[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence	Type	Update
black (changelog)	>=26.5.1,<26.6.0 → >=26.10.1,<26.11.0			project.optional-dependencies	minor
pylint (changelog)	>=4.0.7,<4.1.0 → >=4.1.3,<4.2.0			project.optional-dependencies	minor
python	3.14 → 3.15			uses-with	minor

---

Release Notes

psf/black (black)

v26.10.1

Compare Source

Highlights

This release fixes a security issue in Black's bundled GitHub Action. Repositories that
use the action are encouraged to update to the latest version of Black immediately. This
update is received automatically when using psf/black@stable, and is independent of
the version of Black installed by the action.

When the GitHub Action reads version specifiers from tool.black.required-version, it
now only accepts released versions of Black, as it already did for black requirements
in dependency lists. Other values, such as URL references, are now rejected. This issue
has been registered as GHSA-cg8m-r9f2-5wm2; a CVE identifier is pending.

Stable style

• Fix a long Jupyter notebook assignment magic (for example x = !ls -la) being wrapped
  in parentheses, which IPython can no longer run; such cells are now left unchanged
  (#​5481)
• Keep repeated lines outside the selected --line-ranges unchanged (#​5436)
• Fix --line-ranges formatting lines that follow a statement when formatting joins or
  re-indents that statement (#​5484)
• Fix --line-ranges crashing with an internal error when an unselected statement has a
  # fmt: skip comment on the last line before a closing bracket (#​5477)
• Prevent moving an encoding declaration (for example # -*- coding: latin-1 -*-) onto
  the first two lines of a file (#​5487)
• Fix adding an extra trailing blank line inside a multi-line module docstring when its
  last line is near the line length limit (#​5494)

Preview style

• Do not split short expressions on delimiters (such as binary operators, comparisons,
  or comprehensions) inside brackets when preceded by a standalone comment (#​5455)
• Fix the unstable string_processing feature removing backslash-newline sequences from
  raw strings, which changed their value (#​5482)
• Avoid adding unnecessary parentheses around unbreakable right-hand side expressions in
  assignments (such as annotated assignments or subscript targets) (#​5473)
• Parenthesize expressions with parameter comments when they exceed the line length
  under --preview (#​5442)
• Fix wrap_long_dict_values_in_parens dropping the parentheses around a right-hand
  side that contains a dictionary, leaving a line over the length limit (#​5492)
• Fix the unstable string_processing feature adding a space after * or ** in a PEP
  695 type parameter (* Ts = ...) when it splits a string in the parameter's default
  (#​5504)
• Avoid unnecessary line splits of trailers (such as indexing/subscripts) when an
  earlier bracket split exceeds the line length only due to a trailing comment (#​5498)

Configuration

• Add --cache-dir to configure the cache directory from the command line (#​5433)
• Don't cache a file as formatted after formatting or checking it with --line-ranges,
  which made a later full black --check pass and black skip the unformatted lines
  (#​5476)
• Respect a .gitignore that starts with a UTF-8 byte order mark. The mark became part
  of the first pattern, so that pattern never matched and Black formatted files that git
  ignores (#​5497)

Performance

• Avoid quadratic runtime when splitting very long lines with many trailing bracket
  pairs (such as consecutive subscripts) (#​5475)

Integrations

• Fix the GitHub Action crashing on dependency-group includes when use_pyproject is
  enabled (#​5479)
• When the GitHub Action reads version specifiers from tool.black.required-version, it
  now only accepts released versions of Black, as it already did for black
  requirements in dependency lists. Other values, such as URL references, are now
  rejected. (#​5510)

v26.10.0

Compare Source

Stable style

• --line-ranges no longer inserts an empty line after a docstring when the range
  covers only the docstring itself (#​5312)
• Fix # fmt: skip on a bracketed ternary turning the surrounding tuple into a call
  (#​5464)
• Fix crash when # fmt: skip is placed on a one-line function or class with PEP 695
  type parameters (#​5429)
• Fix an inline comment after the closing bracket of optional parentheses being moved
  inside the parentheses when the parenthesized expression contains own-line comments
  (#​5395)
• Fix unparseable output when # fmt: skip is placed on a bracket of an if, while,
  for, or with header (#​5401, #​5405)
• Fix crash when formatting parenthesized expressions with multiple inline comments and
  # fmt: skip (#​5414)
• Fix parsing Jupyter notebook assignment magics when non-ASCII characters appear
  earlier on the line (#​5381)
• Preserve blank lines that come immediately before a # fmt: on comment (#​5300)
• Keep the parentheses around the target of an annotated assignment (e.g.
  (x): int = 5), which prevent CPython from including the name in __annotations__
  (#​5321)
• Stop treating a t-string in docstring position as a docstring (e.g. t" spam " as
  the first statement of a module, class or function) (#​5287)
• Fix unparseable output for a t-string whose replacement field contains a quote (e.g.
  t'\'{a["b"]}\'') (#​5265)
• Fix unparseable output for a triple-quoted string whose body ends in an
  already-escaped double quote (e.g. '''\'''\"''') (#​5262)
• Fix --skip-magic-trailing-comma dropping the trailing comma from a split
  single-element tuple used as a lambda parameter default (#​5246)
• Fix unstable formatting when an inline comment sits on optional parentheses (e.g. a
  parenthesized assert message) (#​5241)
• Fix --skip-magic-trailing-comma dropping the trailing comma of a one-element
  subscript (a[x,]) when the line is long enough to be split and contains a power
  operator (#​5272)
• Fix crash when a standalone comment sits between tokens of a comprehension or lambda
  (#​5144)
• Fix inline comments on a bracket inside a comprehension being dropped (#​5330)
• Respect the magic trailing comma in a PEP 695 type parameter list containing a
  *TypeVarTuple or **ParamSpec (#​5244)
• Fix crash when a comment-only # fmt: off/# fmt: on block is followed by a with
  statement after another standalone comment (#​5189)
• Fix a crash when splitting case case if ... match patterns at very small line
  lengths (#​5147)
• Fix multiline docstring indentation when leading tabs are used inside indented
  docstrings (#​5148)
• Respect # fmt: skip on a line that opens a bracket (e.g.
  from x import ( # fmt: skip) when a standalone comment is among the bracket's
  contents (#​5161)
• Fix an AST safety error when separate # type: ignore comments in a parenthesized
  attribute chain were merged onto one physical line (#​5297)
• Preserve comments and blank lines outside requested ranges when formatting with
  --line-ranges (#​5175)
• Fix crash when # fmt: skip is used on one-line async def, async with, and
  async for statements containing a semicolon (#​5311)
• Stop converting form feeds or other similar characters in docstrings into newlines
  (#​5461)
• Fix --skip-source-first-line turning the skipped line's CRLF ending into \r\r\n
  when reformatting a file with CRLF line endings (#​5438)

Preview style

New preview features

• Add missing blank lines after classes whose last method has an ellipsis body (#​5439)
• Split only the brackets holding a magic trailing comma when more trailers follow them
  (e.g. stop splitting inside the [2] of [1,][2](3)) (#​5448)
• Keep dictionary keys containing operators together on one line when the value can be
  wrapped onto a new line instead (#​5435)
• Remove redundant parentheses around individual variables in unpacking targets (e.g.
  for (x), (y) in points: becomes for x, y in points:) (#​5416)
• Normalize uppercase T prefixes on t-strings to lowercase (#​5425)
• Remove redundant parentheses around generator expressions (#​5304, #​5369)
• Preserve two blank lines before a top-level class starting inside a # fmt: off block
  after an import (#​5238)
• Fix unnecessary parentheses around short right-hand expressions in indexed assignments
  (e.g. x[key] = expr) (#​5095)
• Parenthesize tuple expressions in yield statements for consistency with function
  calls and returns (#​5170)
• Stop splitting between a variable and its operator (not in, ==, is, ...) when
  the right-hand side is a bracketed expression, and instead split inside the brackets
  (#​5135)
• In .pyi stub files, enforce a blank line after a function or method that has a
  docstring-only body when another comment or statement follows it (#​5158)

Updates to existing preview features

• Fix crash in stub files when # fmt: skip is placed on a function in a group of
  same-name decorated functions (e.g. @overloads or a property setter) (#​5430)
• Keep the parentheses around a lambda used as the iterable of a comprehension (e.g.
  [x for x in (lambda: 0) if x]) (#​5176, #​5200)

Updates to existing unstable features

• Do not treat multi-line expressions with merged strings and trailing # type: ignore
  comments as single-line unsplittable expressions (#​5466)
• Fix duplicated inline comment when stripping the parentheses around a string or
  merging a backslash-continued string on the same line (#​5449)
• Split long stringified return annotations even when the function has parameters
  (#​5427)
• Don't hug brackets when doing so would join two # type: ignore comments onto one
  line (#​5271)
• Fix a crash when # type: ignore is lost during formatting of a long parenthesized
  string (#​5329)
• Fix only the first part of an implicitly concatenated unmergeable string (e.g.
  r"..." r"...") being wrapped in parentheses (#​5434)

Configuration

• Add support for NO_COLOR environment variable to disable ANSI output (#​5129)
• Remove spurious target version warning when runtime version is included in a
  --target-version flag (#​5167)
• Fix --force-exclude not excluding files whose path contains .. (e.g.
  black ../generated/file.py run from a subdirectory) (#​5471)
• Fall back to the default configuration, with a warning, when the given sources share
  no common project root (e.g. they are on different drives on Windows) instead of
  crashing (#​5386)
• Fix loading a stale cached pyproject.toml path when --code is used from different
  working directories in the same process (#​5152)
• Add validation for --line-ranges values (#​5107)
• Ignore empty cache files instead of raising an EOFError (#​5192)
• Reject non-string include and force-exclude values in pyproject.toml (#​5193)
• Validate BLACK_NUM_WORKERS values and report invalid values as usage errors instead
  of crashing (#​5211)
• Ignore permission errors when reading cache (#​5258)

Packaging

• Reduce the size of Linux standalone binaries by stripping debug symbols during the
  PyInstaller release build (#​5223)
• Black is now released using GitHub
  Immutable Releases
  (#​5296)

Performance

• Fix superlinear runtime growth with the number of input files (#​5450)
• Improve performance on strings containing many consecutive backslashes (#​5163)
• Improve performance on files with many # fmt: skip/# fmt: off/# fmt: on comments
  (#​5169, #​5190, #​5232)
• Improve performance on long calls and collections (#​5177)
• Improve performance on multiline strings inside large collections (e.g. a dict literal
  with triple-quoted strings as values) (#​5188)
• Improve performance on files with many soft keywords (e.g. match/case blocks)
  (#​5186)
• Improve performance on long semicolon-separated statements (in the stable style) and
  large dict literals (in --preview) (#​5184)
• Improve performance of --line-ranges on files with many sibling blocks (a long
  if/elif chain, a match with many cases, or many top-level definitions) (#​5213)
• Improve performance on deeply nested bracketed expressions (#​5171, #​5242)
• Improve performance on lists and subscripts holding one long expression without
  operators (e.g. a long run of implicitly concatenated strings inside []) (#​5239)
• Improve performance on deeply chained operations (e.g. a long a ** b ** c ** ...
  chain) (#​5235)
• Improve performance on long if/elif chains and other compound statements with many
  clauses (#​5322)
• Improve performance of string_processing:
  • when merging implicitly concatenated f-strings containing long string literals
    (#​5165)
  • when merging long implicitly concatenated strings (#​5173, #​5194)
  • when rewriting large nodes (e.g. "%s ..." % (a, b, c, ...)) (#​5178, #​5199, #​5220)
  • when splitting long string literals (#​5183)

Output

• Report parser failures using editor-friendly path:line:column locations (#​5237)
• Fix crash when writing formatted code or diffs to a sys.stdout that has no buffer
  attribute (e.g. in Jupyter notebooks) (#​5411)
• Report parse failures on Black's own output as internal errors (#​5383)

Blackd

• Return HTTP 400 instead of 500 when the X-Python-Variant header is empty or has an
  empty entry (e.g. a trailing comma) (#​5428)
• Allow optional whitespace around comma-separated versions and pyi in the
  X-Python-Variant header (#​5441)

Integrations

• Remove unused migrate-black script (#​5319)
• Support PEP 440 version specifiers in tool.black.required-version for the GitHub
  Action (#​5399)
• Add outputs (is_formatted, change_count, same_count, failure_count) to GitHub
  Action runs (#​5408)

Documentation

• Document vim-python-pep8-indent, which provides an indentexpr for Black-style
  insert-mode indentation (#​5288)

pylint-dev/pylint (pylint)

v4.1.3

Compare Source

What's new in Pylint 4.1.3?

Release date: 2026-10-11

False Positives Fixed

• Fixed a false positive for attribute-defined-outside-init when an
  attribute is assigned inside the setter of an old-style, non-decorator
  property(fget, fset) call. The decorator form (@property /
  @x.setter) was already exempted by the fix for #​409; the classic
  call form was not.

  Closes #​3325

• Fix a false positive for used-before-assignment when a name bound by an earlier
  target of the same assignment is used by a later target, as in a = b[a] = 0.

  Closes #​5955

• Fix a no-member false positive in a comprehension inside a branch that
  cannot run, such as if sys.platform == "win32": on Linux. Like the rest of
  the branch, the comprehension is no longer checked for missing members.

  Closes #​7240

• Fix a false positive for used-before-assignment when a name bound by a tuple
  or list target of a with item is used by a later item of the same with statement.

  Closes #​7545

• Fix false positives such as not-callable, not-an-iterable,
  unpacking-non-sequence and no-member on the result of a function whose
  body is only ..., like @overload and .pyi stubs. Such calls were
  inferred as returning None. This affected sqlalchemy.func,
  pydantic.Field, and the torch functions wrapped by _add_docstr,
  such as torch.linalg.qr.

  Closes #​8138
  Closes #​9218
  Closes #​9354
  Closes #​10087

• Fix a false positive for protected-access when a subclass of a subscripted
  generic base, such as class Child(Parent[T]), accesses a protected member
  through that base, such as Parent._foo(self).

  Closes #​8600

• Avoid emitting unreachable for a yield immediately after raise or
  sys.exit() that marks a function as a generator, matching the existing
  handling of return.

  Closes #​8909

• Fix a false positive for super-init-not-called in .pyi stub files, where
  every __init__ body is ... and cannot call the parent's __init__.

  Closes #​9096

• Fix a false positive for possibly-used-before-assignment when a lambda
  uses its parameters, including from a nested lambda, and that name is assigned
  later in the module.

  Closes #​9126

• Fix a false positive for useless-parent-delegation when a keyword-only
  parameter is passed to the parent under the same keyword but with a different value.

  Closes #​9226

• Fix a false positive for unused-argument in .pyi stub files, where
  function bodies are ... and cannot use their arguments.

  Closes #​9417

• Fix a false positive for used-before-assignment when a name assigned with an
  assignment expression in the condition of a comprehension is used in its element,
  for example [y for x in data if (y := f(x))].

  Closes #​9460

• Fixed false positive arguments-differ and signature-differs for
  typing.overload stubs. Overload stubs in a subclass are no longer compared
  to the overridden method, and an overridden method with overloads is compared
  through its implementation instead of its first stub.

  Closes #​10186
  Closes #​5264

• Stop emitting redefined-variable-type when the bare _ variable is
  reused to discard values of different types.

  Closes #​10374

• Allow the __main__ module name in the camelCase, PascalCase and
  UPPER_CASE naming styles without reporting invalid-name.

  Closes #​10442

• Fixed a false positive for unexpected-keyword-arg when a decorator that
  returns its argument unchanged is stacked above a decorator accepting **kwargs.

  Closes #​10831

• Fix invalid-name false positives for module-level all-caps aliases that
  preserve the name of an external callable.

  Closes #​11012

• redefined-builtin no longer warns for method parameters that retain a
  built-in name from an overridden method.

  Closes #​11438

• Fixed a false positive for useless-suppression of line-too-long when a # inside a string literal comes before the # pylint: disable=line-too-long comment.

  Closes #​11440

• Fix a false positive for unnecessary-ellipsis when an ellipsis is the
  sole body statement of a Protocol method defined inside a conditional block
  such as if TYPE_CHECKING:.

  Closes #​11459

• Fix a false positive for unnecessary-negation when negating a comparison
  between instances of a set or frozenset subclass.

  Refs #​11513

Other Bug Fixes

• Fix pyreverse hanging or crashing with a RecursionError when
  --all-associated (-S) follows an attribute whose inferred class is rebuilt by
  astroid on every inference, such as a numpy array.

  Closes #​3602

• Fix a crash in pyreverse when a diagram includes a class created by
  namedtuple, or an argparse.Namespace.

  Closes #​10767

• The "difference" column of the "Messages by category" and "Duplication" reports
  (--reports=y) now shows the change since the previous run instead of repeating
  the previous count.

  Closes #​11520

• Fixed nested-min-max suggesting a non-equivalent rewrite when an inner
  min/max call had multiple arguments.

  Refs #​11593

• Using several output formats that all write to stdout (for example --output-format=colorized,no-header)
  now raises an error instead of printing every message more than once.

  Closes #​11597

• Fixed an IndexError crash in the typecheck checker when an Enum class defines an __init__ method without arguments.

  Closes #​11608

• Fix a crash in the duplicate-code checker when min-similarity-lines is set to 0.
  The checker is now disabled in that case, as documented.

  Closes #​11625

v4.1.2

Compare Source

What's new in Pylint 4.1.2?

Release date: 2026-10-03

False Positives Fixed

• Fixed a false positive unbalanced-tuple-unpacking when unpacking a tuple
  concatenation whose elements have several possible values.

  Fixed by upgrading astroid to 4.3.3.

  Closes #​2621

Other Bug Fixes

• Fixed a crash when calling __bases__ on a class.

  Fixed by upgrading astroid to 4.3.3.

  Closes #​11491

• Fix a crash (astroid-error) when the class of a called attribute cannot
  be fully inferred, for example when the attribute is used as a with
  statement target or inside a comprehension.

  Closes #​11492

• Fix a crash when a name bound by a type statement (a TypeVar) is used in a with statement.

  Closes #​11510

• Fixed a crash (TypeError) in the variables checker when checking a class
  whose metaclass name binding has no line number, for example a class defined
  with metaclass=__annotations__.

  Closes #​11511

• Fix a crash in the using-final-decorator-in-unsupported-version check
  when import final is used.

  Closes #​11521

• Fix a crash when a plugin passes confidence=None to add_message, as
  pylint-pytest does, for a message that is disabled. confidence=None is
  accepted again and means UNDEFINED, like in pylint 4.0. Passing it
  explicitly to add_message, add_ignored_message or Message now emits a
  DeprecationWarning: it will raise an error in pylint 5.0.

  Closes #​11530

v4.1.1

Compare Source

What's new in Pylint 4.1.1?

Release date: 2026-09-29

Other Changes

• Pylint 4.1.0 could not be uploaded to PyPI, because it required an unreleased
  version of dill on Python 3.15, and PyPI refuses such a dependency. 4.1.1 is
  the first 4.1 release available on PyPI, see the 4.1.0 changes below.

  Refs #​11495

actions/python-versions (python)

v3.15.0: 3.15.0

Compare Source

Python 3.15.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[CLAassistant]

Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
_{You have signed the CLA already but the status is still pending? Let us recheck it.}