Skip to content

chore(deps-dev): bump the pylint group across 1 directory with 2 updates - #1529

Merged
github-actions[bot] merged 1 commit into
chore/consolidate-dependabot-updatesfrom
dependabot/pip/pylint-a5d59e72ce
Oct 15, 2026
Merged

github-actions[bot] merged 1 commit into
chore/consolidate-dependabot-updatesfrom
dependabot/pip/pylint-a5d59e72ce

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 15, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the pylint group with 2 updates in the / directory: astroid and pylint.

Updates astroid from 4.0.2 to 4.3.4
Updates pylint from 4.0.5 to 4.1.3

Release notes

Sourced from pylint's releases.

v4.1.3

What's new in Pylint 4.1.3?

Release date: 2026-10-11

False Positives Fixed

  • Fixed a false positive for attribute-defined-outside-init when an attribute is assigned inside the setter of an old-style, non-decorator property(fget, fset) call. The decorator form (@property / @x.setter) was already exempted by the fix for #409; the classic call form was not.

    Closes #3325

  • Fix a false positive for used-before-assignment when a name bound by an earlier target of the same assignment is used by a later target, as in a = b[a] = 0.

    Closes #5955

  • Fix a no-member false positive in a comprehension inside a branch that cannot run, such as if sys.platform == "win32": on Linux. Like the rest of the branch, the comprehension is no longer checked for missing members.

    Closes #7240

  • Fix a false positive for used-before-assignment when a name bound by a tuple or list target of a with item is used by a later item of the same with statement.

    Closes #7545

  • Fix false positives such as not-callable, not-an-iterable, unpacking-non-sequence and no-member on the result of a function whose body is only ..., like @overload and .pyi stubs. Such calls were inferred as returning None. This affected sqlalchemy.func, pydantic.Field, and the torch functions wrapped by _add_docstr, such as torch.linalg.qr.

    Closes #8138 Closes #9218 Closes #9354 Closes #10087

  • Fix a false positive for protected-access when a subclass of a subscripted generic base, such as class Child(Parent[T]), accesses a protected member through that base, such as Parent._foo(self).

    Closes #8600

... (truncated)

Commits
  • e75de10 Bump pylint to 4.1.3, update changelog (#11637)
  • 591f6e2 [Backport maintenance/4.1.x] Fix protected-access false positive through a su...
  • a537920 [Backport maintenance/4.1.x] Ignore discard variable type redefinitions (#11635)
  • 4a8f61c [Backport maintenance/4.1.x] Fix duplicate-code crash when min-similarity-lin...
  • 41fa1c4 [Backport maintenance/4.1.x] [pyreverse] Fix hang/RecursionError with --all-a...
  • a05e2f3 [Backport maintenance/4.1.x] Fix used-before-assignment false positive for ...
  • ea7996b [Backport maintenance/4.1.x] Error when several output formats write to stdou...
  • 479c037 [Backport maintenance/4.1.x] Fix IndexError when Enum init has no argumen...
  • e6aa780 [Backport maintenance/4.1.x] Fix unreachable false positive for raising gener...
  • fc58d0b [Backport maintenance/4.1.x] Fix pyreverse crash on classes with EmptyNode in...
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Jun 15, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner June 15, 2026 05:16
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Jun 15, 2026
@github-actions
github-actions Bot enabled auto-merge June 15, 2026 05:16
Gavin Barron (gavinbarron) pushed a commit that referenced this pull request Jul 9, 2026
* chore(deps): consolidate open dependabot dependency updates

Combines the 13 open dependabot PRs into a single update.

requirements-dev.txt:
- aiohttp: 3.13.5 -> 3.14.1 (#1530; supersedes #1521 -> 3.14.0)
- astroid: 4.0.2 -> 4.1.2 (pylint group #1529)
- pylint: 4.0.5 -> 4.0.6 (pylint group #1529)
- click: 8.1.8 -> 8.4.1 (#1519)
- cryptography: 46.0.7 -> 48.0.1 (#1531)
- docutils: 0.22.4 -> 0.23 (#1522)
- microsoft-kiota-*: 1.10.1 -> 1.10.2 (kiota group #1516)
- msal: 1.36.0 -> 1.37.0 (#1523)
- opentelemetry-api/sdk: 1.42.0 -> 1.42.1 (open-telemetry group #1515)
- opentelemetry-semantic-conventions: 0.63b0 -> 0.63b1 (#1515)
- platformdirs: 4.9.6 -> 4.10.0 (#1518)
- PyJWT: 2.12.1 -> 2.13.0 (#1520)
- wrapt: 2.2.0 -> 2.2.1 (#1517)

GitHub Actions:
- actions/checkout: v6 -> v7 (#1532)

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* fix(deps): pin astroid 4.0.4 to satisfy pylint 4.0.6 constraint

pylint 4.0.6 requires astroid<=4.1.dev0,>=4.0.2, so astroid 4.1.2 caused a
ResolutionImpossible error. Downgrade to 4.0.4 (latest 4.0.x) to fix CI.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* chore(deps): exclude pylint group entirely (astroid/pylint)

Group PRs are all-or-nothing. Dependabot's pylint group pairs astroid 4.1.2
with pylint 4.0.6, but pylint 4.0.6 requires astroid<=4.1.dev0, so the pair
is unresolvable. Rather than partially apply the group with an astroid
workaround, leave the whole group out (astroid/pylint stay at main values)
so it remains a clean standalone Dependabot PR.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

---------

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
@github-actions

github-actions Bot commented Jul 9, 2026

Copy link
Copy Markdown
Contributor

This pull request has conflicting changes, the author must resolve the conflicts before this pull request can be merged.

@dependabot
dependabot Bot force-pushed the dependabot/pip/pylint-a5d59e72ce branch from 1e577a1 to 2557d7d Compare July 9, 2026 16:11
@github-actions

github-actions Bot commented Jul 9, 2026

Copy link
Copy Markdown
Contributor

Conflicts have been resolved. A maintainer will take a look shortly.

@dependabot
dependabot Bot force-pushed the dependabot/pip/pylint-a5d59e72ce branch 4 times, most recently from f561344 to 39d6db0 Compare July 14, 2026 20:37
@dependabot
dependabot Bot force-pushed the dependabot/pip/pylint-a5d59e72ce branch 2 times, most recently from 3c28c9e to 86a8f55 Compare July 23, 2026 05:12
@dependabot
dependabot Bot force-pushed the dependabot/pip/pylint-a5d59e72ce branch from 86a8f55 to f87564e Compare August 6, 2026 05:12
@dependabot
dependabot Bot force-pushed the dependabot/pip/pylint-a5d59e72ce branch from f87564e to d08facd Compare August 21, 2026 05:15
@dependabot
dependabot Bot force-pushed the dependabot/pip/pylint-a5d59e72ce branch from d08facd to 1d6e706 Compare September 3, 2026 05:13
@dependabot
dependabot Bot force-pushed the dependabot/pip/pylint-a5d59e72ce branch 2 times, most recently from d2f1c16 to 8d8299d Compare September 17, 2026 05:13
@dependabot
dependabot Bot force-pushed the dependabot/pip/pylint-a5d59e72ce branch from 8d8299d to d9829eb Compare October 7, 2026 05:13
Bumps the pylint group with 2 updates in the / directory: [astroid](https://github.com/pylint-dev/astroid) and [pylint](https://github.com/pylint-dev/pylint).


Updates `astroid` from 4.0.2 to 4.3.4
- [Release notes](https://github.com/pylint-dev/astroid/releases)
- [Changelog](https://github.com/pylint-dev/astroid/blob/main/ChangeLog)
- [Commits](pylint-dev/astroid@v4.0.2...v4.3.4)

Updates `pylint` from 4.0.5 to 4.1.3
- [Release notes](https://github.com/pylint-dev/pylint/releases)
- [Commits](pylint-dev/pylint@v4.0.5...v4.1.3)

---
updated-dependencies:
- dependency-name: astroid
  dependency-version: 4.1.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: pylint
- dependency-name: pylint
  dependency-version: 4.0.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: pylint
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot changed the base branch from main to chore/consolidate-dependabot-updates October 15, 2026 04:54
@dependabot
dependabot Bot force-pushed the dependabot/pip/pylint-a5d59e72ce branch from d9829eb to bfb95cf Compare October 15, 2026 04:54
@github-actions
github-actions Bot merged commit ac64dbf into chore/consolidate-dependabot-updates Oct 15, 2026
9 checks passed
@github-actions
github-actions Bot deleted the dependabot/pip/pylint-a5d59e72ce branch October 15, 2026 04:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants