Repository navigation
chore(deps): bump ruff from 0.16.10 to 0.17.0 - #766
Closed
dependabot[bot] wants to merge 1 commit into
Closed
dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
Bumps [ruff](https://github.com/astral-sh/ruff) from 0.16.10 to 0.17.0. - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.16.10...0.17.0) --- updated-dependencies: - dependency-name: ruff dependency-version: 0.17.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
jonathan-vella
added a commit
that referenced
this pull request
Oct 19, 2026
…ive migration plans - Incorporate PR #756 (.devcontainer/devcontainer-lock.json node feature 2.1.1). - Incorporate PR #765 devDependencies (eslint 10.12.0, eslint-plugin-n 18.4.1, js-yaml 5.4.3, jsdom 30.1.2, lefthook 2.2.1, prettier 3.9.10, whatwg-url 17.2.0) compatible with the 7-day Microsoft CFS packagefeedproxy.microsoft.io quarantine window. - Incorporate PR #766 (ruff 0.17.0 in requirements.txt) and configure a 7-day Dependabot cooldown for npm and pip ecosystems in .github/dependabot.yml. - Align tools/scripts/collect-governance-baseline.ps1 with discover.py parameter resolution, conditional effect evaluation, and PARTIAL discovery status reporting (#763). - Update README.md for challenger-review-subagent one-shot review recording and archive completed migration planning packets into .archive/post-cpharness-cleanup-20261019.tar.gz. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Owner
|
Closing as incorporated into PR #779 ( |
Contributor
Author
|
OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting If you change your mind, just re-open this PR and I'll resolve any conflicts on it. |
jonathan-vella
added a commit
that referenced
this pull request
Oct 20, 2026
…on (#779) * feat(agents): migrate APEX to the Copilot SDK harness - Archive Local entrypoints and adopt native Agent Host interactions - Add fail-closed worker readiness and SDK telemetry acceptance - Preserve project artifacts, human gates and specialist-owned models Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * docs: Preserve harness migration plan and delivery backlog Recover the original plan and add delegable delivery artifacts. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * fix: Format SDK smoke acceptance document Resolve the Prettier failure reported by CI for issue #769. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * fix: Align CI Python and repair archived audit link Provide the supported interpreter before Node tool contracts. Add regression coverage for #776 and repair the historical source link for #777. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * fix: Align historical audit table after link repair Apply formatter-owned table alignment without changing audit content. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * fix: Verify current SDK definition routing attribution Require linked override-free dispatch evidence for current SDK labels. Retain fail-closed readiness checks and add regression coverage. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * fix(agents): Echo handshake identity in readiness acknowledgments Make the nonce-only ACK contract explicit in delegated main agent bodies. Retain tool-free stops and execution gates; cover the contract with regression tests. Refs #773 Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * feat(agents): Use operator-selected Auto without model pins Remove active model and effort pins and update coupled policy validators. Separate initial routing checks from complete same-worker readiness. Keep unsupported Auto telemetry blocked pending a fresh runtime capture. Refs #773 Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * fix(agents): Verify inherited readiness telemetry Accept observed unpinned session inheritance only when worker and parent models agree. Align handshake parsing and prompts with captured SDK output; keep operator Auto unverified. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * fix(agents): Make worker readiness model-agnostic Verify named-worker identity, linked tool-free turns and the same-worker ACK. Treat models, effort, picker selection and model-source telemetry as diagnostics only. Update runtime guidance, smoke acceptance, provenance metadata and regression tests. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * feat(agents): Automate one-shot rubber-duck reviews Keep technical returns with the Orchestrator and preserve approval and review gates. Record attributed independent results without reviewer readiness turns. Refs #767, #773 Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * test(agents): Align frozen-input review metadata assertion Keep frozen Step 4 coverage tied to captured supporting-input metadata. Refs #767, #773 Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * fix(agents): Record native synchronous multi-turn reviews Accept omitted task mode only with attributed synchronous runtime proof. Validate internal tool turns within one worker interaction and preserve strict JSON output. Align telemetry and clarify reviewer input, output and request identity rules. Refs #767, #773 Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * fix(scripts): Scope execution identities by protocol Keep historical parent execution and child review requests independently counted. Preserve same-protocol duplicate rejection and strict review ceilings. Refs #767, #773 Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * fix(agents): Make reviewer draft schema explicit Require array traces and reviewer-owned in-memory ID and count generation. Test the documented preflight without changing returned findings or recorder guards. Refs #767, #773 Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * feat(agents): Streamline Copilot SDK harness for Autopilot execution - Enable direct WORKER_EXECUTE dispatch (--phase execute) - Make record-review.mjs resilient to fences, traces_to, IDs, and log flush - Fix profile_debug_log.py event ordering and per-worker first-input metrics - Complete PRD, backlog, smoke acceptance, and telemetry verification Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * fix(agents): Preserve truthful migration acceptance and review provenance Resolve reviewer IDs from an explicit session and exact request ID. Reject post-dispatch metadata repair and unverified tool outcomes. Verify direct worker receipts without claiming continuation was tested. Restore strict telemetry checks and reopen unsupported completion claims. Validate source separately from incomplete workspace project artifacts. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * docs: Format migration recovery evidence table Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * docs: Record verified owner-initiated test cleanup Keep source-validation results separate from incomplete E2E acceptance. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * docs: Replan VS Code Copilot-only migration Revise the PRD, roadmap, issue packets and Autopilot execution contract. Preserve historical evidence and stop at owner plan approval. Refs #779, #780, #781, #782, #783, #784, #785, #786, #787, #788 Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * docs: Track additional migration review blockers Include diagnostic approval-channel coverage without implementing production fixes. Refs #779, #781, #782 Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * fix: Retire runtime hooks and reconcile Copilot contracts Honor the owner-deleted hooks, remove stale callers and retain Git/security checks. Fix direct dispatch and manual review guidance; record genuine execution evidence. Full source-only validation passes; protected project and runtime/E2E gaps remain. Refs #779, #775, #781, #789 Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * fix: Preserve manual entry for consequential agent roles Disable implicit invocation for deploy, diagnose and optional review entries. Keep credential isolation and actual approval enforcement explicitly unverified. Refs #779, #781, #782, #784 Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * refactor(agents): Migrate all bodies to native Copilot execution Preserve direct questions, bounded delegated inputs and domain output contracts. Remove UI handoff and worker handshake dependencies; align guidance and tests. Full source-only validation passes; document actual remaining runtime probe gaps. Refs #779, #773, #782, #784, #786 Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * fix(ci): Accept native agents without legacy UI handoff references Retain invalid-target and empty-inventory failures with negative regression tests. Refs #779, #786 Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * docs: Record owner-observed native agent retests Distinguish seven passing question/input probes from untested Azure operations. Preserve prior observations and qualify user-supplied evidence provenance. Refs #779, #773, #782 Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * docs: Record direct question probes for every main agent Preserve user-reported provenance and separate synthetic interaction from approval. Refs #779, #773, #782 Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * fix(agents): Continue selected Orchestrator into requirements discovery Distinguish initialization-only requests and avoid a redundant role-selection stop. Preserve existing project state and unconfirmed template defaults. Refs #779, #772, #782 Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * fix(agents): Restore guided Requirements discovery Preserve complete answer ledgers, conditional menus and automatic native review relay. Keep genuine review evidence and deployment approval gates unchanged. Refs #772, #782, #784, #786 Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * fix(agents): Remove shell-based reviewer finalization Return substantive findings directly and reuse deterministic recorder normalization. Preserve failed-command rejection, review freshness and existing attempt authority. Clarify Requirements review scope without changing historical project findings. Refs #772, #784, #786 Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * fix(instructions)!: Remediate audit and enforce Copilot contracts Align governance, artifact, shell and documentation guidance with actual contracts. Retire Local-only discovery settings and add pinned PowerShell analysis, hook integration and regression coverage. BREAKING CHANGE: remove fix:artifact-h2; use fix:artifacts with explicit --apply. Local-only customization location settings are no longer accepted. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * fix(agents): Preserve negated scenario choices in discovery Handle negated Greenfield and coordinated migration or modernization terms. Add seven regressions and record the zero-credit deterministic validation pass. Preserve project artifacts, approvals and review-attempt history. Refs #772, #782, #786 Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * fix(agents): Preserve native question form wrappers Reject full JSON Schema roots and bound correction without re-asking captured answers. Record actual CLI evidence and preserve the prose-review recording blocker. Keep recorder integrity, review budgets, approvals and existing project artifacts unchanged. Refs #772, #773, #784, #786 Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * refactor(agents): Share one structured review backend Use the existing read-only typed leaf for automatic and optional manual review. Record actual native output with definition and procedure hashes; preserve historical readers. Align callers, skills, instructions, gate diagnostics and invocation accounting. Fresh CLI recording and strict validation pass; fresh VS Code context acceptance remains blocked. Refs #772, #773, #784, #786 Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * fix(scripts): Report structured reviewer execution failures Keep execution-failure JSON out of findings and surface its exact stage and error. Preserve historical extraction and leave failed receipts unpublished. Refs #784 Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * fix: Resolve workflow contract drift and validator blind spots across repo - Align decision-keys.md complexity enum and register workflow toggles - Sync top-level iac_tool/region in apex-recall decide/transition/show - Validate multi-pass and simple-tier deep reviews in complete-step - Document subnet-plan and lesson-log enum constraints in instructions - Fix false negatives in decision-keys, lens-references, and context-budget - Fix in-progress step handling in validate-challenger-presence - Wire standalone contract validators and tests into validate:_node suites - Rebuild architecture-explorer-graph.json and eliminate skill lint warnings Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * fix: Apply cp-harness-01 lessons learned to subagents, skills, and trace validator - Forbid speculative view calls on unverified paths in reviewer (LL-001) - Document Storage restorePolicyDays < deleteRetentionPolicyDays rule (LL-002) - Accept not-applicable/auto-remediated rows in governance trace check (LL-003) - Emphasize kebab-case pricing_get args in cost-estimate-subagent (LL-004) Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * chore: apply dependabot updates, align governance collector, and archive migration plans - Incorporate PR #756 (.devcontainer/devcontainer-lock.json node feature 2.1.1). - Incorporate PR #765 devDependencies (eslint 10.12.0, eslint-plugin-n 18.4.1, js-yaml 5.4.3, jsdom 30.1.2, lefthook 2.2.1, prettier 3.9.10, whatwg-url 17.2.0) compatible with the 7-day Microsoft CFS packagefeedproxy.microsoft.io quarantine window. - Incorporate PR #766 (ruff 0.17.0 in requirements.txt) and configure a 7-day Dependabot cooldown for npm and pip ecosystems in .github/dependabot.yml. - Align tools/scripts/collect-governance-baseline.ps1 with discover.py parameter resolution, conditional effect evaluation, and PARTIAL discovery status reporting (#763). - Update README.md for challenger-review-subagent one-shot review recording and archive completed migration planning packets into .archive/post-cpharness-cleanup-20261019.tar.gz. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * fix(scripts): Support downstream apex-accelerator repositories in validation suite - Fall back to governance-policy-baseline.fixture.json in validate-governance-baseline.mjs when the private compressed baseline has not yet been collected in a template clone. - Ignore upstream-only .github/workflows/* node paths in validate-explorer-graph.mjs when running in a downstream consumer repository without .github/workflows/ci.yml. - Guard upstream-only git history, workflow, and mermaid diagram assertions in audit-retirement-candidates.test.mjs, compare-devcontainer-verdicts.test.mjs, test_instruction_audit.mjs, and test_lint_commands.mjs so npm run validate:all passes cleanly in synced apex-accelerator repositories. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> --------- Co-authored-by: Jonathan Vella <jonathan-vella@users.noreply.github.com> Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps ruff from 0.16.10 to 0.17.0.
Release notes
Sourced from ruff's releases.
... (truncated)
Changelog
Sourced from ruff's changelog.
... (truncated)
Commits
5b27c1cBump version to 0.17.0 (#29259)8f362bfIntegrate vendored Unicode names into Ruff88a50d6Revert upstream Unicode loose matching276832aRevert upstream Unicode alias normalization26911caVendor unicode_names2 from upstream27e3797[ruff] Stabilizeos-path-commonprefix(RUF071) (#28764)bbb52c1[flake8-tidy-imports] Stabilizelazy-import-immediately-resolved(`TID255...5aa9cbd[flake8-tidy-imports] Stabilizelazy-import-mismatch(TID254) (#28760)dba1bc8[flake8-import-conventions] Adddatetime as dtas a conventional alias (`...ef23c9cUpdate default and latest Python versions for 3.15 (#28792)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)