Skip to content

Bump pylint from 4.0.6 to 4.0.7 - #221

Merged
github-actions[bot] merged 1 commit into
mainfrom
dependabot/pip/pylint-4.0.7
Aug 31, 2026
Merged

Bump pylint from 4.0.6 to 4.0.7#221
github-actions[bot] merged 1 commit into
mainfrom
dependabot/pip/pylint-4.0.7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 31, 2026

Copy link
Copy Markdown
Contributor

Bumps pylint from 4.0.6 to 4.0.7.

Release notes

Sourced from pylint's releases.

v4.0.7

What's new in Pylint 4.0.7?

Release date: 2026-08-09

False Positives Fixed

  • Fix a false positive for invalid-name when a module-level variable is assigned an instance of a TypedDict subclass. Such a name is a value, not a type definition, so it is now checked against the constant or variable regex instead of class-rgx.

    Closes #11231

Other Bug Fixes

  • Fix a crash in the bad-open-mode check when the mode argument of open is the NotImplemented constant (Python >= 3.14).

    Closes #11099

  • Fix a crash in the not-context-manager and not-async-context-manager checks when the context manager infers to a value without a name, such as the slice returned by with slice(...) / async with slice(...).

    Closes #11102

  • Fix a false positive for nested-min-max (W3301) when the inner min/max call carries a keyword argument such as key=. Flattening the call dropped the keyword and changed the result, so nested calls whose inner call has keyword arguments are no longer flagged.

    Closes #11130

  • Fix a false suggestion from nested-min-max (W3301): when rewriting a nested min/max into a splat call, arguments positioned after the splatted call were silently dropped, so the suggested code changed the result.

    Closes #11134

  • Fix a false positive for too-many-locals (R0914): PEP 695 type parameters, i.e. the T1 and T2 in a generic def f[T1, T2] signature, were counted as local variables. They are type-system constructs, not runtime locals, and are now excluded from the local-variable count.

    Closes #11136

  • Fix literal-comparison (R0123) emitting a corrupted suggestion for identifiers that contain is (e.g. axis is 5 was rendered ax== == 5). The suggestion is now rebuilt from the operands and operator.

    Closes #11146

... (truncated)

Commits
  • c6768d3 Bump pylint to 4.0.7, update changelog (#11246)
  • e96ce2b Stop invalid-name from treating TypedDict instances as classes
  • 893294e [Backport maintenance/4.0.x] Fix crash in comparison-with-callable on a proxi...
  • 8cd74d4 Fix a crash on calls unpacking dicts with non-string keys
  • bc618ad Fix too-many-lines being reported at another module's pragma line
  • 3e1ee47 [Backport maintenance/4.0.x] Fix bad-string-format-type false positives for...
  • 7ca8116 [Backport maintenance/4.0.x] Fix useless-parent-delegation false positive o...
  • 14275a1 [Backport maintenance/4.0.x] Fix literal-comparison suggestion corrupting i...
  • a87eaa6 [Backport maintenance/4.0.x] Fix nested-min-max dropping arguments after th...
  • bdd017f [Backport maintenance/4.0.x] Fix too-many-locals counting PEP 695 type para...
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [pylint](https://github.com/pylint-dev/pylint) from 4.0.6 to 4.0.7.
- [Release notes](https://github.com/pylint-dev/pylint/releases)
- [Commits](pylint-dev/pylint@v4.0.6...v4.0.7)

---
updated-dependencies:
- dependency-name: pylint
  dependency-version: 4.0.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from a team as a code owner August 31, 2026 17:43
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Aug 31, 2026

@senzingdevops senzingdevops left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Automated: approving this pull request because it includes a patch update

@github-actions
github-actions Bot enabled auto-merge (squash) August 31, 2026 17:44
@github-actions

Copy link
Copy Markdown

🤖 Claude Code Review

Confirmed this is a routine Dependabot version bump, consistent with prior merged PRs (#217, #218) that also skip CHANGELOG.md. Review complete.

Review Summary

This is a Dependabot-generated dependency bump: pylint 4.0.64.0.7 (dev-only lint dependency, gated to python_version > '3.11') in pyproject.toml:61. Single-line diff, no application code touched.

Code Quality — ✅

  • Standard style/formatting for TOML unaffected; version string change only.
  • No commented-out code, no naming/DRY concerns (N/A — no logic changed).
  • No defects identified: this is a patch-version bump of a lint tool, not runtime code, so no crash/race/memory-leak surface. Cannot verify PyPI availability/compatibility of pylint==4.0.7 without network access, but this matches the pattern of prior auto-merged Dependabot bumps in this repo (Bump coverage from 7.15.2 to 7.15.3 #217, Bump coverage from 7.15.3 to 7.15.4 #218, and the immediately preceding commit 5f0331a which is this same bump already on main).
  • .claude/CLAUDE.md — unchanged by this diff; no issue.

Testing — ✅ (N/A)

No functional code changed; nothing to unit/integration test. Existing lint/CI pipeline (pylint python/) will validate compatibility on merge.

Documentation — ✅

  • CHANGELOG.md not updated, but consistent with established precedent: prior Dependabot bumps (8f886fb, b4bc6d7, 1c34d8b, 814acde) also did not touch CHANGELOG.md. Not flagging as a defect.
  • No README/API doc changes needed for a dev-tool version bump.

Security — ✅

  • No hardcoded credentials, no license files, no sensitive data introduced.

No blocking issues. This diff is safe to merge, consistent with the repo's established Dependabot bump pattern.

Automated code review analyzing defects and coding standards

@github-actions
github-actions Bot merged commit 441b5ce into main Aug 31, 2026
58 checks passed
@github-actions
github-actions Bot deleted the dependabot/pip/pylint-4.0.7 branch August 31, 2026 17:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants