Bump pylint from 3.3.1 to 4.0.7

[dependabot]

Bumps pylint from 3.3.1 to 4.0.7.

Release notes

Sourced from pylint's releases.

v4.0.7

What's new in Pylint 4.0.7?

Release date: 2026-08-09

False Positives Fixed

• Fix a false positive for invalid-name when a module-level variable is assigned an instance of a TypedDict subclass. Such a name is a value, not a type definition, so it is now checked against the constant or variable regex instead of class-rgx.

  Closes #11231

Other Bug Fixes

• Fix a crash in the bad-open-mode check when the mode argument of open is the NotImplemented constant (Python >= 3.14).

  Closes #11099

• Fix a crash in the not-context-manager and not-async-context-manager checks when the context manager infers to a value without a name, such as the slice returned by with slice(...) / async with slice(...).

  Closes #11102

• Fix a false positive for nested-min-max (W3301) when the inner min/max call carries a keyword argument such as key=. Flattening the call dropped the keyword and changed the result, so nested calls whose inner call has keyword arguments are no longer flagged.

  Closes #11130

• Fix a false suggestion from nested-min-max (W3301): when rewriting a nested min/max into a splat call, arguments positioned after the splatted call were silently dropped, so the suggested code changed the result.

  Closes #11134

• Fix a false positive for too-many-locals (R0914): PEP 695 type parameters, i.e. the T1 and T2 in a generic def f[T1, T2] signature, were counted as local variables. They are type-system constructs, not runtime locals, and are now excluded from the local-variable count.

  Closes #11136

• Fix literal-comparison (R0123) emitting a corrupted suggestion for identifiers that contain is (e.g. axis is 5 was rendered ax== == 5). The suggestion is now rebuilt from the operands and operator.

  Closes #11146

... (truncated)

Commits

• c6768d3 Bump pylint to 4.0.7, update changelog (#11246)
• e96ce2b Stop invalid-name from treating TypedDict instances as classes
• 893294e [Backport maintenance/4.0.x] Fix crash in comparison-with-callable on a proxi...
• 8cd74d4 Fix a crash on calls unpacking dicts with non-string keys
• bc618ad Fix too-many-lines being reported at another module's pragma line
• 3e1ee47 [Backport maintenance/4.0.x] Fix bad-string-format-type false positives for...
• 7ca8116 [Backport maintenance/4.0.x] Fix useless-parent-delegation false positive o...
• 14275a1 [Backport maintenance/4.0.x] Fix literal-comparison suggestion corrupting i...
• a87eaa6 [Backport maintenance/4.0.x] Fix nested-min-max dropping arguments after th...
• bdd017f [Backport maintenance/4.0.x] Fix too-many-locals counting PEP 695 type para...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)