Note: The pre-commit manager in Renovate is not supported by the pre-commit maintainers or community. Please do not report any problems there, instead create a Discussion in the Renovate repository if you have any questions.
This release fixes a security issue in Black's bundled GitHub Action. Repositories that
use the action are encouraged to update to the latest version of Black immediately. This
update is received automatically when using psf/black@stable, and is independent of
the version of Black installed by the action.
When the GitHub Action reads version specifiers from tool.black.required-version, it
now only accepts released versions of Black, as it already did for black requirements
in dependency lists. Other values, such as URL references, are now rejected. This issue
has been registered as GHSA-cg8m-r9f2-5wm2; a CVE identifier is pending.
Stable style
Fix a long Jupyter notebook assignment magic (for example x = !ls -la) being wrapped
in parentheses, which IPython can no longer run; such cells are now left unchanged
(#5481)
Keep repeated lines outside the selected --line-ranges unchanged (#5436)
Fix --line-ranges formatting lines that follow a statement when formatting joins or
re-indents that statement (#5484)
Fix --line-ranges crashing with an internal error when an unselected statement has a # fmt: skip comment on the last line before a closing bracket (#5477)
Prevent moving an encoding declaration (for example # -*- coding: latin-1 -*-) onto
the first two lines of a file (#5487)
Fix adding an extra trailing blank line inside a multi-line module docstring when its
last line is near the line length limit (#5494)
Preview style
Do not split short expressions on delimiters (such as binary operators, comparisons,
or comprehensions) inside brackets when preceded by a standalone comment (#5455)
Fix the unstable string_processing feature removing backslash-newline sequences from
raw strings, which changed their value (#5482)
Avoid adding unnecessary parentheses around unbreakable right-hand side expressions in
assignments (such as annotated assignments or subscript targets) (#5473)
Parenthesize expressions with parameter comments when they exceed the line length
under --preview (#5442)
Fix wrap_long_dict_values_in_parens dropping the parentheses around a right-hand
side that contains a dictionary, leaving a line over the length limit (#5492)
Fix the unstable string_processing feature adding a space after * or ** in a PEP
695 type parameter (* Ts = ...) when it splits a string in the parameter's default
(#5504)
Avoid unnecessary line splits of trailers (such as indexing/subscripts) when an
earlier bracket split exceeds the line length only due to a trailing comment (#5498)
Configuration
Add --cache-dir to configure the cache directory from the command line (#5433)
Don't cache a file as formatted after formatting or checking it with --line-ranges,
which made a later full black --check pass and black skip the unformatted lines
(#5476)
Respect a .gitignore that starts with a UTF-8 byte order mark. The mark became part
of the first pattern, so that pattern never matched and Black formatted files that git
ignores (#5497)
Performance
Avoid quadratic runtime when splitting very long lines with many trailing bracket
pairs (such as consecutive subscripts) (#5475)
Integrations
Fix the GitHub Action crashing on dependency-group includes when use_pyproject is
enabled (#5479)
When the GitHub Action reads version specifiers from tool.black.required-version, it
now only accepts released versions of Black, as it already did for black
requirements in dependency lists. Other values, such as URL references, are now
rejected. (#5510)
Configuration
📅Schedule: (UTC)
Branch creation
"on friday"
Automerge
At any time (no schedule defined)
🚦Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕Ignore: Close this PR and you won't be reminded about this update again.
If you want to rebase/retry this PR, check this box
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [psf/black](https://github.com/psf/black) | repository | patch | `26.10.0` → `26.10.1` |
Note: The `pre-commit` manager in Renovate is not supported by the `pre-commit` maintainers or community. Please do not report any problems there, instead [create a Discussion in the Renovate repository](https://github.com/renovatebot/renovate/discussions/new) if you have any questions.
---
### Release Notes
<details>
<summary>psf/black</summary>
### [`v26.10.1`](https://github.com/psf/black/blob/HEAD/CHANGES.md#Version-26101)
[Compare Source](https://github.com/psf/black/compare/26.10.0...26.10.1)
##### Highlights
This release fixes a security issue in Black's bundled GitHub Action. Repositories that
use the action are encouraged to update to the latest version of Black immediately. This
update is received automatically when using `psf/black@stable`, and is independent of
the version of Black installed by the action.
When the GitHub Action reads version specifiers from `tool.black.required-version`, it
now only accepts released versions of Black, as it already did for `black` requirements
in dependency lists. Other values, such as URL references, are now rejected. This issue
has been registered as `GHSA-cg8m-r9f2-5wm2`; a CVE identifier is pending.
##### Stable style
- Fix a long Jupyter notebook assignment magic (for example `x = !ls -la`) being wrapped
in parentheses, which IPython can no longer run; such cells are now left unchanged
([#​5481](https://github.com/psf/black/issues/5481))
- Keep repeated lines outside the selected `--line-ranges` unchanged ([#​5436](https://github.com/psf/black/issues/5436))
- Fix `--line-ranges` formatting lines that follow a statement when formatting joins or
re-indents that statement ([#​5484](https://github.com/psf/black/issues/5484))
- Fix `--line-ranges` crashing with an internal error when an unselected statement has a
`# fmt: skip` comment on the last line before a closing bracket ([#​5477](https://github.com/psf/black/issues/5477))
- Prevent moving an encoding declaration (for example `# -*- coding: latin-1 -*-`) onto
the first two lines of a file ([#​5487](https://github.com/psf/black/issues/5487))
- Fix adding an extra trailing blank line inside a multi-line module docstring when its
last line is near the line length limit ([#​5494](https://github.com/psf/black/issues/5494))
##### Preview style
- Do not split short expressions on delimiters (such as binary operators, comparisons,
or comprehensions) inside brackets when preceded by a standalone comment ([#​5455](https://github.com/psf/black/issues/5455))
- Fix the unstable `string_processing` feature removing backslash-newline sequences from
raw strings, which changed their value ([#​5482](https://github.com/psf/black/issues/5482))
- Avoid adding unnecessary parentheses around unbreakable right-hand side expressions in
assignments (such as annotated assignments or subscript targets) ([#​5473](https://github.com/psf/black/issues/5473))
- Parenthesize expressions with parameter comments when they exceed the line length
under `--preview` ([#​5442](https://github.com/psf/black/issues/5442))
- Fix `wrap_long_dict_values_in_parens` dropping the parentheses around a right-hand
side that contains a dictionary, leaving a line over the length limit ([#​5492](https://github.com/psf/black/issues/5492))
- Fix the unstable `string_processing` feature adding a space after `*` or `**` in a PEP
695 type parameter (`* Ts = ...`) when it splits a string in the parameter's default
([#​5504](https://github.com/psf/black/issues/5504))
- Avoid unnecessary line splits of trailers (such as indexing/subscripts) when an
earlier bracket split exceeds the line length only due to a trailing comment ([#​5498](https://github.com/psf/black/issues/5498))
##### Configuration
- Add `--cache-dir` to configure the cache directory from the command line ([#​5433](https://github.com/psf/black/issues/5433))
- Don't cache a file as formatted after formatting or checking it with `--line-ranges`,
which made a later full `black --check` pass and `black` skip the unformatted lines
([#​5476](https://github.com/psf/black/issues/5476))
- Respect a `.gitignore` that starts with a UTF-8 byte order mark. The mark became part
of the first pattern, so that pattern never matched and Black formatted files that git
ignores ([#​5497](https://github.com/psf/black/issues/5497))
##### Performance
- Avoid quadratic runtime when splitting very long lines with many trailing bracket
pairs (such as consecutive subscripts) ([#​5475](https://github.com/psf/black/issues/5475))
##### Integrations
- Fix the GitHub Action crashing on dependency-group includes when `use_pyproject` is
enabled ([#​5479](https://github.com/psf/black/issues/5479))
- When the GitHub Action reads version specifiers from `tool.black.required-version`, it
now only accepts released versions of Black, as it already did for `black`
requirements in dependency lists. Other values, such as URL references, are now
rejected. ([#​5510](https://github.com/psf/black/issues/5510))
</details>
---
### Configuration
📅 **Schedule**: (UTC)
- Branch creation
- "on friday"
- Automerge
- At any time (no schedule defined)
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xNDkuMyIsInVwZGF0ZWRJblZlciI6IjQ0LjE0OS4zIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJhdXRvbWF0aW9uIiwiY2hvcmUiLCJwcmUtY29tbWl0Il19-->
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
This PR contains the following updates:
26.10.0→26.10.1Note: The
pre-commitmanager in Renovate is not supported by thepre-commitmaintainers or community. Please do not report any problems there, instead create a Discussion in the Renovate repository if you have any questions.Release Notes
psf/black
v26.10.1Compare Source
Highlights
This release fixes a security issue in Black's bundled GitHub Action. Repositories that
use the action are encouraged to update to the latest version of Black immediately. This
update is received automatically when using
psf/black@stable, and is independent ofthe version of Black installed by the action.
When the GitHub Action reads version specifiers from
tool.black.required-version, itnow only accepts released versions of Black, as it already did for
blackrequirementsin dependency lists. Other values, such as URL references, are now rejected. This issue
has been registered as
GHSA-cg8m-r9f2-5wm2; a CVE identifier is pending.Stable style
x = !ls -la) being wrappedin parentheses, which IPython can no longer run; such cells are now left unchanged
(#5481)
--line-rangesunchanged (#5436)--line-rangesformatting lines that follow a statement when formatting joins orre-indents that statement (#5484)
--line-rangescrashing with an internal error when an unselected statement has a# fmt: skipcomment on the last line before a closing bracket (#5477)# -*- coding: latin-1 -*-) ontothe first two lines of a file (#5487)
last line is near the line length limit (#5494)
Preview style
or comprehensions) inside brackets when preceded by a standalone comment (#5455)
string_processingfeature removing backslash-newline sequences fromraw strings, which changed their value (#5482)
assignments (such as annotated assignments or subscript targets) (#5473)
under
--preview(#5442)wrap_long_dict_values_in_parensdropping the parentheses around a right-handside that contains a dictionary, leaving a line over the length limit (#5492)
string_processingfeature adding a space after*or**in a PEP695 type parameter (
* Ts = ...) when it splits a string in the parameter's default(#5504)
earlier bracket split exceeds the line length only due to a trailing comment (#5498)
Configuration
--cache-dirto configure the cache directory from the command line (#5433)--line-ranges,which made a later full
black --checkpass andblackskip the unformatted lines(#5476)
.gitignorethat starts with a UTF-8 byte order mark. The mark became partof the first pattern, so that pattern never matched and Black formatted files that git
ignores (#5497)
Performance
pairs (such as consecutive subscripts) (#5475)
Integrations
use_pyprojectisenabled (#5479)
tool.black.required-version, itnow only accepts released versions of Black, as it already did for
blackrequirements in dependency lists. Other values, such as URL references, are now
rejected. (#5510)
Configuration
📅 Schedule: (UTC)
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Mend Renovate CLI.