Bump pyanalyze from 0.9.0 to 0.13.1

[dependabot]

Bumps pyanalyze from 0.9.0 to 0.13.1.

Release notes

Sourced from pyanalyze's releases.

0.13.1

0.13.0 failed to upload due to a change in PyPI, but as it had already been tagged, this is release 0.13.1.

• Use Trusted Publishing to publish releases (#806)

Changelog for version 0.13.0:

• Flag use of generators that are immediately discarded (#800)
• Fix crash on some occurrences of ParamSpec in stub files (#797)
• Fix crash when Pydantic 1 is installed (#793)
• Fix error on use of TypeVar defaults in stubs (PEP 696). The default is still ignored, but now the TypeVar is treated as if it has no default. (#791)
• Add new error code unsafe_comparison, which gets triggered when two values are compared that can never be equal. (#784)
• Improve representation of known module, function, and type objects in error messages (#788)
• Add a mechanism to allow overriding the global variables in an analyzed module. Use this mechanism to set the type of qcore.testing.Anything to Any. (#786)
• Rename the is_compatible and get_compatibility_error functions to is_assignable and get_assignability_error to align with the terminology in the typing spec (#785)
• Fix binary operations involving unions wrapped in Annotated (#779)
• Fix various issues with Python 3.13 and 3.14 support (#773)
• Improve ParamSpec support (#772, #777)
• Fix handling of stub functions with positional-only parameters with defaults (#769)
• Recognize exhaustive pattern matching (#766)
• Narrow the types of variables assigned within complex patterns (#766)
• New error code generator_return is raised when a generator does not return an iterable type, or an async generator does not return an async iterable type (#756)
• Fix type narrowing for certain conditionals using or (#755)
• Fix incorrect undefined_name errors when a class is nested in a nested function and uses a name from the outer function (#750)
• Fix incorrect possibly_undefined_name error on certain uses of the walrus operator (#749)
• Fix narrowing on isinstance calls with arguments that are not instances of type, such as unions and certain typing special forms (#747)
• Detect invalid calls to isinstance (#747)
• Support calls to TypeVar and several other typing constructs in code that is not executed (e.g., under if TYPE_CHECKING) (#746)
• Fix spurious errors for the class-based syntax for creating NamedTuple classes (#746)
• Make error registry into a custom class instead of an enum, removing dependency on aenum (#739)
• Treat subclasses of int as subclasses of float and complex too (#738)
• Fix crash on encountering certain decorators in stubs (#734)
• Fix inference of signature for certain secondary methods (#732)

... (truncated)

Changelog

Sourced from pyanalyze's changelog.

Version 0.13.1 (August 7, 2024)

• Use Trusted Publishing to publish releases (#806)

Version 0.13.0 (August 7, 2024)

• Flag use of generators that are immediately discarded (#800)
• Fix crash on some occurrences of ParamSpec in stub files (#797)
• Fix crash when Pydantic 1 is installed (#793)
• Fix error on use of TypeVar defaults in stubs (PEP 696). The default is still ignored, but now the TypeVar is treated as if it has no default. (#791)
• Add new error code unsafe_comparison, which gets triggered when two values are compared that can never be equal. (#784)
• Improve representation of known module, function, and type objects in error messages (#788)
• Add a mechanism to allow overriding the global variables in an analyzed module. Use this mechanism to set the type of qcore.testing.Anything to Any. (#786)
• Rename the is_compatible and get_compatibility_error functions to is_assignable and get_assignability_error to align with the terminology in the typing spec (#785)
• Fix binary operations involving unions wrapped in Annotated (#779)
• Fix various issues with Python 3.13 and 3.14 support (#773)
• Improve ParamSpec support (#772, #777)
• Fix handling of stub functions with positional-only parameters with defaults (#769)
• Recognize exhaustive pattern matching (#766)
• Narrow the types of variables assigned within complex patterns (#766)
• New error code generator_return is raised when a generator does not return an iterable type, or an async generator does not return an async iterable type (#756)
• Fix type narrowing for certain conditionals using or (#755)
• Fix incorrect undefined_name errors when a class is nested in a nested function and uses a name from the outer function (#750)
• Fix incorrect possibly_undefined_name error on certain uses of the walrus operator (#749)
• Fix narrowing on isinstance calls with arguments that are not instances of type, such as unions and certain typing special forms (#747)
• Detect invalid calls to isinstance (#747)
• Support calls to TypeVar and several other typing constructs in code that is not executed (e.g., under if TYPE_CHECKING) (#746)
• Fix spurious errors for the class-based syntax for creating NamedTuple classes (#746)
• Make error registry into a custom class instead of an enum, removing dependency on aenum (#739)
• Treat subclasses of int as subclasses of float and complex too (#738)
• Fix crash on encountering certain decorators in stubs (#734)
• Fix inference of signature for certain secondary methods (#732)

... (truncated)

Commits

• 121d192 Use Trusted Publishing (#806)
• d7e372a Release 0.13.0 (#805)
• c00c793 Bump black from 24.4.2 to 24.8.0 (#803)
• 58124fe Flag unused generators (#800)
• 1961de2 Fix crash on ParamSpec (#797)
• c5c5e0f Bump ruff from 0.4.9 to 0.5.2 (#796)
• 44fe2ab Bump actions/setup-python from 4 to 5 (#712)
• 0ca821e Remove deprecated Ellipsis class (#794)
• 9390c2e Update test_typeshed for typeshed change (#795)
• af3309a fix crash on Pydantic 1 (#793)
• Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

[github-actions]

🦙 MegaLinter status: ❌ ERROR

Descriptor	Linter	Files	Fixed	Errors	Elapsed time
❌ ACTION	actionlint	5		1	0.06s
✅ COPYPASTE	jscpd	yes		no	1.63s
❌ EDITORCONFIG	editorconfig-checker	56		1	0.13s
✅ JSON	jsonlint	1		0	0.23s
✅ JSON	prettier	1	0	0	0.4s
✅ JSON	v8r	1		0	2.15s
✅ MARKDOWN	markdownlint	3	0	0	0.42s
✅ MARKDOWN	markdown-link-check	3		0	1.79s
✅ MARKDOWN	markdown-table-formatter	3	1	0	0.39s
❌ PYTHON	bandit	13		45	1.11s
✅ PYTHON	black	13	0	0	1.06s
❌ PYTHON	flake8	13		38	0.55s
✅ PYTHON	isort	13	0	0	0.35s
❌ PYTHON	mypy	13		1	9.2s
❌ PYTHON	pylint	13		4	7.12s
❌ PYTHON	pyright	13		26	10.05s
❌ PYTHON	ruff	13	0	1	0.03s
❌ REPOSITORY	checkov	yes		4	12.31s
✅ REPOSITORY	gitleaks	yes		no	1.5s
✅ REPOSITORY	git_diff	yes		no	0.01s
✅ REPOSITORY	grype	yes		no	13.44s
✅ REPOSITORY	secretlint	yes		no	0.69s
✅ REPOSITORY	trivy	yes		no	6.5s
✅ REPOSITORY	trivy-sbom	yes		no	1.12s
✅ REPOSITORY	trufflehog	yes		no	3.47s
❌ SPELL	cspell	57		768	15.35s
✅ SPELL	lychee	15		0	1.24s
✅ XML	xmllint	11	0	0	0.01s
✅ YAML	prettier	11	0	0	0.61s
✅ YAML	v8r	11		0	13.32s
❌ YAML	yamllint	11		8	0.41s

See detailed report in MegaLinter reports

MegaLinter is graciously provided by

[sonarcloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarCloud