Ruff 0.17.4 adds security rule, speeds fixes

This is a practical hardening release: less about flashy features, more about making Ruff safer and more dependable in automated Python workflows.

• –Flags `tarfile.open(..., ignore_zeros=True)`, which can relax archive validation and create security risks.
• –Prevents `flake8-logging-format` fixes from changing behavior or producing invalid syntax.
• –Fixes a diagnostic-renderer panic on BOM-prefixed files and improves visibility into nonprinting characters.
• –Optimizes formatting and repeated-dictionary-key checks, benefiting CI, pre-commit hooks, and large codebases.
• –Preview rules require Ruff’s `--preview` mode, so teams should opt in deliberately before enforcing them.