Skip to content

deps(python): bump the pip group across 1 directory with 4 updates#7711

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/pip/dependencies/python/pip-c56095a810
Open

deps(python): bump the pip group across 1 directory with 4 updates#7711
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/pip/dependencies/python/pip-c56095a810

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Apr 3, 2026 •
edited
Loading

Bumps the pip group with 4 updates in the /dependencies/python directory: ruff, mypy, cfn-lint and ansible-lint.

Updates ruff from 0.15.8 to 0.15.9

Release notes

Sourced from ruff's releases.

0.15.9

Release Notes

Released on 2026-04-02.

Preview features

  • [pyflakes] Flag annotated variable redeclarations as F811 in preview mode (#24244)
  • [ruff] Allow dunder-named assignments in non-strict mode for RUF067 (#24089)

Bug fixes

  • [flake8-errmsg] Avoid shadowing existing msg in fix for EM101 (#24363)
  • [flake8-simplify] Ignore pre-initialization references in SIM113 (#24235)
  • [pycodestyle] Fix W391 fixes for consecutive empty notebook cells (#24236)
  • [pyupgrade] Fix UP008 nested class matching (#24273)
  • [pyupgrade] Ignore strings with string-only escapes (UP012) (#16058)
  • [ruff] RUF072: skip formfeeds on dedent (#24308)
  • [ruff] Avoid re-using symbol in RUF024 fix (#24316)
  • [ruff] Parenthesize expression in RUF050 fix (#24234)
  • Disallow starred expressions as values of starred expressions (#24280)

Rule changes

  • [flake8-simplify] Suppress SIM105 for except* before Python 3.12 (#23869)
  • [pyflakes] Extend F507 to flag %-format strings with zero placeholders (#24215)
  • [pyupgrade] UP018 should detect more unnecessarily wrapped literals (UP018) (#24093)
  • [pyupgrade] Fix UP008 callable scope handling to support lambdas (#24274)
  • [ruff] RUF010: Mark fix as unsafe when it deletes a comment (#24270)

Formatter

  • Add nested-string-quote-style formatting option (#24312)

Documentation

  • [flake8-bugbear] Clarify RUF071 fix safety for non-path string comparisons (#24149)
  • [flake8-type-checking] Clarify import cycle wording for TC001/TC002/TC003 (#24322)

Other changes

  • Avoid rendering fix lines with trailing whitespace after | (#24343)

Contributors

... (truncated)

Changelog

Sourced from ruff's changelog.

0.15.9

Released on 2026-04-02.

Preview features

  • [pyflakes] Flag annotated variable redeclarations as F811 in preview mode (#24244)
  • [ruff] Allow dunder-named assignments in non-strict mode for RUF067 (#24089)

Bug fixes

  • [flake8-errmsg] Avoid shadowing existing msg in fix for EM101 (#24363)
  • [flake8-simplify] Ignore pre-initialization references in SIM113 (#24235)
  • [pycodestyle] Fix W391 fixes for consecutive empty notebook cells (#24236)
  • [pyupgrade] Fix UP008 nested class matching (#24273)
  • [pyupgrade] Ignore strings with string-only escapes (UP012) (#16058)
  • [ruff] RUF072: skip formfeeds on dedent (#24308)
  • [ruff] Avoid re-using symbol in RUF024 fix (#24316)
  • [ruff] Parenthesize expression in RUF050 fix (#24234)
  • Disallow starred expressions as values of starred expressions (#24280)

Rule changes

  • [flake8-simplify] Suppress SIM105 for except* before Python 3.12 (#23869)
  • [pyflakes] Extend F507 to flag %-format strings with zero placeholders (#24215)
  • [pyupgrade] UP018 should detect more unnecessarily wrapped literals (UP018) (#24093)
  • [pyupgrade] Fix UP008 callable scope handling to support lambdas (#24274)
  • [ruff] RUF010: Mark fix as unsafe when it deletes a comment (#24270)

Formatter

  • Add nested-string-quote-style formatting option (#24312)

Documentation

  • [flake8-bugbear] Clarify RUF071 fix safety for non-path string comparisons (#24149)
  • [flake8-type-checking] Clarify import cycle wording for TC001/TC002/TC003 (#24322)

Other changes

  • Avoid rendering fix lines with trailing whitespace after | (#24343)

Contributors

... (truncated)

Commits
  • 724ccc1 Bump 0.15.9 (#24369)
  • 96d9e09 [ty] Move the deferred submodule inside infer/builder (#24368)
  • 130da28 [ty] Infer the extra_items keyword argument to class-based TypedDicts as an...
  • a617c54 [ty] Validate type qualifiers in functional TypedDict fields and the `extra_i...
  • d851708 [ty] Improve robustness of various type-qualifier-related checks (#24251)
  • aecb587 Only run the release-gate on workflow dispatch (#24366)
  • b889571 [ty] Use infer_type_expression for parsing parameter annotations and return...
  • 3286a62 Add a "release-gate" step to the release workflow (#24365)
  • 5f88756 Disallow starred expressions as values of starred expressions (#24280)
  • 5c59f8a [pyupgrade] Ignore strings with string-only escapes (UP012) (#16058)
  • Additional commits viewable in compare view

Updates mypy from 1.19.1 to 1.20.0

Changelog

Sourced from mypy's changelog.

Mypy Release Notes

Next Release

Mypy 1.20

We’ve just uploaded mypy 1.20.0 to the Python Package Index (PyPI). Mypy is a static type checker for Python. This release includes new features, performance improvements and bug fixes. You can install it as follows:

python3 -m pip install -U mypy

You can read the full documentation for this release on Read the Docs.

Planned Changes to Defaults and Flags in Mypy 2.0

As a reminder, we are planning to enable --local-partial-types by default in mypy 2.0, which will likely be the next feature release. This will often require at least minor code changes. This option is implicitly enabled by mypy daemon, so this makes the behavior of daemon and non-daemon modes consistent.

Note that this release improves the compatibility of --local-partial-types significantly to make the switch easier (see below for more).

This can also be configured in a mypy configuration file (use False to disable):

local_partial_types = True

For more information, refer to the documentation.

We will also enable --strict-bytes by default in mypy 2.0. This usually requires at most minor code changes to adopt. For more information, refer to the documentation.

Finally, --allow-redefinition-new will be renamed to --allow-redefinition. If you want to continue using the older --allow-redefinition semantics which are less flexible (e.g. limited support for conditional redefinitions), you can switch to --allow-redefinition-old, which is currently supported as an alias to the legacy --allow-redefinition behavior. To use --allow-redefinition in the upcoming mypy 2.0, you can't use --no-local-partial-types. For more information, refer to the documentation.

Better Type Narrowing

Mypy's implementation of narrowing has been substantially reworked. Mypy will now narrow more aggressively, more consistently, and more correctly. In particular, you are likely to notice new narrowing behavior in equality expressions (==), containment expressions (in),

... (truncated)

Commits
  • 770d3ca Remove +dev from version
  • 4738ffa Changelog updates for 1.20 (#21109)
  • b4f07a7 Use 'native-parser' instead of 'native-parse' for optional dependency (#21115)
  • 7bec7b7 [mypyc] Document librt and librt.base64 (#21114)
  • c482596 --allow-redefinition-new is no longer experimental (#21110)
  • c916ca3 sdist: include misc/{diff-cache,apply-cache-diff}.py for `mypy/test/test_di...
  • b137e4e [mypyc] Speed up native-to-native imports within the same group (#21101)
  • 978b711 [mypyc] Fix range loop variable off-by-one after loop exit (#21098)
  • 67ada30 [stubtest] Check runtime availability of private types not marked `@type_chec...
  • bdef6ef librt cache tests: build respecting MYPY_TEST_PREFIX (#21097)
  • Additional commits viewable in compare view

Updates cfn-lint from 1.47.1 to 1.48.1

Release notes

Sourced from cfn-lint's releases.

Release v1.48.1

What's Changed

Full Changelog: aws-cloudformation/cfn-lint@v1.48.0...v1.48.1

Release v1.48.0

What's Changed

... (truncated)

Changelog

Sourced from cfn-lint's changelog.

v1.48.1

What's Changed

Full Changelog: aws-cloudformation/cfn-lint@v1.48.0...v1.48.1

v1.48.0

What's Changed

... (truncated)

Commits

Updates ansible-lint from 26.3.0 to 26.4.0

Release notes

Sourced from ansible-lint's releases.

v26.4.0

Fixes

Maintenance

Commits
  • 5fac056 fix: remove deprecated apt_key module from examples and builtins (#5000)
  • 90cc6d6 fix(security): update dependencies [SECURITY] (#5010)
  • c8b64db fix: avoid permission error when linting /tmp files (#5009)
  • 635c0a5 fix: reapply false positive patch for no-changed-when rule (#4989)
  • e4d0353 chore: update hooks (#5008)
  • e92a6ea chore: implement workaround for coverage merging failure (#5006)
  • b6d547f docs: fix inaccuracies found during documentation audit (#4999)
  • c146c9b fix: support collection format in mock_roles (#4980)
  • 6672262 Add support for upcoming Ubuntu 26.04 (#4995)
  • e030143 chore(deps): update all dependencies pep621 (#4994)
  • Additional commits viewable in compare view

@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Apr 3, 2026
@dependabot dependabot bot requested a review from zkoppert as a code owner April 3, 2026 13:34
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Apr 3, 2026
@dependabot dependabot bot requested a review from Hanse00 as a code owner April 3, 2026 13:34
@dependabot dependabot bot added the python Pull requests that update Python code label Apr 3, 2026
@dependabot dependabot bot requested a review from ferrarimarco as a code owner April 3, 2026 13:34
@github-actions github-actions bot enabled auto-merge April 3, 2026 13:34
@github-actions
Copy link
Copy Markdown
Contributor

github-actions bot commented Apr 3, 2026

Super-linter summary

Language Validation result
BIOME_FORMAT Pass ✅
BIOME_LINT Pass ✅
CHECKOV Pass ✅
EDITORCONFIG Pass ✅
GITLEAKS Pass ✅
GIT_COMMITLINT Pass ✅
GIT_MERGE_CONFLICT_MARKERS Pass ✅
JSCPD Pass ✅
PRE_COMMIT Pass ✅
SPELL_CODESPELL Pass ✅
TRIVY Fail ❌

Super-linter detected linting errors

For more information, see the
GitHub Actions workflow run

Powered by Super-linter

TRIVY 
trivy filesystem --config /github/workspace/.github/linters/trivy.yaml /github/workspace

Report Summary

┌─────────────────────────────────────┬────────────┬─────────────────┬───────────────────┬─────────┐
│               Target                │    Type    │ Vulnerabilities │ Misconfigurations │ Secrets │
├─────────────────────────────────────┼────────────┼─────────────────┼───────────────────┼─────────┤
│ dependencies/Gemfile.lock           │  bundler   │       13        │         -         │    -    │
├─────────────────────────────────────┼────────────┼─────────────────┼───────────────────┼─────────┤
│ dependencies/composer/composer.lock │  composer  │        0        │         -         │    -    │
├─────────────────────────────────────┼────────────┼─────────────────┼───────────────────┼─────────┤
│ dependencies/package-lock.json      │    npm     │        2        │         -         │    -    │
├─────────────────────────────────────┼────────────┼─────────────────┼───────────────────┼─────────┤
│ dev-dependencies/package-lock.json  │    npm     │        0        │         -         │    -    │
├─────────────────────────────────────┼────────────┼─────────────────┼───────────────────┼─────────┤
│ Dockerfile                          │ dockerfile │        -        │         0         │    -    │
├─────────────────────────────────────┼────────────┼─────────────────┼───────────────────┼─────────┤
│ dev-dependencies/Dockerfile         │ dockerfile │        -        │         0         │    -    │
├─────────────────────────────────────┼────────────┼─────────────────┼───────────────────┼─────────┤
│ test/linters/trivy/good/Dockerfile  │ dockerfile │        -        │         0         │    -    │
└─────────────────────────────────────┴────────────┴─────────────────┴───────────────────┴─────────┘
Legend:
- '-': Not scanned
- '0': Clean (no security findings detected)


For OSS Maintainers: VEX Notice
--------------------------------
If you're an OSS maintainer and Trivy has detected vulnerabilities in your project that you believe are not actually exploitable, consider issuing a VEX (Vulnerability Exploitability eXchange) statement.
VEX allows you to communicate the actual status of vulnerabilities in your project, improving security transparency and reducing false positives for your users.
Learn more and start using VEX: https://trivy.dev/docs/v0.69/guide/supply-chain/vex/repo#publishing-vex-documents

To disable this notice, set the TRIVY_DISABLE_VEX_NOTICE environment variable.


dependencies/Gemfile.lock (bundler)
===================================
Total: 13 (UNKNOWN: 0, LOW: 1, MEDIUM: 9, HIGH: 3, CRITICAL: 0)

┌─────────┬────────────────┬──────────┬────────┬───────────────────┬───────────────────────┬────────────────────────────────────────────────────────────┐
│ Library │ Vulnerability  │ Severity │ Status │ Installed Version │     Fixed Version     │                           Title                            │
├─────────┼────────────────┼──────────┼────────┼───────────────────┼───────────────────────┼────────────────────────────────────────────────────────────┤
│ rack    │ CVE-2026-34785 │ HIGH     │ fixed  │ 3.2.5             │ 2.2.23, 3.1.21, 3.2.6 │ Rack is a modular Ruby web server interface. Prior to      │
│         │                │          │        │                   │                       │ versions 2.2.23,...                                        │
│         │                │          │        │                   │                       │ https://avd.aquasec.com/nvd/cve-2026-34785                 │
│         ├────────────────┤          │        │                   ├───────────────────────┼────────────────────────────────────────────────────────────┤
│         │ CVE-2026-34827 │          │        │                   │ 3.1.21, 3.2.6         │ Rack is a modular Ruby web server interface. From versions │
│         │                │          │        │                   │                       │ 3.0.0.beta1 ......                                         │
│         │                │          │        │                   │                       │ https://avd.aquasec.com/nvd/cve-2026-34827                 │
│         ├────────────────┤          │        │                   ├───────────────────────┼────────────────────────────────────────────────────────────┤
│         │ CVE-2026-34829 │          │        │                   │ 2.2.23, 3.1.21, 3.2.6 │ Rack is a modular Ruby web server interface. Prior to      │
│         │                │          │        │                   │                       │ versions 2.2.23,...                                        │
│         │                │          │        │                   │                       │ https://avd.aquasec.com/nvd/cve-2026-34829                 │
│         ├────────────────┼──────────┤        │                   ├───────────────────────┼────────────────────────────────────────────────────────────┤
│         │ CVE-2026-26962 │ MEDIUM   │        │                   │ 3.2.6                 │ Rack's improper unfolding of folded multipart headers      │
│         │                │          │        │                   │                       │ preserves CRLF in parsed parameter...                      │
│         │                │          │        │                   │                       │ https://avd.aquasec.com/nvd/cve-2026-26962                 │
│         ├────────────────┤          │        │                   ├───────────────────────┼────────────────────────────────────────────────────────────┤
│         │ CVE-2026-32762 │          │        │                   │ 3.1.21, 3.2.6         │ Rack is a modular Ruby web server interface. From versions │
│         │                │          │        │                   │                       │ 3.0.0.beta1 ......                                         │
│         │                │          │        │                   │                       │ https://avd.aquasec.com/nvd/cve-2026-32762                 │
│         ├────────────────┤          │        │                   ├───────────────────────┼────────────────────────────────────────────────────────────┤
│         │ CVE-2026-34230 │          │        │                   │ 2.2.23, 3.1.21, 3.2.6 │ Rack is a modular Ruby web server interface. Prior to      │
│         │                │          │        │                   │                       │ versions 2.2.23,...                                        │
│         │                │          │        │                   │                       │ https://avd.aquasec.com/nvd/cve-2026-34230                 │
│         ├────────────────┤          │        │                   │                       ├────────────────────────────────────────────────────────────┤
│         │ CVE-2026-34763 │          │        │                   │                       │ Rack is a modular Ruby web server interface. Prior to      │
│         │                │          │        │                   │                       │ versions 2.2.23,...                                        │
│         │                │          │        │                   │                       │ https://avd.aquasec.com/nvd/cve-2026-34763                 │
│         ├────────────────┤          │        │                   │                       ├────────────────────────────────────────────────────────────┤
│         │ CVE-2026-34786 │          │        │                   │                       │ Rack is a modular Ruby web server interface. Prior to      │
│         │                │          │        │                   │                       │ versions 2.2.23,...                                        │
│         │                │          │        │                   │                       │ https://avd.aquasec.com/nvd/cve-2026-34786                 │
│         ├────────────────┤          │        │                   │                       ├────────────────────────────────────────────────────────────┤
│         │ CVE-2026-34826 │          │        │                   │                       │ Rack is a modular Ruby web server interface. Prior to      │
│         │                │          │        │                   │                       │ versions 2.2.23,...                                        │
│         │                │          │        │                   │                       │ https://avd.aquasec.com/nvd/cve-2026-34826                 │
│         ├────────────────┤          │        │                   │                       ├────────────────────────────────────────────────────────────┤
│         │ CVE-2026-34830 │          │        │                   │                       │ Rack is a modular Ruby web server interface. Prior to      │
│         │                │          │        │                   │                       │ versions 2.2.23,...                                        │
│         │                │          │        │                   │                       │ https://avd.aquasec.com/nvd/cve-2026-34830                 │
│         ├────────────────┤          │        │                   │                       ├────────────────────────────────────────────────────────────┤
│         │ CVE-2026-34831 │          │        │                   │                       │ Rack is a modular Ruby web server interface. Prior to      │
│         │                │          │        │                   │                       │ versions 2.2.23,...                                        │
│         │                │          │        │                   │                       │ https://avd.aquasec.com/nvd/cve-2026-34831                 │
│         ├────────────────┤          │        │                   ├───────────────────────┼────────────────────────────────────────────────────────────┤
│         │ CVE-2026-34835 │          │        │                   │ 3.1.21, 3.2.6         │ Rack is a modular Ruby web server interface. From versions │
│         │                │          │        │                   │                       │ 3.0.0.beta1 ......                                         │
│         │                │          │        │                   │                       │ https://avd.aquasec.com/nvd/cve-2026-34835                 │
│         ├────────────────┼──────────┤        │                   ├───────────────────────┼────────────────────────────────────────────────────────────┤
│         │ CVE-2026-26961 │ LOW      │        │                   │ 2.2.23, 3.1.21, 3.2.6 │ Rack is a modular Ruby web server interface. Prior to      │
│         │                │          │        │                   │                       │ versions 2.2.23,...                                        │
│         │                │          │        │                   │                       │ https://avd.aquasec.com/nvd/cve-2026-26961                 │
└─────────┴────────────────┴──────────┴────────┴───────────────────┴───────────────────────┴────────────────────────────────────────────────────────────┘

dependencies/package-lock.json (npm)
====================================
Total: 2 (UNKNOWN: 0, LOW: 0, MEDIUM: 1, HIGH: 1, CRITICAL: 0)

┌─────────┬───────────────┬──────────┬────────┬───────────────────┬───────────────┬──────────────────────────────────────────────────────────────┐
│ Library │ Vulnerability │ Severity │ Status │ Installed Version │ Fixed Version │                            Title                             │
├─────────┼───────────────┼──────────┼────────┼───────────────────┼───────────────┼──────────────────────────────────────────────────────────────┤
│ lodash  │ CVE-2026-4800 │ HIGH     │ fixed  │ 4.17.23           │ 4.18.0        │ lodash: lodash: Arbitrary code execution via untrusted input │
│         │               │          │        │                   │               │ in template imports                                          │
│         │               │          │        │                   │               │ https://avd.aquasec.com/nvd/cve-2026-4800                    │
│         ├───────────────┼──────────┤        │                   │               ├──────────────────────────────────────────────────────────────┤
│         │ CVE-2026-2950 │ MEDIUM   │        │                   │               │ lodash vulnerable to Prototype Pollution via array path      │
│         │               │          │        │                   │               │ bypass in `_.unset` and...                                   │
│         │               │          │        │                   │               │ https://avd.aquasec.com/nvd/cve-2026-2950                    │
└─────────┴───────────────┴──────────┴────────┴───────────────────┴───────────────┴──────────────────────────────────────────────────────────────┘

@ferrarimarco
Copy link
Copy Markdown
Collaborator

ferrarimarco commented Apr 3, 2026

@dependabot rebase

@dependabot dependabot bot force-pushed the dependabot/pip/dependencies/python/pip-c56095a810 branch from 57b9c5b to 58a4fbb Compare April 3, 2026 15:12
@github-actions
Copy link
Copy Markdown
Contributor

github-actions bot commented Apr 3, 2026

Super-linter summary

Language Validation result
BIOME_FORMAT Pass ✅
BIOME_LINT Pass ✅
CHECKOV Pass ✅
EDITORCONFIG Pass ✅
GITLEAKS Pass ✅
GIT_COMMITLINT Pass ✅
GIT_MERGE_CONFLICT_MARKERS Pass ✅
JSCPD Pass ✅
PRE_COMMIT Pass ✅
SPELL_CODESPELL Pass ✅
TRIVY Pass ✅

All files and directories linted successfully

For more information, see the
GitHub Actions workflow run

Powered by Super-linter

3 similar comments
@github-actions
Copy link
Copy Markdown
Contributor

github-actions bot commented Apr 3, 2026

Super-linter summary

Language Validation result
BIOME_FORMAT Pass ✅
BIOME_LINT Pass ✅
CHECKOV Pass ✅
EDITORCONFIG Pass ✅
GITLEAKS Pass ✅
GIT_COMMITLINT Pass ✅
GIT_MERGE_CONFLICT_MARKERS Pass ✅
JSCPD Pass ✅
PRE_COMMIT Pass ✅
SPELL_CODESPELL Pass ✅
TRIVY Pass ✅

All files and directories linted successfully

For more information, see the
GitHub Actions workflow run

Powered by Super-linter

@github-actions
Copy link
Copy Markdown
Contributor

github-actions bot commented Apr 3, 2026

Super-linter summary

Language Validation result
BIOME_FORMAT Pass ✅
BIOME_LINT Pass ✅
CHECKOV Pass ✅
EDITORCONFIG Pass ✅
GITLEAKS Pass ✅
GIT_COMMITLINT Pass ✅
GIT_MERGE_CONFLICT_MARKERS Pass ✅
JSCPD Pass ✅
PRE_COMMIT Pass ✅
SPELL_CODESPELL Pass ✅
TRIVY Pass ✅

All files and directories linted successfully

For more information, see the
GitHub Actions workflow run

Powered by Super-linter

@github-actions
Copy link
Copy Markdown
Contributor

github-actions bot commented Apr 3, 2026

Super-linter summary

Language Validation result
BIOME_FORMAT Pass ✅
BIOME_LINT Pass ✅
CHECKOV Pass ✅
EDITORCONFIG Pass ✅
GITLEAKS Pass ✅
GIT_COMMITLINT Pass ✅
GIT_MERGE_CONFLICT_MARKERS Pass ✅
JSCPD Pass ✅
PRE_COMMIT Pass ✅
SPELL_CODESPELL Pass ✅
TRIVY Pass ✅

All files and directories linted successfully

For more information, see the
GitHub Actions workflow run

Powered by Super-linter

@dependabot
deps(python): bump the pip group across 1 directory with 4 updates
e9f32fc 
Bumps the pip group with 4 updates in the /dependencies/python directory: [ruff](https://github.com/astral-sh/ruff), [mypy](https://github.com/python/mypy), [cfn-lint](https://github.com/aws-cloudformation/cfn-lint) and [ansible-lint](https://github.com/ansible/ansible-lint).


Updates `ruff` from 0.15.8 to 0.15.9
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.15.8...0.15.9)

Updates `mypy` from 1.19.1 to 1.20.0
- [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md)
- [Commits](python/mypy@v1.19.1...v1.20.0)

Updates `cfn-lint` from 1.47.1 to 1.48.1
- [Release notes](https://github.com/aws-cloudformation/cfn-lint/releases)
- [Changelog](https://github.com/aws-cloudformation/cfn-lint/blob/main/CHANGELOG.md)
- [Commits](aws-cloudformation/cfn-lint@v1.47.1...v1.48.1)

Updates `ansible-lint` from 26.3.0 to 26.4.0
- [Release notes](https://github.com/ansible/ansible-lint/releases)
- [Commits](ansible/ansible-lint@v26.3.0...v26.4.0)

---
updated-dependencies:
- dependency-name: ruff
  dependency-version: 0.15.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip
- dependency-name: mypy
  dependency-version: 1.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip
- dependency-name: cfn-lint
  dependency-version: 1.48.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip
- dependency-name: ansible-lint
  dependency-version: 26.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/pip/dependencies/python/pip-c56095a810 branch from 58a4fbb to e9f32fc Compare April 6, 2026 13:38
@github-actions
Copy link
Copy Markdown
Contributor

github-actions bot commented Apr 6, 2026

Super-linter summary

Language Validation result
BIOME_FORMAT Pass ✅
BIOME_LINT Pass ✅
CHECKOV Pass ✅
EDITORCONFIG Pass ✅
GITLEAKS Pass ✅
GIT_COMMITLINT Pass ✅
GIT_MERGE_CONFLICT_MARKERS Pass ✅
JSCPD Pass ✅
PRE_COMMIT Pass ✅
SPELL_CODESPELL Pass ✅
TRIVY Pass ✅

All files and directories linted successfully

For more information, see the
GitHub Actions workflow run

Powered by Super-linter

3 similar comments
@github-actions
Copy link
Copy Markdown
Contributor

github-actions bot commented Apr 6, 2026

Super-linter summary

Language Validation result
BIOME_FORMAT Pass ✅
BIOME_LINT Pass ✅
CHECKOV Pass ✅
EDITORCONFIG Pass ✅
GITLEAKS Pass ✅
GIT_COMMITLINT Pass ✅
GIT_MERGE_CONFLICT_MARKERS Pass ✅
JSCPD Pass ✅
PRE_COMMIT Pass ✅
SPELL_CODESPELL Pass ✅
TRIVY Pass ✅

All files and directories linted successfully

For more information, see the
GitHub Actions workflow run

Powered by Super-linter

@github-actions
Copy link
Copy Markdown
Contributor

github-actions bot commented Apr 6, 2026

Super-linter summary

Language Validation result
BIOME_FORMAT Pass ✅
BIOME_LINT Pass ✅
CHECKOV Pass ✅
EDITORCONFIG Pass ✅
GITLEAKS Pass ✅
GIT_COMMITLINT Pass ✅
GIT_MERGE_CONFLICT_MARKERS Pass ✅
JSCPD Pass ✅
PRE_COMMIT Pass ✅
SPELL_CODESPELL Pass ✅
TRIVY Pass ✅

All files and directories linted successfully

For more information, see the
GitHub Actions workflow run

Powered by Super-linter

@github-actions
Copy link
Copy Markdown
Contributor

github-actions bot commented Apr 6, 2026

Super-linter summary

Language Validation result
BIOME_FORMAT Pass ✅
BIOME_LINT Pass ✅
CHECKOV Pass ✅
EDITORCONFIG Pass ✅
GITLEAKS Pass ✅
GIT_COMMITLINT Pass ✅
GIT_MERGE_CONFLICT_MARKERS Pass ✅
JSCPD Pass ✅
PRE_COMMIT Pass ✅
SPELL_CODESPELL Pass ✅
TRIVY Pass ✅

All files and directories linted successfully

For more information, see the
GitHub Actions workflow run

Powered by Super-linter

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@zkoppert zkoppert Awaiting requested review from zkoppert zkoppert is a code owner

@Hanse00 Hanse00 Awaiting requested review from Hanse00 Hanse00 is a code owner

@ferrarimarco ferrarimarco Awaiting requested review from ferrarimarco ferrarimarco is a code owner

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@ferrarimarco