Skip to content

Conversation

renovate[bot]
Copy link

@renovate renovate bot commented Jul 1, 2024

This PR contains the following updates:

Package Type Update Change
DavidAnson/markdownlint-cli2 repository minor v0.13.0 -> v0.18.1
PyCQA/bandit repository minor 1.7.8 -> 1.8.6
PyCQA/flake8 repository minor 7.0.0 -> 7.3.0
PyCQA/pylint repository minor v3.1.0 -> v3.3.9
adrienverge/yamllint repository minor v1.35.1 -> v1.37.1
antonbabenko/pre-commit-terraform repository minor v1.89.1 -> v1.103.0
codespell-project/codespell repository minor v2.2.6 -> v2.4.1
hashicorp/terraform minor 1.8.2 -> 1.13.4
koalaman/shellcheck-precommit repository minor v0.10.0 -> v0.11.0
pre-commit/pre-commit-hooks repository minor v4.5.0 -> v4.6.0
python uses-with minor 3.12 -> 3.14
python-jsonschema/check-jsonschema repository minor 0.28.3 -> 0.34.1
rhysd/actionlint repository patch v1.7.0 -> v1.7.8

Note: The pre-commit manager in Renovate is not supported by the pre-commit maintainers or community. Please do not report any problems there, instead create a Discussion in the Renovate repository if you have any questions.


Release Notes

DavidAnson/markdownlint-cli2 (DavidAnson/markdownlint-cli2)

v0.18.1

Compare Source

v0.18.0

Compare Source

v0.17.2

Compare Source

v0.17.1

Compare Source

v0.17.0

Compare Source

v0.16.0

Compare Source

v0.15.0

Compare Source

v0.14.0

Compare Source

PyCQA/bandit (PyCQA/bandit)

v1.8.6

Compare Source

What's Changed

New Contributors

Full Changelog: PyCQA/bandit@1.8.5...1.8.6

v1.8.5

Compare Source

What's Changed

Full Changelog: PyCQA/bandit@1.8.4...1.8.5

v1.8.4

Compare Source

What's Changed

New Contributors

Full Changelog: PyCQA/bandit@1.8.3...1.8.4

v1.8.3

Compare Source

What's Changed

New Contributors

Full Changelog: PyCQA/bandit@1.8.2...1.8.3

v1.8.2

Compare Source

What's Changed

Full Changelog: PyCQA/bandit@1.8.1...1.8.2

v1.8.1

Compare Source

What's Changed

New Contributors

Full Changelog: PyCQA/bandit@1.8.0...1.8.1

v1.8.0

Compare Source

What's Changed

Full Changelog: PyCQA/bandit@1.7.10...1.8.0

v1.7.10

Compare Source

What's Changed

New Contributors

Full Changelog: PyCQA/bandit@1.7.9...1.7.10

v1.7.9

Compare Source

What's Changed

New Contributors

Full Changelog: PyCQA/bandit@1.7.8...1.7.9

PyCQA/flake8 (PyCQA/flake8)

v7.3.0

Compare Source

v7.2.0

Compare Source

v7.1.2

Compare Source

v7.1.1

Compare Source

v7.1.0

Compare Source

PyCQA/pylint (PyCQA/pylint)

v3.3.9

Compare Source

What's new in Pylint 3.3.9?

Release date: 2025-10-05

False Positives Fixed

  • Fix used-before-assignment for PEP 695 type aliases and parameters.

    Closes #​9815

  • No longer flag undeprecated functions in importlib.resources as deprecated.

    Closes #​10593

  • Fix false positive inconsistent-return-statements when using quit() or exit() functions.

    Closes #​10508

  • Fix false positive undefined-variable (E0602) for for-loop variable shadowing patterns like for item in item: when the variable was previously defined.

    Closes #​10562

Other Bug Fixes

  • Fixed crash in 'unnecessary-list-index-lookup' when starting an enumeration using
    minus the length of an iterable inside a dict comprehension when the len call was only
    made in this dict comprehension, and not elsewhere. Also changed the approach,
    to use inference in all cases but the simple ones, so we don't have to fix crashes
    one by one for arbitrarily complex expressions in enumerate.

    Closes #​10510

v3.3.8

Compare Source

What's new in Pylint 3.3.8?

Release date: 2025-08-09

This patch release includes an exceptional fix for a false negative issue. For details, see: pylint-dev#10482 (comment)

False Positives Fixed

  • Fix false positives for possibly-used-before-assignment when variables are exhaustively
    assigned within a match block.

    Closes #​9668

  • Fix false positive for missing-raises-doc and missing-yield-doc when the method length is less than docstring-min-length.

    Refs #​10104

  • Fix a false positive for unused-variable when multiple except handlers bind the same name under a try block.

    Closes #​10426

False Negatives Fixed

  • Fix false-negative for used-before-assignment with from __future__ import annotations in function definitions.

    Refs #​10482

Other Bug Fixes

  • Fix a bug in Pyreverse where aggregations and associations were included in diagrams regardless of the selected --filter-mode (such as PUB_ONLY, ALL, etc.).

    Closes #​10373

  • Fix double underscores erroneously rendering as bold in pyreverse's Mermaid output.

    Closes #​10402

v3.3.7

Compare Source

What's new in Pylint 3.3.7?

Release date: 2025-05-04

False Positives Fixed

  • Comparisons between two calls to type() won't raise an unidiomatic-typecheck warning anymore, consistent with the behavior applied only for == previously.

    Closes #​10161

Other Bug Fixes

  • Fixed a crash when importing a class decorator that did not exist with the same name as a class attribute after the class definition.

    Closes #​10105

  • Fix a crash caused by malformed format strings when using .format with keyword arguments.

    Closes #​10282

  • Using a slice as a class decorator now raises a not-callable message instead of crashing. A lot of checks that dealt with decorators (too many to list) are now shortcut if the decorator can't immediately be inferred to a function or class definition.

    Closes #​10334

Other Changes

  • The algorithm used for no-member suggestions is now more efficient and cuts the
    calculation when the distance score is already above the threshold.

    Refs #​10277

v3.3.6

Compare Source

What's new in Pylint 3.3.6?

Release date: 2025-03-20

False Positives Fixed

  • Fix a false positive for used-before-assignment when an inner function's return type
    annotation is a class defined at module scope.

    Closes #​9391

v3.3.5

Compare Source

What's new in Pylint 3.3.5?

Release date: 2025-03-09

False Positives Fixed

  • Fix false positives for use-implicit-booleaness-not-comparison, use-implicit-booleaness-not-comparison-to-string
    and use-implicit-booleaness-not-comparison-to-zero when chained comparisons are checked.

    Closes #​10065

  • Fix a false positive for invalid-getnewargs-ex-returned when the tuple or dict has been assigned to a name.

    Closes #​10208

  • Remove getopt and optparse from the list of deprecated modules.

    Closes #​10211

Other Bug Fixes

  • Fixed conditional import x.y causing false positive possibly-used-before-assignment.

    Closes #​10081

  • Fix a crash when something besides a class is found in an except handler.

    Closes #​10106

  • Fixed raising invalid-name when using camelCase for private methods with two leading underscores.

    Closes #​10189

Other Changes

  • Upload release assets to PyPI via Trusted Publishing.

    Closes #​10256

v3.3.4

Compare Source

Other Bug Fixes

  • Fixes "skipped files" count calculation; the previous method was displaying an arbitrary number.

    Closes #​10073

  • Fixes a crash that occurred when pylint was run in a container on a host with cgroupsv2 and restrictions on CPU usage.

    Closes #​10103

  • Relaxed the requirements for isort so pylint can benefit from isort 6.

    Closes #​10203

v3.3.3

Compare Source

What's new in Pylint 3.3.3?

Release date: 2024-12-23

False Positives Fixed

  • Fix false positives for undefined-variable for classes using Python 3.12
    generic type syntax.

    Closes #​9335

  • Fix a false positive for use-implicit-booleaness-not-len. No lint should be emitted for
    generators (len is not defined for generators).

    Refs #​10100

Other Bug Fixes

  • Fix Unable to import 'collections.abc' (import-error) on Python 3.13.1.

    Closes #​10112

v3.3.2

Compare Source

False Positives Fixed

  • Fix a false positive for potential-index-error when an indexed iterable
    contains a starred element that evaluates to more than one item.

    Closes #​10076

Other Bug Fixes

  • Fixes the issue with --source-root option not working when the source files are in a subdirectory of the source root (e.g. when using a /src layout).

    Closes #​10026

v3.3.1

Compare Source

What's new in Pylint 3.3.1?

Release date: 2024-09-24

False Positives Fixed

  • Fix regression causing some f-strings to not be inferred as strings.

    Closes #​9947

v3.3.0

Compare Source

Release date: 2024-09-20

Changes requiring user actions

  • We migrated symilar to argparse, from getopt, so the error and help output changed
    (for the better). We exit with 2 instead of sometime 1, sometime 2. The error output
    is not captured by the runner anymore. It's not possible to use a value for the
    boolean options anymore (--ignore-comments 1 should become --ignore-comments).

    Refs #​9731

New Features

  • Add new declare-non-slot error which reports when a class has a __slots__ member and a type hint on the class is not present in __slots__.

    Refs #​9499

New Checks

  • Added too-many-positional-arguments to allow distinguishing the configuration for too many
    total arguments (with keyword-only params specified after *) from the configuration
    for too many positional-or-keyword or positional-only arguments.

    As part of evaluating whether this check makes sense for your project, ensure you
    adjust the value of --max-positional-arguments.

    Closes #​9099

  • Add using-exception-groups-in-unsupported-version and
    using-generic-type-syntax-in-unsupported-version for uses of Python 3.11+ or
    3.12+ features on lower supported versions provided with --py-version.

    Closes #​9791

  • Add using-assignment-expression-in-unsupported-version for uses of := (walrus operator)
    on Python versions below 3.8 provided with --py-version.

    Closes #​9820

  • Add using-positional-only-args-in-unsupported-version for uses of positional-only args on
    Python versions below 3.8 provided with --py-version.

    Closes #​9823

  • Add unnecessary-default-type-args to the typing extension to detect the use
    of unnecessary default type args for typing.Generator and typing.AsyncGenerator.

    Refs #​9938

False Negatives Fixed

  • Fix computation of never-returning function: Never is handled in addition to NoReturn, and priority is given to the explicit --never-returning-functions option.

    Closes #​7565.

  • Fix a false negative for await-outside-async when await is inside Lambda.

    Refs #​9653

  • Fix a false negative for duplicate-argument-name by including positional-only, *args and **kwargs arguments in the check.

    Closes #​9669

  • Fix false negative for multiple-statements when multiple statements are present on else and finally lines of try.

    Refs #​9759

  • Fix false negatives when isinstance does not have exactly two arguments.
    pylint now emits a too-many-function-args or no-value-for-parameter
    appropriately for isinstance calls.

    Closes #​9847

Other Bug Fixes

  • --enable with --disable=all now produces an error, when an unknown msg code is used. Internal pylint messages are no longer affected by --disable=all.

    Closes #​9403

  • Impossible to compile regexes for paths in the configuration or argument given to pylint won't crash anymore but
    raise an argparse error and display the error message from re.compile instead.

    Closes #​9680

  • Fix a bug where a tox.ini file with pylint configuration was ignored and it exists in the current directory.

    .cfg and .ini files containing a Pylint configuration may now use a section named [pylint]. This enhancement impacts the scenario where these file types are used as defaults when they are present and have not been explicitly referred to, using the --rcfile option.

    Closes #​9727

  • Improve file discovery for directories that are not python packages.

    Closes #​9764

Other Changes

  • Remove support for launching pylint with Python 3.8.
    Code that supports Python 3.8 can still be linted with the --py-version=3.8 setting.

    Refs #​9774

  • Add support for Python 3.13.

    Refs #​9852

Internal Changes

  • All variables, classes, functions and file names containing the word 'similar', when it was,
    in fact, referring to 'symilar' (the standalone program for the duplicate-code check) were renamed
    to 'symilar'.

    Closes #​9734

  • Remove old-style classes (Python 2) code and remove check for new-style class since everything is new-style in Python 3. Updated doc for exception checker to remove reference to new style class.

    Refs #​9925

v3.2.7

Compare Source

What's new in Pylint 3.2.7?

Release date: 2024-08-31

False Positives Fixed

  • Fixed a false positive unreachable for NoReturn coroutine functions.

    Closes #​9840

Other Bug Fixes

  • Fix crash in refactoring checker when calling a lambda bound as a method.

    Closes #​9865

  • Fix a crash in undefined-loop-variable when providing the iterable argument to enumerate().

    Closes #​9875

  • Fix to address indeterminacy of error message in case a module name is same as another in a separate namespace.

    Refs #​9883

v3.2.6

Compare Source

What's new in Pylint 3.2.6?

Release date: 2024-07-21

False Positives Fixed

  • Quiet false positives for unexpected-keyword-arg when pylint cannot
    determine which of two or more dynamically defined classes is being instantiated.

    Closes #​9672

  • Fix a false positive for missing-param-doc where a method which is decorated with typing.overload was expected to have a docstring specifying its parameters.

    Closes #​9739

  • Fix a regression that raised invalid-name on class attributes merely
    overriding invalid names from an ancestor.

    Closes #​9765

  • Treat assert_never() the same way when imported from typing_extensions.

    Closes #​9780

  • Fix a false positive for consider-using-min-max-builtin when the assignment target is an attribute.

    Refs #​9800

Other Bug Fixes

  • Fix an AssertionError arising from properties that return partial functions.

    Closes #​9214

  • Fix a crash when a subclass extends __slots__.

    Closes #​9814

v3.2.5

Compare Source

What's new in Pylint 3.2.5 ?

Release date: 2024-06-28

Other Bug Fixes

  • Fixed a false positive unreachable-code when using typing.Any as return type in python
    3.8, the typing.NoReturn are not taken into account anymore for python 3.8 however.

    Closes #​9751

v3.2.4

Compare Source

What's new in Pylint 3.2.4?

Release date: 2024-06-26

False Positives Fixed

  • Prevent emitting possibly-used-before-assignment when relying on names
    only potentially not defined in conditional blocks guarded by functions
    annotated with typing.Never or typing.NoReturn.

    Closes #​9674

Other Bug Fixes

  • Fixed a crash when the lineno of a variable used as an annotation wasn't available for undefined-variable.

    Closes #​8866

  • Fixed a crash when the start value in an enumerate was non-constant and impossible to infer
    (like inenumerate(apples, start=int(random_apple_index)) for unnecessary-list-index-lookup.

    Closes #​9078

  • Fixed a crash in symilar when the -d or -i short option were not properly recognized.
    It's still impossible to do -d=1 (you must do -d 1).

    Closes #​9343

v3.2.3

Compare Source

False Positives Fixed

  • Classes with only an Ellipsis (...) in their body do not trigger 'multiple-statements'
    anymore if they are inlined (in accordance with black's 2024 style).

    Closes #​9398

  • Fix a false positive for redefined-outer-name when there is a name defined in an exception-handling block which shares the same name as a local variable that has been defined in a function body.

    Closes #​9671

  • Fix a false positive for use-yield-from when using the return value from the yield atom.

    Closes #​9696

v3.2.2

Compare Source

What's new in Pylint 3.2.2?

Release date: 2024-05-20

False Positives Fixed

  • Fix multiple false positives for generic class syntax added in Python 3.12 (PEP 695).

    Closes #​9406

  • Exclude context manager without cleanup from
    contextmanager-generator-missing-cleanup checks.

    Closes #​9625

v3.2.1

Compare Source

What's new in Pylint 3.2.1?

Release date: 2024-05-18

False Positives Fixed

  • Exclude if/else branches containing terminating functions (e.g. sys.exit())
    from possibly-used-before-assignment checks.

    Closes #​9627

  • Don't emit typevar-name-incorrect-variance warnings for PEP 695 style TypeVars.
    The variance is inferred automatically by the type checker.
    Adding _co or _contra suffix can help to reason about TypeVar.

    Refs #​9638

  • Fix a false positive for possibly-used-before-assignment when using
    typing.assert_never() (3.11+) to indicate exhaustiveness.

    Closes #​9643

Other Bug Fixes

  • Fix a false negative for --ignore-patterns when the directory to be linted is specified using a dot(.) and all files are ignored instead of only the files whose name begin with a dot.

    Closes #​9273

  • Restore "errors / warnings by module" section to report output (with -ry).

    Closes #​9145

  • trailing-comma-tuple should now be correctly emitted when it was disabled globally
    but enabled via local message control, after removal of an over-optimisation.

    Refs #​9608

  • Add --prefer-stubs=yes option to opt-in to the astroid 3.2 feature
    that prefers .pyi stubs over same-named .py files. This has the
    potential to reduce no-member errors but at the cost of more errors
    such as not-an-iterable from function bodies appearing as ....

    Defaults to no.

    Closes #​9626
    Closes #​9623

Internal Changes

  • Update astroid version to 3.2.1. This solves some reports of RecursionError
    and also makes the prefer .pyi stubs feature in astroid 3.2.0 opt-in
    with the aforementioned --prefer-stubs=y option.

    Refs #​9139

v3.2.0

Compare Source

What's new in Pylint 3.2.0?

Release date: 2024-05-14

Of note: a github reporter, two new checks (possibly-used-before-assignment and contextmanager-generator-missing-cleanup), performance improvements, and an astroid upgrade providing support for @overload and .pyi stubs.

New Features

  • Understand six.PY2 and six.PY3 for conditional imports.

    Closes #​3501

  • A new github reporter has been added. This reporter returns the output of pylint in a format that
    Github can use to automatically annotate code. Use it with pylint --output-format=github on your Github Workflows.

    Closes #​9443.

New Checks

  • Add check possibly-used-before-assignment when relying on names after an if/else
    switch when one branch failed to define the name, raise, or return.

    Closes #​1727

  • Checks for generators that use contextmanagers that don't handle cleanup properly.
    Is meant to raise visibilty on the case that a generator is not fully exhausted and the contextmanager is not cleaned up properly.
    A contextmanager must yield a non-constant value and not handle cleanup for GeneratorExit.
    The using generator must attempt to use the yielded context value with x() as y and not just with x().

    Closes #​2832

False Negatives Fixed

  • If and Try nodes are now checked for useless return statements as well.

    Closes #​9449.

  • Fix false negative for property-with-parameters in the case of parameters which are positional-only, keyword-only, variadic positional or variadic keyword.

    Closes #​9584

False Positives Fixed

  • pylint now understands the @overload decorator return values better.

    Closes #​4696
    Refs #​9606

Performance Improvements

  • Ignored modules are now not checked at all, instead of being checked and then
    ignored. This should speed up the analysis of large codebases which have
    ignored modules.

    Closes #​9442

  • ImportChecker's logic has been modified to avoid context files when possible. This makes it possible
    to cache module searches on astroid and reduce execution times.

    Refs #​9310.

  • An internal check for trailing-comma-tuple being enabled for a file or not is now
    done once per file instead of once for each token.

    Refs #​9608.

v3.1.1

Compare Source

What's new in Pylint 3.1.1?

Release date: 2024-05-13

False Positives Fixed

  • Treat attrs.define and attrs.frozen as dataclass decorators in
    too-few-public-methods check.

    Closes #​9345

  • Fix a false positive with singledispatchmethod-function when a method is decorated with both functools.singledispatchmethod and staticmethod.

    Closes #​9531

  • Fix a false positive for consider-using-dict-items when iterating using keys() and then deleting an item using the key as a lookup.

    Closes #​9554

adrienverge/yamllint (adrienverge/yamllint)

v1.37.1

Compare Source

v1.37.0

Compare Source

v1.36.2

Compare Source

v1.36.1

Compare Source

v1.36.0

Compare Source

antonbabenko/pre-commit-terraform (antonbabenko/pre-commit-terraform)

v1.103.0

Compare Source

v1.102.0

Compare Source

Features
  • terrascan: Add support for __GIT_WORKING_DIR__ in hooks arguments (#​943) (c4ef91e)

[`v1.10


Configuration

📅 Schedule: Branch creation - "before 3am on Monday" in timezone America/Los_Angeles, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot force-pushed the renovate/all branch 2 times, most recently from c92f1fb to 5c68032 Compare July 9, 2024 02:19
@renovate renovate bot force-pushed the renovate/all branch 3 times, most recently from e6966bd to 9bbc7fb Compare July 28, 2024 14:44
@renovate renovate bot force-pushed the renovate/all branch 2 times, most recently from 1b45b88 to 8e1c7e6 Compare August 5, 2024 05:33
@renovate renovate bot force-pushed the renovate/all branch 3 times, most recently from 0364eeb to bfaa974 Compare August 23, 2024 05:44
@renovate renovate bot force-pushed the renovate/all branch 4 times, most recently from c34c556 to fa0a607 Compare September 1, 2024 05:08
@renovate renovate bot force-pushed the renovate/all branch 3 times, most recently from 31c1314 to cbd3887 Compare September 11, 2024 20:43
@renovate renovate bot force-pushed the renovate/all branch 4 times, most recently from afce9bb to 6ba7c00 Compare September 21, 2024 11:23
@renovate renovate bot force-pushed the renovate/all branch 3 times, most recently from 9a6648a to b9b0143 Compare September 30, 2024 05:40
@renovate renovate bot force-pushed the renovate/all branch 3 times, most recently from deab234 to 6a58353 Compare October 3, 2024 05:11
@renovate renovate bot force-pushed the renovate/all branch 2 times, most recently from 6aa20e6 to c7e2da1 Compare April 18, 2025 12:05
@renovate renovate bot force-pushed the renovate/all branch 2 times, most recently from 07999b0 to 8622efb Compare May 11, 2025 16:08
@renovate renovate bot force-pushed the renovate/all branch from 8622efb to 1d861c2 Compare May 17, 2025 00:04
@renovate renovate bot force-pushed the renovate/all branch from 1d861c2 to 44fea8a Compare May 24, 2025 11:47
@renovate renovate bot force-pushed the renovate/all branch 2 times, most recently from 65db0f0 to c45784d Compare June 6, 2025 11:38
@renovate renovate bot force-pushed the renovate/all branch 2 times, most recently from 7f31182 to ca4eae1 Compare June 14, 2025 03:55
@renovate renovate bot force-pushed the renovate/all branch from 4f25368 to 59d0608 Compare July 5, 2025 04:04
@renovate renovate bot force-pushed the renovate/all branch 3 times, most recently from 0784c1c to 58a6496 Compare August 10, 2025 04:04
@renovate renovate bot force-pushed the renovate/all branch 2 times, most recently from c3480de to 54483b1 Compare September 18, 2025 11:30
@renovate renovate bot force-pushed the renovate/all branch 2 times, most recently from 929a895 to 9a15909 Compare October 1, 2025 23:44
@renovate renovate bot force-pushed the renovate/all branch 4 times, most recently from be8d3ec to f663406 Compare October 12, 2025 06:56
@renovate renovate bot force-pushed the renovate/all branch 2 times, most recently from a75834d to e22e3d3 Compare October 16, 2025 08:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants