Skip to content

Upgrade Ruff to 0.16.0 - #12

Merged
adewale merged 2 commits into
mainfrom
agent/upgrade-ruff-0.16
Jul 27, 2026
Merged

adewale merged 2 commits into
mainfrom
agent/upgrade-ruff-0.16

Conversation

@adewale

@adewale adewale commented Jul 26, 2026

Copy link
Copy Markdown
Owner

Summary

  • pin Ruff and its lockfile to 0.16.0 and require that exact version
  • apply the newly enabled default checks across application code, scripts, and tests
  • make shebang-bearing scripts executable and refresh the generated HTML cache version
  • document the small set of intentional dynamic-execution and host-runtime exception boundaries

Why

Ruff 0.16 expands its default rule set. Pinning the version makes that change deliberate and reproducible instead of allowing a future install to change CI behavior unexpectedly.

Testing

  • make verify (224 unit tests plus project quality, browser-layout, search, Ruff, social-card, and generated-artifact checks)
  • uv run --locked ruff check src tests scripts

@adewale
adewale marked this pull request as ready for review July 27, 2026 11:17
@adewale
adewale merged commit 288b25b into main Jul 27, 2026
1 check passed
adewale pushed a commit that referenced this pull request Sep 24, 2026
Wrangler upgrades kept arriving as manual fixes once the high-severity
npm audit gate went red (#12, and twice in #13). Dependabot now
proposes weekly updates for:

- npm (Wrangler), after a 3-day cooldown;
- uv, limited to hypothesis, pillow and workers-py. Runtime packages
  stay on `make upgrade-runtime-deps`, since production vendors
  pylock.toml from Pyodide wheels, and Ruff upgrades stay deliberate
  because they add lint rules and must match `required-version`;
- GitHub Actions, grouped into one PR.

The toolchain contract test now asserts that Wrangler is exactly pinned
and consistent across package.json and package-lock.json instead of
hard-coding a version, so Dependabot's bumps can pass CI.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0112H6AesYWoaS2XdDEHUJ4b
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant