build(deps): bump ruff from 0.11.2 to 0.14.2

[dependabot]

Bumps ruff from 0.11.2 to 0.14.2.

Release notes

Sourced from ruff's releases.

0.14.2

Release Notes

Released on 2025-10-23.

Preview features

• [flake8-gettext] Resolve qualified names and built-in bindings (INT001, INT002, INT003) (#19045)

Bug fixes

• Avoid reusing nested, interpolated quotes before Python 3.12 (#20930)
• Catch syntax errors in nested interpolations before Python 3.12 (#20949)
• [fastapi] Handle ellipsis defaults in FAST002 autofix (#20810)
• [flake8-simplify] Skip SIM911 when unknown arguments are present (#20697)
• [pyupgrade] Always parenthesize assignment expressions in fix for f-string (UP032) (#21003)
• [pyupgrade] Fix UP032 conversion for decimal ints with underscores (#21022)
• [fastapi] Skip autofix for keyword and __debug__ path params (FAST003) (#20960)

Rule changes

• [flake8-bugbear] Skip B905 and B912 for fewer than two iterables and no starred arguments (#20998)
• [ruff] Use DiagnosticTag for more pyflakes and pandas rules (#20801)

CLI

• Improve JSON output from ruff rule (#20168)

Documentation

• Add source to testimonial (#20971)
• Document when a rule was added (#21035)

Other changes

• [syntax-errors] Name is parameter and global (#20426)
• [syntax-errors] Alternative match patterns bind different names (#20682)

Contributors

• @​hengky-kurniawan-1
• @​ShalokShalom
• @​robsdedude
• @​LoicRiegel
• @​TaKO8Ki
• @​dylwil3
• @​11happy
• @​ntBre

Install ruff 0.14.2

... (truncated)

Changelog

Sourced from ruff's changelog.

0.14.2

Released on 2025-10-23.

Preview features

• [flake8-gettext] Resolve qualified names and built-in bindings (INT001, INT002, INT003) (#19045)

Bug fixes

• Avoid reusing nested, interpolated quotes before Python 3.12 (#20930)
• Catch syntax errors in nested interpolations before Python 3.12 (#20949)
• [fastapi] Handle ellipsis defaults in FAST002 autofix (#20810)
• [flake8-simplify] Skip SIM911 when unknown arguments are present (#20697)
• [pyupgrade] Always parenthesize assignment expressions in fix for f-string (UP032) (#21003)
• [pyupgrade] Fix UP032 conversion for decimal ints with underscores (#21022)
• [fastapi] Skip autofix for keyword and __debug__ path params (FAST003) (#20960)

Rule changes

• [flake8-bugbear] Skip B905 and B912 for fewer than two iterables and no starred arguments (#20998)
• [ruff] Use DiagnosticTag for more pyflakes and pandas rules (#20801)

CLI

• Improve JSON output from ruff rule (#20168)

Documentation

• Add source to testimonial (#20971)
• Document when a rule was added (#21035)

Other changes

• [syntax-errors] Name is parameter and global (#20426)
• [syntax-errors] Alternative match patterns bind different names (#20682)

Contributors

• @​hengky-kurniawan-1
• @​ShalokShalom
• @​robsdedude
• @​LoicRiegel
• @​TaKO8Ki
• @​dylwil3
• @​11happy
• @​ntBre

0.14.1

... (truncated)

Commits

• 83a3bc4 Bump 0.14.2 (#21051)
• 155fd60 Document when a rule was added (#21035)
• 48f1771 [ty] fix infinite recursion with generic type aliases (#20969)
• 4ca7459 [ty] Consider type_check_only when ranking completions (#20910)
• dab3d4e [ty] Improve invalid-argument-type diagnostics where a union type was provi...
• 0169551 Disable npm caching for playground (#21039)
• e92fd51 [ty] Add cycle handling to lazy_default (#20967)
• c3631c7 [ty] Add docstrings for ty_extensions functions (#21036)
• 589e8ac [ty] Infer type for implicit self parameters in method bodies (#20922)
• 76a5531 Fix rare multithreaded related hang (#21038)
• Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

[fmind]

Superseded by the v5.0.0 canonical-stack migration: all dependencies were bumped to current (Python 3.14, MLflow 3, ruff 0.15, etc.) and Dependabot now tracks the uv ecosystem instead of the removed requirements.txt. Closing as obsolete.

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.