Skip to content

fix(deps): update Ruff package and hook together to 0.17.3 - #568

Merged
basiliskus merged 1 commit into
mainfrom
fix/ruff-0173-lockstep
Nov 4, 2026
Merged

basiliskus merged 1 commit into
mainfrom
fix/ruff-0173-lockstep

Conversation

@wz-gsa

@wz-gsa wz-gsa commented Nov 4, 2026

Copy link
Copy Markdown
Contributor

Summary

Coordinate the Ruff Python package and pre-commit hook at 0.17.3 so the existing lockstep test passes. This replaces the split update approach in #545 and #566 without modifying or closing those branches.

Change

Two one-line pin changes: ruff==0.17.3 and the verified upstream ruff-pre-commit v0.17.3 SHA 25bcf95026b96e2dd3c0aec3090c3d6ef6ca2e6c. No lint rules, fix settings, source formatting or dependencies beyond Ruff changed. The repository has no Python lockfile to regenerate.

Verification

Signed head ec35068; base 81f5089.

  • Isolated non-root Python3.13.18/Node22.23.2 container with read-only source: Ruff0.17.3 lint and format checks passed, 764 tests plus 58 subtests passed, make validate passed.
  • Initially the copied host checkout had restricted executable permissions and the Python-only container lacked Node. The final run used a Git archive with normal checkout permissions and both interpreters; no source modes or tests changed.
  • Upstream release and hook tag verified. Independent fixed-head reviewer inspected the complete two-file diff, lockstep test, CI path, and upstream release notes; no blockers.
  • Normal signed commit and push hooks passed; Gitleaks found no leaks.

Security and rollback

Ruff remains an MIT-licensed development tool, SHA-pinned in pre-commit. No permissions or security rules are relaxed. Revert the two-file commit to roll back.

AI assistance

OpenCode assisted implementation, isolated verification and independent agent review. Human CODEOWNER review required before merge.

Keep CI and pre-commit on the same verified Ruff release without changing lint rules or source formatting.

Co-authored-by: OpenCode <[email protected]>
@wz-gsa
wz-gsa requested a review from a team as a code owner November 4, 2026 03:57
@wz-gsa
wz-gsa requested a review from basiliskus November 4, 2026 04:29

@basiliskus basiliskus left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Verdict: approve — ec350684d3f144aba818b4fb6d9e2b0091bf0537

Must fix before merge: none

No findings.

Not verified: Local full checks and live pre-commit execution; pytest unavailable in the offline scratch environment. Raw CI logs were inspected for the reviewed head/base merge.

Assisted-by: OpenCode [usai/gpt-6.1-sol-latest-guardrails-defaultv2] skill:change-review

@basiliskus
basiliskus added this pull request to the merge queue Nov 4, 2026
Merged via the queue into main with commit a6266dd Nov 4, 2026
7 checks passed
@basiliskus
basiliskus deleted the fix/ruff-0173-lockstep branch November 4, 2026 14:34
mogul pushed a commit that referenced this pull request Nov 5, 2026
🤖 I have created a release *beep* *boop*
---


##
[1.19.0](v1.18.0...v1.19.0)
(2026-11-05)


### Features

* **oci-engine:** qualify bounded rootless resource controls
([#562](#562))
([cf6d7a5](cf6d7a5))
* **opencode:** add live image-capability verification script (not yet
run)
([#572](#572))
([f0a951f](f0a951f))
* **paseo:** bump pinned Paseo CLI to 0.15.0
([#560](#560))
([0c4e1a8](0c4e1a8))
* **usai-catalog:** carry verified capability metadata through a catalog
refresh
([#578](#578))
([fcd94e5](fcd94e5))
* **usai-catalog:** publish verified image input modality for 12 USAi
models
([#575](#575))
([907d486](907d486))
* **usai-catalog:** single refresh entrypoint for the catalog and
neutral artifacts
([#573](#573))
([0c1b145](0c1b145))


### Bug Fixes

* **ci:** validate pending release comparisons against their commit
([#570](#570))
([0961019](0961019))
* **deps:** update Ruff package and hook together to 0.17.3
([#568](#568))
([a6266dd](a6266dd))
* **opencode:** prepare agent-owned sandbox scratch directory
([#561](#561))
([89a66b2](89a66b2))
* **paseo:** launch real opencode outside PID 1
([#559](#559))
([ce4aa08](ce4aa08))
* **paseo:** verify runtime identity without false orphan verdicts
([#567](#567))
([1062244](1062244))
* **usai-catalog:** allow summary and title roles in catalog
recommendations schema
([#551](#551))
([ad2aadd](ad2aadd))
* **usai:** retire stale references to the removed model sync script
([#552](#552))
([95be9b9](95be9b9))

---
This PR was generated with [Release
Please](https://github.com/googleapis/release-please). See
[documentation](https://github.com/googleapis/release-please#release-please).

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants