any problems
there, instead [create a Discussion in the Renovate
repository](https://redirect.github.com/renovatebot/renovate/discussions/new)
if you have any questions.

---

### Release Notes

<details>
<summary>astral-sh/uv</summary>

###
[`v0.13.1`](https://redirect.github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#0131)

[Compare
Source](https://redirect.github.com/astral-sh/uv/compare/0.13.0...0.13.1)

Released on 2026-10-14.

##### Enhancements

- Ignore `Requires-Python` upper bounds in `uv pip check` and `uv pip
install --strict`, consistent with resolution
([#&#8203;22500](https://redirect.github.com/astral-sh/uv/pull/22500))
- Support Linux SPARC by falling back when filesystem cloning and
detailed cache accounting are unavailable
([#&#8203;22463](https://redirect.github.com/astral-sh/uv/pull/22463))
- Report missing trusted hashes in resolution errors
([#&#8203;22241](https://redirect.github.com/astral-sh/uv/pull/22241))

##### Python

- Add CPython 3.16.0a1
([#&#8203;22527](https://redirect.github.com/astral-sh/uv/pull/22527))

##### Preview features

- Allow `uv tool upgrade` to upgrade installed tools when
`tool-install-locks` is enabled
([#&#8203;22498](https://redirect.github.com/astral-sh/uv/pull/22498))
- Add preliminary support for parsing PEP 825 variant labels in wheel
filenames with `wheel-variants`
([#&#8203;22039](https://redirect.github.com/astral-sh/uv/pull/22039))

##### Performance

- Reduce uv's binary size
([#&#8203;22429](https://redirect.github.com/astral-sh/uv/pull/22429),
[#&#8203;22430](https://redirect.github.com/astral-sh/uv/pull/22430),
[#&#8203;22432](https://redirect.github.com/astral-sh/uv/pull/22432))
- Speed up Simple API parsing
([#&#8203;22429](https://redirect.github.com/astral-sh/uv/pull/22429))
- Reduce package metadata parsing overhead
([#&#8203;22239](https://redirect.github.com/astral-sh/uv/pull/22239))

##### Bug fixes

- Prevent tool and managed Python uninstalls from deleting unrelated
files beside their storage directories
([#&#8203;22495](https://redirect.github.com/astral-sh/uv/pull/22495))
- Restore support for source distributions containing hard links or
full-length tar user or group names
([#&#8203;22516](https://redirect.github.com/astral-sh/uv/pull/22516),
[#&#8203;22522](https://redirect.github.com/astral-sh/uv/pull/22522))
- Preserve device files and FIFOs used as `uv pip compile` or `uv
export` output destinations
([#&#8203;22496](https://redirect.github.com/astral-sh/uv/pull/22496))
- Fix `sys._base_executable` detection for environments created from
symlinked interpreters
([#&#8203;22520](https://redirect.github.com/astral-sh/uv/pull/22520))
- Prevent concurrent readers from observing partially written lockfiles,
Python version files, or managed Python sysconfig files
([#&#8203;22399](https://redirect.github.com/astral-sh/uv/pull/22399),
[#&#8203;22402](https://redirect.github.com/astral-sh/uv/pull/22402),
[#&#8203;22403](https://redirect.github.com/astral-sh/uv/pull/22403))
- Serialize concurrent project commands that reach the same environment
through real and symlinked paths
([#&#8203;22390](https://redirect.github.com/astral-sh/uv/pull/22390))
- Prevent installs, syncs, and environment creation from failing when
they race with `uv cache clean`
([#&#8203;22387](https://redirect.github.com/astral-sh/uv/pull/22387))
- Prevent concurrent tool installations from corrupting an environment
when the last tool is uninstalled
([#&#8203;22391](https://redirect.github.com/astral-sh/uv/pull/22391))
- Persist changed upgrade settings even when `uv tool upgrade` leaves
the tool version unchanged
([#&#8203;22499](https://redirect.github.com/astral-sh/uv/pull/22499))
- Reuse environments with installed Git dependencies pinned to full
commit hashes without resolving again
([#&#8203;22464](https://redirect.github.com/astral-sh/uv/pull/22464))

##### Documentation

- Explain how to select an emulated Python interpreter on Windows ARM64
when native wheels are unavailable
([#&#8203;22424](https://redirect.github.com/astral-sh/uv/pull/22424))
- Fix the `.netrc` format documentation link
([#&#8203;22514](https://redirect.github.com/astral-sh/uv/pull/22514))

##### Other changes

- Publish Python 3.15-based uv Docker images under stable tags
([#&#8203;22503](https://redirect.github.com/astral-sh/uv/pull/22503))

###
[`v0.13.0`](https://redirect.github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#0130)

[Compare
Source](https://redirect.github.com/astral-sh/uv/compare/0.12.24...0.13.0)

Released on 2026-10-09.

uv 0.13.0 makes Python 3.15 the default stable Python version. We've
also included several breaking changes to improve correctness,
performance, and compatibility, described below.

**We expect most users to be able to upgrade without making changes.**

While not a breaking change, this release also updates the format of
many of uv's cache entries to improve performance. **uv may download or
rebuild dependencies after upgrading**, because some cached entries from
earlier versions cannot be reused. Multiple versions of uv can still
safely share the same cache directory.

There are no breaking changes to the configuration of the [uv build
backend](https://docs.astral.sh/uv/concepts/build-backend/). If your
`[build-system]` table includes an upper bound on `uv_build`, update it
to allow `uv_build` 0.13, e.g., `uv_build>=0.13.0,<0.14`.

##### Breaking changes

- **Use Python 3.15 as the default stable version**

The default stable Python version has changed from 3.14 to 3.15. This
affects Python downloads when no version is requested or pinned, e.g.,
when running `uv python install`.

uv continues to use compatible Python installations that are already
present. For example, `uv venv` can still use an installed Python 3.14.
If no suitable interpreter is installed and automatic downloads are
enabled, commands such as `uv venv` and `uvx python` can now download
Python 3.15.

You can opt out of this behavior by requesting Python 3.14 explicitly,
e.g., `uv venv --python 3.14`. For projects, use `uv python pin 3.14` to
record the version in `.python-version`.

- **Honor `--require-hashes` in included constraints files**
([#&#8203;22275](https://redirect.github.com/astral-sh/uv/pull/22275))

Previously, uv ignored `--require-hashes` in constraints files included
with `-c` from a requirements file. Now, uv honors the directive and
requires hashes for all requirements in the installation. Installs that
previously succeeded can now fail if a requirement is missing a hash.

You cannot opt out while the directive is present. Add the missing
hashes to your requirements, or remove the `--require-hashes` directive
from the included constraints file if hash checking is not intended.

- **Prefer native Python on Windows ARM64**
([#&#8203;22100](https://redirect.github.com/astral-sh/uv/pull/22100))

Previously, ARM64 builds of uv preferred emulated `x86_64` Python
installations because native wheel support was limited. Now, uv prefers
native ARM64 (`aarch64`) interpreters across Python versions.

This follows similar changes in
[CPython](https://discuss.python.org/t/python-on-windows-arm64/104524),
the official Windows [Python install
manager](https://discuss.python.org/t/python-install-manager-26-4/108846),
and GitHub's
[actions/setup-python](https://redirect.github.com/actions/setup-python#supported-architectures).

When a native interpreter is unavailable, uv continues to fall back to
`x86_64`, then 32-bit `x86`.

You can opt out of this behavior by setting `UV_PYTHON_ARCH=x86_64` or
requesting an explicit architecture, e.g.,
`cpython-3.14-windows-x86_64`. If you are using `setup-uv`, you can set
[`python-arch:
x86_64`](https://redirect.github.com/astral-sh/setup-uv#python-architecture)
instead.

- **Reject editable requirements in included constraints files**
([#&#8203;22282](https://redirect.github.com/astral-sh/uv/pull/22282))

Previously, uv silently ignored editable (`-e`) requirements in
constraints files included with `-c` from a requirements file. Now, uv
rejects these requirements with an error, matching [pip's
behavior](https://pip.pypa.io/en/stable/user_guide/#constraints-files).

You cannot opt out of this behavior. Move editable requirements to a
requirements file passed with `-r`, or pass them directly with
`--editable`, instead of including them in a constraints file.

- **Omit the distutils startup patch on Python 3.10 and later**
([#&#8203;22096](https://redirect.github.com/astral-sh/uv/pull/22096))

Previously, uv installed `_virtualenv.py` and `_virtualenv.pth` into
every new virtual environment to prevent distutils configuration from
changing installation paths. Now, like [`virtualenv`
21.6.0](https://redirect.github.com/pypa/virtualenv/releases/tag/21.6.0),
uv omits these files on Python 3.10 and later, which already ignore the
affected configuration keys. This reduces Python startup overhead.
Python 3.9 and earlier retain the patch.

You cannot opt out of this behavior. Existing virtual environments are
not modified automatically. Recreate an environment with Python 3.10 or
later to remove the patch.

  This stabilizes the `no-distutils-patch` preview feature.

- **Treat requirement-file option values as single paths**
([#&#8203;22290](https://redirect.github.com/astral-sh/uv/pull/22290))

Previously, uv split values passed to `--constraint`, `--override`,
`--exclude`, and `--build-constraint` on spaces, even when quoted. Now,
each value is treated as a single path, allowing file paths containing
spaces.

You cannot opt out of this behavior. Repeat the option to provide
multiple files. For example, replace `-c "a.txt b.txt"` with `-c a.txt
-c b.txt`.

Space-separated lists in `UV_CONSTRAINT`, `UV_OVERRIDE`, `UV_EXCLUDE`,
and `UV_BUILD_CONSTRAINT` remain supported.

- **Use `tar-codec` for tar archives by default**
([#&#8203;22094](https://redirect.github.com/astral-sh/uv/pull/22094))

Previously, uv used `astral-tokio-tar` to extract tar archives, build
source distributions with `uv_build`, and read their metadata for `uv
publish`. Now, uv uses `tar-codec`, which applies stricter validation
when reading archives.

uv may now reject archives containing hard links or unsupported tar
extensions that previous versions accepted. Source distributions created
by `uv_build` can also have different archive bytes and hashes.

  You can opt out of this behavior by setting `UV_LEGACY_TAR_BACKEND=1`.

  This stabilizes the `tar-codec` preview feature.

- **Reject `uv build --clear` output directories that contain a build
source**
  ([#&#8203;22276](https://redirect.github.com/astral-sh/uv/pull/22276))

Previously, `uv build --clear` could delete a project or input source
distribution when the
output directory contained the source. Now, uv rejects these output
directories, including
equivalent paths reached through symlinks, before clearing any build
output.

Select an output directory that does not contain any build sources, or
omit `--clear`.

##### Python

- Add CPython 3.15.0
([#&#8203;22400](https://redirect.github.com/astral-sh/uv/pull/22400))

##### Preview features

- Require hashes for build dependencies, including transitive
dependencies, with `--require-build-hashes`
([#&#8203;21411](https://redirect.github.com/astral-sh/uv/pull/21411))

##### Performance

- Speed up revalidation of cached HTTP responses by avoiding rewrites of
unchanged payloads
([#&#8203;22130](https://redirect.github.com/astral-sh/uv/pull/22130))
- Reduce allocations when reading cached HTTP responses
([#&#8203;22136](https://redirect.github.com/astral-sh/uv/pull/22136))
- Reduce cache storage for HTTP policies and package records
([#&#8203;22135](https://redirect.github.com/astral-sh/uv/pull/22135),
[#&#8203;22133](https://redirect.github.com/astral-sh/uv/pull/22133))
- Reduce allocations for cached source distribution revisions
([#&#8203;22131](https://redirect.github.com/astral-sh/uv/pull/22131))

##### Bug fixes

- Fix incorrect dependency resolution when reusing source metadata with
different build settings
([#&#8203;22404](https://redirect.github.com/astral-sh/uv/pull/22404))
- Avoid overlong wheel cache lock filenames on Windows
([#&#8203;22134](https://redirect.github.com/astral-sh/uv/pull/22134))

###
[`v0.12.24`](https://redirect.github.com/astral-sh/uv/releases/tag/0.12.24)

[Compare
Source](https://redirect.github.com/astral-sh/uv/compare/0.12.23...0.12.24)

#### Release Notes

Released on 2026-10-08.

##### Enhancements

- Remove orphaned temporary build environments with `uv cache prune`
([#&#8203;22171](https://redirect.github.com/astral-sh/uv/pull/22171))
- Accept PEP 508 marker operators directly before grouped expressions
([#&#8203;22309](https://redirect.github.com/astral-sh/uv/pull/22309))
- Reject malformed requirements-file options instead of partially
parsing or ignoring them
([#&#8203;22317](https://redirect.github.com/astral-sh/uv/pull/22317))
- Show underlying filesystem and registry errors when managed Python
uninstallation fails
([#&#8203;22362](https://redirect.github.com/astral-sh/uv/pull/22362))
- Identify the invalid source URL in Python mirror errors
([#&#8203;22364](https://redirect.github.com/astral-sh/uv/pull/22364))

##### Preview features

- Display preferred advisory IDs in `uv audit` reports, prioritizing
PYSEC, GHSA, then CVE identifiers
([#&#8203;22292](https://redirect.github.com/astral-sh/uv/pull/22292))

##### Configuration

- Support custom installation mirrors for GraalPy
([#&#8203;22269](https://redirect.github.com/astral-sh/uv/pull/22269))
- Support custom installation mirrors for Pyodide
([#&#8203;22271](https://redirect.github.com/astral-sh/uv/pull/22271))
- Allow `UV_NO_CACHE=false` to override `no-cache = true` in
configuration
([#&#8203;22324](https://redirect.github.com/astral-sh/uv/pull/22324))
- Report more precise error locations for invalid trusted-host ports and
preview-feature list entries
([#&#8203;22144](https://redirect.github.com/astral-sh/uv/pull/22144))

##### Performance

- Speed up later commands after creating an environment by warming its
interpreter cache
([#&#8203;21304](https://redirect.github.com/astral-sh/uv/pull/21304))
- Reduce code-signature verification work for ARM64 macOS releases with
16 KiB signature pages
([#&#8203;22246](https://redirect.github.com/astral-sh/uv/pull/22246))
- Enforce resource limits when parsing package indexes and
`--find-links` pages with `astral-html`
([#&#8203;22203](https://redirect.github.com/astral-sh/uv/pull/22203))
- Reduce standalone `uv-build` executable size by 7.5% by omitting
unused Zstandard support
([#&#8203;22242](https://redirect.github.com/astral-sh/uv/pull/22242))
- Reduce uv's binary size by about 232 KB by simplifying configuration
deserialization
([#&#8203;22144](https://redirect.github.com/astral-sh/uv/pull/22144))
- Reduce Python download error formatting code size by sharing its
formatter
([#&#8203;22141](https://redirect.github.com/astral-sh/uv/pull/22141))

##### Bug fixes

- Verify supplied hashes even when hash presence is disabled with
`--no-require-hashes` or `require-hashes = false`
([#&#8203;22369](https://redirect.github.com/astral-sh/uv/pull/22369))
- Honor exact managed Python patch pins when creating script
environments instead of following patch upgrades
([#&#8203;22360](https://redirect.github.com/astral-sh/uv/pull/22360))
- Prevent dependency overrides and constraints from activating optional
dependencies when their extras are not selected
([#&#8203;22237](https://redirect.github.com/astral-sh/uv/pull/22237))
- Exclude optional dependencies from exports when their extras are
activated only in incompatible environments
([#&#8203;22234](https://redirect.github.com/astral-sh/uv/pull/22234))
- Give explicit `uv publish --trusted-publishing` values precedence over
configuration
([#&#8203;22279](https://redirect.github.com/astral-sh/uv/pull/22279))
- Allow `UV_OFFLINE=false` to override `offline = true` in configuration
([#&#8203;22283](https://redirect.github.com/astral-sh/uv/pull/22283))
- Allow `UV_SYSTEM_CERTS=false` to override `system-certs = true` in
configuration
([#&#8203;22291](https://redirect.github.com/astral-sh/uv/pull/22291))
- Allow `uv auth login` over IPv6 loopback addresses
([#&#8203;22306](https://redirect.github.com/astral-sh/uv/pull/22306))
- Resolve GitHub dependencies whose Git references contain `#` or `%`
characters
([#&#8203;22281](https://redirect.github.com/astral-sh/uv/pull/22281))
- Recognize existing Pyodide interpreters as satisfying Pyodide Python
requests
([#&#8203;22322](https://redirect.github.com/astral-sh/uv/pull/22322))
- Preserve JSON output from `uv version` and `uv self version` with a
single `--quiet` flag
([#&#8203;22280](https://redirect.github.com/astral-sh/uv/pull/22280))
- Preserve trailing spaces and tabs in passwords returned by subprocess
keyrings
([#&#8203;22284](https://redirect.github.com/astral-sh/uv/pull/22284))
- Restore wheel incompatibility hints when `WHEEL` metadata contains
multiple expanded `Tag:` rows
([#&#8203;22235](https://redirect.github.com/astral-sh/uv/pull/22235))
- Preserve Windows wheel-script rename errors unless a cross-drive copy
fallback applies
([#&#8203;22302](https://redirect.github.com/astral-sh/uv/pull/22302))
- Prevent workspace-cache assertion failures after modifying a project
at the workspace root
([#&#8203;22236](https://redirect.github.com/astral-sh/uv/pull/22236))
- Hide the ignored `--keyring-provider` option from `uv auth` help
([#&#8203;19520](https://redirect.github.com/astral-sh/uv/pull/19520))
- Report HTTP client setup failures directly when resolving unnamed `uv
tool` requirements
([#&#8203;22320](https://redirect.github.com/astral-sh/uv/pull/22320))

##### Documentation

- Update Docker and AWS Lambda examples to cache dependency layers using
frozen lockfiles without project manifests
([#&#8203;22172](https://redirect.github.com/astral-sh/uv/pull/22172))
- Fix stale links and descriptions in Rust crate documentation
([#&#8203;22311](https://redirect.github.com/astral-sh/uv/pull/22311),
[#&#8203;22361](https://redirect.github.com/astral-sh/uv/pull/22361))
- Fix a typo in the `required-environments` documentation
([#&#8203;22238](https://redirect.github.com/astral-sh/uv/pull/22238))

#### Install uv 0.12.24

##### Install prebuilt binaries via shell script

```sh
curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/uv/releases/download/0.12.24/uv-installer.sh | sh
```

##### Install prebuilt binaries via powershell script

```sh
powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/uv/releases/download/0.12.24/uv-installer.ps1 | iex"
```

#### Download uv 0.12.24

| File | Platform | Checksum |
|
---------------------------------------------------------------------------------------------------------------------------------------------------
| ---------------------------- |
--------------------------------------------------------------------------------------------------------------------------
|
|
[uv-aarch64-apple-darwin.tar.gz](https://releases.astral.sh/github/uv/releases/download/0.12.24/uv-aarch64-apple-darwin.tar.gz)
| Apple Silicon macOS |
[checksum](https://releases.astral.sh/github/uv/releases/download/0.12.24/uv-aarch64-apple-darwin.tar.gz.sha256)
|
|
[uv-x86_64-apple-darwin.tar.gz](https://releases.astral.sh/github/uv/releases/download/0.12.24/uv-x86_64-apple-darwin.tar.gz)
| Intel macOS |
[checksum](https://releases.astral.sh/github/uv/releases/download/0.12.24/uv-x86_64-apple-darwin.tar.gz.sha256)
|
|
[uv-aarch64-pc-windows-msvc.zip](https://releases.astral.sh/github/uv/releases/download/0.12.24/uv-aarch64-pc-windows-msvc.zip)
| ARM64 Windows |
[checksum](https://releases.astral.sh/github/uv/releases/download/0.12.24/uv-aarch64-pc-windows-msvc.zip.sha256)
|
|
[uv-i686-pc-windows-msvc.zip](https://releases.astral.sh/github/uv/releases/download/0.12.24/uv-i686-pc-windows-msvc.zip)
| x86 Windows |
[checksum](https://releases.astral.sh/github/uv/releases/download/0.12.24/uv-i686-pc-windows-msvc.zip.sha256)
|
|
[uv-x86_64-pc-windows-msvc.zip](https://releases.astral.sh/github/uv/releases/download/0.12.24/uv-x86_64-pc-windows-msvc.zip)
| x64 Windows |
[checksum](https://releases.astral.sh/github/uv/releases/download/0.12.24/uv-x86_64-pc-windows-msvc.zip.sha256)
|
|
[uv-aarch64-unknown-linux-gnu.tar.gz](https://releases.astral.sh/github/uv/releases/download/0.12.24/uv-aarch64-unknown-linux-gnu.tar.gz)
| ARM64 Linux |
[checksum](https://releases.astral.sh/github/uv/releases/download/0.12.24/uv-aarch64-unknown-linux-gnu.tar.gz.sha256)
|
|
[uv-i686-unknown-linux-gnu.tar.gz](https://releases.astral.sh/github/uv/releases/download/0.12.24/uv-i686-unknown-linux-gnu.tar.gz)
| x86 Linux |
[checksum](https://releases.astral.sh/github/uv/releases/download/0.12.24/uv-i686-unknown-linux-gnu.tar.gz.sha256)
|
|
[uv-powerpc64le-unknown-linux-gnu.tar.gz](https://releases.astral.sh/github/uv/releases/download/0.12.24/uv-powerpc64le-unknown-linux-gnu.tar.gz)
| PPC64LE Linux |
[checksum](https://releases.astral.sh/github/uv/releases/download/0.12.24/uv-powerpc64le-unknown-linux-gnu.tar.gz.sha256)
|
|
[uv-riscv64gc-unknown-linux-gnu.tar.gz](https://releases.astral.sh/github/uv/releases/download/0.12.24/uv-riscv64gc-unknown-linux-gnu.tar.gz)
| RISCV Linux |
[checksum](https://releases.astral.sh/github/uv/releases/download/0.12.24/uv-riscv64gc-unknown-linux-gnu.tar.gz.sha256)
|
|
[uv-s390x-unknown-linux-gnu.tar.gz](https://releases.astral.sh/github/uv/releases/download/0.12.24/uv-s390x-unknown-linux-gnu.tar.gz)
| S390x Linux |
[checksum](https://releases.astral.sh/github/uv/releases/download/0.12.24/uv-s390x-unknown-linux-gnu.tar.gz.sha256)
|
|
[uv-x86_64-unknown-linux-gnu.tar.gz](https://releases.astral.sh/github/uv/releases/download/0.12.24/uv-x86_64-unknown-linux-gnu.tar.gz)
| x64 Linux |
[checksum](https://releases.astral.sh/github/uv/releases/download/0.12.24/uv-x86_64-unknown-linux-gnu.tar.gz.sha256)
|
|
[uv-armv7-unknown-linux-gnueabihf.tar.gz](https://releases.astral.sh/github/uv/releases/download/0.12.24/uv-armv7-unknown-linux-gnueabihf.tar.gz)
| ARMv7 Linux |
[checksum](https://releases.astral.sh/github/uv/releases/download/0.12.24/uv-armv7-unknown-linux-gnueabihf.tar.gz.sha256)
|
|
[uv-aarch64-unknown-linux-musl.tar.gz](https://releases.astral.sh/github/uv/releases/download/0.12.24/uv-aarch64-unknown-linux-musl.tar.gz)
| ARM64 MUSL Linux |
[checksum](https://releases.astral.sh/github/uv/releases/download/0.12.24/uv-aarch64-unknown-linux-musl.tar.gz.sha256)
|
|
[uv-i686-unknown-linux-musl.tar.gz](https://releases.astral.sh/github/uv/releases/download/0.12.24/uv-i686-unknown-linux-musl.tar.gz)
| x86 MUSL Linux |
[checksum](https://releases.astral.sh/github/uv/releases/download/0.12.24/uv-i686-unknown-linux-musl.tar.gz.sha256)
|
|
[uv-riscv64gc-unknown-linux-musl.tar.gz](https://releases.astral.sh/github/uv/releases/download/0.12.24/uv-riscv64gc-unknown-linux-musl.tar.gz)
| RISCV MUSL Linux |
[checksum](https://releases.astral.sh/github/uv/releases/download/0.12.24/uv-riscv64gc-unknown-linux-musl.tar.gz.sha256)
|
|
[uv-x86_64-unknown-linux-musl.tar.gz](https://releases.astral.sh/github/uv/releases/download/0.12.24/uv-x86_64-unknown-linux-musl.tar.gz)
| x64 MUSL Linux |
[checksum](https://releases.astral.sh/github/uv/releases/download/0.12.24/uv-x86_64-unknown-linux-musl.tar.gz.sha256)
|
|
[uv-arm-unknown-linux-musleabihf.tar.gz](https://releases.astral.sh/github/uv/releases/download/0.12.24/uv-arm-unknown-linux-musleabihf.tar.gz)
| ARMv6 MUSL Linux (Hardfloat) |
[checksum](https://releases.astral.sh/github/uv/releases/download/0.12.24/uv-arm-unknown-linux-musleabihf.tar.gz.sha256)
|
|
[uv-armv7-unknown-linux-musleabihf.tar.gz](https://releases.astral.sh/github/uv/releases/download/0.12.24/uv-armv7-unknown-linux-musleabihf.tar.gz)
| ARMv7 MUSL Linux |
[checksum](https://releases.astral.sh/github/uv/releases/download/0.12.24/uv-armv7-unknown-linux-musleabihf.tar.gz.sha256)
|

#### Verifying GitHub Artifact Attestations

The artifacts in this release have attestations generated with GitHub
Artifact Attestations. These can be verified by using the [GitHub
CLI](https://cli.github.com/manual/gh_attestation_verify):

```sh
gh attestation verify <file-path of downloaded artifact> --repo astral-sh/uv
```

You can also download the attestation from
[GitHub](https://redirect.github.com/astral-sh/uv/attestations) and
verify against that directly:

```sh
gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>
```

</details>

<details>
<summary>astral-sh/uv-pre-commit</summary>

###
[`v0.13.1`](https://redirect.github.com/astral-sh/uv-pre-commit/releases/tag/0.13.1)

[Compare
Source](https://redirect.github.com/astral-sh/uv-pre-commit/compare/0.13.0...0.13.1)

See: <https://github.com/astral-sh/uv/releases/tag/0.13.1>

###
[`v0.13.0`](https://redirect.github.com/astral-sh/uv-pre-commit/releases/tag/0.13.0)

[Compare
Source](https://redirect.github.com/astral-sh/uv-pre-commit/compare/0.12.24...0.13.0)

See: <https://github.com/astral-sh/uv/releases/tag/0.13.0>

###
[`v0.12.24`](https://redirect.github.com/astral-sh/uv-pre-commit/releases/tag/0.12.24)

[Compare
Source](https://redirect.github.com/astral-sh/uv-pre-commit/compare/0.12.23...0.12.24)

See: <https://github.com/astral-sh/uv/releases/tag/0.12.24>

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - "before 4am on Wednesday"
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about these
updates again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/astral-sh/ruff).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xNTUuMiIsInVwZGF0ZWRJblZlciI6IjQ0LjE1NS4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJpbnRlcm5hbCJdfQ==-->

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: David Peter <mail@david-peter.de>
 2026-10-14 13:21:22 +02:00
renovate[bot] d57344193f Update prek dependencies (#29361) 
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[astral-sh/ruff-pre-commit](https://redirect.github.com/astral-sh/ruff-pre-commit)
| repository | minor | `v0.16.10` → `v0.17.0` |
|
[zizmorcore/zizmor-pre-commit](https://redirect.github.com/zizmorcore/zizmor-pre-commit)
| repository | patch | `v1.30.0` → `v1.30.1` |

Note: The `pre-commit` manager in Renovate is not supported by the
`pre-commit` maintainers or community. Please do not report any problems
there, instead [create a Discussion in the Renovate
repository](https://redirect.github.com/renovatebot/renovate/discussions/new)
if you have any questions.

---

### Release Notes

<details>
<summary>astral-sh/ruff-pre-commit</summary>

###
[`v0.17.0`](https://redirect.github.com/astral-sh/ruff-pre-commit/releases/tag/v0.17.0)

[Compare
Source](https://redirect.github.com/astral-sh/ruff-pre-commit/compare/v0.16.10...v0.17.0)

See: <https://github.com/astral-sh/ruff/releases/tag/0.17.0>

</details>

<details>
<summary>zizmorcore/zizmor-pre-commit</summary>

###
[`v1.30.1`](https://redirect.github.com/zizmorcore/zizmor-pre-commit/releases/tag/v1.30.1)

[Compare
Source](https://redirect.github.com/zizmorcore/zizmor-pre-commit/compare/v1.30.0...v1.30.1)

[Sponsorship is
appreciated!](https://redirect.github.com/sponsors/woodruffw/)

#### Bug Fixes 🐛[🔗](https://docs.zizmor.sh/release-notes/#bug-fixes)

- Fixed a bug where zizmor would crash on pre-commit inputs that
reference a GitHub URL with an explicit .git suffix
([#&#8203;2363](https://redirect.github.com/zizmorcore/zizmor/issues/2363))

- Fixed a bug where
[self-repository](https://docs.zizmor.sh/audits/#self-repository)
auto-fixes were incorrectly marked as "safe" instead of "unsafe"
([#&#8203;2373](https://redirect.github.com/zizmorcore/zizmor/issues/2373))

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - "before 4am on Wednesday"
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/astral-sh/ruff).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xNTUuMiIsInVwZGF0ZWRJblZlciI6IjQ0LjE1NS4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJpbnRlcm5hbCJdfQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-10-14 12:13:48 +01:00
renovate[bot] 1fe78ab13d Update prek dependencies (#29160) 
This PR contains the following updates:

| Package | Type | Update | Change | Pending |
|---|---|---|---|---|
|
[astral-sh/ruff-pre-commit](https://redirect.github.com/astral-sh/ruff-pre-commit)
| repository | patch | `v0.16.9` → `v0.16.10` | |
| [crate-ci/typos](https://redirect.github.com/crate-ci/typos) |
repository | patch | `v1.50.0` → `v1.50.1` | `v1.51.1` (+3) |

Note: The `pre-commit` manager in Renovate is not supported by the
`pre-commit` maintainers or community. Please do not report any problems
there, instead [create a Discussion in the Renovate
repository](https://redirect.github.com/renovatebot/renovate/discussions/new)
if you have any questions.

---

### Release Notes

<details>
<summary>astral-sh/ruff-pre-commit (astral-sh/ruff-pre-commit)</summary>

###
[`v0.16.10`](https://redirect.github.com/astral-sh/ruff-pre-commit/releases/tag/v0.16.10)

[Compare
Source](https://redirect.github.com/astral-sh/ruff-pre-commit/compare/v0.16.9...v0.16.10)

See: <https://github.com/astral-sh/ruff/releases/tag/0.16.10>

</details>

<details>
<summary>crate-ci/typos (crate-ci/typos)</summary>

###
[`v1.50.1`](https://redirect.github.com/crate-ci/typos/releases/tag/v1.50.1)

[Compare
Source](https://redirect.github.com/crate-ci/typos/compare/v1.50.0...v1.50.1)

#### \[1.50.1] - 2026-09-01

##### Fixes

- Don't correct `asend` in Python code

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - "before 4am on Wednesday"
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/astral-sh/ruff).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMzQuMSIsInVwZGF0ZWRJblZlciI6IjQ0LjEzNC4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJpbnRlcm5hbCJdfQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-10-07 09:46:43 -04:00
Alex Waygood 5f34507931 Group uv workflow and pre-commit updates (#29111) 2026-10-05 14:01:42 +00:00
renovate[bot] e1ea7db564 Update prek dependencies (#29003) 2026-09-30 08:28:46 +02:00
renovate[bot] 7e1ed040d3 Update prek dependencies (#28807) 2026-09-23 08:32:58 +02:00
renovate[bot] 789c070ba5 Update prek dependencies (#28627) 2026-09-16 08:16:30 +02:00
Zsolt Dollenstein c315a2083a [ty] Make ecosystem cache access read-only (#28574) 
The ecosystem and memory-report workflows install third-party projects.
Those builds must not be able to create caches later restored by other
jobs.

Move the Depot-backed jobs to 32-core GitHub-hosted Ubuntu runners and
set `cache-mode: read` for all three workflows. Keep Rust and uv cache
restores, disable automatic saves, and increase the timeouts to allow
cold builds after switching cache providers.

The pinned workflow checkers do not yet support GitHub’s cache-mode
feature. Use an immutable upstream schema and suppress only the
corresponding `actionlint` diagnostic in these three workflows.
 2026-09-15 11:32:57 +01:00
renovate[bot] 7158e733bb Update prek dependencies (#28432) 2026-09-09 07:58:58 +02:00
renovate[bot] 61b7942a16 Update pre-commit hook astral-sh/uv-pre-commit to v0.12.9 (#28244) 
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[astral-sh/uv-pre-commit](https://redirect.github.com/astral-sh/uv-pre-commit)
| repository | patch | `0.12.6` → `0.12.9` |

Note: The `pre-commit` manager in Renovate is not supported by the
`pre-commit` maintainers or community. Please do not report any problems
there, instead [create a Discussion in the Renovate
repository](https://redirect.github.com/renovatebot/renovate/discussions/new)
if you have any questions.

---

### Release Notes

<details>
<summary>astral-sh/uv-pre-commit (astral-sh/uv-pre-commit)</summary>

###
[`v0.12.9`](https://redirect.github.com/astral-sh/uv-pre-commit/releases/tag/0.12.9)

[Compare
Source](https://redirect.github.com/astral-sh/uv-pre-commit/compare/0.12.8...0.12.9)

See: <https://github.com/astral-sh/uv/releases/tag/0.12.9>

###
[`v0.12.8`](https://redirect.github.com/astral-sh/uv-pre-commit/releases/tag/0.12.8)

[Compare
Source](https://redirect.github.com/astral-sh/uv-pre-commit/compare/0.12.7...0.12.8)

See: <https://github.com/astral-sh/uv/releases/tag/0.12.8>

###
[`v0.12.7`](https://redirect.github.com/astral-sh/uv-pre-commit/releases/tag/0.12.7)

[Compare
Source](https://redirect.github.com/astral-sh/uv-pre-commit/compare/0.12.6...0.12.7)

See: <https://github.com/astral-sh/uv/releases/tag/0.12.7>

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - "before 4am on Wednesday"
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/astral-sh/ruff).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC40OS4wIiwidXBkYXRlZEluVmVyIjoiNDQuNDkuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiaW50ZXJuYWwiXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-09-02 05:50:57 +01:00
Brent Westbrook 947179d7c6 Enable lint.preview and missing default rules in our Ruff config (#28112) 
Summary
--

This PR updates our ruff-pre-commit dependency to 0.16.5, which supports
the new category selectors,
and then enables `lint.preview` and the new default categories so that
we can dogfood them on our
code. There were 66 diagnostics initially, which I also fixed or
ignored:

```
28	FURB113 	[ ] repeated-append
12	ASYNC240	[ ] blocking-path-method-in-async-function
 6	RUF105  	[*] noqa-comments
 5	PLW1510 	[ ] subprocess-run-without-check
 3	PLW0108 	[ ] unnecessary-lambda
 2	EXE001  	[ ] shebang-not-executable
 2	RUF039  	[*] unraw-re-pattern
 1	B024    	[ ] abstract-base-class-without-abstract-method
 1	FURB142 	[*] for-loop-set-mutations
 1	PERF102 	[ ] incorrect-dict-iterator
 1	PLC0207 	[*] missing-maxsplit-arg
 1	PLW0127 	[ ] self-assigning-variable
 1	TRY004  	[ ] type-check-without-type-error
 1	PLW0120 	[*] useless-else-on-loop
 1	TRY201  	[ ] verbose-raise
 ```

Of these, I ignored `repeated-append` and `blocking-path-method-in-async-function`. I think they are
still reasonable defaults, just less useful/important in our uses.

0.16.5 also includes https://github.com/astral-sh/ruff-pre-commit/pull/159, so I removed `markdown` from our main `ruff-format` hook, leaving it for the later mdtest formatting stage.

I also had to make a few changes related to config discovery in tests:
- move our cached ecosystem checkouts to `$RUNNER_TEMP` instead of inside of our checkout
- convert some CLI tests to use the `CliTest` helpers
- add `configurationPreference: editorOnly` to some notebook tests

In these cases, our own Ruff settings were being inherited by test code. This likely affects many other tests, but I only updated the obviously failing ones for now. I'm least confident about the notebook tests, but as far as I can tell from the history (https://github.com/astral-sh/ruff/pull/11944, https://github.com/astral-sh/ruff/pull/22810), the specific diagnostics are not the important parts being asserted.

Test Plan
--

CI on this PR
 2026-08-28 12:24:36 -04:00
Alex Waygood 92e3264952 Update args for uv-lock hook in pre-commit config (#28078) 
- `--refresh` enforces our uv cooldown period: manual changes to the
lockfile that violate the cooldown will not actually cause this hook to
fail without `--refresh`
- `--check` means that there's a better error message when the hook
fails in CI
 2026-08-26 19:06:42 +01:00
renovate[bot] 33b9648a76 Update prek dependencies (#28055) 2026-08-26 08:12:56 +02:00
Brent Westbrook cab001e5de Disable uv preview for releases and pre-commit hooks (#27939) 
Summary
--

This partially reverts https://github.com/astral-sh/ruff/pull/27935 as
an alternative to enabling
preview everywhere. Preview was initially enabled ~2 years ago (#11496),
and we probably want to be
more selective about preview features now.

Test Plan
--

Today's release, previous errors:

-
https://github.com/astral-sh/ruff/actions/runs/32390111175/job/96493893174?pr=27937
-
https://github.com/astral-sh/ruff/actions/runs/32390111175/job/96493998150?pr=27937
 2026-08-20 12:41:40 -04:00
Brent Westbrook ca45faebb1 Set --preview and --default-index for the uv-lock hook (#27935) 
Summary
--

This aligns the pre-commit hook with our release script

## Test plan

Manual test on today's release branch
 2026-08-20 11:57:13 -04:00
renovate[bot] 4e9640e155 Update prek dependencies (#27866) 2026-08-19 07:48:42 +02:00
renovate[bot] 0e85931a80 Update prek dependencies (#27673) 2026-08-11 22:43:07 -04:00
renovate[bot] 26435b552d Update prek dependencies (#27480) 2026-08-05 08:08:16 +02:00
renovate[bot]andBrent Westbrook d91586bd5b Update prek dependencies (#27293) 
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[astral-sh/ruff-pre-commit](https://redirect.github.com/astral-sh/ruff-pre-commit)
| repository | minor | `v0.15.22` → `v0.16.0` |
|
[astral-sh/uv-pre-commit](https://redirect.github.com/astral-sh/uv-pre-commit)
| repository | minor | `0.11.32` → `0.12.0` |
|
[rbubley/mirrors-prettier](https://redirect.github.com/rbubley/mirrors-prettier)
| repository | patch | `v3.9.5` → `v3.9.6` |
|
[zizmorcore/zizmor-pre-commit](https://redirect.github.com/zizmorcore/zizmor-pre-commit)
| repository | minor | `v1.27.0` → `v1.28.0` |

Note: The `pre-commit` manager in Renovate is not supported by the
`pre-commit` maintainers or community. Please do not report any problems
there, instead [create a Discussion in the Renovate
repository](https://redirect.github.com/renovatebot/renovate/discussions/new)
if you have any questions.

---

### Release Notes

<details>
<summary>astral-sh/ruff-pre-commit (astral-sh/ruff-pre-commit)</summary>

###
[`v0.16.0`](https://redirect.github.com/astral-sh/ruff-pre-commit/releases/tag/v0.16.0)

[Compare
Source](https://redirect.github.com/astral-sh/ruff-pre-commit/compare/v0.15.22...v0.16.0)

See: <https://github.com/astral-sh/ruff/releases/tag/0.16.0>

</details>

<details>
<summary>astral-sh/uv-pre-commit (astral-sh/uv-pre-commit)</summary>

###
[`v0.12.0`](https://redirect.github.com/astral-sh/uv-pre-commit/releases/tag/0.12.0)

[Compare
Source](https://redirect.github.com/astral-sh/uv-pre-commit/compare/0.11.33...0.12.0)

See: <https://github.com/astral-sh/uv/releases/tag/0.12.0>

###
[`v0.11.33`](https://redirect.github.com/astral-sh/uv-pre-commit/compare/0.11.32...0.11.33)

[Compare
Source](https://redirect.github.com/astral-sh/uv-pre-commit/compare/0.11.32...0.11.33)

</details>

<details>
<summary>rbubley/mirrors-prettier (rbubley/mirrors-prettier)</summary>

###
[`v3.9.6`](https://redirect.github.com/rbubley/mirrors-prettier/compare/v3.9.5...v3.9.6)

[Compare
Source](https://redirect.github.com/rbubley/mirrors-prettier/compare/v3.9.5...v3.9.6)

</details>

<details>
<summary>zizmorcore/zizmor-pre-commit
(zizmorcore/zizmor-pre-commit)</summary>

###
[`v1.28.0`](https://redirect.github.com/zizmorcore/zizmor-pre-commit/releases/tag/v1.28.0)

[Compare
Source](https://redirect.github.com/zizmorcore/zizmor-pre-commit/compare/v1.27.0...v1.28.0)

See: <https://github.com/zizmorcore/zizmor/releases/tag/v1.28.0>

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - "before 4am on Wednesday"
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/astral-sh/ruff).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yODAuMCIsInVwZGF0ZWRJblZlciI6IjQzLjI4MC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJpbnRlcm5hbCJdfQ==-->

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Brent Westbrook <36778786+ntBre@users.noreply.github.com>
 2026-07-30 09:09:25 -04:00
Aria Desires 7d3e61eebf Update uv to 0.11.32 in CI (#27154) 
Latest releases has updates to metadata and uv check that our tests want
to rely on in https://github.com/astral-sh/ruff/pull/25551
 2026-07-24 08:31:09 -07:00
renovate[bot] ce0fb55353 Update prek dependencies (#27065) 2026-07-22 08:25:48 +02:00
renovate[bot] 05f38fbfb0 Update prek dependencies (#26825) 2026-07-14 21:06:08 -07:00
renovate[bot] d3921370bc Update pre-commit hook astral-sh/uv-pre-commit to v0.11.28 (#26621) 2026-07-07 21:14:22 -04:00
renovate[bot] cdc912c13c Update prek dependencies (#26604) 2026-07-07 20:30:53 -04:00
Shaan Majid c360a05e9a chore: run prek from a locked uv dev group (#26463) 
## Summary

Add a locked `uv` workflow for running `prek` in CI and local
development.

This pins `prek` via a new `dev` PEP 735 dependency group, introduces a
committed `uv.lock` file, and updates CI to run `prek` through `uv run
--only-group dev --locked`. It also adds a frozen `uv-lock` pre-commit
hook to ensure future changes keep the lockfile in sync. Lastly, I
noticed that some pre-commit priority blocks did not match the comment
sections, so this does some opportunistic cleanup to move these around.

Atop #26461. Closes #26386.

## Test Plan

```bash
uv run --only-dev prek --all-files
```
 2026-07-01 01:09:42 -07:00
renovate[bot] 27b4a24459 Update prek dependencies (#26488) 2026-07-01 01:13:26 +00:00
Shaan Majid ab4ba0b217 chore: pin pre-commit hook refs (#26461) 
## Summary

Pin pre-commit hook refs to the exact commits currently resolved by
their tags. The version tag is kept in a `# frozen: ...` comment so
Renovate can still update these normally.

This was generated via `prek auto-update --freeze --cooldown-days 14`.

Towards #26386 .

## Changed refs

| Repo | Previous ref | Release | Frozen commit |
|---|---:|---:|---|
|
[`pre-commit/pre-commit-hooks`](https://github.com/pre-commit/pre-commit-hooks)
| [`v6.0.0`](https://github.com/pre-commit/pre-commit-hooks/tree/v6.0.0)
|
[release](https://github.com/pre-commit/pre-commit-hooks/releases/tag/v6.0.0)
|
[`3e8a870`](https://github.com/pre-commit/pre-commit-hooks/commit/3e8a8703264a2f4a69428a0aa4dcb512790b2c8c)
|
|
[`abravalheri/validate-pyproject`](https://github.com/abravalheri/validate-pyproject)
|
[`v0.25`](https://github.com/abravalheri/validate-pyproject/tree/v0.25)
|
[release](https://github.com/abravalheri/validate-pyproject/releases/tag/v0.25)
|
[`4b2e70d`](https://github.com/abravalheri/validate-pyproject/commit/4b2e70d08cb2ccd26d1fba73588de41c7a5d50b7)
|
| [`crate-ci/typos`](https://github.com/crate-ci/typos) |
[`v1.47.2`](https://github.com/crate-ci/typos/tree/v1.47.2) |
[release](https://github.com/crate-ci/typos/releases/tag/v1.47.2) |
[`37bb988`](https://github.com/crate-ci/typos/commit/37bb98842b0d8c4ffebdb75301a13db0267cef89)
|
|
[`rbubley/mirrors-prettier`](https://github.com/rbubley/mirrors-prettier)
| [`v3.8.4`](https://github.com/rbubley/mirrors-prettier/tree/v3.8.4) |
n/a |
[`06507ab`](https://github.com/rbubley/mirrors-prettier/commit/06507ab9500d4a9919b5ebd76d9d5b7074f15c1f)
|
|
[`zizmorcore/zizmor-pre-commit`](https://github.com/zizmorcore/zizmor-pre-commit)
|
[`v1.25.2`](https://github.com/zizmorcore/zizmor-pre-commit/tree/v1.25.2)
|
[release](https://github.com/zizmorcore/zizmor-pre-commit/releases/tag/v1.25.2)
|
[`9257c60`](https://github.com/zizmorcore/zizmor-pre-commit/commit/9257c6050c0261b8c57e712f632dc4a8010109a9)
|
|
[`python-jsonschema/check-jsonschema`](https://github.com/python-jsonschema/check-jsonschema)
|
[`0.37.3`](https://github.com/python-jsonschema/check-jsonschema/tree/0.37.3)
|
[release](https://github.com/python-jsonschema/check-jsonschema/releases/tag/0.37.3)
|
[`5030dca`](https://github.com/python-jsonschema/check-jsonschema/commit/5030dca3047414c338091455ac41803200ec1f0f)
|
|
[`executablebooks/mdformat`](https://github.com/executablebooks/mdformat)
| [`1.0.0`](https://github.com/executablebooks/mdformat/tree/1.0.0) |
n/a |
[`82912cd`](https://github.com/executablebooks/mdformat/commit/82912cdaea4fb830f751504486a7879c70526547)
|
|
[`astral-sh/ruff-pre-commit`](https://github.com/astral-sh/ruff-pre-commit)
|
[`v0.15.19`](https://github.com/astral-sh/ruff-pre-commit/tree/v0.15.19)
|
[release](https://github.com/astral-sh/ruff-pre-commit/releases/tag/v0.15.19)
|
[`745be04`](https://github.com/astral-sh/ruff-pre-commit/commit/745be0411e3c150e246d527e531e5a221b8c3462)
|
|
[`igorshubovych/markdownlint-cli`](https://github.com/igorshubovych/markdownlint-cli)
|
[`v0.48.0`](https://github.com/igorshubovych/markdownlint-cli/tree/v0.48.0)
|
[release](https://github.com/igorshubovych/markdownlint-cli/releases/tag/v0.48.0)
|
[`e72a3ca`](https://github.com/igorshubovych/markdownlint-cli/commit/e72a3ca1632f0b11a07d171449fe447a7ff6795e)
|
|
[`astral-sh/ruff-pre-commit`](https://github.com/astral-sh/ruff-pre-commit)
|
[`v0.15.19`](https://github.com/astral-sh/ruff-pre-commit/tree/v0.15.19)
|
[release](https://github.com/astral-sh/ruff-pre-commit/releases/tag/v0.15.19)
|
[`745be04`](https://github.com/astral-sh/ruff-pre-commit/commit/745be0411e3c150e246d527e531e5a221b8c3462)
|
| [`rhysd/actionlint`](https://github.com/rhysd/actionlint) |
[`v1.7.12`](https://github.com/rhysd/actionlint/tree/v1.7.12) |
[release](https://github.com/rhysd/actionlint/releases/tag/v1.7.12) |
[`914e7df`](https://github.com/rhysd/actionlint/commit/914e7df21a07ef503a81201c76d2b11c789d3fca)
|

## Test Plan

```bash
uvx prek auto-update --freeze --cooldown-days 14
git diff --exit-code -- .pre-commit-config.yaml
uvx prek run --all-files
```
 2026-06-30 00:40:12 -07:00
renovate[bot] ce46714a0d Update prek dependencies (#26311) 2026-06-23 21:48:37 -04:00
renovate[bot] 3e992b6803 Update prek dependencies (#26295) 2026-06-23 21:39:00 -04:00
renovate[bot] 612f3b710d Update prek dependencies (#26062) 2026-06-16 20:49:39 -04:00
Micha Reiser 950d163bf0 [ty] Extract lint rule documentation into markdown files and test example code (#25863) 2026-06-16 13:53:32 +00:00
renovate[bot] 2caa83e849 Update prek dependencies (#25796) 2026-06-09 21:23:05 -07:00
renovate[bot] 4a9fa603dd Update prek dependencies (#25569) 
This PR contains the following updates:

| Package | Type | Update | Change | Pending |
|---|---|---|---|---|
|
[astral-sh/ruff-pre-commit](https://redirect.github.com/astral-sh/ruff-pre-commit)
| repository | patch | `v0.15.13` → `v0.15.14` | `v0.15.15` |
| [crate-ci/typos](https://redirect.github.com/crate-ci/typos) |
repository | patch | `v1.46.2` → `v1.46.3` | `v1.47.0` |

Note: The `pre-commit` manager in Renovate is not supported by the
`pre-commit` maintainers or community. Please do not report any problems
there, instead [create a Discussion in the Renovate
repository](https://redirect.github.com/renovatebot/renovate/discussions/new)
if you have any questions.

---

### Release Notes

<details>
<summary>astral-sh/ruff-pre-commit (astral-sh/ruff-pre-commit)</summary>

###
[`v0.15.14`](https://redirect.github.com/astral-sh/ruff-pre-commit/releases/tag/v0.15.14)

[Compare
Source](https://redirect.github.com/astral-sh/ruff-pre-commit/compare/v0.15.13...v0.15.14)

See: <https://github.com/astral-sh/ruff/releases/tag/0.15.14>

</details>

<details>
<summary>crate-ci/typos (crate-ci/typos)</summary>

###
[`v1.46.3`](https://redirect.github.com/crate-ci/typos/releases/tag/v1.46.3)

[Compare
Source](https://redirect.github.com/crate-ci/typos/compare/v1.46.2...v1.46.3)

#### \[1.46.3] - 2026-05-23

##### Fixes

- Don't correct to `sequentials`
- Don't correct to `subdolder`

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - "before 4am on Wednesday"
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/astral-sh/ruff).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yMDkuMCIsInVwZGF0ZWRJblZlciI6IjQzLjIwOS4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJpbnRlcm5hbCJdfQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-06-02 22:22:20 -04:00
Alex Waygood 7e1bc1e75f Add agent skills for working on ty (#25422) 
## Summary

This PR adds a `.agents/skills` directory to the repo, and adds three
skills to help agents work on ty more effectively:
- A skill to help them write better ty diagnostics
- A skill to help them minimize a single ecosystem change more
effectively
- A skill to help them analyze and summarise ecosystem reports more
effectively

The skills have been designed so that they will (hopefully) work well
whether a contributor is using Codex or Claude as their agent locally.
Codex should discover these skills automatically if you're working on
the repo; if you use Claude locally, you _should_ hopefully be prompted
by Claude to install the local skills due to them being listed as
recommended skills in `.claude/settings.json`.

## Test Plan

I ran `/review` locally with Codex, instructing it to be as nitpicky as
possible, until it could find no more issues with these skills.
 2026-05-27 22:02:29 +01:00
renovate[bot] a76571bfbb Update prek dependencies (#25403) 2026-05-27 07:27:56 +01:00
renovate[bot] 9b8744fc13 Update pre-commit hook crate-ci/typos to v1.46.1 (#25258) 
This PR contains the following updates:

| Package | Type | Update | Change | Pending |
|---|---|---|---|---|
| [crate-ci/typos](https://redirect.github.com/crate-ci/typos) |
repository | patch | `v1.46.0` → `v1.46.1` | `v1.46.2` |

Note: The `pre-commit` manager in Renovate is not supported by the
`pre-commit` maintainers or community. Please do not report any problems
there, instead [create a Discussion in the Renovate
repository](https://redirect.github.com/renovatebot/renovate/discussions/new)
if you have any questions.

---

### Release Notes

<details>
<summary>crate-ci/typos (crate-ci/typos)</summary>

###
[`v1.46.1`](https://redirect.github.com/crate-ci/typos/releases/tag/v1.46.1)

[Compare
Source](https://redirect.github.com/crate-ci/typos/compare/v1.46.0...v1.46.1)

#### \[1.46.1] - 2026-05-08

##### Fixes

- Don't correct to `confidentials`

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - "before 4am on Wednesday"
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/astral-sh/ruff).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xODUuMSIsInVwZGF0ZWRJblZlciI6IjQzLjE4NS4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJpbnRlcm5hbCJdfQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-05-20 11:21:24 +05:30
Brent WestbrookandMicha Reiser 505a51c06c Add mdtests for Ruff (#24617) 
Summary
--

This PR adds the `ruff_test` crate, a parallel crate to `ty_test` for
Ruff, to
enable the new mdtests in `ruff_linter`. I opted to follow the
`Db`-based
structure of `ty_test` to simplify the integration, but we end up
basically just
unpacking the files from the `Db` to call the `test_contents` function
from the
linter.

I also updated the section of the contributing guidelines on lint rule
testing to suggest using mdtests.

Test Plan
--

I copied over the S704 tests into a new mdtest. I selected this rule
because it had several separate fixture files that all used different
settings and each of the fixtures was relatively short. I had initially
reached for a more complicated rule (UP046), but this seemed less likely
to clutter the diff while still exercising most mdtest features.

---------

Co-authored-by: Micha Reiser <micha@reiser.io>
 2026-05-18 06:28:19 -07:00
Charlie Marsh 2522549901 Remove shellcheck from prek (#25154) 
## Summary

`shellcheck-py` requires a build-time binary download from GitHub, which
is rejected by some firewalls. There's also
[`shellcheck-precommit`](https://github.com/koalaman/shellcheck-precommit),
but that uses a Docker-based hook, and would introduce a Docker
requirement to our `prek` setup that doesn't currently exist.

So this PR just removes it from our pre-commit setup, and uses
`actions/setup-go` instead with a dedicated CI job.
 2026-05-14 12:34:07 +01:00
renovate[bot] d979862570 Update prek dependencies (#25131) 2026-05-13 01:57:03 +00:00
renovate[bot] 532e4ae649 Update prek dependencies (#25003) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-05-06 06:00:21 +01:00
renovate[bot] 6f5de24da4 Update prek dependencies (#24858) 2026-04-26 22:06:10 -04:00
renovate[bot] 991ff109d7 Update prek dependencies (#24724) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-04-19 22:10:17 -04:00
renovate[bot]andAlex Waygood 6aabfecade Update prek dependencies (#24588) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Alex Waygood <alex.waygood@gmail.com>
 2026-04-13 11:29:14 +00:00
renovate[bot] 213a003bcb Update prek dependencies (#24433) 2026-04-05 22:04:48 -04:00