v4.0.0 🌈 Immutable releases, node24 and manifest-file

This is the first immutable release of ruff-action 🥳

All future releases are also immutable, if you want to know more about what this means checkout the docs.

This action now also supports the mainfest-file input which lets you define custom ruff versions and custom download locations.

Last but not least this action now runs on node24. This might be a breaking change on very old self-hosted runners.

🚨 Breaking changes

• Migrate to ESMBundler and node 24 @eifinger (#345)

🚀 Enhancements

• Add manifest-file input @eifinger (#352)

🧰 Maintenance

• chore: update known checksums for 0.15.10 @github-actions[bot] (#351)
• Add a release workflow @zanieb (#349)
• chore: update known checksums for 0.15.9 @github-actions[bot] (#348)
• chore: update known checksums for 0.15.8 @github-actions[bot] (#344)
• chore: update known checksums for 0.15.7 @github-actions[bot] (#342)
• chore: update known checksums for 0.15.6 @github-actions[bot] (#337)
• chore: update known checksums for 0.15.5 @github-actions[bot] (#331)
• chore: update known checksums for 0.15.4 @github-actions[bot] (#328)
• chore: update known checksums for 0.15.2 @github-actions[bot] (#325)
• chore: update known checksums for 0.15.1 @github-actions[bot] (#323)
• chore: update known checksums for 0.15.0 @github-actions[bot] (#320)

⬆️ Dependency updates

• Bump release-drafter/release-drafter from 6.2.0 to 7.2.0 @dependabot[bot] (#350)
• Bump eifinger/actionlint-action from 1.10.0 to 1.10.2 @dependabot[bot] (#347)
• Bump zizmorcore/zizmor-action from 0.4.1 to 0.5.2 @dependabot[bot] (#333)

v3.6.1 🌈 fix automatic minor tag updates

Changes

This is just a bugfix release for the release process

• fix: persist credentials for git push in update-major-minor-tags workflow @eifinger-bot (#312)

🧰 Maintenance

• ci: add zizmor security linting @eifinger-bot (#313)

v3.6.0 🌈 search for pyproject.toml in parent dirs

Changes

This release brings some bug fixes like

• support for hashes in requirement.txt files
• ignoring environment markers in version specifiers like "ruff~=0.13 ; python_version >= '3.11'" to prevent them from breaking the version resolver. If you have a usecase for needing the environment markers to derive the correct ruff version this action should use please add your voice to #256

In case no pyproject.toml is in the configured src this action now also walks up the directory tree to search for it, just like the "normal" ruff does. This is limited to the current workspace to prevent this action from trying to access private data outside the GitHub Actions runner.

EDIT: Oh I forgot to mention that the error matcher now properly detects invalid formatting and displays the correct line number etc in the GitHub UI.

🐛 Bug fixes

• search in parent dir @eifinger (#306)
• ignore environment markers in dep specs @eifinger (#295)
• Support hashes in requirement files for version-file @mulmat (#287)
• Don't warn on no version found in pyproject.toml @eifinger (#209)

🚀 Enhancements

• Update the ruff-format matcher to properly extract all info @eifinger (#293)

🧰 Maintenance

• chore: update known checksums for 0.14.13/0.14.14 @github-actions[bot] (#297)
• Fix CI: Pin ruff version to stable 0.13.x in test fixture @eifinger (#305)
• chore: update known checksums for 0.14.11 @github-actions[bot] (#292)
• chore: update known checksums for 0.14.10 @github-actions[bot] (#289)
• chore: update known checksums for 0.14.9 @github-actions[bot] (#284)
• chore: update known checksums for 0.14.8 @github-actions[bot] (#280)
• chore: use npm ci --ignore-scripts in CI and scripts @woodruffw (#276)
• chore: update known checksums for 0.14.7 @github-actions[bot] (#275)
• chore: update known checksums for 0.14.6 @github-actions[bot] (#271)
• chore: update known checksums for 0.14.5 @github-actions[bot] (#266)
• chore: update known checksums for 0.14.4 @github-actions[bot] (#265)
• chore: update known checksums for 0.14.3 @github-actions[bot] (#263)
• chore: update known checksums for 0.14.2 @github-actions[bot] (#258)
• chore: update known checksums for 0.14.1 @github-actions[bot] (#252)
• chore: update known checksums for 0.13.3/0.14.0 @github-actions[bot] (#239)
• chore: update known checksums for 0.13.2 @github-actions[bot] (#232)
• Don't assume all test passed if cancelled @eifinger (#236)
• chore: update known checksums for 0.13.1 @github-actions[bot] (#230)
• chore: update known checksums for 0.13.0 @github-actions[bot] (#223)
• chore: update known checksums for 0.12.12 @github-actions[bot] (#218)
• chore: update known checksums for 0.12.11 @github-actions[bot] (#214)
• chore: update known checksums for 0.12.10 @github-actions[bot] (#210)
• chore(ci): address all lint findings @woodruffw (#206)
• chore: update known checksums for 0.12.9 @github-actions[bot] (#204)

⬆️ Dependency updates

• Bump dependencies and actions @eifinger (#311)
• Bump actions/checkout from 5.0.0 to 6.0.1 @dependabot[bot] (#278)
• Bump github/codeql-action from 3.30.5 to 4.31.10 @dependabot[bot] (#294)
• Bump actions/setup-node from 6.0.0 to 6.2.0 @dependabot[bot] (#296)
• Bump eifinger/actionlint-action from 1.9.3 to 1.10.0 @dependabot[bot] (#291)
• Bump peter-evans/create-pull-request from 7.0.9 to 8.0.0 @dependabot[bot] (#283)
• Bump peter-evans/create-pull-request from 7.0.8 to 7.0.9 @dependabot[bot] (#273)
• Bump eifinger/actionlint-action from 1.9.2 to 1.9.3 @dependabot[bot] (#272)
• Bump eifinger/actionlint-action from 1.9.1 to 1.9.2 @dependabot[bot] (#247)
• Bump actions/setup-node from 4.4.0 to 6.0.0 @dependabot[bot] (#249)
• Bump github/codeql-action from 3.29.11 to 3.30.5 @dependabot[bot] (#234)
• Bump github/codeql-action from 3.29.9 to 3.29.11 @dependabot[bot] (#211)

v3.5.1 🌈 Improve error messages on GitHub API errors

Changes

Recent GitHub outages showed that we can improve the error messages to tell the user what happened and what can be done about it.

🐛 Bug fixes

• Improve error messages on GitHub API errors @eifinger (#199)

🧰 Maintenance

• chore: update known checksums for 0.12.8 @github-actions[bot] (#190)
• chore: update known checksums for 0.12.5 @github-actions[bot] (#189)
• chore: update known checksums for 0.12.4 @github-actions[bot] (#185)

⬆️ Dependency updates

• bump biome to 2.1.4 @eifinger (#201)
• Bump actions/checkout from 4 to 5 @dependabot[bot] (#197)
• Bump dependencies @eifinger (#200)

v3.5.0 🌈 support reading Ruff version from tools.poetry.dependencies

Changes

A big thank you to @G-Rath for his contribution 🥳

🚀 Enhancements

• feat: support reading Ruff version from tools.poetry.dependencies @G-Rath (#177)

🧰 Maintenance

• Bump dependencies @eifinger (#181)
• chore: update known checksums for 0.12.3 @github-actions[bot] (#180)
• chore: update known checksums for 0.12.2 @github-actions[bot] (#175)
• chore: update known checksums for 0.12.1 @github-actions[bot] (#169)
• chore: update known checksums for 0.12.0 @github-actions[bot] (#167)
• chore: update known checksums for 0.11.13 @github-actions[bot] (#158)
• Fix test-pep440-version-specifier @eifinger (#165)
• Simplify step check all-tests-passed.needs @eifinger (#155)

⬆️ Dependency updates

• Bump dependencies @eifinger (#181)

v3.4.0 🌈 Add support for pep440 version specifiers

Changes

With this release you can now also define your ruff version using pep440 specifier:

- name: Install a pep440-specifier-satisfying version of ruff
  uses: astral-sh/ruff-action@v3
  with:
    version: ">=0.11.10,<0.12.0"

🚀 Enhancements

• Add support for pep440 version specifiers @eifinger (#150)

🧰 Maintenance

• Check that all jobs are in all-tests-passed needs @eifinger (#151)
• chore: update known checksums for 0.11.11 @github-actions[bot] (#146)
• chore: update known checksums for 0.11.10 @github-actions[bot] (#140)
• chore: update known checksums for 0.11.9 @github-actions[bot] (#138)

📚 Documentation

• docs: Explain that the default behaviour is ruff check @robertHowlett (#142)

⬆️ Dependency updates

• Bump dependencies @eifinger (#152)

v3.3.1 🌈 Support ruff versions 0.1.8-0.4.7

Changes

This bugfix release enables support for ruff versions 0.1.8-0.4.7.
They have a different release URL and lead to a HTTP 404 before.

🐛 Bug fixes

• Support versions 0.1.8-0.4.7 @eifinger (#135)

🧰 Maintenance

• chore: update known checksums for 0.11.8 @github-actions[bot] (#130)

📚 Documentation

• Inform user of unsupported old version @eifinger (#134)

v3.3.0 🌈 Support for reading the ruff version from Poetry groups

Changes

Thanks to @scootermon we now also find the desired ruff versions in poetry groups in pyproject.toml:

[tool.poetry.group.dev.dependencies]
ruff = "0.8.3"

🚀 Enhancements

• Add support for reading the ruff version from Poetry groups @scootermon (#127)

🧰 Maintenance

• chore: update known checksums for 0.11.7 @github-actions[bot] (#125)
• chore: update known checksums for 0.11.6 @github-actions[bot] (#123)
• chore: update known checksums for 0.11.5 @github-actions[bot] (#120)
• chore: update known checksums for 0.11.4 @github-actions[bot] (#117)
• chore: update known checksums for 0.11.3 @github-actions[bot] (#116)
• chore: update known checksums for 0.11.2 @github-actions[bot] (#108)
• Add required permissions and all-tests-passed @eifinger (#107)

📚 Documentation

• Mention the --diff flag for format --check @Avasam (#104)

v3.2.2 🌈 Maintenance and update known checksums

Changes

This release only changes internals and updates known checksums

🧰 Maintenance

• Inline action-update-semver @eifinger (#103)
• chore: update known checksums for 0.11.0 @github-actions[bot] (#101)
• chore: update known checksums for 0.10.0 @github-actions[bot] (#99)
• chore: update known checksums for 0.9.10 @github-actions[bot] (#97)
• chore: update known checksums for 0.9.9 @github-actions[bot] (#92)
• chore: update known checksums for 0.9.8 @github-actions[bot] (#91)
• chore: update known checksums for 0.9.7 @github-actions[bot] (#86)

📚 Documentation

• Extend information on install only @eifinger (#102)

⬆️ Dependency updates

• Bump @types/node from 22.13.4 to 22.13.10 @dependabot[bot] (#98)
• Bump typescript from 5.7.3 to 5.8.2 @dependabot[bot] (#94)
• Bump peter-evans/create-pull-request from 7.0.7 to 7.0.8 @dependabot[bot] (#96)
• Bump @octokit/plugin-paginate-rest from 11.4.2 to 11.4.3 @dependabot[bot] (#90)
• Bump peter-evans/create-pull-request from 7.0.6 to 7.0.7 @dependabot[bot] (#89)

v3.2.1 🌈 Bump dependencies to fix vulnerabilites

Changes

🧰 Maintenance

• Bump dependencies @eifinger (#85)
• chore: update known checksums for 0.9.6 @github-actions[bot] (#80)
• chore: update known checksums for 0.9.5 @github-actions[bot] (#77)

⬆️ Dependency updates

• Bump dependencies @eifinger (#85)