Skip to content

Upgrading ruff 0.3 to 0.4

Breaking0.3.7 → 0.4.10Breaking1Security1Deprecated1New43Changed49Fixed76Other20

Full comparisonBack to ruff
BreakingUpgrade verdict

1 breaking change and a security fix.

In plain terms
  • GitLab code quality fingerprints are now computed from paths relative to the project, so existing fingerprints may change.
  • Hardens the tool against crafted comment artifacts from the ecosystem that could be abused.
  • Updates documentation and deprecates `ignore_init_module_imports`.
Must act 3 items need code or config changes

What you must change

Breaking1
Uses project-relative paths when calculating GitLab fingerprints.
0.4.6GitHub ReleaseSummarizedView source
Security1
Guards against malicious ecosystem comment artifacts.
0.4.10GitHub ReleaseSummarizedView source

Deprecations to plan for

Deprecated1
Updates documentation and deprecates ignore_init_module_imports.
ignore_init_module_imports
0.4.5GitHub ReleaseSummarizedView source