chore(ci): Update Pixi

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change	Pending
cargo-deny	feature-lint	patch	>=0.19,<0.19.1 → >=0.19,<0.19.2	0.19.4 (+1)
click (source)	feature-docs	minor	==8.2.1 → ==8.3.2
inline-snapshot	feature-python-test-deps	minor	>=0.31.1,<0.32 → >=0.32.6,<0.33
nushell (source)	feature-docs	minor	>=0.109.1,<0.110 → >=0.112.1,<0.113	0.112.2
py-rattler	feature-python-test-deps	minor	>=0.20,<0.21 → >=0.23,<0.24
python (source)	feature-python	patch	>=3.13,<3.14 → >=3.14,<3.15
rattler-build	feature-recipes	minor	>=0.61.4,<0.62 → >=0.62,<0.63	0.62.2 (+1)
rattler-build	feature-python-test-deps	minor	>=0.61.4,<0.62 → >=0.62,<0.63	0.62.2 (+1)
rattler-build	feature-backends-release	minor	>=0.61.4,<0.62 → >=0.62,<0.63	0.62.2 (+1)
ruamel.yaml (source)	feature-backends-release	minor	>=0.18,<0.19 → >=0.19,<0.20
ruff	feature-lint	minor	>=0.14.0,<0.15 → >=0.15.10,<0.16	0.15.11
sccache	feature-backends-release	minor	>=0.13.0,<0.14 → >=0.14,<0.15
shellcheck	feature-lint	minor	>=0.10.0,<0.11 → >=0.11,<0.12
tomlkit	feature-backends-release	minor	>=0.13,<0.14 → >=0.14,<0.15

---

Release Notes

EmbarkStudios/cargo-deny (cargo-deny)

v0.19.1

Compare Source

Fixed

• PR#833 fixed an issue where the maximum advisory database staleness was over 14 years instead of the intended 90 days.
• PR#839 fixed an issue where unsound advisories would appear for transitive dependencies despite requesting them only for workspace dependencies, resolving #​829.
• PR#840 resolved #​797 by passing --filter-platform when collecting cargo metadata if only a single target was requested either in the config or via the command line.
• PR#841 fixed an issue where --frozen would not disable fetching of the advisory DB, resolving #​759.
• PR#842 and PR#844 updated crates. Notably krates was updated to resolve two issues with crates being pruned from the graph used when running checks. Resolving these two issues may mean that updating cargo-deny may highlight issues that were previously hidden.
  • EmbarkStudios/krates#106 would fail to pull in crates brought in via a feature if that crate had its lib target renamed by the package author.
  • EmbarkStudios/krates#109 would fail to bring in optional dependencies if they were brought in by a weak feature in a crate also brought in by a weak feature.

Changed

• PR#830 removed gix in favor of shelling out to git. This massively improves build times and eases maintenance as gix bumps minor versions quite frequently. If cargo-deny is used in an environment that for some reason allows internet access but doesn't have git available, the advisory database would need to be updated before calling cargo-deny.
• PR#838 removed rustsec in favor of manually implemented advisory parsing and checking, with a nightly cron job that checks that the implementation exactly matches rustsec on the official rustsec advisory db.

pallets/click (click)

v8.3.2

Compare Source

Released 2026-04-02

• Fix handling of flag_value when is_flag=False to allow such options to be
  used without an explicit value. :issue:3084 :pr:3152
• Hide Sentinel.UNSET values as None when using lookup_default().
  :issue:3136 :pr:3199 :pr:3202 :pr:3209 :pr:3212 :pr:3224
• Prevent _NamedTextIOWrapper from closing streams owned by StreamMixer.
  :issue:824 :issue:2991 :issue:2993 :issue:3110 :pr:3139 :pr:3140
• Add comprehensive tests for CliRunner stream lifecycle, covering
  logging interaction, multi-threaded safety, and sequential invocation
  isolation. Add high-iteration stress tests behind a stress marker
  with a dedicated CI job. :pr:3139
• Fix callable flag_value being instantiated when used as a default via
  default=True. :issue:3121 :pr:3201 :pr:3213 :pr:3225

v8.3.1

Compare Source

Released 2025-11-15

• Don't discard pager arguments by correctly using subprocess.Popen. :issue:3039
  :pr:3055
• Replace Sentinel.UNSET default values by None as they're passed through
  the Context.invoke() method. :issue:3066 :issue:3065 :pr:3068
• Fix conversion of Sentinel.UNSET happening too early, which caused incorrect
  behavior for multiple parameters using the same name. :issue:3071 :pr:3079
• Hide Sentinel.UNSET values as None when looking up for other parameters
  through the context inside parameter callbacks. :issue:3136 :pr:3137
• Fix rendering when prompt and confirm parameter prompt_suffix is
  empty. :issue:3019 :pr:3021
• When Sentinel.UNSET is found during parsing, it will skip calls to
  type_cast_value. :issue:3069 :pr:3090

v8.3.0

Compare Source

Released 2025-09-17

• Improved flag option handling: Reworked the relationship between flag_value
  and default parameters for better consistency:

  • The default parameter value is now preserved as-is and passed directly
    to CLI functions (no more unexpected transformations)
  • Exception: flag options with default=True maintain backward compatibility
    by defaulting to their flag_value
  • The default parameter can now be any type (bool, None, etc.)
  • Fixes inconsistencies reported in: :issue:1992 :issue:2514 :issue:2610
    :issue:3024 :pr:3030

• Allow default to be set on Argument for nargs = -1. :issue:2164
  :pr:3030

• Show correct auto complete value for nargs option in combination with flag
  option :issue:2813

• Fix handling of quoted and escaped parameters in Fish autocompletion. :issue:2995 :pr:3013

• Lazily import shutil. :pr:3023

• Properly forward exception information to resources registered with
  click.core.Context.with_resource(). :issue:2447 :pr:3058

• Fix regression related to EOF handling in CliRunner. :issue:2939 :pr:2940

v8.2.2

Compare Source

Released 2025-07-31

• Fix reconciliation of default, flag_value and type parameters for
  flag options, as well as parsing and normalization of environment variables.
  :issue:2952 :pr:2956
• Fix typing issue in BadParameter and MissingParameter exceptions for the
  parameter param_hint that did not allow for a sequence of string where the
  underlying function _join_param_hints allows for it. :issue:2777 :pr:2990
• Use the value of Enum choices to render their default value in help
  screen. Refs :issue:2911 :pr:3004
• Fix completion for the Z shell (zsh) for completion items containing
  colons. :issue:2703 :pr:2846
• Don't include envvar in error hint when not configured. :issue:2971 :pr:2972
• Fix a rare race in click.testing.StreamMixer's finalization that manifested
  as a ValueError on close in a multi-threaded test session.
  :issue:2993 :pr:2991

15r10nk/inline-snapshots (inline-snapshot)

v0.32.6

Compare Source

Fixed

• Pydantic models, attrs and dataclasses with NewType-typed fields now generate correct snapshots that wrap the field value with the NewType constructor (e.g. Something(some_id=SomeID(1)) instead of Something(some_id=1)). This could only be fixed for Python >= 3.10.

v0.32.5

Compare Source

Fixed

• Fixed a bug where tuples used as snapshot keys caused problems because they had the same hash value (#​358)

v0.32.4

Compare Source

Added

• Added context_managers parameter to Example.run_inline(), allowing tests to inject context managers (e.g. unittest.mock.patch) that are active during show_report().

Fixed

• Fixed UsageError("unmanaged values can not be compared with snapshots") raised during session teardown when using -k to filter tests (#​355). This was caused by inline-snapshot trying to update snapshots that were never compared. This is a rare edge case that caused problems when matchers were used, so it has been removed.

v0.32.3

Compare Source

Changed

• Improved performance of snapshot() by using lazy evaluation.

Fixed

• Fixed code generation for Call objects created with builder.create_call().
• use the handler for datetime types only for the concrete types and not the subclasses.

v0.32.2

Compare Source

Fixed

• Tuples in snapshots were converted internally into lists if they were evaluated more than once (#​349)

v0.32.1

Fixed

• Fixed handling of datetime and time objects with timezone information. The tzinfo parameter is now properly included in snapshots, and timezone.utc is represented with the correct import (from datetime import timezone).

• Fixed customize hook registration to properly check if objects are functions before inspecting the inline_snapshot_impl attribute, preventing potential attribute errors when scanning conftest modules.

v0.32.0

Removed

• removed support for python 3.8 because it is end-of-life

Added

• pathlib.Path/PurePath values are now never stored as Posix/WindowsPath or their Pure variants, which improves the writing of platform independent tests.

• Support for import statement generation for all types and user-customized code.

• Added a new way to customize snapshot creation with @customize.

• Added a plugin system which allows you to reuse customizations across multiple projects.

• Added support for conditional external storage to automatically store values in external files based on custom criteria (e.g., string length, data size).

• Added built-in handlers for datetime.datetime, date, time, and timedelta that generate clean snapshots with proper imports.

• Generates __file__ instead of the filename string of the current source file.

• Uses dirty-equals IsNow() instead of the current datetime when the time value equals the current time.

Deprecated

• Deprecated @customize_repr which can be replaced with @customize.

Fixed

• raises catches BaseException instead of Exception. This ensures that SystemExit and KeyboardInterrupt are also caught.

• pytest --color flag is now respected

nushell/nushell (nushell)

v0.112.1

Compare Source

This is the 0.112.1 release of Nushell. You can learn more about this release here: https://www.nushell.sh/blog/2026-04-11-nushell_v0_112_1.html

(We skipped release 0.112.0 due to issue when releasing to crates.io.)

For convenience, we are providing full builds for Windows, Linux, and macOS. Be sure you have the requirements to enable all capabilities: https://www.nushell.sh/book/installation.html#dependencies

This release was made possible by PR contributions from @​0xRozier, @​amaanq, @​andrewgazelka, @​app/, @​app/dependabot, @​ayax79, @​Bahex, @​Benjas333, @​blackhat-hemsworth, @​blindFS, @​Bortlesboat, @​ChrisDenton, @​CloveSVG, @​cmtm, @​coravacav, @​cosineblast, @​cptpiepmatz, @​Dexterity104, @​dxrcy, @​fdncred, @​galuszkak, @​guluo2016, @​hustcer, @​ian-h-chamberlain, @​Juhan280, @​kiannidev, @​kx0101, @​Moayad717, @​musicinmybrain, @​niklasmarderx, @​pickx, @​preiter93, @​rayzeller, @​rbran, @​Rohan5commit, @​seroperson, @​sholderbach, @​smartcoder0777, @​stuartcarnie, @​tauanbinato, @​Tyarel8, @​weirdan, @​WindSoilder, @​WookiesRpeople2, @​xtqqczze, @​ymcx, @​ysthakur, @​zhiburt

v0.111.0

Compare Source

This is the 0.111.0 release of Nushell. You can learn more about this release here: https://www.nushell.sh/blog/2026-02-28-nushell_v0_111_0.html

For convenience, we are providing full builds for Windows, Linux, and macOS. Be sure you have the requirements to enable all capabilities: https://www.nushell.sh/book/installation.html#dependencies

This release was made possible by PR contributions from @​132ikl, @​Ady0333, @​amaanq, @​andrewgazelka, @​app/dependabot, @​astral-l, @​ayax79, @​Bahex, @​benblank, @​blindFS, @​BluewyDiamond, @​cablehead, @​ChrisDenton, @​cptpiepmatz, @​cuiweixie, @​evolvomind, @​fdncred, @​fennewald, @​fmotalleb, @​hovancik, @​hustcer, @​InnocentZero, @​it-education-md, @​jlcrochet, @​Juhan280, @​kaathewisegit, @​KaiSforza, @​maxim-uvarov, @​monigarr, @​moooooji, @​NotTheDr01ds, @​pickx, @​pyz4, @​sgvictorino, @​smartcoder0777, @​stuartcarnie, @​teddygood, @​veeceey, @​weirdan, @​WindSoilder, @​ysthakur

v0.110.0

Compare Source

This is the 0.110.0 release of Nushell. You can learn more about this release here: https://www.nushell.sh/blog/2026-01-17-nushell_v0_110_0.html

For convenience, we are providing full builds for Windows, Linux, and macOS. Be sure you have the requirements to enable all capabilities: https://www.nushell.sh/book/installation.html#dependencies

This release was made possible by PR contributions from @​andrewgazelka, @​app/dependabot, @​astral-l, @​atahabaki, @​ayax79, @​blackhat-hemsworth, @​blindFS, @​ChrisDenton, @​cptpiepmatz, @​DevAldrete, @​dhr412, @​Dorumin, @​Ecorous, @​fdncred, @​hustcer, @​IvolliousElectrolux, @​Jan9103, @​kaathewisegit, @​KaiSforza, @​kouhe3, @​migraine-user, @​NotTheDr01ds, @​playwmadness, @​reubeno, @​sgvictorino, @​splintersuidman, @​tom-lubenow, @​Tyarel8, @​WindSoilder, @​yanek, @​ysthakur

conda/rattler (py-rattler)

v0.23.2: py-rattler v0.23.2

Compare Source

Added

• Expose WhlPackageRecord to Python by @​Anshgrover23 in #​2221
• Add custom progress reporter callbacks to installer by @​ritankarsaha in #​2187
• Add FreeBSD 32-bit and ARM64 platform support by @​wolfv in #​2227

Changed

• Bump dependency versions in #​2237
• Improve Windows GUI app launching and file extension registration in #​2135

Fixed

• Handle invalid characters in LibC family for virtual packages in #​2209
• Fall back to AWS SDK credential chain for S3 when no rattler credentials are set in #​2222
• Fix upload token matching for anaconda.org in #​2231
• Preserve mirror URL path when rewriting requests in #​2183
• Replace panicking unwrap/expect in mirror, S3, and GCS middleware in #​2216
• Keep removed package metadata in repodata in #​2210

v0.23.1: py-rattler v0.23.1

Compare Source

Added

• Add methods to download a file by @​pavelzw in #​2201

v0.23.0: py-rattler v0.23.0

Compare Source

Added

• Add support for range requests to download individual files from packages (#​1935, #​2178)
• Add timeout parameter to Client (#​2151)
• Add default_client with built-in retry, OCI, GCS, and S3 middleware (#​2106)
• Expose archspec in virtual package overrides (#​2019)
• Implement comparison and hashing for PackageRecord types (#​2046)
• Support glob and regex patterns in repodata queries (#​2036)
• Add OAuth/OIDC authentication support in the authentication middleware (#​2049)
• Add extra to AboutJson (#​2198)

Changed

• BREAKING: Standardize exception names to *Error suffix (#​2083)
• BREAKING: Make name in MatchSpec non-optional (#​2132)
• BREAKING: Remove support for JLAP; jlap_enabled is now deprecated and ignored in FetchRepoDataOptions and SourceConfig (#​2038)
• BREAKING: Replace ; if conditional dependency syntax with when key (e.g., foo[when="python >=3.6"] instead of foo; if python >=3.6) to align with the conda CEP; the old syntax now raises an error (#​2007)
• BREAKING: Restructure experimental repodata to use a v3 top-level key with per-archive-type sub-maps (conda, tar.bz2, whl), replacing the separate packages.whl key, to align with the conda CEPs for repodata v3, conditional dependencies, and wheel support (#​2093)
• Use Arc<RepoDataRecord> throughout the gateway and Python bindings, eliminating redundant copies when passing records between Python and Rust (e.g., parsing repodata and feeding it to the solver); also release the GIL during SparseRepoData construction to allow parallel channel loading (#​2061)
• Replace .conda extraction with fully async astral-async-zip, improving package download and extraction performance (#​1855)

Fixed

• Fix type error for channels argument of Environment (#​2062)
• Cache GCS OAuth2 token across requests (#​2114)
• Reuse reqwest client in OCI middleware (#​2089)
• Record actual link type in PrefixRecord instead of always writing HardLink (#​2169)
• Fix bz2 cache state being overwritten with zst state in repodata cache (#​2180)
• Enable deletion of memory-mapped repodata on Windows during concurrent fetches (#​2084)
• Resolve data race in BarrierCell by using compare_exchange instead of fetch_max (#​2101)
• Handle cleanup failures during installation without panicking (#​2088)
• Replace panicking unwraps in OCIUrl::new with proper error handling (#​2162)
• Fix track features package record ordering (#​2092)
• Retry at least three times during install on broken pipe errors (#​2068)
• Gracefully handle missing $HOME in file backend (#​2065)
• Tolerate already-deleted conda-meta files during concurrent unlink (#​2060)
• Cache negative credential lookups in auth middleware, significantly improving performance on hosts without stored credentials (#​2055)
• Set modification time of patched files to ensure pyc files get updated (#​2096)

Performance

• Optimized repodata loading: up to 65x faster for in-memory queries and 2.4x faster for warm disk cache (#​2058)
• Speed up matchspec parsing by ~2x (#​2066)

v0.22.0

Compare Source

v0.21.0

Compare Source

prefix-dev/rattler-build (rattler-build)

v0.62.0

✨ Highlights

The biggest change of this release is that we now clean environment variables before executing the build script.
This makes build scripts more reproducible and also matches what conda-build is doing.
However, we went for a more strict approach than conda-build since we also re-map the home directory to the working directory.
Both the CLI and Python API allow to opt for the conda-build behaviour or no environment variable isolation instead.
With the CLI a new flag --env-isolation is available which takes strict (default), conda-build or none as option.

Added

• Allow for build_string_prefix passed into packages by @​hunger in #​2384
• Enforce clean build environment with configurable isolation modes by @​Hofer-Julian in #​2372

Documentation

• Fix meta.yaml leftover by @​salim-b in #​2398
• Mention skill-forge in building your own forge section by @​pavelzw in #​2409

Fixed

• Integers in skip/match conditions from variants.yaml by @​wolfv in #​2395
• Exclude new files from strip level guessing in patch application by @​Hofer-Julian in #​2400
• Reset origin URL and sync submodules before update by @​Hofer-Julian in #​2401
• Bump zip by @​lucascolley in #​2405
• Resolve overlinking false positives for staging outputs by @​Hofer-Julian in #​2402

New Contributors

• @​salim-b made their first contribution in #​2398

astral-sh/ruff (ruff)

v0.15.10

Compare Source

Released on 2026-04-09.

Preview features

• [flake8-logging] Allow closures in except handlers (LOG004) (#​24464)
• [flake8-self] Make SLF diagnostics robust to non-self-named variables (#​24281)
• [flake8-simplify] Make the fix for collapsible-if safe in preview (SIM102) (#​24371)

Bug fixes

• Avoid emitting multi-line f-string elements before Python 3.12 (#​24377)
• Avoid syntax error from E502 fixes in f-strings and t-strings (#​24410)
• Strip form feeds from indent passed to dedent_to (#​24381)
• [pyupgrade] Fix panic caused by handling of octals (UP012) (#​24390)
• Reject multi-line f-string elements before Python 3.12 (#​24355)

Rule changes

• [ruff] Treat f-string interpolation as potential side effect (RUF019) (#​24426)

Server

• Add support for custom file extensions (#​24463)

Documentation

• Document adding fixes in CONTRIBUTING.md (#​24393)
• Fix JSON typo in settings example (#​24517)

Contributors

• @​charliermarsh
• @​dylwil3
• @​silverstein
• @​anishgirianish
• @​shizukushq
• @​zanieb
• @​AlexWaygood

v0.15.9

Compare Source

Released on 2026-04-02.

Preview features

• [pyflakes] Flag annotated variable redeclarations as F811 in preview mode (#​24244)
• [ruff] Allow dunder-named assignments in non-strict mode for RUF067 (#​24089)

Bug fixes

• [flake8-errmsg] Avoid shadowing existing msg in fix for EM101 (#​24363)
• [flake8-simplify] Ignore pre-initialization references in SIM113 (#​24235)
• [pycodestyle] Fix W391 fixes for consecutive empty notebook cells (#​24236)
• [pyupgrade] Fix UP008 nested class matching (#​24273)
• [pyupgrade] Ignore strings with string-only escapes (UP012) (#​16058)
• [ruff] RUF072: skip formfeeds on dedent (#​24308)
• [ruff] Avoid re-using symbol in RUF024 fix (#​24316)
• [ruff] Parenthesize expression in RUF050 fix (#​24234)
• Disallow starred expressions as values of starred expressions (#​24280)

Rule changes

• [flake8-simplify] Suppress SIM105 for except* before Python 3.12 (#​23869)
• [pyflakes] Extend F507 to flag %-format strings with zero placeholders (#​24215)
• [pyupgrade] UP018 should detect more unnecessarily wrapped literals (UP018) (#​24093)
• [pyupgrade] Fix UP008 callable scope handling to support lambdas (#​24274)
• [ruff] RUF010: Mark fix as unsafe when it deletes a comment (#​24270)

Formatter

• Add nested-string-quote-style formatting option (#​24312)

Documentation

• [flake8-bugbear] Clarify RUF071 fix safety for non-path string comparisons (#​24149)
• [flake8-type-checking] Clarify import cycle wording for TC001/TC002/TC003 (#​24322)

Other changes

• Avoid rendering fix lines with trailing whitespace after | (#​24343)

Contributors

• @​charliermarsh
• @​MichaReiser
• @​tranhoangtu-it
• @​dylwil3
• @​zsol
• @​renovate
• @​bitloi
• @​danparizher
• @​chinar-amrutkar
• @​second-ed
• @​getehen
• @​Redovo1
• @​matthewlloyd
• @​zanieb
• @​InSyncWithFoo
• @​RenzoMXD

v0.15.8

Compare Source

Released on 2026-03-26.

Preview features

• [ruff] New rule unnecessary-if (RUF050) (#​24114)
• [ruff] New rule useless-finally (RUF072) (#​24165)
• [ruff] New rule f-string-percent-format (RUF073): warn when using % operator on an f-string (#​24162)
• [pyflakes] Recognize frozendict as a builtin for Python 3.15+ (#​24100)

Bug fixes

• [flake8-async] Use fully-qualified anyio.lowlevel import in autofix (ASYNC115) (#​24166)
• [flake8-bandit] Check tuple arguments for partial paths in S607 (#​24080)
• [pyflakes] Skip undefined-name (F821) for conditionally deleted variables (#​24088)
• E501/W505/formatter: Exclude nested pragma comments from line width calculation (#​24071)
• Fix %foo? parsing in IPython assignment expressions (#​24152)
• analyze graph: resolve string imports that reference attributes, not just modules (#​24058)

Rule changes

• [eradicate] ignore ty: ignore comments in ERA001 (#​24192)
• [flake8-bandit] Treat sys.executable as trusted input in S603 (#​24106)
• [flake8-self] Recognize Self annotation and self assignment in SLF001 (#​24144)
• [pyflakes] F507: Fix false negative for non-tuple RHS in %-formatting (#​24142)
• [refurb] Parenthesize generator arguments in FURB142 fixer (#​24200)

Performance

• Speed up diagnostic rendering (#​24146)

Server

• Warn when Markdown files are skipped due to preview being disabled (#​24150)

Documentation

• Clarify extend-ignore and extend-select settings documentation (#​24064)
• Mention AI policy in PR template (#​24198)

Other changes

• Use trusted publishing for NPM packages (#​24171)

Contributors

• @​bitloi
• @​Sim-hu
• @​mvanhorn
• @​chinar-amrutkar
• @​markjm
• @​RenzoMXD
• @​vivekkhimani
• @​seroperson
• @​moktamd
• @​charliermarsh
• @​ntBre
• @​zanieb
• @​dylwil3
• @​MichaReiser

v0.15.7

Compare Source

Released on 2026-03-19.

Preview features

• Display output severity in preview (#​23845)
• Don't show noqa hover for non-Python documents (#​24040)

Rule changes

• [pycodestyle] Recognize pyrefly: as a pragma comment (E501) (#​24019)

Server

• Don't return code actions for non-Python documents (#​23905)

Documentation

• Add company AI policy to contributing guide (#​24021)
• Document editor features for Markdown code formatting (#​23924)
• [pylint] Improve phrasing (PLC0208) (#​24033)

Other changes

• Use PEP 639 license information (#​19661)

Contributors

• @​tmimmanuel
• @​DimitriPapadopoulos
• @​amyreese
• @​statxc
• @​dylwil3
• @​hunterhogan
• @​renovate

v0.15.5

Compare Source

Released on 2026-03-05.

Preview features

• Discover Markdown files by default in preview mode (#​23434)
• [perflint] Extend PERF102 to comprehensions and generators (#​23473)
• [refurb] Fix FURB101 and FURB103 false positives when I/O variable is used later (#​23542)
• [ruff] Add fix for none-not-at-end-of-union (RUF036) (#​22829)
• [ruff] Fix false positive for re.split with empty string pattern (RUF055) (#​23634)

Bug fixes

• [fastapi] Handle callable class dependencies with __call__ method (FAST003) (#​23553)
• [pydocstyle] Fix numpy section ordering (D420) (#​23685)
• [pyflakes] Fix false positive for names shadowing re-exports (F811) (#​23356)
• [pyupgrade] Avoid inserting redundant None elements in UP045 (#​23459)

Documentation

• Document extension mapping for Markdown code formatting (#​23574)
• Update default Python version examples (#​23605)

Other changes

• Publish releases to Astral mirror (#​23616)

Contributors

• @​amyreese
• @​stakeswky
• @​chirizxc
• @​anishgirianish
• @​bxff
• @​zsol
• @​charliermarsh
• @​ntBre
• @​kar-ganap

v0.15.4

Compare Source

Released on 2026-02-26.

This is a follow-up release to 0.15.3 that resolves a panic when the new rule PLR1712 was enabled with any rule that analyzes definitions, such as many of the ANN or D rules.

Bug fixes

• Fix panic on access to definitions after analyzing definitions (#​23588)
• [pyflakes] Suppress false positive in F821 for names used before del in stub files (#​23550)

Documentation

• Clarify first-party import detection in Ruff (#​23591)
• Fix incorrect import-heading example (#​23568)

Contributors

• @​stakeswky
• @​ntBre
• @​thejcannon
• @​GeObts

v0.15.3

Compare Source

Released on 2026-02-26.

Preview features

• Drop explicit support for .qmd file extension (#​23572)

  This can now be enabled instead by setting the extension option:

  # ruff.toml
  extension = { qmd = "markdown" }
  
  # pyproject.toml
  [tool.ruff]
  extension = { qmd = "markdown" }

• Include configured extensions in file discovery (#​23400)

• [flake8-bandit] Allow suspicious imports in TYPE_CHECKING blocks (S401-S415) (#​23441)

• [flake8-bugbear] Allow B901 in pytest hook wrappers (#​21931)

• [flake8-import-conventions] Add missing conventions from upstream (ICN001, ICN002) (#​21373)

• [pydocstyle] Add rule to enforce docstring section ordering (D420) (#​23537)

• [pylint] Implement swap-with-temporary-variable (PLR1712) (#​22205)

• [ruff] Add unnecessary-assign-before-yield (RUF070) (#​23300)

• [ruff] Support file-level noqa in RUF102 (#​23535)

• [ruff] Suppress diagnostic for invalid f-strings before Python 3.12 (RUF027) (#​23480)

• [flake8-bandit] Don't flag BaseLoader/CBaseLoader as unsafe (S506) (#​23510)

Bug fixes

• Avoid infinite loop between I002 and PYI025 (#​23352)
• [pyflakes] Fix false positive for @overload from lint.typing-modules (F811) (#​23357)
• [pyupgrade] Fix false positive for TypeVar default before Python 3.12 (UP046) (#​23540)
• [pyupgrade] Fix handling of \N in raw strings (UP032) (#​22149)

Rule changes

• Render sub-diagnostics in the GitHub output format (#​23455)

• [flake8-bugbear] Tag certain B007 diagnostics as unnecessary (#​23453)

• [ruff] Ignore unknown rule codes in RUF100 (#​23531)

  These are now flagged by RUF102 instead.

Documentation

• Fix missing settings links for several linters (#​23519)
• Update isort action comments heading (#​23515)
• [pydocstyle] Fix double comma in description of D404 (#​23440)

Other changes

• Update the Python module (notably find_ruff_bin) for parity with uv (#​23406)

Contributors

• @​zanieb
• @​o1x3
• @​assadyousuf
• @​kar-ganap
• @​denyszhak
• @​amyreese
• @​carljm
• @​anishgirianish
• @​Bnyro
• @​danparizher
• @​ntBre
• @​gcomneno
• @​jaap3
• @​stakeswky

v0.15.2

Compare Source

Released on 2026-02-19.

Preview features

• Expand the default rule set (#​23385)

  In preview, Ruff now enables a significantly expanded default rule set of 412
  rules, up from the stable default set of 59 rules. The new rules are mostly a
  superset of the stable defaults, with the exception of these rules, which are
  removed from the preview defaults:

  • multiple-imports-on-one-line (E401)
  • module-import-not-at-top-of-file (E402)
  • module-import-not-at-top-of-file (E701)
  • multiple-statements-on-one-line-semicolon (E702)
  • useless-semicolon (E703)
  • none-comparison (E711)
  • true-false-comparison (E712)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "on tuesday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.