[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
ruff (source, changelog)	==0.17.2 → ==0.17.4

---

Release Notes

astral-sh/ruff (ruff)

v0.17.4

Compare Source

Released on 2026-11-05.

Preview features

• [flake8-logging-format] Avoid behavior changes and syntax errors in fixes (G004) (#​27419)
• [security] Implement tarfile-ignore-zeros-true (#​28680)

Bug fixes

• Accept a bare raise before a semicolon (#​29761)
• Allow match identifiers after a semicolon (#​29760)
• Fix panic on BOM-prefixed files in diagnostic renderer (#​30017)
• [flake8-simplify] Report collapsible elif clauses after a multi-statement if branch (SIM102) (#​29814)

Rule changes

• Show more nonprinting characters in diagnostic fix diffs (#​30062)

Performance

• Coalesce source slices when formatting attributes (#​29841)
• Collect return statements with a statement-only visitor (#​29911)
• [pyflakes] Defer value comparisons for repeated dictionary keys (F601, F602) (#​29739)
• Format node fields directly when comment handling is unnecessary (#​29853)
• Reduce formatter source-slice overhead (#​29855)
• Reuse a callee's qualified name across lint rules (#​29916)
• Skip invalid string character checks when the source contains none (#​29883)
• Use a Bloom filter for formatter comment lookups (#​29852)
• Use a concrete buffer for ordinary writes (#​29819)

CLI

• Give NO_COLOR precedence in Ruff and ty diagnostics (#​29898)
• Honor CLICOLOR=0 in Ruff and ty diagnostics (#​29910)

Documentation

• Correct the documented version and src defaults for ruff-action (#​29880)
• [flake8-bugbear] Make B014 example error out-of-the-box (#​29941)
• [flake8-no-pep420] Document preview behavior (INP001) (#​29764)
• [isort] Expand I001 documentation (#​29843)

Other changes

• [syntax-errors] Extend __debug__ write check to attribute targets (#​27908)

Contributors

• @​fixfon
• @​hirehamir
• @​MichaReiser
• @​saberoueslati
• @​mangod12
• @​Sacrimento
• @​AlexWaygood
• @​mulaihonglixihonglixi-web
• @​adarrevah
• @​charliermarsh
• @​shan3520
• @​halcyon-past

v0.17.3

Compare Source

Released on 2026-10-26.

Preview features

• [suspicious] Add shared-clock-mock (#​29074)

Bug fixes

• [pyupgrade] Avoid incorrect conversions to f-strings (UP032) (#​25485)

Performance

• Buffer stdout in ruff format (#​29631)
• Specialize ASCII identifier lexing (#​29503)
• Speed up identifier and keyword lexing (#​29463)

Documentation

• [flake8-bandit] Describe what the rule actually checks for httpx (S113) (#​27936)

Contributors

• @​itsvedantkumar
• @​charliermarsh
• @​anishgirianish

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.