chore(deps): bump the dependencies group with 2 updates

[dependabot]

Bumps the dependencies group with 2 updates: isort and pylint.

Updates isort from 9.0.1 to 9.0.2

Release notes

Sourced from isort's releases.

9.0.2

🪲 Fixes

• Preserve blank lines before comment-only sections by @​fzlzjerry in PyCQA/isort#2655
• Preserve trailing-comma layout when sorting reexports by @​PSR94 in PyCQA/isort#2605
• fix: treat EOF on stdin as 'quit' in --interactive prompt by @​Eljees in PyCQA/isort#2653
• Fix multi_line_output=10 emitting unparsable code around trailing comments by @​dylanpulver in PyCQA/isort#2651
• Stop configuration discovery at Git worktree boundaries by @​vzer200 in PyCQA/isort#2654
• fix: preserve trailing comments when sorting literals by @​Manny7717 in PyCQA/isort#2647
• Preserve LF stdin output on Windows by @​AleksZyro in PyCQA/isort#2616
• Handle star imports better when using parenthesis by @​DanielNoord in PyCQA/isort#2665
• Sort unwrapped lines in force_sort_within_sections by @​DanielNoord in PyCQA/isort#2667
• Preserve file line endings when sorting reexports by @​vyrnsynx in PyCQA/isort#2669
• Fix float_to_top hoisting indented semicolon imports by @​Pajimo in PyCQA/isort#2671
• Preserve CRLF blank lines during float-to-top preprocessing by @​hansu650 in PyCQA/isort#2683
• mypy: type-check tests and use pathlib fixtures by @​DanielNoord in PyCQA/isort#2685

Other changes

• Fix codecov build reports by @​DanielNoord in PyCQA/isort#2666
• Refactors in process by @​DanielNoord in PyCQA/isort#2677
• Core developers revision by @​staticdev in PyCQA/isort#2691

Full Changelog: PyCQA/isort@9.0.1...9.0.2

Commits

• 9f90561 Core developers revision
• 4371472 Fix a "security" issue
• e74b4ba Do some formatting and setting updates
• 539abb1 Bump the uv group with 15 updates
• 0482160 Fully type check tests and modernize code
• bbda474 Bump pypa/cibuildwheel from 4.2.0 to 4.2.1 in the github-actions group
• 1fd0701 Agent Host changes for agents/dependabot-monthly-updates-uv
• 6911091 Always split on parsed.line_separator
• 3808b70 Keep CRLF regression cases beside existing check-mode tests
• 3202ce8 Preserve CRLF blank lines during float-to-top preprocessing
• Additional commits viewable in compare view

Updates pylint from 4.0.9 to 4.1.1

Release notes

Sourced from pylint's releases.

v4.1.1

What's new in Pylint 4.1.1?

Release date: 2026-09-29

Other Changes

• Pylint 4.1.0 could not be uploaded to PyPI, because it required an unreleased version of dill on Python 3.15, and PyPI refuses such a dependency. 4.1.1 is the first 4.1 release available on PyPI, see the 4.1.0 changes below.

  Refs #11495

v4.1.0

What's new in Pylint 4.1.0?

Release date: 2026-09-29

Startup is about 25% faster thanks to lazy imports. The import checker caches its isort configuration, which makes pylint about 17% faster on ansible. Finding the files to lint with --recursive=y no longer walks ignored directories such as .venv or node_modules, which took seconds on large trees. The duplicate-code checker and symilar also received optimizations that result in considerable performance improvements and memory use reduction on larger codebases. For example, pandas analysis went from 20 min to 55 s and pylint does not get OOM-killed when analyzing cpython anymore.

Python 3.15 support progresses: the unpacking in comprehensions added by PEP 798 no longer raises false positives, and the standard library deprecations of Python 3.15 are followed.

For CI, there is a new built-in junit output format (--output-format=junit), the NO_COLOR and FORCE_COLOR environment variables are respected, and the files to lint can now be set with the files option in the configuration file.

New checks: looping-through-iterator, impossible-comparison, chained-comparison-all-equal and using-comprehension-unpacking-in-unsupported-version.

Running with --jobs no longer duplicates the messages of extensions or ignores extensions enabled in the configuration.

Plugin authors: the confidence parameter can no longer be None, except in is_message_enabled, and the MSG_STATE_* constants are deprecated in favor of the MessageDisableReason enum.

The required astroid version is now 4.3.2. See the astroid changelog for additional fixes, features, and performance improvements applicable to pylint.

... (truncated)

Commits

• 8c6daca Bump pylint to 4.1.1, update changelog (#11499)
• bdb17b3 [Backport maintenance/4.1.x] Only pin the unreleased dill for the tests (#11498)
• 92bb7ba Bump pylint to 4.1.0, update changelog
• 9144956 Fix a crash in import-private-name on attribute access rooted at a non-Name n...
• 68366cb Fix false positive for unnecessary-lambda when variable is reassigned or de...
• c741677 [pre-commit.ci] pre-commit autoupdate (#11488)
• a9ebdf6 Add regression test for unsubscriptable-object FP on class_getitem (#11487)
• b877d3b Do not flag ungrouped imports inside OS platform guards (#11217)
• 87351be Update OSS-Fuzz docs for Python 3.14 (#11485)
• 4f263c1 Fix access checks through called methods (#11456)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions