build(deps): bump pyflakes from 4.0.0 to 4.0.3 in /configs/pip/flake8 in the github-actions-all group across 1 directory

[dependabot]

Bumps the github-actions-all group with 1 update in the /configs/pip/flake8 directory: pyflakes.

Updates pyflakes from 4.0.0 to 4.0.3

Changelog

Sourced from pyflakes's changelog.

4.0.3 (2026-10-07)

• A few performance improvements
• Fix handling of unconventional NamedTuple / TypedDict argument 1.

4.0.2 (2026-10-03)

• Fix for lazy import of Literal considered eager

4.0.1 (2026-09-30)

• Fix for lazy imports inside try: (not at module scope)

Commits

• 8526af8 Release 4.0.3
• 5f2af95 handle runtime types for NamedTuple / TypedDict arg 1 (#907)
• 9f0a7f9 optimize futuresAllowed (#904)
• 8d33e0e improve startup time by ~50ms (65%) (#905)
• 4756a37 Release 4.0.2
• d5e0b3d handle when Literal is lazily imported (#903)
• 9c5e332 Release 4.0.1
• fe3a2cf fix missing error for lazy import in try: (#902)
• See full diff in compare view

[sbp-bvanb]

🤖 pr-reviewer report

Branch: dependabot/pip/configs/pip/flake8/github-actions-all-a97475bc48 → main | Head: 3120388 | Commits: 1 | Files: 1
Verdict: ❌ Changes requested

Dependabot bumps the hash-pinned pyflakes from 4.0.0 to 4.0.1 in the flake8 pip requirements. Both new hashes match PyPI, and the version fits flake8 7.4.1's pyflakes>=4.0.0,<4.1.0 range.

Blocking

• [git] PR title / commit 3120388: the type build is not one of the allowed types (feat|fix|docs|style|refactor|test|chore|ci). The PR title is also about 100 characters, over the 72-character limit, and it becomes the squash commit on main. Fix: retitle to chore(deps): bump pyflakes to 4.0.1. To stop this coming back, add commit-message: {prefix: chore, include: scope} to the pip entries in .github/dependabot.yml.

Checks

• Git: fail (commit type and title length, see Blocking)
• Correctness: pass
• Security: pass (hashes match PyPI)
• Maintainability: pass
• Over-engineering: pass
• N/A: Terraform, Chef, Docker, Claude plugins

🤖 doc-reviewer report

Branch: dependabot/pip/configs/pip/flake8/github-actions-all-a97475bc48 → main | Head: 3120388 | Docs: 0
Verdict: ❌ Changes requested

This PR only bumps configs/pip/flake8/requirements.txt, but the root README at head has no ## Quickstart and holds reference and migration material, and there is no docs/ directory.

Blocking

• [quickstart] README.md:10: there is no ## Quickstart section. The steps sit under ## Usage. Rename it to ## Quickstart and keep only the minimal workflow steps (lines 12-30).
• [lean] README.md:32: the inputs/options table (lines 32-47) does not belong in the README. Move it to docs/configuration.md and link it.
• [lean] README.md:49: the explanatory notes on persist-credentials, .python-version and the project-environment tools (lines 49-58) do not belong in the README. Move them to docs/configuration.md and link it.
• [lean] README.md:60: the uv workspace example section does not belong in the README. Move it to docs/examples.md and link it.
• [lean] README.md:72: the Migrating to v0.3.0 section does not belong in the README. Move it to docs/migrating.md and link it.

Checks

• README: pass
• Quickstart: fail (no ## Quickstart section)
• Lean: fail (4 sections)
• docs/ linked: pass (0 pages)
• Links: pass (2 checked)

🤖 dependency-reviewer report

Branch: dependabot/pip/configs/pip/flake8/github-actions-all-a97475bc48 → main | Head: 3120388 | Dependencies: 4
Verdict: ⚠️ Approved with comments

Three of the four pins are current, but pyflakes goes to 4.0.1 when 4.0.3 is already out.

Should fix

• [outdated] configs/pip/flake8/requirements.txt:3: pyflakes==4.0.1, latest is 4.0.3. Bump to 4.0.3 and regenerate the hashes. It is still inside flake8 7.4.1's pyflakes<4.1.0,>=4.0.0 range.

Checks

• Up to date: 3 (flake8 7.4.1, pycodestyle 2.15.0, mccabe 0.7.0)
• Outdated: 1

---

Generated by mcvs_review 3.1.0 (pr-reviewer, doc-reviewer, dependency-reviewer) at commit 3120388.

[sbp-bvanb]

@dependabot recreate

[sbp-bvanb]

Feedback from the mcvs_review summary:

• Commit type / PR title (pr-reviewer): not changed. build(deps): is what Dependabot generates and is the convention already on main (e.g. build(deps): bump the github-actions-all group across 1 directory with 2 updates #63), and this repo's lint-commit check accepts it (green). Changing the prefix for all Dependabot PRs would be a .github/dependabot.yml change, which belongs in its own PR, not in a Dependabot bump. The squash-merge title can be shortened when merging.
• README layout (doc-reviewer): not changed here. The findings predate this PR, which only bumps a pinned requirement; they belong in a separate docs PR.