Skip to content

chore(deps): update dependency isort to v7#379

Merged
omercnet merged 5 commits intomainfrom
renovate/isort-7.x
Jan 21, 2026
Merged

chore(deps): update dependency isort to v7#379
omercnet merged 5 commits intomainfrom
renovate/isort-7.x

Conversation

@descope
Copy link
Contributor

@descope descope bot commented Nov 1, 2025

BEGIN_COMMIT_OVERRIDE
build: migrate from Poetry to uv and consolidate linting tools

Modernize Python tooling stack by switching to uv for faster dependency
management and ruff for unified linting/formatting. This reduces tool
sprawl and significantly improves pre-commit and CI performance.

Dependency Management (Poetry → uv):

  • Update CI/CD workflows to use uv for build and publish
  • Replace poetry pre-commit hooks with uv-lock
  • Update documentation to reference uv instead of poetry
  • Update cache keys to use uv.lock

Linting & Formatting (flake8/isort/black/pyupgrade → ruff):

  • Consolidate 4 separate tools into single ruff installation
  • Migrate all linting rules to [tool.ruff] in pyproject.toml
  • Preserve existing config: line-length=120, Django-specific rules
  • Maintain ignore rules (E402, E501) from original flake8 config
  • Add Django-aware import sorting with proper section ordering
  • Remove .flake8 config file (now in pyproject.toml)

CI/CD Fixes:

  • Remove incorrect autobump step (release-please handles versioning)
  • Fix version consistency across pre-commit hooks and dependencies

Performance Impact:

  • Pre-commit hooks run ~10x faster with ruff
  • Dependency installation significantly faster with uv
  • Single tool replaces 4 separate linting processes

Files changed:

  • .github/workflows/{ci.yaml,python-publish.yaml}
  • .pre-commit-config.yaml
  • pyproject.toml (added [tool.ruff], updated dependencies)
  • README.md
  • Deleted: .flake8

END_COMMIT_OVERRIDE

This PR contains the following updates:

Package Type Update Change OpenSSF
isort (changelog) dev major 6.1.0 -> 7.0.0 OpenSSF Scorecard

Release Notes

PyCQA/isort (isort)

v7.0.0

Compare Source

Changes

💥 Breaking Changes

🚀 Features

🪲 Fixes

👷 Continuous Integration

📦 Dependencies


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Never, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

@descope descope bot added the renovate label Nov 1, 2025
@descope
Copy link
Contributor Author

descope bot commented Nov 1, 2025

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: poetry.lock
Updating dependencies
Resolving dependencies...

Creating virtualenv django-descope-WjON16k4-py3.14 in /home/ubuntu/.cache/pypoetry/virtualenvs

The current project's supported Python range (>=3.9,<4.0) is not compatible with some of the required packages Python requirement:
  - tox requires Python >=3.10, so it will not be installable for Python >=3.9,<3.10

Because django-descope depends on tox (4.31.0) which requires Python >=3.10, version solving failed.

  * Check your dependencies Python requirement: The Python requirement can be specified via the `python` or `markers` properties

    For tox, a possible solution would be to set the `python` property to ">=3.10,<4.0"

    https://python-poetry.org/docs/dependency-specification/#python-restricted-dependencies,
    https://python-poetry.org/docs/dependency-specification/#using-environment-markers


@descope
Copy link
Contributor Author

descope bot commented Jan 21, 2026

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

Updated the Django dependency in both pyproject.toml and uv.lock to ensure compatibility with the latest patch release. This change addresses potential issues with earlier versions while maintaining compatibility with existing code.
Updated Django dependency from 3.2.20 to 3.2.25 to ensure compatibility with recent features and security patches. This change maintains the upper limit of <5.3.
@omercnet omercnet merged commit 149e29c into main Jan 21, 2026
48 checks passed
@omercnet omercnet deleted the renovate/isort-7.x branch January 21, 2026 20:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant