Skip to content

Bump isort from 8.0.1 to 9.0.0 - #116

Merged
docktermj merged 2 commits into
mainfrom
dependabot/pip/isort-9.0.0
Sep 17, 2026
Merged

docktermj merged 2 commits into
mainfrom
dependabot/pip/isort-9.0.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 17, 2026

Copy link
Copy Markdown
Contributor

Bumps isort from 8.0.1 to 9.0.0.

Release notes

Sourced from isort's releases.

9.0.0

isort 9.0.0 is the result of several alpha and beta releases, as well as a small number of fixes added after the last beta. For release notes for the individual alphas and betas we would like to refer to:

Skipped version numbers are the result of changes to our release infrastructure that broke while creating the actual releases.

Please find below the full release notes for version 9.0.0, the newest release of isort after version 8.0.1.


isort 9.0.0 contains some significant changes and improvements. Most notably there is now support for Python 3.15 and its lazy imports and we have included several performance improvements as well as providing mypyc compiled wheels for all major platforms and supported versions of Python. In our own tests we saw speeds ups of more than 2x and 3x times, but this is highly dependent on the codebase isort needs to inspect.

The full list of changes is as follows:

💥 Breaking Changes

🚀 Features

🪲 Fixes

... (truncated)

Changelog

Sourced from isort's changelog.

9.0.0 August 26 2026

... (truncated)

Commits
  • 727d119 Name the predicate and drive the prefix test off STRING_PREFIXES
  • dec76bc Fix multiline docstring style
  • cb179db Keep add_imports below a prefixed module docstring
  • 7542f76 test: distinguish pylint disable-next comments
  • 9f56767 Fix pylint disable-next comments at top of imports
  • 0cba6f6 Delete .cruft.json
  • dcdda58 Remove if completely
  • 03d3878 Fix check in CI
  • 926a147 Run less Builds
  • c4ab2e9 Fix test_importable for local dev
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [isort](https://github.com/PyCQA/isort) from 8.0.1 to 9.0.0.
- [Release notes](https://github.com/PyCQA/isort/releases)
- [Changelog](https://github.com/PyCQA/isort/blob/main/CHANGELOG.md)
- [Commits](PyCQA/isort@8.0.1...9.0.0)

---
updated-dependencies:
- dependency-name: isort
  dependency-version: 9.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Sep 17, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner September 17, 2026 00:54
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Sep 17, 2026
@github-actions

Copy link
Copy Markdown

🤖 Claude Code Review

Review Summary

Diff: pyproject.toml — bumps isort from 8.0.1 to 9.0.0 (Python > 3.11 lint dependency group), a dependabot-style major version bump.

Code Quality

  • ✅ No style/naming/DRY concerns — single version string change.
  • ✅ No commented-out code, no logic changes, nothing to review for bugs/race conditions/etc.
  • ✅ .claude/CLAUDE.md reviewed: it's generic (build/lint commands, architecture overview) with nothing local-dev-specific; not touched by this PR anyway.
  • ⚠️ Minor note (not a blocker): this is a major version bump (8.x → 9.x). Isort major releases have occasionally changed default import-sorting behavior. Worth confirming CI's lint job (pylint/isort --check) passes green on this PR before merge, since a major bump could in theory require [tool.isort] config or reformatting of imports. I checked pyproject.toml:103-105 — the [tool.isort] section only sets profile = "black" and src_paths, nothing version-sensitive, so risk is low.

Testing

  • N/A — no application code changed, this only affects the dev/lint tool dependency group.

Documentation

  • ✅ CHANGELOG.md not updated, but this matches prior precedent for equivalent dependency-bump PRs (e.g. the mypy 2.3.0→2.3.1 bump, commit 64c6240, also didn't touch CHANGELOG.md). Not flagging as an issue.
  • N/A — no markdown files changed in this diff.

Security

  • ✅ No hardcoded credentials, no input handling, no logging changes.
  • ✅ No .lic files or AQAAAD-prefixed strings present in this diff or repo root.

Overall: No issues found. This is a routine, low-risk dependency version bump consistent with the repo's existing dependabot update pattern.

Automated code review analyzing defects and coding standards

@docktermj docktermj self-assigned this Sep 17, 2026
@docktermj
docktermj enabled auto-merge (squash) September 17, 2026 14:04
pylint 4.0.7 pins isort!=5.13,<9,>=5, so the isort 9.0.0 bump made the
lint dependency group unresolvable on Python 3.12/3.13. pylint 4.0.8
widens that pin to isort<10.
@github-actions

Copy link
Copy Markdown

🤖 Claude Code Review

Code Review

This PR is a minimal dependency version bump in pyproject.toml: isort 8.0.1 → 9.0.0 and pylint 4.0.7 → 4.0.8, both scoped to python_version > '3.11' (lines 76, 81).

Code Quality

  • ✅ Style/formatting: change is a plain version pin update, consistent with surrounding entries.
  • ✅ No commented-out code.
  • ✅ Naming: N/A (no code, just config).
  • ✅ DRY: N/A.
  • ✅ Defects: No functional code changed, so no logic/crash/race/security risk introduced by this diff itself. One point worth flagging: isort jumped a major version (8→9), which per the PR title (build(deps): bump pylint to 4.0.8 for isort 9 compatibility) is a coordinated bump — worth confirming CI passes on Python 3.12/3.13 (the > '3.11' branch) since isort major bumps can change import-sorting output/behavior and could trigger new sorting-order lint failures.
  • ✅/N/A CLAUDE.md: no changes to .claude/CLAUDE.md in this diff; existing file is already environment-agnostic (no hardcoded local paths or machine-specific instructions).

Testing

  • N/A — dependency bump only, no new functions/endpoints. Existing CI lint/test matrix (3.10–3.13) should catch any incompatibility from the isort major version bump.

Documentation

  • N/A — no README/API doc/CHANGELOG changes needed for a lint-tool version bump.

Security

  • ✅ No hardcoded credentials.
  • ✅ No .lic files or AQAAAD-prefixed strings present in this diff.
  • N/A input validation / error handling / logging — not applicable to a version pin change.

Summary

Straightforward, low-risk dependency bump. No blocking issues found. Only suggestion: verify the python_version > '3.11' CI lane (3.12/3.13) is green post-bump, since isort 8→9 is a major version jump that could alter import-sort behavior even though it's paired with a compatible pylint version per the commit message.

Automated code review analyzing defects and coding standards

@docktermj
docktermj merged commit a112265 into main Sep 17, 2026
11 checks passed
@docktermj
docktermj deleted the dependabot/pip/isort-9.0.0 branch September 17, 2026 14:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant