Skip to content

fix(deps): update all non-major dependencies (minor) - #780

Merged
shunkakinoki merged 1 commit into
mainfrom
renovate/all-minor-patch
Feb 11, 2026
Merged

fix(deps): update all non-major dependencies (minor)#780
shunkakinoki merged 1 commit into
mainfrom
renovate/all-minor-patch

Conversation

@shunkakinoki

@shunkakinoki shunkakinoki commented Feb 11, 2026 •
edited by cubic-dev-ai Bot
Loading

Copy link
Copy Markdown
Owner

This PR contains the following updates:

Package Change Age Confidence
@pulumi/pulumi (source) ^3.219.0 → ^3.220.0 age confidence
oxfmt (source) ^0.30.0 → ^0.31.0 age confidence
oxlint (source) ^1.43.0 → ^1.46.0 age confidence
ruff (source, changelog) >=0.14.14 → >=0.15.0 age confidence

Release Notes

pulumi/pulumi (@​pulumi/pulumi)

v3.220.0

Compare Source

Features

  • [cli] Show environment variables that were set if a snapshot integrity error happens
    #​21709

  • [cli/{install,package}] Use the Pulumi Cloud Registry by default to resolve package names

  • [engine] Pass replacement trigger through to Construct
    #​21408

  • [engine] Add EnvVarMappings resource option for provider resources, allowing environment variables to be remapped before being passed to the provider
    #​21572

  • [pkg] BREAKING: Deprecate github.com/pulumi/pulumi/pkg/v3/codegen/dotnet in favor of github.com/pulumi/pulumi-dotnet/pulumi-language-dotnet/v3/codegen. This package will be removed from pulumi/pulumi soon!
    #​21720

Bug Fixes

  • [cli] Retry yarn install when it fails (e.g. during pulumi install)
    #​21707

  • [engine] Deal with errors in elided journal entries correctly
    #​21576

  • [sdk/nodejs] Fix remote components with PULUMI_NODEJS_SKIP_COMPONENT_INPUTS

  • [sdk/python] Fix _LazyModule to not trigger full module load for introspection attributes
    #​21620

  • [sdkgen/python] Remove workaround for slow typechecking with MyPy and PyCharm
    #​21722

Miscellaneous
  • [cli] Write logfile location if verbosity is >= 1 to stderr instead of stdout
    #​21663
oxc-project/oxc (oxlint)

v1.45.0

🐛 Bug Fixes
  • 1b2f354 ci: Add missing riscv64/s390x napi targets for oxfmt and oxlint (#​19217) (Cameron)
astral-sh/ruff (ruff)

v0.15.0

Compare Source

Released on 2026-02-03.

Check out the blog post for a migration
guide and overview of the changes!

Breaking changes

  • Ruff now formats your code according to the 2026 style guide. See the formatter section below or in the blog post for a detailed list of changes.

  • The linter now supports block suppression comments. For example, to suppress N803 for all parameters in this function:

    # ruff: disable[N803]
def foo(
    legacyArg1,
    legacyArg2,
    legacyArg3,
    legacyArg4,
): ...
# ruff: enable[N803]

    See the documentation for more details.

  • The ruff:alpine Docker image is now based on Alpine 3.23 (up from 3.21).

  • The ruff:debian and ruff:debian-slim Docker images are now based on Debian 13 "Trixie" instead of Debian 12 "Bookworm."

  • Binaries for the ppc64 (64-bit big-endian PowerPC) architecture are no longer included in our releases. It should still be possible to build Ruff manually for this platform, if needed.

  • Ruff now resolves all extended configuration files before falling back on a default Python version.

Stabilization

The following rules have been stabilized and are no longer in preview:

The following behaviors have been stabilized:

  • The --output-format flag is now respected when running Ruff in --watch mode, and the full output format is now used by default, matching the regular CLI output.
  • builtin-attribute-shadowing (A003) now detects the use of shadowed built-in names in additional contexts like decorators, default arguments, and other attribute definitions.
  • duplicate-union-member (PYI016) now considers typing.Optional when searching for duplicate union members.
  • split-static-string (SIM905) now offers an autofix when the maxsplit argument is provided, even without a sep argument.
  • dict-get-with-none-default (SIM910) now applies to more types of key expressions.
  • super-call-with-parameters (UP008) now has a safe fix when it will not delete comments.
  • unnecessary-default-type-args (UP043) now applies to stub (.pyi) files on Python versions before 3.13.
Formatter

This release introduces the new 2026 style guide, with the following changes:

  • Lambda parameters are now kept on the same line and lambda bodies will be parenthesized to let
    them break across multiple lines (#​21385)
  • Parentheses around tuples of exceptions in except clauses will now be removed on Python 3.14 and
    later (#​20768)
  • A single empty line is now permitted at the beginning of function bodies (#​21110)
  • Parentheses are avoided for long as captures in match statements (#​21176)
  • Extra spaces between escaped quotes and ending triple quotes can now be omitted (#​17216)
  • Blank lines are now enforced before classes with decorators in stub files (#​18888)
Preview features
Bug fixes
  • Fix suppression indentation matching (#​22903)
Rule changes
  • Customize where the fix_title sub-diagnostic appears (#​23044)
  • [FastAPI] Add sub-diagnostic explaining why a fix was unavailable (FAST002) (#​22565)
  • [flake8-annotations] Don't suggest NoReturn for functions raising NotImplementedError (ANN201, ANN202, ANN205, ANN206) (#​21311)
  • [pyupgrade] Make fix unsafe if it deletes comments (UP017) (#​22873)
  • [pyupgrade] Make fix unsafe if it deletes comments (UP020) (#​22872)
  • [pyupgrade] Make fix unsafe if it deletes comments (UP033) (#​22871)
  • [refurb] Do not add abc.ABC if already present (FURB180) (#​22234)
  • [refurb] Make fix unsafe if it deletes comments (FURB110) (#​22768)
  • [ruff] Add sub-diagnostics with permissions (RUF064) (#​22972)
Server
  • Identify notebooks by LSP didOpen instead of .ipynb file extension (#​22810)
CLI
  • Add --color CLI option to force colored output (#​22806)
Documentation
  • Document - stdin convention in CLI help text (#​22817)
  • [refurb] Change example to re.search with ^ anchor (FURB167) (#​22984)
  • Fix link to Sphinx code block directives (#​23041)
  • [pydocstyle] Clarify which quote styles are allowed (D300) (#​22825)
  • [flake8-bugbear] Improve docs for no-explicit-stacklevel (B028) (#​22538)
Other changes
Contributors

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

Summary by cubic

Update dev tooling dependencies to the latest minor versions to keep builds and linting current. Ruff 0.15 adopts the 2026 style guide, which may change formatting.

  • Dependencies

    • @pulumi/pulumi: 3.219.0 → 3.220.0
    • oxfmt: 0.30.0 → 0.31.0
    • oxlint: 1.43.0 → 1.46.0
    • ruff: >=0.14.14 → >=0.15.0

  • Migration

    • Run “ruff format” to align code with the 0.15 style guide.
    • If formatting is enforced in CI, expect a one-time formatting diff.

Written for commit 0de64e7. Summary will update on new commits.

Copilot AI review requested due to automatic review settings February 11, 2026 03:59
@shunkakinoki
shunkakinoki enabled auto-merge (squash) February 11, 2026 03:59
@mesa-dot-dev

mesa-dot-dev Bot commented Feb 11, 2026

Copy link
Copy Markdown

You do not have enough credits to review this pull request. Please purchase more credits to continue.

@gemini-code-assist

gemini-code-assist Bot commented Feb 11, 2026

Copy link
Copy Markdown
Contributor

Summary of Changes

Hello @shunkakinoki, I'm Gemini Code Assist1! I'm currently reviewing this pull request and will post my feedback shortly. In the meantime, here's a summary to help you and other reviewers quickly get up to speed!

This pull request focuses on updating several key development dependencies to their latest minor versions. The updates ensure the project benefits from recent features, performance improvements, and bug fixes across its infrastructure-as-code tooling, code formatting, and linting utilities. Notably, the ruff linter and formatter received a substantial upgrade, bringing a new style guide and several breaking changes that enhance code quality and consistency.

Highlights

  • Pulumi Update: The @pulumi/pulumi package has been updated to version 3.220.0. This release includes new CLI features such as showing environment variables on snapshot integrity errors and using the Pulumi Cloud Registry by default. Engine enhancements include passing replacement triggers to Construct and adding EnvVarMappings for provider resources. Several bug fixes were also applied, and a breaking change deprecates github.com/pulumi/pulumi/pkg/v3/codegen/dotnet.
  • Oxc Tooling Updates: The oxfmt package has been updated to 0.31.0 and oxlint to 1.46.0. These updates include a CI fix to add missing riscv64/s390x NAPI targets for both oxfmt and oxlint, ensuring broader platform compatibility.
  • Ruff Linter and Formatter Upgrade: The ruff package has been upgraded to version 0.15.0, which introduces significant changes. This includes a new 2026 style guide for formatting, support for block suppression comments in the linter, and the stabilization of numerous linter rules and behaviors. Docker images for ruff are now based on newer Alpine and Debian versions, and ppc64 binaries are no longer included. Several rule changes and bug fixes are also part of this release.
Changelog
  • bun.lock
    • Updated @pulumi/pulumi from ^3.219.0 to ^3.220.0 and its associated checksum.
    • Updated oxfmt from ^0.30.0 to ^0.31.0 and its associated checksums for various platform bindings.
    • Updated oxlint from ^1.43.0 to ^1.46.0 and its associated checksums for various platform bindings.
  • package.json
    • Updated the version requirement for @pulumi/pulumi to ^3.220.0.
    • Updated the version requirement for oxfmt to ^0.31.0.
    • Updated the version requirement for oxlint to ^1.46.0.
  • pyproject.toml
    • Updated the minimum version requirement for ruff to >=0.15.0.
Activity
  • No human activity has been recorded on this pull request since its creation.
Using Gemini Code Assist

The full guide for Gemini Code Assist can be found on our documentation page, here are some quick tips.

Invoking Gemini

You can request assistance from Gemini at any point by creating a comment using either /gemini <command> or @gemini-code-assist <command>. Below is a summary of the supported commands on the current page.

Feature Command Description
Code Review /gemini review Performs a code review for the current pull request in its current state.
Pull Request Summary /gemini summary Provides a summary of the current pull request in its current state.
Comment @gemini-code-assist Responds in comments when explicitly tagged, both in pull request comments and review comments.
Help /gemini help Displays a list of available commands.

Customization

To customize Gemini Code Assist for GitHub experience, repository maintainers can create a configuration file and/or provide a custom code review style guide (such as PEP-8 for Python) by creating and adding files to a .gemini/ folder in the base of the repository. Detailed instructions can be found here.

Limitations & Feedback

Gemini Code Assist may make mistakes. Please leave feedback on any instances where its feedback is incorrect or counter productive. You can react with 👍 and 👎 on @gemini-code-assist comments. If you're interested in giving your feedback about your experience with Gemini Code Assist for Github and other Google products, sign up here.

You can also get AI-powered code generation, chat, as well as code reviews directly in the IDE at no cost with the Gemini Code Assist IDE Extension.

Footnotes

  1. Review the Privacy Notices, Generative AI Prohibited Use Policy, Terms of Service, and learn how to configure Gemini Code Assist in GitHub here. Gemini can make mistakes, so double check it and use code with caution. ↩

@coderabbitai

coderabbitai Bot commented Feb 11, 2026 •
edited
Loading

Copy link
Copy Markdown
📝 Walkthrough

Summary by CodeRabbit

  • Chores
    • Updated @pulumi/pulumi to version 3.220.0
    • Updated oxfmt to version 0.31.0
    • Updated oxlint to version 1.46.0
    • Updated ruff to version 0.15.0

Walkthrough

This pull request updates three dependencies in package.json (@pulumi/pulumi to ^3.220.0, oxfmt to ^0.31.0, oxlint to ^1.46.0) and one dependency in pyproject.toml (ruff to 0.15.0). All changes are routine version bumps with no functional modifications.

Changes

Cohort / File(s) Summary
Dependency Version Bumps (Node.js)
package.json		 Updated three dependencies: @pulumi/pulumi (^3.219.0 → ^3.220.0), oxfmt (^0.30.0 → ^0.31.0), and oxlint (^1.43.0 → ^1.46.0)
Dependency Version Bumps (Python)
pyproject.toml		 Updated ruff tool version from 0.14.14 to 0.15.0 in project dependencies

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~3 minutes

Possibly related issues

  • Issue #181: Dependency bumps match the Renovate dependency dashboard updates for @pulumi/pulumi, oxfmt, oxlint, and ruff.

Possibly related PRs

  • PR #777: Overlapping dependency updates to oxfmt, oxlint, and @pulumi/pulumi in package.json.

Suggested labels

dependencies, automerge

Poem

🐰 Hopping through the versions with glee,
Dependencies dance, numbers all free!
From ruff to oxlint, the bumps align,
Each little upgrade makes the code shine! ✨

🚥 Pre-merge checks | ✅ 3
✅ Passed checks (3 passed)
Check name Status Explanation
Title check ✅ Passed The title accurately describes the main change: updating non-major (minor and patch) dependencies across the project.
Description check ✅ Passed The description is directly related to the changeset, providing detailed information about dependency updates with release notes and migration guidance.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Post copyable unit tests in a comment
  • Commit unit tests in branch renovate/all-minor-patch

No actionable comments were generated in the recent review. 🎉

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

@mesa-dot-dev

mesa-dot-dev Bot commented Feb 11, 2026

Copy link
Copy Markdown

Mesa Description

TL;DR

Updated several minor and patch dependencies including @pulumi/pulumi, oxfmt, oxlint, and ruff.

What changed?

  • Updated @pulumi/pulumi from ^3.219.0 to ^3.220.0
  • Updated oxfmt from ^0.30.0 to ^0.31.0
  • Updated oxlint from ^1.43.0 to ^1.46.0
  • Updated ruff from >=0.14.14 to >=0.15.0

Description generated by Mesa. Update settings

gemini-code-assist[bot]
gemini-code-assist Bot reviewed Feb 11, 2026
View reviewed changes

@gemini-code-assist gemini-code-assist Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request updates several development dependencies to their latest minor versions. The changes in package.json, bun.lock, and pyproject.toml are correct and align with the goal of keeping tooling up-to-date. I've reviewed the release notes, and the updates for @pulumi/pulumi, oxfmt, and oxlint appear safe to merge. The most significant change is the update to ruff v0.15.0, which introduces a new 2026 style guide. As noted in the PR description, this will likely require reformatting the Python code in the repository. This is an expected consequence of the update and not an issue with the PR itself. Overall, the changes are sound.

cubic-dev-ai[bot]
cubic-dev-ai Bot reviewed Feb 11, 2026
View reviewed changes

@cubic-dev-ai cubic-dev-ai Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

No issues found across 3 files

Copilot AI reviewed Feb 11, 2026
View reviewed changes

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Updates a set of non-major developer/tooling dependencies to keep the repo’s JS (Bun) and Python (uv tool) tooling current.

Changes:

  • Bump ruff in pyproject.toml from >=0.14.14 to >=0.15.0.
  • Bump @pulumi/pulumi, oxfmt, and oxlint in package.json.
  • Regenerate bun.lock to reflect the updated Bun dependencies (including updated optional/binding packages for oxfmt/oxlint).

Reviewed changes

Copilot reviewed 2 out of 3 changed files in this pull request and generated no comments.

File Description
pyproject.toml Updates the pinned minimum ruff version for uv-managed global tooling.
package.json Bumps the targeted npm dependencies (@pulumi/pulumi, oxfmt, oxlint).
bun.lock Updates the Bun lockfile to match the new dependency versions and resolved artifacts.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@shunkakinoki
shunkakinoki merged commit 8718f22 into main Feb 11, 2026
41 checks passed
@shunkakinoki
shunkakinoki deleted the renovate/all-minor-patch branch February 11, 2026 04:47
This was referenced Feb 13, 2026
Closed
Merged
Closed
@coderabbitai coderabbitai Bot mentioned this pull request Apr 10, 2026
Merged
1 task
@coderabbitai coderabbitai Bot mentioned this pull request May 21, 2026
Merged
1 task
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

Copilot code review Copilot
Copilot review effort
Applies to this pull request for everyone.Learn more about Copilot code review.
Copilot left review comments
@cubic-dev-ai cubic-dev-ai[bot] cubic-dev-ai[bot] left review comments
+1 more reviewer
@gemini-code-assist gemini-code-assist[bot] gemini-code-assist[bot] left review comments
Reviewers whose approvals may not affect merge requirements

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@shunkakinoki @renovate-bot