Skip to content

build(deps): bump the quality group across 1 directory with 4 updates - #689

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/main/quality-e18e95eccb
Open

build(deps): bump the quality group across 1 directory with 4 updates#689
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/main/quality-e18e95eccb

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 9, 2026

Copy link
Copy Markdown
Contributor

Bumps the quality group with 4 updates in the / directory: ruff, ty, prek and types-requests.

Updates ruff from 0.16.5 to 0.16.6

Release notes

Sourced from ruff's releases.

0.16.6

Release Notes

Released on 2026-09-03.

Preview features

  • Move pytest-fixture-autouse to the restriction category (#28219)
  • [flake8-pytest-style] Add an autofix for PT020 (#27993)
  • [flake8-tidy-imports] Prevent fix loop between TID254 and TID255 (#28262)
  • [isort] Exclude pragma comments from line length calculation (I001) (#27313)

Bug fixes

  • Validate unary expressions when parsing (#28233)
  • [flake8-async, pylint] Recognize builtins.open (ASYNC230, PLW1514) (#28021)
  • [flake8-bugbear] Fix panic on match subjects (B031) (#27781)
  • [flake8-datetimez] Reject tzinfo=None for datetime bounds (DTZ901) (#28022)
  • [flake8-pytest-style] Avoid duplicate PT017 diagnostics (#27918)
  • [ruff] Remove lint.external hint for Ruff-specific suppressions (RUF102) (#27923)

Rule changes

  • [flake8-use-pathlib] Add display-only fix for os.listdir (PTH208) (#28027)

Documentation

  • Add another example and glob reference for lint.per-file-ignores (#28106)
  • Add duplicate work guidance (#28229)
  • [flake8-async] Document thread offloading (ASYNC240) (#28008)
  • [pyupgrade] Clarify default encoding argument handling (UP012) (#27315)

Other changes

  • Allow unary plus in match patterns on Python 3.15 (#28231)

Contributors

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.6

Released on 2026-09-03.

Preview features

  • Move pytest-fixture-autouse to the restriction category (#28219)
  • [flake8-pytest-style] Add an autofix for PT020 (#27993)
  • [flake8-tidy-imports] Prevent fix loop between TID254 and TID255 (#28262)
  • [isort] Exclude pragma comments from line length calculation (I001) (#27313)

Bug fixes

  • Validate unary expressions when parsing (#28233)
  • [flake8-async, pylint] Recognize builtins.open (ASYNC230, PLW1514) (#28021)
  • [flake8-bugbear] Fix panic on match subjects (B031) (#27781)
  • [flake8-datetimez] Reject tzinfo=None for datetime bounds (DTZ901) (#28022)
  • [flake8-pytest-style] Avoid duplicate PT017 diagnostics (#27918)
  • [ruff] Remove lint.external hint for Ruff-specific suppressions (RUF102) (#27923)

Rule changes

  • [flake8-use-pathlib] Add display-only fix for os.listdir (PTH208) (#28027)

Documentation

  • Add another example and glob reference for lint.per-file-ignores (#28106)
  • Add duplicate work guidance (#28229)
  • [flake8-async] Document thread offloading (ASYNC240) (#28008)
  • [pyupgrade] Clarify default encoding argument handling (UP012) (#27315)

Other changes

  • Allow unary plus in match patterns on Python 3.15 (#28231)

Contributors

Commits

Updates ty from 0.0.75 to 0.0.78

Release notes

Sourced from ty's releases.

0.0.78

Release Notes

Released on 2026-09-02.

Bug fixes

  • Defer decorator-call diagnostics to avoid recursive-default cycles (#28226)
  • Make cyclic intersection simplification deterministic (#28156)
  • Stabilize cyclic terminal-call reachability (#28216)

Preview features

  • Refresh uv workspace metadata when dependencies change (#28224)

Diagnostics

  • Add a new disjoint-cast rule (#28129)
  • Report deprecated property accessors on intersections (#28250)
  • Report deprecations for implicit constructor calls (#28251)
  • Report deprecations for overloads, operators, and properties (#28134)
  • Respect overload selection in deprecation diagnostics (#28148)

Core type checking

  • Fix negative narrowing for protocols with gradual members (#28198)
  • Preserve ParamSpec bindings inferred against type context (#28084)
  • Preserve generic protocol materialization relations (#28246)
  • Preserve uncertain branches during quantification (#28211)
  • Respect type variables in top/bottom materializations of invariant generics (#28072)
  • Sync vendored typeshed stubs (#28217). Typeshed diff
  • Treat captured bound-method receivers covariantly (#28180)
  • Unsound intersection simplification for generic iterables (#28068)
  • Validate type variable scopes in constructors and aliases (#28130)
  • lambda functions are always truthy (#28254)

Performance

  • Optimize materialized recursive protocol comparisons (#28079)
  • Optimize recursive protocol checks for nested type variables (#28257)

Contributors

... (truncated)

Changelog

Sourced from ty's changelog.

0.0.78

Released on 2026-09-02.

Bug fixes

  • Defer decorator-call diagnostics to avoid recursive-default cycles (#28226)
  • Make cyclic intersection simplification deterministic (#28156)
  • Stabilize cyclic terminal-call reachability (#28216)

Preview features

  • Refresh uv workspace metadata when dependencies change (#28224)

Diagnostics

  • Add a new disjoint-cast rule (#28129)
  • Report deprecated property accessors on intersections (#28250)
  • Report deprecations for implicit constructor calls (#28251)
  • Report deprecations for overloads, operators, and properties (#28134)
  • Respect overload selection in deprecation diagnostics (#28148)

Core type checking

  • Fix negative narrowing for protocols with gradual members (#28198)
  • Preserve ParamSpec bindings inferred against type context (#28084)
  • Preserve generic protocol materialization relations (#28246)
  • Preserve uncertain branches during quantification (#28211)
  • Respect type variables in top/bottom materializations of invariant generics (#28072)
  • Sync vendored typeshed stubs (#28217). Typeshed diff
  • Treat captured bound-method receivers covariantly (#28180)
  • Unsound intersection simplification for generic iterables (#28068)
  • Validate type variable scopes in constructors and aliases (#28130)
  • lambda functions are always truthy (#28254)

Performance

  • Optimize materialized recursive protocol comparisons (#28079)
  • Optimize recursive protocol checks for nested type variables (#28257)

Contributors

0.0.77

... (truncated)

Commits

Updates prek from 0.5.0 to 0.5.2

Release notes

Sourced from prek's releases.

0.5.2

Release Notes

Released on 2026-09-03.

Enhancements

  • Allow unknown tags by default in check-yaml (#2678)

Contributors

Install prek 0.5.2

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/j178/prek/releases/download/v0.5.2/prek-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://github.com/j178/prek/releases/download/v0.5.2/prek-installer.ps1 | iex"

Install prebuilt binaries via Homebrew

brew install prek

Download prek 0.5.2

File Platform Checksum
prek-aarch64-apple-darwin.tar.gz Apple Silicon macOS checksum
prek-x86_64-apple-darwin.tar.gz Intel macOS checksum
prek-aarch64-pc-windows-msvc.zip ARM64 Windows checksum
prek-x86_64-pc-windows-msvc.zip x64 Windows checksum
prek-aarch64-unknown-linux-gnu.tar.gz ARM64 Linux checksum
prek-x86_64-unknown-linux-gnu.tar.gz x64 Linux checksum
prek-aarch64-unknown-linux-musl.tar.gz ARM64 MUSL Linux checksum
prek-x86_64-unknown-linux-musl.tar.gz x64 MUSL Linux checksum

Verifying GitHub Artifact Attestations

The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:

</tr></table> 

... (truncated)

Changelog

Sourced from prek's changelog.

0.5.2

Released on 2026-09-03.

Enhancements

  • Allow unknown tags by default in check-yaml (#2678)

Contributors

0.5.1

Released on 2026-09-01.

Enhancements

  • Add --hide-status <passed|failed|skipped> for hook reports (#2644)
  • Add prek init for repository setup (#2636)
  • Apply hook env during environment creation (#2650)
  • Disable error snippets in check-yaml diagnostics (#2664)
  • Show hooks excluded by skip selectors (#2645)
  • Support Pixi for Conda environments (#2667)
  • Support cargo-binstall for Rust CLI dependencies (#2658)
  • Warn about unused keys in user settings (#2665)

Bug fixes

  • Reject unsupported YAML tags in check-yaml (#2656)

Documentation

  • Clarify local hook documentation (#2640)
  • Clarify pre-commit command compatibility (#2635)
  • Document automatic PR fixes with autofix.ci (#2643)
  • Document check-yaml unsafe support (#2632)
  • Improve setup and workflow documentation (#2637)

Other changes

  • Drop low-usage release targets (#2651)
  • Generate a prek manifest JSON schema (#2648)

Contributors

Commits

Updates types-requests from 2.33.0.20260712 to 2.33.0.20260906

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file type: misc labels Sep 9, 2026
@github-actions github-actions Bot added the topic: build Related to build, installation & CI label Sep 9, 2026
@socket-security

socket-security Bot commented Sep 9, 2026

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedpypi/​prek@​0.5.0 ⏵ 0.5.2100100100100100
Updatedpypi/​ty@​0.0.75 ⏵ 0.0.78100 +1100100100100
Updatedpypi/​ruff@​0.16.5 ⏵ 0.16.6100 +1100100100100
Updatedpypi/​types-requests@​2.33.0.20260712 ⏵ 2.33.0.20260906100100100100100

View full report

@codecov

codecov Bot commented Sep 9, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 93.87%. Comparing base (c203470) to head (31f66ec).

Additional details and impacted files
@@            Coverage Diff             @@
##             main     #689      +/-   ##
==========================================
+ Coverage   91.30%   93.87%   +2.56%     
==========================================
  Files           3       59      +56     
  Lines         138     3214    +3076     
==========================================
+ Hits          126     3017    +2891     
- Misses         12      197     +185     
Flag Coverage Δ
backend 93.98% <ø> (?)
client 91.30% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

Bumps the quality group with 4 updates in the / directory: [ruff](https://github.com/astral-sh/ruff), [ty](https://github.com/astral-sh/ty), [prek](https://github.com/j178/prek) and [types-requests](https://github.com/python/typeshed).


Updates `ruff` from 0.16.5 to 0.16.6
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.16.5...0.16.6)

Updates `ty` from 0.0.75 to 0.0.78
- [Release notes](https://github.com/astral-sh/ty/releases)
- [Changelog](https://github.com/astral-sh/ty/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ty@0.0.75...0.0.78)

Updates `prek` from 0.5.0 to 0.5.2
- [Release notes](https://github.com/j178/prek/releases)
- [Changelog](https://github.com/j178/prek/blob/master/CHANGELOG.md)
- [Commits](j178/prek@v0.5.0...v0.5.2)

Updates `types-requests` from 2.33.0.20260712 to 2.33.0.20260906
- [Commits](https://github.com/python/typeshed/commits)

---
updated-dependencies:
- dependency-name: prek
  dependency-version: 0.5.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: quality
- dependency-name: ruff
  dependency-version: 0.16.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: quality
- dependency-name: ty
  dependency-version: 0.0.78
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: quality
- dependency-name: types-requests
  dependency-version: 2.33.0.20260906
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: quality
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title build(deps): bump the quality group with 4 updates build(deps): bump the quality group across 1 directory with 4 updates Sep 10, 2026
@dependabot
dependabot Bot force-pushed the dependabot/uv/main/quality-e18e95eccb branch from 064a1f1 to 31f66ec Compare September 10, 2026 08:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file topic: build Related to build, installation & CI type: misc

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants