Skip to content

chore(deps-dev): bump the version-minor-patch group across 1 directory with 2 updates - #338

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/main/version-minor-patch-879b5afa5f
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/main/version-minor-patch-879b5afa5f

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 15, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the version-minor-patch group with 2 updates in the / directory: ty and ruff.

Updates ty from 0.0.64 to 0.0.95

Release notes

Sourced from ty's releases.

0.0.95

Release Notes

Released on 2026-10-29.

Bug fixes

  • Accept another unpacked TypeVarTuple as a default (#29752)
  • Accept keyword arguments for TypeAliasType name and value (#29802)
  • Detect traversal budget exhaustion in products of lower bounds (#29679)
  • Fix recursive protocol materialization self-comparison (#29809)
  • Reject out-of-scope type variables in PEP 695 pack defaults (#29805)
  • Use a trailing ParamSpec default after a TypeVarTuple (#29755)

LSP server

  • Parenthesize assignment and generator expressions in argument hint edits (#29797)
  • Place argument name inlay hints before grouping parentheses (#29794)
  • Place variable type inlay hints after grouping parentheses (#29795)

Contributors

Install ty 0.0.95

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ty/releases/download/0.0.95/ty-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/ty/releases/download/0.0.95/ty-installer.ps1 | iex"

Download ty 0.0.95

File Platform Checksum
ty-aarch64-apple-darwin.tar.gz Apple Silicon macOS checksum
ty-x86_64-apple-darwin.tar.gz Intel macOS checksum
ty-aarch64-pc-windows-msvc.zip ARM64 Windows checksum
ty-i686-pc-windows-msvc.zip x86 Windows checksum
ty-x86_64-pc-windows-msvc.zip x64 Windows checksum
ty-aarch64-unknown-linux-gnu.tar.gz ARM64 Linux checksum

... (truncated)

Changelog

Sourced from ty's changelog.

0.0.95

Released on 2026-10-29.

Bug fixes

  • Accept another unpacked TypeVarTuple as a default (#29752)
  • Accept keyword arguments for TypeAliasType name and value (#29802)
  • Detect traversal budget exhaustion in products of lower bounds (#29679)
  • Fix recursive protocol materialization self-comparison (#29809)
  • Reject out-of-scope type variables in PEP 695 pack defaults (#29805)
  • Use a trailing ParamSpec default after a TypeVarTuple (#29755)

LSP server

  • Parenthesize assignment and generator expressions in argument hint edits (#29797)
  • Place argument name inlay hints before grouping parentheses (#29794)
  • Place variable type inlay hints after grouping parentheses (#29795)

Contributors

0.0.94

Released on 2026-10-28.

Bug fixes

  • Correctly handle line continuation when fixing unused ignore comments (#29781)
  • Fix Linux x86-64 startup on older kernels (#4853)
  • Fix a panic when a comprehension filter depends on a later binding (#29786)
  • Fix a panic when sorting diagnostics without a source location (#29780)
  • Fix panic on a chained assignment with a missing value (#29787)
  • Reject defaulted TypeVars after a TypeVarTuple in legacy generic classes (#29753)

Other changes

  • Django: suppress invalid-override errors for Meta configurations (#29769)

Contributors

0.0.93

... (truncated)

Commits

Updates ruff from 0.17.1 to 0.17.3

Release notes

Sourced from ruff's releases.

0.17.3

Release Notes

Released on 2026-10-26.

Preview features

  • [suspicious] Add shared-clock-mock (#29074)

Bug fixes

  • [pyupgrade] Avoid incorrect conversions to f-strings (UP032) (#25485)

Performance

  • Buffer stdout in ruff format (#29631)
  • Specialize ASCII identifier lexing (#29503)
  • Speed up identifier and keyword lexing (#29463)

Documentation

  • [flake8-bandit] Describe what the rule actually checks for httpx (S113) (#27936)

Contributors

Install ruff 0.17.3

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ruff/releases/download/0.17.3/ruff-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/ruff/releases/download/0.17.3/ruff-installer.ps1 | iex"

Download ruff 0.17.3

File Platform Checksum
ruff-aarch64-apple-darwin.tar.gz Apple Silicon macOS checksum
ruff-x86_64-apple-darwin.tar.gz Intel macOS checksum
ruff-aarch64-pc-windows-msvc.zip ARM64 Windows checksum

... (truncated)

Changelog

Sourced from ruff's changelog.

0.17.3

Released on 2026-10-26.

Preview features

  • [suspicious] Add shared-clock-mock (#29074)

Bug fixes

  • [pyupgrade] Avoid incorrect conversions to f-strings (UP032) (#25485)

Performance

  • Buffer stdout in ruff format (#29631)
  • Specialize ASCII identifier lexing (#29503)
  • Speed up identifier and keyword lexing (#29463)

Documentation

  • [flake8-bandit] Describe what the rule actually checks for httpx (S113) (#27936)

Contributors

0.17.2

Released on 2026-10-22.

Preview features

  • [complexity] Add unnecessary-regular-expression-compile (#25533)

Bug fixes

  • Avoid syntax errors for type variables with starred constraints (UP040, UP046, UP047, RUF053) (#28362)
  • [pydocstyle] Treat backslash-escaped *args and **kwargs as documented (D417) (#29536)
  • [pylint] Avoid false positive on starred elements (PLE0643) (#29483)
  • [pylint] Mark fixes unsafe when deleting comments (PLR5501, PLW0120) (#29414)
  • [pyupgrade] Mark fix unsafe when deleting comments (UP035) (#29413)

Performance

  • Avoid intermediate names in lint name resolution (#29506)
  • Prefilter bidirectional Unicode checks by UTF-8 leading bytes (#29561)
  • Share postfix parsing and reduce expression copies (#29480)

... (truncated)

Commits

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Sep 15, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner September 15, 2026 18:22
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Sep 15, 2026
@jplbrun jplbrun self-assigned this Sep 16, 2026
@dependabot dependabot Bot changed the title chore(deps-dev): bump the version-minor-patch group with 2 updates chore(deps-dev): bump the version-minor-patch group across 1 directory with 2 updates Sep 17, 2026
@dependabot
dependabot Bot force-pushed the dependabot/pip/main/version-minor-patch-879b5afa5f branch 2 times, most recently from 3ecb570 to 3c3c392 Compare September 21, 2026 09:16
@dependabot
dependabot Bot force-pushed the dependabot/pip/main/version-minor-patch-879b5afa5f branch from 3c3c392 to aac60fa Compare September 28, 2026 09:15
@jplbrun jplbrun removed their assignment Oct 1, 2026
@dependabot
dependabot Bot force-pushed the dependabot/pip/main/version-minor-patch-879b5afa5f branch from aac60fa to 91d8cd3 Compare October 5, 2026 09:15
@dependabot
dependabot Bot force-pushed the dependabot/pip/main/version-minor-patch-879b5afa5f branch from 91d8cd3 to 78dee30 Compare October 13, 2026 02:34
@ricardosrib ricardosrib mentioned this pull request Oct 13, 2026
1 of 6 tasks
ricardosrib added a commit that referenced this pull request Oct 13, 2026
Combines the standalone dependabot bumps onto one branch for test-agent
validation. Holds two PRs entirely: #340 (mcp) and #338 (ruff+ty) --
the latter because ty 0.0.86 breaks `ty check` (main is green on 0.0.64)
and dependabot groups ruff with ty, so it can't be partially merged.

- multidict  6.7.1  -> 6.9.1   (#379)
- werkzeug   3.1.8  -> 3.1.9   (#378)
- mako       1.4.1  -> 1.4.2   (#377)
- virtualenv 21.7.8 -> 21.7.13 (#363)
- django     4.2.30 -> 5.2.17  (#360, ceiling raised to <6)
- urllib3    2.7.0  -> 2.8.0   (#359)
- pyjwt      2.13.0 -> 2.15.0  (#358)
- minio      ceiling <7.2.17 -> <7.2.21 (#339, lock unchanged)
@dependabot
dependabot Bot force-pushed the dependabot/pip/main/version-minor-patch-879b5afa5f branch from 78dee30 to a32d918 Compare October 19, 2026 09:15
@ricardosrib ricardosrib mentioned this pull request Oct 20, 2026
12 of 17 tasks
ricardosrib added a commit that referenced this pull request Oct 20, 2026
Aggregates the mechanical dependabot updates into a single PR:

- mcp: >=1.1.0,<2 -> >=1.1.0,<3 (#340)
- setuptools: >=83.0,<84 -> >=83.0,<85 (#310)
- ruff: 0.16.0 -> 0.17.1 (part of #338)

The ty bump (0.0.64 -> 0.0.88, also part of #338) is intentionally
excluded: ty 0.0.88 is stricter and surfaces ~19 pre-existing
diagnostics that need real code changes, so it will be handled in a
dedicated follow-up PR.

Closes #340
Closes #310
@dependabot
dependabot Bot force-pushed the dependabot/pip/main/version-minor-patch-879b5afa5f branch from a32d918 to 01f09b8 Compare October 26, 2026 09:18
…y with 2 updates

Bumps the version-minor-patch group with 2 updates in the / directory: [ty](https://github.com/astral-sh/ty) and [ruff](https://github.com/astral-sh/ruff).


Updates `ty` from 0.0.64 to 0.0.95
- [Release notes](https://github.com/astral-sh/ty/releases)
- [Changelog](https://github.com/astral-sh/ty/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ty@0.0.64...0.0.95)

Updates `ruff` from 0.17.1 to 0.17.3
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.17.1...0.17.3)

---
updated-dependencies:
- dependency-name: ruff
  dependency-version: 0.16.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: version-minor-patch
- dependency-name: ty
  dependency-version: 0.0.80
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: version-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/pip/main/version-minor-patch-879b5afa5f branch from 01f09b8 to 003009d Compare November 2, 2026 09:19

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file tok:pd9

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants