You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
Repository navigation
build(deps): Bump pylint from 4.0.7 to 4.0.9 - #361
Someone without access to the configuration or linted code, but with access
to the cache directory (predictable PYLINT_HOME on a multi-user host) can no
longer write a crafted pickle that will runs arbitrary code when pylint access its
stat cache. The result cache is now stored as JSON instead of pickle,
preventing code-execution. The workaround is upgrading or not pointing PYLINT_HOME
to an untrusted, shared, or group-writable directory. The default value, ~/.cache/pylint,
is writable only by the user running pylint. (CVE with the same information pending)
False Positives Fixed
Fixed a false positive for no-self-use on a method that only uses
self before a locally defined class (or other nested method), because
the checker's could-be-a-function tracking state was not restored after
visiting the nested method.
Fix a false positive for unnecessary-direct-lambda-call when a directly called
lambda in a class body wraps a comprehension containing an assignment expression.
PEP 572 makes that a SyntaxError without the lambda's scope, so following the
message produced code that would not compile.
Fix a false positive for :ref:bad-exception-cause when the bases of the class
being raised from cannot be inferred, such as an exception deriving from a
C extension class. :ref:raising-non-exception and
:ref:catching-non-exception already guard the same inherit_from_std_ex
... (truncated)
Commits
303703f Bump pylint to 4.0.9, update changelog (#11448)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
dependenciesPull requests that update a dependency filepythonPull requests that update python code
0 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
dependabot
Bot
added
dependencies
![github-actions[bot]](https://avatars.githubusercontent.com/in/15368?s=60&v=4){kind=small}
![codacy-production[bot]](https://avatars.githubusercontent.com/in/56611?s=60&v=4){kind=small}
Bumps pylint from 4.0.7 to 4.0.9.
Release notes
Sourced from pylint's releases.
... (truncated)
Commits
303703fBump pylint to 4.0.9, update changelog (#11448)b342384Fix block-scoped disable leaking into sibling elif/else blocks (#11429) (#11445)58c87cfStore the results cache as JSON instead of picklee3f4942[Backport maintenance/4.0.x] Fix crash on failed attribute inference (#11443)faf47f9[Backport maintenance/4.0.x] Fix false positive no-self-use when a method con...20c7bb9[Backport maintenance/4.0.x] Fix a crash in method-hidden for methods named a...47e6757[Backport maintenance/4.0.x] Fix bad-exception-cause false positive when the ...ae3ee53[Backport maintenance/4.0.x] Fix not-callable false positive for types.Functi...3e444be[Backport maintenance/4.0.x] Fix a crash in unnecessary-default-type-args for...8f2dd4f[Backport maintenance/4.0.x] Fix declare-non-slot false positives for ClassVa...Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)