Skip to content

chore(deps-dev): Bump no-defaults from 2.1.0 to 2.3.0 - #1564

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/no-defaults-2.3.0
Closed

chore(deps-dev): Bump no-defaults from 2.1.0 to 2.3.0#1564
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/no-defaults-2.3.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 3, 2026

Copy link
Copy Markdown
Contributor

Bumps no-defaults from 2.1.0 to 2.3.0.

Release notes

Sourced from no-defaults's releases.

v2.3.0

What's Changed

... (truncated)

Changelog

Sourced from no-defaults's changelog.

2.3.0 - 2026-08-31

A minor bump. Cross-package callback analysis now resolves dependency methods through ty's LSP interface instead of a local approximation, so inferred attributes, inheritance, aliases, re-exports, and wrapped annotations follow ty's Python semantics. The Python package depends on ty; Cargo installations must provide the ty executable on PATH.

Changed

  • Vale now uses the pinned ai-tells style package and error threshold shared by the other projects in Coding-Project-TODOs.
  • Cross-package callback analysis now resolves dependency method targets through the supported ty server LSP interface. Inferred attributes, inheritance, aliases, re-exports, and wrapped annotations therefore use ty's Python semantics instead of a local approximation. The Python package depends on ty; Cargo installations must provide the ty executable on PATH.

2.2.0 - 2026-08-30

Everything here makes --fix safer to run. A default that the interpreter itself supplies the call for is now reported and kept, and a deletion whose call site cannot be written is held back rather than made anyway, so --fix no longer writes a file that raises TypeError and reports a clean sweep. Where the call site can be written, --fix reaches a great many it used to leave alone.

Nothing is removed or renamed, so a project pinned to 2.1.0 upgrades in place. Expect --fix to leave more behind than it did: a retained default is still reported, so a run that used to exit 0 having quietly broken the file now exits 1 with the diagnostic still standing.

Added

  • --fix resolves call sites it previously left alone. A method reached through a constructed instance — C().fetch() — an alias bound in a class body, an inherited method reached through self or super(), and a normal class's __init__ reached as C(...) are all rewritten now. So are calls through star imports, package attributes, unaliased dotted imports, namespace packages, and a staticmethod or classmethod reached through the binding it was imported under. A nested function or dataclass is resolved within the scope that holds it, and a class nested in another scope is told apart from a module-level class of the same name.
  • PYTHONPATH is used when resolving imports, so a project whose layout depends on it has its call sites updated. Where an explicit root and the importer's own directory name different files the import is ambiguous, and the call is reported rather than rewritten against a guess.
  • --diff lists the diagnostics it cannot fix, and --fix prints the ones that remain after writing, so neither mode implies everything was handled.
  • A # noqa may carry an explanation after a blanket directive and after a file-level one, and Flake8's whitespace forms are accepted.
  • --fix resolves a call whose receiver is a parameterized generic, so Box[int]() and Box[int].make() are rewritten like their unsubscripted spellings.
  • --fix resolves a call whose receiver is a local that a function body binds exactly once, so made = Child() followed by made.own() is rewritten rather than left to raise. An annotated assignment and a walrus are read the same way. A name a second binding reaches, one an attribute is written through, and one a global or nonlocal declaration hands to another scope all carry nothing.

Changed

  • A default on __new__ is reported but retained because object construction invokes it implicitly and has no explicit call site the fixer can safely update.
  • A default on __del__ is reported but retained because object finalization invokes it implicitly.
  • A default on __getattribute__ is reported but retained because attribute syntax invokes it implicitly.
  • A default on __getattr__ is reported but retained because fallback attribute lookup invokes it implicitly.
  • A default on __setattr__ is reported but retained because attribute assignment invokes it implicitly.
  • A default on __delattr__ is reported but retained because attribute deletion invokes it implicitly.
  • A default on __dir__ is reported but retained because dir() invokes it implicitly.
  • A default on descriptor __get__ is reported but retained because attribute reads invoke it implicitly.
  • A default on descriptor __set__ is reported but retained because attribute writes invoke it implicitly.
  • A default on descriptor __delete__ is reported but retained because attribute deletion invokes it implicitly.
  • A default on descriptor __set_name__ is reported but retained because class creation invokes it implicitly.
  • A default on metaclass __instancecheck__ is reported but retained because isinstance() invokes it implicitly.
  • A default on metaclass __subclasscheck__ is reported but retained because issubclass() invokes it implicitly.
  • A default on __subclasshook__ is reported but retained because ABC subclass checks invoke it implicitly.
  • A default on __class_getitem__ is reported but retained because class subscription invokes it implicitly.

... (truncated)

Commits
  • 3e30c7d Merge pull request #1154 from adamtheturtle/release/prep-2.3.0
  • b550b57 Prepare the 2.3.0 release
  • 8f55432 Merge pull request #1153 from adamtheturtle/codex/issue-1152-shared-vale
  • 6b6f40f Use the shared Vale configuration
  • e57f4ee Merge pull request #1151 from adamtheturtle/codex/issue-1150-ty-callback-reso...
  • f7b4b26 Map gated dependency methods to their class
  • ae16a88 Normalize Windows verbatim paths for ty LSP
  • 60251a0 Expose ty definition traces in callback test
  • d553ac8 Pass dependency roots explicitly to ty
  • d6d0106 Open dependency modules before ty resolution
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot
chore(deps-dev): Bump no-defaults from 2.1.0 to 2.3.0
3f07a1c 
Bumps [no-defaults](https://github.com/adamtheturtle/no-defaults) from 2.1.0 to 2.3.0.
- [Release notes](https://github.com/adamtheturtle/no-defaults/releases)
- [Changelog](https://github.com/adamtheturtle/no-defaults/blob/main/CHANGELOG.md)
- [Commits](adamtheturtle/no-defaults@v2.1.0...v2.3.0)

---
updated-dependencies:
- dependency-name: no-defaults
  dependency-version: 2.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Sep 3, 2026
@dependabot
dependabot Bot deployed to development September 3, 2026 17:43 Active
@github-actions
github-actions Bot enabled auto-merge September 3, 2026 17:43
@dependabot @github

dependabot Bot commented on behalf of github Sep 4, 2026

Copy link
Copy Markdown
Contributor Author

Superseded by #1571.

@dependabot dependabot Bot closed this Sep 4, 2026
auto-merge was automatically disabled September 4, 2026 17:43

Pull request was closed

@dependabot
dependabot Bot deleted the dependabot/pip/no-defaults-2.3.0 branch September 4, 2026 17:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants