Skip to content

chore(deps-dev): update ruff requirement from <1.0,>=0.16.9 to >=0.17.1,<1.0 - #250

Open
dependabot[bot] wants to merge 6 commits into
masterfrom
dependabot/pip/ruff-gte-0.17.1-and-lt-1.0
Open

dependabot[bot] wants to merge 6 commits into
masterfrom
dependabot/pip/ruff-gte-0.17.1-and-lt-1.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 23, 2026 •

Copy link
Copy Markdown
Contributor

Updates the requirements on ruff to permit the latest version.

Release notes

Sourced from ruff's releases.

0.17.1

Release Notes

Released on 2026-10-15.

Preview features

  • [pycodestyle] Don't treat None, True, or False as keywords (E271-E274) (#29322)

Bug fixes

  • Fix dedent with multiple leading comments (#29382)
  • [flake8-pyi] Detect legacy positional-only parameters in __new__ methods (PYI063) (#28502)
  • [flake8-pyi] Fix false positives on quoted annotations (PYI036) (#29274)
  • [perflint] Avoid invalid comprehension suggestions (PERF401, PERF403) (#29366)

Rule changes

  • Treat more collections and weakref containers as mutable (#29213)

Documentation

  • [flake8-import-conventions] Update default and example aliases (#29333)

Contributors

Install ruff 0.17.1

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ruff/releases/download/0.17.1/ruff-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/ruff/releases/download/0.17.1/ruff-installer.ps1 | iex"

Download ruff 0.17.1

| File | Platform | Checksum |

... (truncated)

Changelog

Sourced from ruff's changelog.

0.17.1

Released on 2026-10-15.

Preview features

  • [pycodestyle] Don't treat None, True, or False as keywords (E271-E274) (#29322)

Bug fixes

  • Fix dedent with multiple leading comments (#29382)
  • [flake8-pyi] Detect legacy positional-only parameters in __new__ methods (PYI063) (#28502)
  • [flake8-pyi] Fix false positives on quoted annotations (PYI036) (#29274)
  • [perflint] Avoid invalid comprehension suggestions (PERF401, PERF403) (#29366)

Rule changes

  • Treat more collections and weakref containers as mutable (#29213)

Documentation

  • [flake8-import-conventions] Update default and example aliases (#29333)

Contributors

0.17.0

Released on 2026-10-09.

The executables in our macOS and Windows release archives and ruff wheels are now code-signed. macOS executables are signed with an Apple Developer ID certificate and notarized by Apple. Windows executables have timestamped Authenticode signatures from Azure Artifact Signing. This enables verification of the release publisher and binary integrity, supports publisher-based allowlisting, and should reduce security warnings and antivirus false positives.

Breaking changes

  • Update the default and latest Python versions for 3.15 (#28792)

    Ruff now defaults to Python 3.11 instead of 3.10 when no Python version is configured through target-version or requires-python. When checking for syntax errors without a configured Python version, Ruff now defaults to Python 3.15

... (truncated)

Commits
  • 4683270 Bump version to 0.17.1 (#29420)
  • 3514027 [ty] Update typing conformance suite pin (#29417)
  • 8294556 Update referenced PR security-review workflow (#29237)
  • d1e1b1f [ty] Preserve recursive aliases when rebuilding intersections (#29057)
  • 9352615 [perflint] Avoid invalid comprehension suggestions (PERF401, PERF403) (...
  • 83a3afc Fix dedent with multiple leading comments (#29382)
  • b42a873 [ty] Clarify object attribute write-contract rationale (#29384)
  • d01678e [ty] Clarify object attribute write-contract rationale (#29384)
  • 355b42a [ty] Avoid writable override contracts from object (#29373)
  • e26e6d2 [ty] Collect intersection inference through constraint relations (#28677)
  • Additional commits viewable in compare view

vishalhabib99 and others added 2 commits October 13, 2026 09:11
search_knowledge(category), list_documents(category) and
add_from_url(title) were annotated `str = None`. The tool schema then
advertised "default": null on a string-only field, and the MCP SDK's
argument model rejected {"category": null} before the tool ran.
Annotate them Optional[str], like the other optional arguments.

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
The GHCR image was built only for linux/amd64, forcing Apple Silicon and
ARM server users into slow QEMU emulation. Add setup-qemu-action and
build for linux/amd64,linux/arm64 so the manifest list covers both.
@dependabot
dependabot Bot requested a review from lyonzin as a code owner October 23, 2026 15:54
@dependabot @github

dependabot Bot commented on behalf of github Oct 23, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies, python. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@coderabbitai

coderabbitai Bot commented Oct 23, 2026 •

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration
  • Source mode: Auto
  • Repository: Unavailable
  • Branch: Unavailable
  • File: No configuration file from this repository applied
  • Commit: Unavailable
  • Layers: defaults
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: 19427701-7211-45c9-a55a-31f4391aa442

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

lyonzin and others added 4 commits October 25, 2026 12:10
…ma's default EF (#253)

On a fresh data_dir the preflight child ran get_or_create_collection()
without an embedding function, so ChromaDB persisted its `default` EF.
The server then opened the collection with FastEmbed and ChromaDB raised
"Embedding function conflict: new: fastembed-... vs persisted: default".
v4.10.0 removed the destructive recovery that used to hide this, so every
fresh install and every new Docker volume failed to start.

- The probe reads the collection with get_collection() and reports
  "missing" when it does not exist yet.
- _safe_get_collection() recreates the collection the old probe left
  behind, only when it is empty and bound to the default EF. A collection
  with data is never dropped; the error is raised as before.
- Tests run the real probe child against a fresh data_dir, a production
  FastEmbed collection with data and the empty default-EF leftover.

Closes #248
Closes #252

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
…ndex (#254)

#249 reported four defects on a 4.11.0 install. Two reproduce on master:

A. os.replace fails with WinError 5/32 while an antivirus, indexer or
   concurrent reader holds the destination or the source without
   FILE_SHARE_DELETE. Checkpoint writes swallowed it as non-fatal, and the
   final metadata save aborted the reindex. replace_with_retry() retries
   only those two codes for about 1.5 s, then re-raises the original
   error. It now backs every atomic replace: metadata, checkpoint, repair
   journal, FTS5 state and staged documents. Other platforms are unchanged.

C. reindex_documents answered "started" while a watcher pass or a
   document write held the index lock, and index_all then refused the run
   at once. start_reindex_background now probes the lock and returns the
   existing already_running envelope. nuclear_rebuild still starts,
   because it waits for the lock instead of refusing.

docs/API.md now says which operations make reindex_documents answer
already_running. The Windows test declares CloseHandle types so a 64-bit
HANDLE is not truncated.

B and D do not apply upstream: reindex_state.json, _write_reindex_state
and a per-document metadata flush are not in any published release, and
_maybe_persist_checkpoint already checks the 500-docs/30-s cadence before
it saves.

Closes #249

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Patch release. Fixes the startup crash on every fresh install and every
new data directory since v4.10.0 (#248, #252), makes state-file writes
robust on Windows and stops reindex_documents from reporting a refused
run as started (#249). Also ships #236 and the multi-arch Docker image
from #242.

- pyproject.toml: 4.11.0 -> 4.11.1
- mcp_server/__init__.py: __version__ -> 4.11.1
- npm/package.json: 4.11.0 -> 4.11.1
- CHANGELOG.md: Unreleased promoted to v4.11.1 with highlights and credits
- .github/api-surface-baseline.json: regenerated with --snapshot. Additive
  only: 8 modules and 5 methods added since the 2026-08-10 snapshot, none
  removed.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Updates the requirements on [ruff](https://github.com/astral-sh/ruff) to permit the latest version.
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.16.9...0.17.1)

---
updated-dependencies:
- dependency-name: ruff
  dependency-version: 0.17.1
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/pip/ruff-gte-0.17.1-and-lt-1.0 branch from 24067ca to e2479f7 Compare October 25, 2026 16:52
@dependabot @github

dependabot Bot commented on behalf of github Oct 30, 2026

Copy link
Copy Markdown
Contributor Author

A newer version of ruff exists, but since this PR has been edited by someone other than Dependabot I haven't updated it. You'll get a PR for the updated version as normal once this PR is merged.

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants