Skip to content

Bump https://github.com/astral-sh/ruff-pre-commit from v0.13.3 to 0.16.4 - #6957

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pre_commit/https-/github.com/astral-sh/ruff-pre-commit-0.16.4
Open

Bump https://github.com/astral-sh/ruff-pre-commit from v0.13.3 to 0.16.4#6957
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pre_commit/https-/github.com/astral-sh/ruff-pre-commit-0.16.4

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 28, 2026

Copy link
Copy Markdown
Contributor

Bumps https://github.com/astral-sh/ruff-pre-commit from v0.13.3 to 0.16.4.

Release notes

Sourced from https://github.com/astral-sh/ruff-pre-commit's releases.

v0.16.4

See: https://github.com/astral-sh/ruff/releases/tag/0.16.4

v0.16.3

See: https://github.com/astral-sh/ruff/releases/tag/0.16.3

v0.16.2

See: https://github.com/astral-sh/ruff/releases/tag/0.16.2

v0.16.1

See: https://github.com/astral-sh/ruff/releases/tag/0.16.1

v0.16.0

See: https://github.com/astral-sh/ruff/releases/tag/0.16.0

v0.15.22

See: https://github.com/astral-sh/ruff/releases/tag/0.15.22

v0.15.21

See: https://github.com/astral-sh/ruff/releases/tag/0.15.21

v0.15.20

See: https://github.com/astral-sh/ruff/releases/tag/0.15.20

v0.15.19

See: https://github.com/astral-sh/ruff/releases/tag/0.15.19

v0.15.18

See: https://github.com/astral-sh/ruff/releases/tag/0.15.18

v0.15.17

See: https://github.com/astral-sh/ruff/releases/tag/0.15.17

v0.15.16

See: https://github.com/astral-sh/ruff/releases/tag/0.15.16

v0.15.15

See: https://github.com/astral-sh/ruff/releases/tag/0.15.15

v0.15.14

See: https://github.com/astral-sh/ruff/releases/tag/0.15.14

v0.15.13

See: https://github.com/astral-sh/ruff/releases/tag/0.15.13

v0.15.12

See: https://github.com/astral-sh/ruff/releases/tag/0.15.12

v0.15.11

See: https://github.com/astral-sh/ruff/releases/tag/0.15.11

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note

Low Risk
Dev-tooling-only pin change with no runtime code impact; the main follow-on risk is new or stricter Ruff checks or format output on the next hook run.

Overview
Updates the ruff-pre-commit pin in .pre-commit-config.yaml from v0.13.3 to v0.16.4. The ruff-check and ruff-format hook definitions are unchanged; only the hook repo revision moves forward.

This aligns local pre-commit and CI lint/format behavior with a newer Ruff release. After merging, the next pre-commit run may report additional fixes or formatting diffs compared to the older pin.

Reviewed by Cursor Bugbot for commit 7ec9ee6. Bugbot is set up for automated code reviews on this repo. Configure here.

Bumps [https://github.com/astral-sh/ruff-pre-commit](https://github.com/astral-sh/ruff-pre-commit) from v0.13.3 to 0.16.4.
- [Release notes](https://github.com/astral-sh/ruff-pre-commit/releases)
- [Commits](astral-sh/ruff-pre-commit@v0.13.3...v0.16.4)

---
updated-dependencies:
- dependency-name: https://github.com/astral-sh/ruff-pre-commit
  dependency-version: 0.16.4
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file pre_commit Pull requests that update pre_commit code labels Aug 28, 2026
@bot-ci-comment

Copy link
Copy Markdown

The docs for this PR live here. All of your documentation changes will be reflected on that endpoint. The docs are available until 30 days after the last update.

@cursor cursor Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Cursor Bugbot has reviewed your changes using default effort and found 1 potential issue.

Fix All in Cursor

❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.

Want higher recall? High effort reviews run extra passes and find more bugs. A team admin can switch effort levels in the Cursor dashboard.

Reviewed by Cursor Bugbot for commit 7ec9ee6. Configure here.

Comment thread .pre-commit-config.yaml
repos:
- repo: https://github.com/astral-sh/ruff-pre-commit
rev: v0.13.3
rev: v0.16.4

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Ruff bump expands enabled lint rules

High Severity

Bumping ruff-pre-commit to v0.16.4 expands Ruff's default rule set from 59 to 413 rules. pyproject.toml uses extend-select, which adds onto those defaults, so ruff-check with --fix will enforce and auto-apply many new categories the project never selected, failing quality CI and rewriting source.

Fix in Cursor Fix in Web

Reviewed by Cursor Bugbot for commit 7ec9ee6. Configure here.

@albertvillanova albertvillanova left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Bugbot's finding here is correct, and it is why "Check code quality" is red.

Ruff 0.16.0 raised its default rule selection from 59 to 413 rules. Our pyproject.toml uses extend-select, which adds onto those defaults, so we silently inherit every newly defaulted family (BLE, SIM, S, TRY, LOG, DTZ, PL*, PIE, FURB, RUF, PYI, ...). Reproduced locally on this merge base, matching the job exactly:

Found 279 errors (66 fixed, 213 remaining).
7 files reformatted, 350 files left unchanged

There are two independent causes, and Bugbot flagged only the first:

  1. Lint. Switching extend-select to select takes the hook back to All checks passed! with no code changes at all.
  2. Formatter. Ruff 0.15.0 changed formatter output, which reformats 2 files here regardless of the lint config. The other 5 in the count above are downstream of what --fix had already rewritten.

I would rather not take this bump. Within our own rule selection, ruff 0.13.3 and 0.16.4 report exactly the same thing on every tracked Python file, which is nothing, so the bump's only observable effect is churn plus 42 auto-rewritten files.

Two follow-ups instead:

  • #6964 makes the rule set explicit (select instead of extend-select), so our lint results stop depending on which ruff version happens to be installed. Today a contributor running ruff 0.16.4 locally sees hundreds of errors that CI never reports. At the pinned 0.13.3 the change is a no-op: both configurations resolve to byte-identical sets of 170 enabled rules, and no default rule is dropped, since ruff's defaults live entirely inside E and F and we select both families whole.
  • #6965 stops dependabot from opening ruff bumps, while keeping doc-builder updates flowing (#6956).

I will close this PR once both are merged.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file pre_commit Pull requests that update pre_commit code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant