tree 1043303eaa3dd7955d8a0bc09dfe1eef87d2bc02
parent cec9c3cad94480eed949c98cb9cffcbce07ca84b
author dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> 1719846529 +0000
committer GitHub <noreply@github.com> 1719846529 +0000

chore(deps): update ruff requirement from ==0.4.* to ==0.5.*

Updates the requirements on [ruff](https://github.com/astral-sh/ruff) to permit the latest version.
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](https://github.com/astral-sh/ruff/compare/v0.4.0...0.5.0)

---
updated-dependencies:
- dependency-name: ruff
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>


chore(deps): update ruff requirement from ==0.4.* to ==0.5.*

Updates the requirements on [ruff](https://github.com/astral-sh/ruff) to permit the latest version.

Release notes

Sourced from ruff's releases.

0.5.0

Release Notes

Check out the blog post for a migration guide and overview of the changes!

Breaking changes

See also, the "Remapped rules" section which may result in disabled rules.

Follow the XDG specification to discover user-level configurations on macOS (same as on other Unix platforms)

Selecting ALL now excludes deprecated rules

The released archives now include an extra level of nesting, which can be removed with --strip-components=1 when untarring.

The release artifact's file name no longer includes the version tag. This enables users to install via /latest URLs on GitHub.

The diagnostic ranges for some flake8-bandit rules were modified (#10667).

Deprecations

The following rules are now deprecated:

syntax-error (E999): Syntax errors are now always shown

Remapped rules

The following rules have been remapped to new rule codes:

blocking-http-call-in-async-function: ASYNC100 to ASYNC210

open-sleep-or-subprocess-in-async-function: ASYNC101 split into ASYNC220, ASYNC221, ASYNC230, and ASYNC251

blocking-os-call-in-async-function: ASYNC102 has been merged into ASYNC220 and ASYNC221

trio-timeout-without-await: TRIO100 to ASYNC100

trio-sync-call: TRIO105 to ASYNC105

trio-async-function-with-timeout: TRIO109 to ASYNC109

trio-unneeded-sleep: TRIO110 to ASYNC110

trio-zero-sleep-call: TRIO115 to ASYNC115

repeated-isinstance-calls: PLR1701 to SIM101

Stabilization

The following rules have been stabilized and are no longer in preview:

mutable-fromkeys-value (RUF024)

default-factory-kwarg (RUF026)

django-extra (S610)

manual-dict-comprehension (PERF403)

print-empty-string (FURB105)

readlines-in-for (FURB129)

if-expr-min-max (FURB136)

bit-count (FURB161)

redundant-log-base (FURB163)

regex-flag-alias (FURB167)

isinstance-type-none (FURB168)

... (truncated)

Changelog

Sourced from ruff's changelog.

0.5.0

Check out the blog post for a migration guide and overview of the changes!

Breaking changes

See also, the "Remapped rules" section which may result in disabled rules.

Follow the XDG specification to discover user-level configurations on macOS (same as on other Unix platforms)

Selecting ALL now excludes deprecated rules

The released archives now include an extra level of nesting, which can be removed with --strip-components=1 when untarring.

The release artifact's file name no longer includes the version tag. This enables users to install via /latest URLs on GitHub.

The diagnostic ranges for some flake8-bandit rules were modified (#10667).

Deprecations

The following rules are now deprecated:

syntax-error (E999): Syntax errors are now always shown

Remapped rules

The following rules have been remapped to new rule codes:

blocking-http-call-in-async-function: ASYNC100 to ASYNC210

open-sleep-or-subprocess-in-async-function: ASYNC101 split into ASYNC220, ASYNC221, ASYNC230, and ASYNC251

blocking-os-call-in-async-function: ASYNC102 has been merged into ASYNC220 and ASYNC221

trio-timeout-without-await: TRIO100 to ASYNC100

trio-sync-call: TRIO105 to ASYNC105

trio-async-function-with-timeout: TRIO109 to ASYNC109

trio-unneeded-sleep: TRIO110 to ASYNC110

trio-zero-sleep-call: TRIO115 to ASYNC115

repeated-isinstance-calls: PLR1701 to SIM101

Stabilization

The following rules have been stabilized and are no longer in preview:

mutable-fromkeys-value (RUF024)

default-factory-kwarg (RUF026)

django-extra (S610)

manual-dict-comprehension (PERF403)

print-empty-string (FURB105)

readlines-in-for (FURB129)

if-expr-min-max (FURB136)

bit-count (FURB161)

redundant-log-base (FURB163)

regex-flag-alias (FURB167)

isinstance-type-none (FURB168)

type-none-comparison (FURB169)

... (truncated)

Commits

244b923 Add necessary permissions for cargo-dist Docker build (#12072)

a8b48fc Release v0.5.0 (#12068)

04c8597 [flake8-simplify] Stabilize detection of Yoda conditions for "constant" col...

4029a25 [Ruff v0.5] Stabilise 15 pylint rules (#12051)

0917ce1 Update documentation to mention etcetera crate instead of dirs for user c...

22cebdf Add server config to filter out syntax error diagnostics (#12059)

72b6c26 Simplify LinterResult, avoid cloning ParseError (#11903)

73851e7 Avoid displaying syntax error as log message (#11902)

e7b4969 Remove E999 as a rule, disallow any disablement methods for syntax error (#...

c98d8a0 [pyflakes] Stabilize detection of is comparisons to lists, etc. (F632) (#...

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

dependencies

Pull requests that update a dependency file

python

Pull requests that update Python code

openjd-model-for-python

Provides a Python implementation of the data model for Open Job Description's template schemas.


## [![Quality Gate Passed](https://sonarsource.github.io/sonarcloud-github-static-resources/v2/checks/QualityGateBadge/qg-passed-20px.png 'Quality Gate Passed')](https://sonarcloud.io/dashboard?id=OpenJobDescription_openjd-model-for-python&pullRequest=128) **Quality Gate passed**
Issues
![](https://sonarsource.github.io/sonarcloud-github-static-resources/v2/common/passed-16px.png '') [0 New issues](https://sonarcloud.io/project/issues?id=OpenJobDescription_openjd-model-for-python&pullRequest=128&resolved=false&sinceLeakPeriod=true)
![](https://sonarsource.github.io/sonarcloud-github-static-resources/v2/common/accepted-16px.png '') [0 Accepted issues](https://sonarcloud.io/project/issues?id=OpenJobDescription_openjd-model-for-python&pullRequest=128&resolutions=WONTFIX)

Measures
![](https://sonarsource.github.io/sonarcloud-github-static-resources/v2/common/passed-16px.png '') [0 Security Hotspots](https://sonarcloud.io/project/security_hotspots?id=OpenJobDescription_openjd-model-for-python&pullRequest=128&resolved=false&sinceLeakPeriod=true)
![](https://sonarsource.github.io/sonarcloud-github-static-resources/v2/common/passed-16px.png '') [0.0% Coverage on New Code](https://sonarcloud.io/component_measures?id=OpenJobDescription_openjd-model-for-python&pullRequest=128&metric=new_coverage&view=list)
![](https://sonarsource.github.io/sonarcloud-github-static-resources/v2/common/passed-16px.png '') [0.0% Duplication on New Code](https://sonarcloud.io/component_measures?id=OpenJobDescription_openjd-model-for-python&pullRequest=128&metric=new_duplicated_lines_density&view=list)

[See analysis details on SonarCloud](https://sonarcloud.io/dashboard?id=OpenJobDescription_openjd-model-for-python&pullRequest=128)

SonarQubeCloud

SonarQube Cloud (formerly SonarCloud) is a SaaS code analysis tool designed to detect coding issues in 30+ languages, frameworks, and IaC platforms. Your code is checked against an extensive set of rules that cover many attributes of code, such as maintainability, reliability, and security issues, on each merge/pull request.

For those requiring US-based hosting, [SonarQube Cloud US](https://sonarqube.us/) offers the perfect alternative. If you need data residency outside the US or within the EU, [SonarQube Cloud](https://sonarcloud.io/) with this GitHub app is the ideal solution.

SonarQube Cloud integrates seamlessly into your GitHub workflow and provides clear guidance for resolving any code quality and security issues detected. The majority of popular languages can be analyzed automatically; no configuration is required!

With [SonarQube Cloud](https://sonarcloud.io/github), you get:

-   Fast, precise static analysis and feedback on your code

-   Support for popular languages, frameworks, and IaC tools

-   Free analysis for open-source projects and private projects up to max 50k LoC

-   Automatic analysis of pull requests and branches with results reported inline

-   IDE Support with [SonarQube for IDE](https://www.sonarsource.com/products/sonarlint/) integration

-   Quality Gate (added as a GitHub check) acting at two different levels - first, preventing you from merging pull requests that contain issues - and later, helping you to release only clean, safe code

-   Sign up for SonarQube free tier and begin scanning your private and public repositories

A [GitHub Action](https://github.com/marketplace/actions/sonarcloud-scan) is available in the marketplace to make it easy for you (for projects where automatic analysis isn't available). SonarQube Cloud also integrates smoothly with Jenkins, CircleCI, TravisCI, CirrusCI, and many other tools.

A free tier is available that allows you to explore the benefits of SonarQube Cloud using your public and private repositories. We also provide a no-commitment, [14-day trial](https://www.sonarsource.com/products/sonarcloud/signup/) of SonarQube Cloud Team for unlimited team members, up to 1.9M LoC, AI CodeFix recommendations, and more. No need to speak with a sales rep or request a license key - get automatic code analysis results on your private projects in minutes! Want to see more examples of SonarCloud in action? You can [explore current Open Source projects in SonarCloud](https://sonarcloud.io/explore/projects?sort=-analysis_date) that are using the [Clean as You Code](https://www.sonarsource.com/solutions/our-unique-approach/) methodology.

What are you waiting for? SonarQube Cloud helps you consistently deliver cleaner, secure software that future developers will appreciate and your users will love. Start writing Clean Code. [Now](https://www.sonarsource.com/products/sonarcloud/signup/)!

read


read


@dependabot recreate


Superseded by #136.

Dependabot

GitHub Dependabot

write