Changes

This is just a bugfix release for the release process

• fix: persist credentials for git push in update-major-minor-tags workflow @eifinger-bot (#312)

🧰 Maintenance

• ci: add zizmor security linting @eifinger-bot (#313)

Changes

This release brings some bug fixes like

• support for hashes in requirement.txt files
• ignoring environment markers in version specifiers like "ruff~=0.13 ; python_version >= '3.11'" to prevent them from breaking the version resolver. If you have a usecase for needing the environment markers to derive the correct ruff version this action should use please add your voice to #256

In case no pyproject.toml is in the configured src this action now also walks up the directory tree to search for it, just like the "normal" ruff does. This is limited to the current workspace to prevent this action from trying to access private data outside the GitHub Actions runner.

EDIT: Oh I forgot to mention that the error matcher now properly detects invalid formatting and displays the correct line number etc in the GitHub UI.

🐛 Bug fixes

• search in parent dir @eifinger (#306)
• ignore environment markers in dep specs @eifinger (#295)
• Support hashes in requirement files for version-file @mulmat (#287)
• Don't warn on no version found in pyproject.toml @eifinger (#209)

🚀 Enhancements

• Update the ruff-format matcher to properly extract all info @eifinger (#293)

🧰 Maintenance

• chore: update known checksums for 0.14.13/0.14.14 @github-actions[bot] (#297)
• Fix CI: Pin ruff version to stable 0.13.x in test fixture @eifinger (#305)
• chore: update known checksums for 0.14.11 @github-actions[bot] (#292)
• chore: update known checksums for 0.14.10 @github-actions[bot] (#289)
• chore: update known checksums for 0.14.9 @github-actions[bot] (#284)
• chore: update known checksums for 0.14.8 @github-actions[bot] (#280)
• chore: use npm ci --ignore-scripts in CI and scripts @woodruffw (#276)
• chore: update known checksums for 0.14.7 @github-actions[bot] (#275)
• chore: update known checksums for 0.14.6 @github-actions[bot] (#271)
• chore: update known checksums for 0.14.5 @github-actions[bot] (#266)
• chore: update known checksums for 0.14.4 @github-actions[bot] (#265)
• chore: update known checksums for 0.14.3 @github-actions[bot] (#263)
• chore: update known checksums for 0.14.2 @github-actions[bot] (#258)
• chore: update known checksums for 0.14.1 @github-actions[bot] (#252)
• chore: update known checksums for 0.13.3/0.14.0 @github-actions[bot] (#239)
• chore: update known checksums for 0.13.2 @github-actions[bot] (#232)
• Don't assume all test passed if cancelled @eifinger (#236)
• chore: update known checksums for 0.13.1 @github-actions[bot] (#230)
• chore: update known checksums for 0.13.0 @github-actions[bot] (#223)
• chore: update known checksums for 0.12.12 @github-actions[bot] (#218)
• chore: update known checksums for 0.12.11 @github-actions[bot] (#214)
• chore: update known checksums for 0.12.10 @github-actions[bot] (#210)
• chore(ci): address all lint findings @woodruffw (#206)
• chore: update known checksums for 0.12.9 @github-actions[bot] (#204)

⬆️ Dependency updates

• Bump dependencies and actions @eifinger (#311)
• Bump actions/checkout from 5.0.0 to 6.0.1 @dependabot[bot] (#278)
• Bump github/codeql-action from 3.30.5 to 4.31.10 @dependabot[bot] (#294)
• Bump actions/setup-node from 6.0.0 to 6.2.0 @dependabot[bot] (#296)
• Bump eifinger/actionlint-action from 1.9.3 to 1.10.0 @dependabot[bot] (#291)
• Bump peter-evans/create-pull-request from 7.0.9 to 8.0.0 @dependabot[bot] (#283)
• Bump peter-evans/create-pull-request from 7.0.8 to 7.0.9 @dependabot[bot] (#273)
• Bump eifinger/actionlint-action from 1.9.2 to 1.9.3 @dependabot[bot] (#272)
• Bump eifinger/actionlint-action from 1.9.1 to 1.9.2 @dependabot[bot] (#247)
• Bump actions/setup-node from 4.4.0 to 6.0.0 @dependabot[bot] (#249)
• Bump github/codeql-action from 3.29.11 to 3.30.5 @dependabot[bot] (#234)
• Bump github/codeql-action from 3.29.9 to 3.29.11 @dependabot[bot] (#211)

Changes

Recent GitHub outages showed that we can improve the error messages to tell the user what happened and what can be done about it.

🐛 Bug fixes

• Improve error messages on GitHub API errors @eifinger (#199)

🧰 Maintenance

• chore: update known checksums for 0.12.8 @github-actions[bot] (#190)
• chore: update known checksums for 0.12.5 @github-actions[bot] (#189)
• chore: update known checksums for 0.12.4 @github-actions[bot] (#185)

⬆️ Dependency updates

• bump biome to 2.1.4 @eifinger (#201)
• Bump actions/checkout from 4 to 5 @dependabot[bot] (#197)
• Bump dependencies @eifinger (#200)

Changes

A big thank you to @G-Rath for his contribution 🥳

🚀 Enhancements

• feat: support reading Ruff version from tools.poetry.dependencies @G-Rath (#177)

🧰 Maintenance

• Bump dependencies @eifinger (#181)
• chore: update known checksums for 0.12.3 @github-actions[bot] (#180)
• chore: update known checksums for 0.12.2 @github-actions[bot] (#175)
• chore: update known checksums for 0.12.1 @github-actions[bot] (#169)
• chore: update known checksums for 0.12.0 @github-actions[bot] (#167)
• chore: update known checksums for 0.11.13 @github-actions[bot] (#158)
• Fix test-pep440-version-specifier @eifinger (#165)
• Simplify step check all-tests-passed.needs @eifinger (#155)

⬆️ Dependency updates

• Bump dependencies @eifinger (#181)

Changes

With this release you can now also define your ruff version using pep440 specifier:

- name: Install a pep440-specifier-satisfying version of ruff
  uses: astral-sh/ruff-action@v3
  with:
    version: ">=0.11.10,<0.12.0"

🚀 Enhancements

• Add support for pep440 version specifiers @eifinger (#150)

🧰 Maintenance

• Check that all jobs are in all-tests-passed needs @eifinger (#151)
• chore: update known checksums for 0.11.11 @github-actions[bot] (#146)
• chore: update known checksums for 0.11.10 @github-actions[bot] (#140)
• chore: update known checksums for 0.11.9 @github-actions[bot] (#138)

📚 Documentation

• docs: Explain that the default behaviour is ruff check @robertHowlett (#142)

⬆️ Dependency updates

• Bump dependencies @eifinger (#152)

Changes

This bugfix release enables support for ruff versions 0.1.8-0.4.7.
They have a different release URL and lead to a HTTP 404 before.

🐛 Bug fixes

• Support versions 0.1.8-0.4.7 @eifinger (#135)

🧰 Maintenance

• chore: update known checksums for 0.11.8 @github-actions[bot] (#130)

📚 Documentation

• Inform user of unsupported old version @eifinger (#134)

Changes

Thanks to @scootermon we now also find the desired ruff versions in poetry groups in pyproject.toml:

[tool.poetry.group.dev.dependencies]
ruff = "0.8.3"

🚀 Enhancements

• Add support for reading the ruff version from Poetry groups @scootermon (#127)

🧰 Maintenance

• chore: update known checksums for 0.11.7 @github-actions[bot] (#125)
• chore: update known checksums for 0.11.6 @github-actions[bot] (#123)
• chore: update known checksums for 0.11.5 @github-actions[bot] (#120)
• chore: update known checksums for 0.11.4 @github-actions[bot] (#117)
• chore: update known checksums for 0.11.3 @github-actions[bot] (#116)
• chore: update known checksums for 0.11.2 @github-actions[bot] (#108)
• Add required permissions and all-tests-passed @eifinger (#107)

📚 Documentation

• Mention the --diff flag for format --check @Avasam (#104)

Changes

This release only changes internals and updates known checksums

🧰 Maintenance

• Inline action-update-semver @eifinger (#103)
• chore: update known checksums for 0.11.0 @github-actions[bot] (#101)
• chore: update known checksums for 0.10.0 @github-actions[bot] (#99)
• chore: update known checksums for 0.9.10 @github-actions[bot] (#97)
• chore: update known checksums for 0.9.9 @github-actions[bot] (#92)
• chore: update known checksums for 0.9.8 @github-actions[bot] (#91)
• chore: update known checksums for 0.9.7 @github-actions[bot] (#86)

📚 Documentation

• Extend information on install only @eifinger (#102)

⬆️ Dependency updates

• Bump @types/node from 22.13.4 to 22.13.10 @dependabot[bot] (#98)
• Bump typescript from 5.7.3 to 5.8.2 @dependabot[bot] (#94)
• Bump peter-evans/create-pull-request from 7.0.7 to 7.0.8 @dependabot[bot] (#96)
• Bump @octokit/plugin-paginate-rest from 11.4.2 to 11.4.3 @dependabot[bot] (#90)
• Bump peter-evans/create-pull-request from 7.0.6 to 7.0.7 @dependabot[bot] (#89)

Changes

🧰 Maintenance

• Bump dependencies @eifinger (#85)
• chore: update known checksums for 0.9.6 @github-actions[bot] (#80)
• chore: update known checksums for 0.9.5 @github-actions[bot] (#77)

⬆️ Dependency updates

• Bump dependencies @eifinger (#85)

Changes

With this release you can also use a file in requirements.txt format instead of pyproject.toml for the input version-file.
The file ending decides which parser gets used, so make sure the filenames end in *.txt or *.toml

Thank you @daveisfera

🐛 Bug fixes

• Fix version-file input @eifinger (#72)

🚀 Enhancements

• Support requirements.txt for version-file @daveisfera (#68)

🧰 Maintenance

• Run npm install as part of npm run all @eifinger (#75)
• Make it clearer how to fix lint errors @eifinger (#74)
• Run update-known-checksums every night @eifinger (#73)

📚 Documentation

• Refactor internal function names @eifinger (#76)