Skip to content

chore(deps-dev): bump the python group with 2 updates - #28

Merged
smorin merged 2 commits into
mainfrom
dependabot/uv/python-a8e464fff4
Oct 1, 2026
Merged

chore(deps-dev): bump the python group with 2 updates#28
smorin merged 2 commits into
mainfrom
dependabot/uv/python-a8e464fff4

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 21, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the python group with 2 updates: ruff and ty.

Updates ruff from 0.16.0 to 0.16.8

Release notes

Sourced from ruff's releases.

0.16.8

Release Notes

Released on 2026-09-16.

Bug fixes

  • Visit functional TypedDict keyword arguments correctly (#28584)
  • [flake8-simplify] Detect nested async with under sync parent (SIM117) (#27821)
  • [flake8-simplify] Preserve operand order in SIM109 fix (#27824)
  • [pyupgrade] Preserve required parentheses in multiline UP040 fixes (#28164)
  • [pyupgrade] Skip TypeVarTuple and ParamSpec conversions with bounds or constraints (UP040, UP046, UP047) (#28505)

Rule changes

  • Add support for __lazy_modules__ (#28459)
  • Recognize PEP-728 TypedDict class keywords (#28533)
  • Recognize quoted types in typing.TypeForm (#28507)
  • Support conditional assignment to __lazy_modules__ (#28491)
  • [flake8-type-checking] Prefer lazy imports over TYPE_CHECKING on Python 3.15 and later (TC001, TC002, TC003) (#28541)
  • [pyupgrade] Make the fix for UP040 always unsafe (#28526)
  • [pyupgrade] Stop recommending deprecated ByteString aliases (UP035) (#28498)
  • [ruff, flake8-use-pathlib] Recognize the parent_mode argument (RUF064, PTH103) (#28528)
  • [ruff] Detect \Z in pytest.raises() match patterns (RUF043) (#28598)

CLI

  • Use rule name and code in formatter incompatibility warnings (#28571)

Configuration

  • [flake8-tidy-imports] Add extend-banned-api (#28644)

Contributors

Install ruff 0.16.8

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ruff/releases/download/0.16.8/ruff-installer.sh | sh
</tr></table>

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.8

Released on 2026-09-16.

Bug fixes

  • Visit functional TypedDict keyword arguments correctly (#28584)
  • [flake8-simplify] Detect nested async with under sync parent (SIM117) (#27821)
  • [flake8-simplify] Preserve operand order in SIM109 fix (#27824)
  • [pyupgrade] Preserve required parentheses in multiline UP040 fixes (#28164)
  • [pyupgrade] Skip TypeVarTuple and ParamSpec conversions with bounds or constraints (UP040, UP046, UP047) (#28505)

Rule changes

  • Add support for __lazy_modules__ (#28459)
  • Recognize PEP-728 TypedDict class keywords (#28533)
  • Recognize quoted types in typing.TypeForm (#28507)
  • Support conditional assignment to __lazy_modules__ (#28491)
  • [flake8-type-checking] Prefer lazy imports over TYPE_CHECKING on Python 3.15 and later (TC001, TC002, TC003) (#28541)
  • [pyupgrade] Make the fix for UP040 always unsafe (#28526)
  • [pyupgrade] Stop recommending deprecated ByteString aliases (UP035) (#28498)
  • [ruff, flake8-use-pathlib] Recognize the parent_mode argument (RUF064, PTH103) (#28528)
  • [ruff] Detect \Z in pytest.raises() match patterns (RUF043) (#28598)

CLI

  • Use rule name and code in formatter incompatibility warnings (#28571)

Configuration

  • [flake8-tidy-imports] Add extend-banned-api (#28644)

Contributors

0.16.7

Released on 2026-09-10.

Preview features

  • [ruff] Add rule for default values on method receivers (RUF077) (#26700)

... (truncated)

Commits
  • 62914c4 Bump version to 0.16.8 (#28648)
  • c47e0cd [ty] Bound aliased intersection expansion during inference (#28546)
  • ff4747b renovate: update uv hashes correctly with setup-uv (#28621)
  • 94efeaa [ty] Compact reachable binding and declaration histories (#28349)
  • 50020fb [ty] Avoid storing constraint nodes twice (#28375)
  • 446bb68 [ty] Compare bound-method receivers before signatures (#28384)
  • 304ab86 [flake8-type-checking] Prefer lazy imports over TYPE_CHECKING on 3.15+ (`...
  • d940b24 [ty] Watch script dependencies in CLI watch mode (#28125)
  • fe9f065 [flake8-tidy-imports] Add extend-banned-api (#28644)
  • 31131db [ty] Support type[A & B] (#27124)
  • Additional commits viewable in compare view

Updates ty from 0.0.65 to 0.0.81

Release notes

Sourced from ty's releases.

0.0.81

Release Notes

Released on 2026-09-14.

Bug fixes

  • Escape glob characters in anchored directory paths (#28518)
  • Ignore divergent markers when detecting descriptors (#28514)

CLI

  • Anchor default exclude patterns at the project root (#28463)

Core type checking

  • Avoid rebinding extracted method calls (#28469)
  • Default-specialize class objects in meta-protocol checks (#28265)
  • Fix MRO ordering for generic bases (#28172)
  • Fix assignability of bounded typevars to intersection types (#28479)
  • Fix variadic partial signature reduction (#28586)
  • Handle gradual metaclass ancestry and conflicts (#28474)
  • Preserve recursive metadata in union transformations (#28497)
  • Preserve runtime comparison semantics when narrowing tagged unions (#28053)
  • Preserve wrapped signatures in nominal descriptor checks (#28466)
  • Reject reassignment of enum members (#28462)
  • Report override conflicts introduced by new bases (#28530)
  • Resolve dependencies within correlated inference alternatives (#28252)
  • Respect instance dictionary storage for slotted classes (#27749)
  • Validate explicitly overridden constructor signatures (#28115)

Performance

  • Avoid redundant superclass member inference (#28587)
  • Reuse rendered union elements when displaying types (#28494)

Memory usage improvements

  • Reduce retained AST memory by shrinking expressions (#28335)
  • Share strings in dependency metadata (#28141)

Contributors

... (truncated)

Changelog

Sourced from ty's changelog.

0.0.81

Released on 2026-09-14.

Bug fixes

  • Escape glob characters in anchored directory paths (#28518)
  • Ignore divergent markers when detecting descriptors (#28514)

CLI

  • Anchor default exclude patterns at the project root (#28463)

Core type checking

  • Avoid rebinding extracted method calls (#28469)
  • Default-specialize class objects in meta-protocol checks (#28265)
  • Fix MRO ordering for generic bases (#28172)
  • Fix assignability of bounded typevars to intersection types (#28479)
  • Fix variadic partial signature reduction (#28586)
  • Handle gradual metaclass ancestry and conflicts (#28474)
  • Preserve recursive metadata in union transformations (#28497)
  • Preserve runtime comparison semantics when narrowing tagged unions (#28053)
  • Preserve wrapped signatures in nominal descriptor checks (#28466)
  • Reject reassignment of enum members (#28462)
  • Report override conflicts introduced by new bases (#28530)
  • Resolve dependencies within correlated inference alternatives (#28252)
  • Respect instance dictionary storage for slotted classes (#27749)
  • Validate explicitly overridden constructor signatures (#28115)

Performance

  • Avoid redundant superclass member inference (#28587)
  • Reuse rendered union elements when displaying types (#28494)

Memory usage improvements

  • Reduce retained AST memory by shrinking expressions (#28335)
  • Share strings in dependency metadata (#28141)

Contributors

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

View with [code]smith Autofix with [code]smith
Need help on this PR? Tag @codesmith-bot with what you need. Autofix is disabled.

@dependabot
chore(deps-dev): bump the python group with 2 updates
737660f 
Bumps the python group with 2 updates: [ruff](https://github.com/astral-sh/ruff) and [ty](https://github.com/astral-sh/ty).


Updates `ruff` from 0.16.0 to 0.16.8
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.16.0...0.16.8)

Updates `ty` from 0.0.65 to 0.0.81
- [Release notes](https://github.com/astral-sh/ty/releases)
- [Changelog](https://github.com/astral-sh/ty/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ty@0.0.65...0.0.81)

---
updated-dependencies:
- dependency-name: ruff
  dependency-version: 0.16.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python
- dependency-name: ty
  dependency-version: 0.0.81
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Sep 21, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@coderabbitai

coderabbitai Bot commented Sep 21, 2026 •
edited
Loading

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: 48135392-0e82-46c9-a247-620d8fb663a4

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
  • Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Autopilot is currently an internal CodeRabbit preview.

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@github-actions

github-actions Bot commented Sep 21, 2026 •
edited
Loading

Copy link
Copy Markdown

🌳 difftree — changes in this PR

📱 Plain text version (mobile / email) 
PR: origin/main...232d8f5 · committed
harness-kit
└── ● uv.lock +38 −38

0 dirs touched · 1 file modified · +38 −38
🌳 0 dirs touched · 1 file modified · +38 −38

${\color{#6e7781}\texttt{PR:~origin/main...232d8f}\texttt{5~·~committed}}$
$\texttt{harness-kit}$
$\texttt{└──~}{\color{#2da44e}\texttt{●}}\texttt{~uv.lock}\texttt{~}{\color{#2da44e}\texttt{+38}}\texttt{~}{\color{#cf222e}\texttt{−38}}$

$\texttt{0~dirs~touched~·~1~file~}{\color{#bf8700}\texttt{modified}}\texttt{~·~}{\color{#2da44e}\texttt{+38}}\texttt{~}{\color{#cf222e}\texttt{−38}}$

🌳 Get your own diff tree at smorinlabs/difftree-action

@smorin
smorin merged commit 444b3b3 into main Oct 1, 2026
6 checks passed
@dependabot
dependabot Bot deleted the dependabot/uv/python-a8e464fff4 branch October 1, 2026 07:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@smorin