Skip to content

The ruff hook pin follows the upstream tag to v0.16.10, and Dependabot stops proposing the shellcheck-py downgrade - #298

Merged
HackingGate merged 2 commits into
mainfrom
bump-hook-pins
Oct 3, 2026
Merged

HackingGate merged 2 commits into
mainfrom
bump-hook-pins

Conversation

@HackingGate

Copy link
Copy Markdown
Owner

astral-sh/ruff-pre-commit released v0.16.10, so prek-pins-current (prek update --check, manual stage) refuses the v0.16.9 pin on every branch. prek update --check now names no stale pin; prek run ruff-check ruff-format --all-files passes at the new rev.

Second commit: the pre-commit Dependabot updater ignores shellcheck-py v0.11.0.1 (both v and bare spellings), which it orders above the newer v0.11.0.1-1 and proposed as an upgrade in #279. shellcheck-py stays at v0.11.0.1-1.

astral-sh/ruff-pre-commit released v0.16.10, and prek-pins-current (prek
update --check at the manual stage) refuses the v0.16.9 copy, so every
branch, main included, fails that job on this one pin until it moves.
prek update --check passes with the bump and names no other pin; ruff-check
and ruff-format pass over all files at the new rev.
shellcheck-py's v0.11.0.1-1 is a repackaging of the same ShellCheck release
and the newest tag, but Dependabot orders the suffixed tag below v0.11.0.1
and raised #279 to move the pin backwards. The pre-commit updater now
ignores that one version for that dependency, named by its repository URL
as Dependabot names it, so the next real release is still proposed.
@coderabbitai

coderabbitai Bot commented Oct 3, 2026

Copy link
Copy Markdown

Warning

Review limit reached

You've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository.

Next included review available in 44 minutes.

Check out review usage here.

View limit details

Limit details: You’ve used the included review currently available.

Learn how review limits work.

Review configuration:

⚙️ Run configuration
  • Configuration used: defaults
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: afbfee12-4996-434d-985f-50c9ce8799dd
📥 Commits

Reviewing files that changed from the base of the PR and between d3ae04d and 9cc0b11.

📒 Files selected for processing (2)
  • .github/dependabot.yml
  • .pre-commit-config.yaml
  • Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@codecov-commenter

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 94.04%. Comparing base (d3ae04d) to head (9cc0b11).

Additional details and impacted files
@@           Coverage Diff           @@
##             main     #298   +/-   ##
=======================================
  Coverage   94.04%   94.04%           
=======================================
  Files          46       46           
  Lines       20868    20868           
=======================================
  Hits        19626    19626           
  Misses       1242     1242           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@HackingGate
HackingGate merged commit 41bd996 into main Oct 3, 2026
12 checks passed
@HackingGate
HackingGate deleted the bump-hook-pins branch October 3, 2026 09:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants