[dependabot]

Bumps pylint from 4.0.9 to 4.1.1.

Release notes

Sourced from pylint's releases.

v4.1.1

What's new in Pylint 4.1.1?

Release date: 2026-09-29

Other Changes

• Pylint 4.1.0 could not be uploaded to PyPI, because it required an unreleased version of dill on Python 3.15, and PyPI refuses such a dependency. 4.1.1 is the first 4.1 release available on PyPI, see the 4.1.0 changes below.

  Refs #11495

v4.1.0

What's new in Pylint 4.1.0?

Release date: 2026-09-29

Startup is about 25% faster thanks to lazy imports. The import checker caches its isort configuration, which makes pylint about 17% faster on ansible. Finding the files to lint with --recursive=y no longer walks ignored directories such as .venv or node_modules, which took seconds on large trees. The duplicate-code checker and symilar also received optimizations that result in considerable performance improvements and memory use reduction on larger codebases. For example, pandas analysis went from 20 min to 55 s and pylint does not get OOM-killed when analyzing cpython anymore.

Python 3.15 support progresses: the unpacking in comprehensions added by PEP 798 no longer raises false positives, and the standard library deprecations of Python 3.15 are followed.

For CI, there is a new built-in junit output format (--output-format=junit), the NO_COLOR and FORCE_COLOR environment variables are respected, and the files to lint can now be set with the files option in the configuration file.

New checks: looping-through-iterator, impossible-comparison, chained-comparison-all-equal and using-comprehension-unpacking-in-unsupported-version.

Running with --jobs no longer duplicates the messages of extensions or ignores extensions enabled in the configuration.

Plugin authors: the confidence parameter can no longer be None, except in is_message_enabled, and the MSG_STATE_* constants are deprecated in favor of the MessageDisableReason enum.

The required astroid version is now 4.3.2. See the astroid changelog for additional fixes, features, and performance improvements applicable to pylint.

... (truncated)

Commits

• 8c6daca Bump pylint to 4.1.1, update changelog (#11499)
• bdb17b3 [Backport maintenance/4.1.x] Only pin the unreleased dill for the tests (#11498)
• 92bb7ba Bump pylint to 4.1.0, update changelog
• 9144956 Fix a crash in import-private-name on attribute access rooted at a non-Name n...
• 68366cb Fix false positive for unnecessary-lambda when variable is reassigned or de...
• c741677 [pre-commit.ci] pre-commit autoupdate (#11488)
• a9ebdf6 Add regression test for unsubscriptable-object FP on class_getitem (#11487)
• b877d3b Do not flag ungrouped imports inside OS platform guards (#11217)
• 87351be Update OSS-Fuzz docs for Python 3.14 (#11485)
• 4f263c1 Fix access checks through called methods (#11456)
• Additional commits viewable in compare view

[github-actions]

🤖 Claude Code Review

PR Review: Bump pylint from 4.0.9 to 4.1.1

The diff changes one line in pyproject.toml:81. It bumps the lint dependency pylint for python_version > '3.11'. I only read the diff and did not run the linter.

Code Quality

• ✅ Style: The pin format matches the neighbouring entries, which use exact == pins and environment markers.
• ✅ No commented-out code.
• ✅ Naming and DRY: Not applicable to this change.
• ⚠️ Defects:
  • Pylint minor releases often add or change checks. The CI lint step (pylint $(git ls-files '*.py' ':!:docs/source/*')) should pass before merge, and any new warnings should be fixed or explicitly disabled.
  • pylint-per-file-ignores==3.2.1 is still pinned. Confirm it is compatible with pylint 4.1.x, because plugin API changes can break it.
  • The python_version <= '3.11' pin stays at pylint==3.3.9. That is expected, since pylint 4 requires Python 3.10 or later, so that line should not change.
• ✅ .claude/CLAUDE.md: It is unchanged and has no environment-specific content.

Testing

• ✅ No new code was added, so no new unit or integration tests are needed.
• ➖ Coverage is unaffected, because this is a dev-only dependency.

Documentation

• ✅ README and API docs: No update needed.
• ➖ CHANGELOG.md: Dependabot bumps of dev tooling are usually not logged. Check this repo's convention, since recent bump commits (isort, virtualenv, coverage) don't appear to have touched it.
• ✅ Markdown: No Markdown files changed.

Security

• ✅ No credentials, license files (.lic) or AQAAAD strings.
• ✅ No input handling or logging changes.
• ✅ The exact pin keeps the build reproducible.

Summary

This is a low-risk dev-dependency bump that is fine to merge once CI lint passes with 4.1.1. I found no blocking issues.

Automated code review analyzing defects and coding standards

[github-actions]

🤖 Claude Code Review

PR Review: Bump pylint 4.0.9 → 4.1.1

The diff changes one line in pyproject.toml:81. It bumps pylint for Python > 3.11 in the lint group. I reviewed only the diff and ran no tools.

Code Quality

• ✅ Style: The change matches the surrounding pinned-dependency lines.
• ✅ No commented-out code.
• ✅ Naming and DRY: Not applicable.
• ✅ Defects: I found none. The python_version <= '3.11' pin stays at pylint==3.3.9, so older interpreters are unaffected.
  • ⚠️ pylint minor releases often add new checks. Confirm that CI's pylint $(git ls-files '*.py' ':!:docs/source/*') still passes on Python 3.12 and later.
  • ⚠️ Confirm that pylint-per-file-ignores==3.2.1 is compatible with pylint 4.1.x.
• ✅ .claude/CLAUDE.md: It is unchanged. It contains nothing specific to a local environment.

Testing

• ✅ Unit and integration tests, edge cases, coverage: Not applicable. This is a lint-tooling version bump with no code change. The CI lint run is the effective test.

Documentation

• ✅ README, API docs and inline comments: No update is needed.
• ℹ️ CHANGELOG.md: It is not updated. Dependabot bumps of dev-only tooling usually skip it. Check whether this project's convention requires an entry.
• ✅ Markdown: No Markdown files are changed.

Security

• ✅ No hardcoded credentials, no sensitive data in logs, no .lic files or AQAAAD strings.
• ✅ Input validation and error handling: Not applicable.
• ✅ Supply chain: The version is pinned exactly, and it is a dev-only dependency.

Summary

This is a low-risk dev-dependency bump, and I have no blocking issues. It can merge once CI lint passes on Python 3.12 and later.

Automated code review analyzing defects and coding standards