Skip to content

chore(deps-dev): bump ruff from 0.16.10 to 0.17.0 in /plugins/codex-security - #1695

Merged
mldangelo-oai merged 2 commits into
mainfrom
dependabot/pip/plugins/codex-security/ruff-0.17.0
Oct 19, 2026
Merged

mldangelo-oai merged 2 commits into
mainfrom
dependabot/pip/plugins/codex-security/ruff-0.17.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 17, 2026 •

Copy link
Copy Markdown
Contributor

Summary

Upgrade Ruff from 0.16.10 to 0.17.0 and keep its configured version requirement in sync so the plugin's lint and formatting checks can run.

Changes

  • Update the test dependency and tool.ruff.required-version to 0.17.0.
  • Retain the explicit Python 3.10 target and lint rule selection.

Upstream changes: Ruff 0.17.0 release notes.

Testing

  • Ruff 0.17.0 lint: passed with the repository configuration.
  • Ruff 0.17.0 format check: all 149 files passed.
  • pnpm --dir sdk/typescript run build:ci: passed using the pinned compiler dependencies.
  • node .github/scripts/check_plugin_source_compatibility.mjs: passed.
  • node --test .github/scripts/test_check_plugin_source_compatibility.mjs: all 9 tests passed.
  • git diff --check: passed.

Risk and rollout

This updates development tooling. The explicit Python target and rule selection preserve the intended configuration across the Ruff upgrade. The published package has passed the repository's seven-day dependency cooldown. Merge remains gated on CI.

Public disclosure review

  • No customer, partner, prospect, or user identities, data, or identifying details are included.
  • No credentials, personal data, private source, scan findings, or nonpublic links or tickets are included.
  • I reviewed the branch name, title, description, commits, changes, comments, logs, screenshots, attachments, and links for public disclosure.

Bumps [ruff](https://github.com/astral-sh/ruff) from 0.16.10 to 0.17.0.
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.16.10...0.17.0)

---
updated-dependencies:
- dependency-name: ruff
  dependency-version: 0.17.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Oct 17, 2026
@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Oct 17, 2026 •

Copy link
Copy Markdown

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
🔒 Security Review ✅ Completed 2026-10-19T03:56:38.220695Z 86acfe1 New commits
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

@mldangelo-oai mldangelo-oai left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The Ruff dependency and required-version now agree on 0.17.0. Ruff lint and formatting, the TypeScript CI build, and the plugin source compatibility checks all pass with the corrected configuration.

@mldangelo-oai
mldangelo-oai merged commit 2776dd7 into main Oct 19, 2026
73 of 89 checks passed
@mldangelo-oai
mldangelo-oai deleted the dependabot/pip/plugins/codex-security/ruff-0.17.0 branch October 19, 2026 04:14
@github-actions github-actions Bot mentioned this pull request Oct 19, 2026
3 tasks done
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant