Bump isort from 7.0.0 to 8.0.0 by dependabot[bot] · Pull Request #204 · senzing-garage/resolver

dependabot · 2026-03-13T10:43:01Z

Bumps isort from 7.0.0 to 8.0.0.

Release notes

8.0.0

Changes

Update CHANGELOG for version 8.0.0 (#2460) @DanielNoord

Fix edge case of __future__ import. (#2458) @skv0zsneg

Fix the Plone profile to be compatible with black (#2457) @ale-rt

typo fix (#2450) @jsta

Remove the setuptools plugin (#2427) @DanielNoord

Turn some warnings into errors in test suite (#2449) @DanielNoord

chore: replace black with ruff in clean.sh (#2448) @joao-faria-dev

feat!: remove old finders flag and legacy finder logic (#2446) @joao-faria-dev

Fix whitespace insensitive check triggering on tabs (#2437) @robsdedude

Fix line separator detection not considering form feed as white space (#2436) @robsdedude

Fix #1964: lines_before_import sometimes ignored (#1965) @robsdedude

Remove reference to 3.9 in README (#2434) @DanielNoord

🚀 Features

Ensure multiprocessing.Pool is always closed and joined (#2442) @DanielNoord

👷 Continuous Integration

Simplify CI by putting similar steps into a single action file (#2444) @DanielNoord

📦 Dependencies

Bump actions/checkout from 5 to 6 in the github-actions group (#2451) @dependabot[bot]

Bump astral-sh/setup-uv from 6 to 7 in the github-actions group (#2441) @dependabot[bot]

Changelog

Sourced from isort's changelog.

8.0.0 February 19 2026

Removed --old-finders and --magic-placement flags and old_finders configuration option. The legacy finder logic that relied on environment introspection has been removed (#2445) @joao-faria-dev

Update the plone profile to not clash with black (#2456) @ale-rt

6.1.0 October 1 2025

Add python 3.14 classifier and badge (#2409) @staticdev

Drop use of non-standard pkg_resources API (#2405) @dvarrazzo

6.0.1 Febuary 26 2025

Add OSError handling in find_imports_in_file (#2331) @kobarity

6.0.0 January 27 2025

Remove support for Python 3.8 (#2327) @DanielNoord

Python 3.13 support (#2306) @mayty

Speed up exists_case_sensitive calls (#2264) @correctmost

Ensure that split_on_trailing_comma works with as imports (#2340) @DanielNoord

Black profile: enable magic comma (#2236) @MrMino

Update line_length and single_line_exclusions in google profile (#2149) @jagapiou

Allow --diff to be used with --jobs (#2302) @mnakama

Fix wemake profile to have correct character limit (#2241) @sobolevn

Fix sort_reexports code mangling (#2283) @Helveg

Fix correct group by package tokenization (#2136) @glasnt

5.13.2 December 13 2023

Apply the bracket fix from issue #471 only for use_parentheses=True (#2184) @bp72

Confine pre-commit to stages (#2213) @davidculley

Fixed colors extras (#2212) @staticdev

5.13.1 December 11 2023

Fixed integration tests (#2208) @bp72

Fixed normalizing imports from more than one level of parent modules (issue/2152) (#2191) @bp72

Remove optional dependencies without extras (#2207) @staticdev

5.13.0 December 9 2023

Cleanup deprecated extras (#2089) @staticdev

Fixed #1989: settings lookup when working in stream based mode

Fixed 80 line length for wemake linter (#2183) @skatromb

Add support for Python 3.12 (#2175) @hugovk

Fixed: add newest version to pre-commit docs (#2190) @AzulGarza

Fixed assertions in test_git_hook (#2196) @mgorny

Removed check for include_trailing_comma for the Hanging Indent wrap mode (#2192) @bp72

Use the standard library tomllib on sufficiently new python (#2202) @eli-schwartz

Update pre-commit.md version number (#2197) @nicobako

... (truncated)

Commits

3459bde Merge pull request #2460 from PyCQA/DanielNoord-patch-1
6e70bb6 Update CHANGELOG for version 8.0.0
b0f2dab Merge pull request #2458 from skv0zsneg/issue/1882
313797b Fix lint.
7d3a6f5 Add ignore for cyclomatic complexity check.
6b9f895 Remove debug prints.
45f2497 Add tests for edge case future imports handler.
fe57bfd Add edge case future imports handler.
e8c127b Merge pull request #2457 from ale-rt/ale/2456/fix-plone-profile
293c201 Fix the Plone profile to be compatible with black
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Resolves #2460
Resolves #2458
Resolves #2457
Resolves #2450
Resolves #2427
Resolves #2449
Resolves #2448
Resolves #2446
Resolves #2437
Resolves #2436
Resolves #1964
Resolves #1965
Resolves #2434
Resolves #2442
Resolves #2444
Resolves #2451
Resolves #2441
Resolves #2445
Resolves #2456
Resolves #2409
Resolves #2405
Resolves #2331
Resolves #2327
Resolves #2306
Resolves #2264
Resolves #2340
Resolves #2236
Resolves #2149
Resolves #2302
Resolves #2241
Resolves #2283
Resolves #2136
Resolves #471
Resolves #2184
Resolves #2213
Resolves #2212
Resolves #2208
Resolves #2191
Resolves #2207
Resolves #2089
Resolves #1989
Resolves #2183
Resolves #2175
Resolves #2190
Resolves #2196
Resolves #2192
Resolves #2202
Resolves #2197

github-actions · 2026-03-13T10:43:34Z

🤖 Claude Code Review

PR Code Review

Code Quality

✅ Style guide: Simple version bump, no style issues.

✅ No commented-out code: N/A

✅ Meaningful variable names: N/A

✅ DRY principle: N/A

✅ Defects: No logic errors or bugs introduced. This is a straightforward dependency version bump for isort from 7.0.0 to 8.0.0 for Python > 3.11.

✅ CLAUDE.md: No issues with project configuration.

Testing

✅ Unit/Integration tests: Not applicable for a dependency version bump.

⚠️ Coverage: No tests exist in this project (noted in CLAUDE.md). Not a concern for this PR specifically.

Documentation

✅ README: No update needed.

✅ API docs: No update needed.

✅ Inline comments: N/A

❌ CHANGELOG.md: No CHANGELOG.md update was included. Dependency bumps are typically worth noting.

✅ Markdown formatting: N/A

Security

✅ No hardcoded credentials: N/A

✅ Input validation: N/A

✅ Error handling: N/A

✅ No sensitive data in logs: N/A

✅ No license files: None present.

Summary

This is a minimal, low-risk PR bumping isort from 7.0.0 to 8.0.0 for Python > 3.11. The only note is the absence of a CHANGELOG entry. The change is appropriate and consistent with the existing pattern of version-pinning lint tools with Python version constraints.

Verdict: Approve with minor suggestion — add a CHANGELOG entry if the project maintains one.

Automated code review analyzing defects and coding standards

Bumps [isort](https://github.com/PyCQA/isort) from 7.0.0 to 8.0.0. - [Release notes](https://github.com/PyCQA/isort/releases) - [Changelog](https://github.com/PyCQA/isort/blob/main/CHANGELOG.md) - [Commits](PyCQA/isort@7.0.0...8.0.0) --- updated-dependencies: - dependency-name: isort dependency-version: 8.0.0 dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2026-03-13T10:48:43Z

🤖 Claude Code Review

Code Review

PR Summary: Bumps isort from 7.0.0 to 8.0.0 for Python > 3.11 in pyproject.toml.

Code Quality

✅ Style guide: Single-line change follows existing formatting conventions.
✅ No commented-out code
✅ Meaningful variable names: N/A
✅ DRY principle: N/A
✅ Defects: No logic errors. The version constraint python_version > '3.11' is consistent with the existing pattern used for the isort==6.1.0 line above it. No issues identified.
✅ CLAUDE.md: No concerns — this change is appropriate for any developer environment.

Testing

❌ Unit/integration tests: No tests included, but this is a dependency version bump with no functional code changes. Linting-only dependency; test coverage is not applicable here.
ℹ️ Note: It would be worth confirming CI passes with isort 8.0.0 since major version bumps can introduce breaking changes (e.g., new import ordering rules that conflict with existing code style).

Documentation

✅ README/API docs: No changes needed for a dev-dependency bump.
❌ CHANGELOG.md: No changelog entry included. Dependency bumps (especially major version bumps) are typically worth noting.

Security

✅ No hardcoded credentials
✅ No sensitive data
✅ No license files

Summary

This is a straightforward dependency bump. The only minor concern is the missing CHANGELOG entry for a major version bump (`7.x` → `8.x`). Also recommend verifying that CI runs cleanly, as `isort 8.0.0` may have changed default behaviors that could affect import ordering in existing `.py` files.

Automated code review analyzing defects and coding standards

dependabot bot assigned docktermj Mar 13, 2026

dependabot bot requested a review from a team as a code owner March 13, 2026 10:43

dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Mar 13, 2026

dependabot bot force-pushed the dependabot/pip/isort-8.0.0 branch from d3ff765 to d8f7316 Compare March 13, 2026 10:48

docktermj approved these changes Mar 13, 2026

View reviewed changes

docktermj merged commit a4ca6db into main Mar 13, 2026
18 checks passed

docktermj deleted the dependabot/pip/isort-8.0.0 branch March 13, 2026 13:01

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump isort from 7.0.0 to 8.0.0#204

Bump isort from 7.0.0 to 8.0.0#204
docktermj merged 1 commit intomainfrom
dependabot/pip/isort-8.0.0

dependabot bot commented on behalf of github Mar 13, 2026 •

edited by github-actions bot

Loading

Uh oh!

github-actions bot commented Mar 13, 2026

Uh oh!

github-actions bot commented Mar 13, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Conversation

dependabot bot commented on behalf of github Mar 13, 2026 • edited by github-actions bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

8.0.0

Changes

🚀 Features

👷 Continuous Integration

📦 Dependencies

8.0.0 February 19 2026

6.1.0 October 1 2025

6.0.1 Febuary 26 2025

6.0.0 January 27 2025

5.13.2 December 13 2023

5.13.1 December 11 2023

5.13.0 December 9 2023

Uh oh!

github-actions bot commented Mar 13, 2026

🤖 Claude Code Review

PR Code Review

Code Quality

Testing

Documentation

Security

Summary

Verdict: Approve with minor suggestion — add a CHANGELOG entry if the project maintains one.

Uh oh!

github-actions bot commented Mar 13, 2026

🤖 Claude Code Review

Code Review

Code Quality

Testing

Documentation

Security

Summary

This is a straightforward dependency bump. The only minor concern is the missing CHANGELOG entry for a major version bump (7.x → 8.x). Also recommend verifying that CI runs cleanly, as isort 8.0.0 may have changed default behaviors that could affect import ordering in existing .py files.

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

dependabot bot commented on behalf of github Mar 13, 2026 •

edited by github-actions bot

Loading

This is a straightforward dependency bump. The only minor concern is the missing CHANGELOG entry for a major version bump (`7.x` → `8.x`). Also recommend verifying that CI runs cleanly, as `isort 8.0.0` may have changed default behaviors that could affect import ordering in existing `.py` files.