[dependabot]

Bumps the dev-deps group with 3 updates: ty, prek and ruff.

Updates ty from 0.0.84 to 0.0.85

Release notes

Sourced from ty's releases.

0.0.85

Release Notes

Released on 2026-10-06.

Preview features

• Refresh uv project metadata when uv files change (#28529)

Bug fixes

• Avoid recursive lambda class decorator panics (#28984)
• Compare observable notebook state for equality (#28874)
• Detect recursive alias cycles through intersections (#28916)
• Fix anchoring of include and exclude patterns after the project's root changed (#28995)
• Fix stack overflow when inferring dynamic class metaclasses (#28917)
• Normalize recursive dataclass transform metadata (#28920)
• Normalize recursive TypedDicts during cycle recovery (#28918)
• Preserve cycle markers in ParamSpec specialization (#29024)

CLI

• Prefer existing @ paths over response files in Ruff and ty (#28877)

LSP server

• Add namespace package support to import completions. (#28202)
• Avoid stale I/O diagnostics when closing deleted files (#28988)
• Contain rendered code within Markdown fences (#28869)
• Refresh Python settings when virtual environments change (#28650)

Diagnostic improvements

• Add opt-in truthiness-test-of-none-union rule (#28889)
• Avoid disjoint-cast diagnostics in situations where the value could have been inferred as being compatible with the casted type if it had only been inferred with the right type context (#28851)
• Bound nested callable signature display (#29049)
• Explain outdated uv versions in metadata errors (#28959)
• Improve display of string literal types that include unicode characters or double quotes (#29089)
• Improve uv metadata diagnostics (#28990)
• Preserve constrained type-variable failure diagnostics (#28768)
• Preserve generic inference errors during diagnostic recovery (#28811)
• Report deprecated overloads in decorator applications (#28999)

Core type checking

• Bound methods without a receiver are not callable (#28981)
• Fix member lookup on union-bounded type variables (#29018)
• Fix type variable inference for final class objects (#29097)
• Freshen ParamSpec identities consistently (#28826)
• Honor generic property setters in protocol compatibility (#28562)

... (truncated)

Changelog

Sourced from ty's changelog.

0.0.85

Released on 2026-10-06.

Preview features

• Refresh uv project metadata when uv files change (#28529)

Bug fixes

• Avoid recursive lambda class decorator panics (#28984)
• Compare observable notebook state for equality (#28874)
• Detect recursive alias cycles through intersections (#28916)
• Fix anchoring of include and exclude patterns after the project's root changed (#28995)
• Fix stack overflow when inferring dynamic class metaclasses (#28917)
• Normalize recursive dataclass transform metadata (#28920)
• Normalize recursive TypedDicts during cycle recovery (#28918)
• Preserve cycle markers in ParamSpec specialization (#29024)

CLI

• Prefer existing @ paths over response files in Ruff and ty (#28877)

LSP server

• Add namespace package support to import completions. (#28202)
• Avoid stale I/O diagnostics when closing deleted files (#28988)
• Contain rendered code within Markdown fences (#28869)
• Refresh Python settings when virtual environments change (#28650)

Diagnostic improvements

• Add opt-in truthiness-test-of-none-union rule (#28889)
• Avoid disjoint-cast diagnostics in situations where the value could have been inferred as being compatible with the casted type if it had only been inferred with the right type context (#28851)
• Bound nested callable signature display (#29049)
• Explain outdated uv versions in metadata errors (#28959)
• Improve display of string literal types that include unicode characters or double quotes (#29089)
• Improve uv metadata diagnostics (#28990)
• Preserve constrained type-variable failure diagnostics (#28768)
• Preserve generic inference errors during diagnostic recovery (#28811)
• Report deprecated overloads in decorator applications (#28999)

Core type checking

• Bound methods without a receiver are not callable (#28981)
• Fix member lookup on union-bounded type variables (#29018)
• Fix type variable inference for final class objects (#29097)
• Freshen ParamSpec identities consistently (#28826)
• Honor generic property setters in protocol compatibility (#28562)
• Infer nominal generic specializations from bounded type variables (#28812)

... (truncated)

Commits

• d7fc5ef Bump version to 0.0.85 (#4679)
• bc4fd9e Include reproducers in daily fuzz issues (#4671)
• 03d47ff Group uv workflow and pre-commit updates (#4670)
• a86a22f Update dependency astral-sh/uv to v0.12.23 (#4669)
• 1447551 Enable Renovate updates for the release preparation uv version (#4668)
• 9f2b16a Set FORCE_COLOR for fuzzing environment (#4663)
• 05add1d Add a daily ty fuzzing workflow (#4643)
• ad39415 Correct file exclusion guide examples (#4638)
• 2ea9c49 Update language server feature documentation (#4637)
• 449e387 Correct type inference and narrowing FAQ (#4639)
• Additional commits viewable in compare view

Updates prek from 0.5.4 to 0.5.5

Release notes

Sourced from prek's releases.

0.5.5

Release Notes

Released on 2026-10-05.

Enhancements

• Add Nushell completion generation (#2785)
• Add ppc64le wheel and binary builds (#2809)

Performance

• Avoid JSON imports when querying Python interpreters (#2790)
• Avoid duplicate diffs after hooks rewrite files (#2815)
• Batch file reads in shebang checks (#2793)
• Check cached hook environments concurrently (#2797)
• Overlap Git discovery with worktree status checks (#2821)
• Query staged additions only for case conflicts (#2802)
• Reduce worker overhead in XML and pygrep checks (#2789)
• Reuse Git worktree state during hook startup (#2787)
• Reuse intent-to-add paths when saving unstaged changes (#2788)
• Run Git queries concurrently for case-conflict checks (#2792)
• Share Bun and Deno version queries across environments (#2795)
• Share Lua runtime probes across hook environments (#2796)
• Share Ruby version queries across hook environments (#2794)
• Share mise version queries across hook environments (#2798)
• Skip site initialization in Python interpreter probes (#2822)
• Skip untracked files in destroyed symlink checks (#2799)
• Skip unused file input for always-run hooks (#2813)

Bug fixes

• Preserve staged and unstaged changes on conflicted stash restore (#2803)
• Default missing core.fileMode in shebang checks (#2832)
• Match protected branch patterns from the start (#2829)
• Normalize explicit paths in shebang index checks (#2831)
• Preserve empty trailing-whitespace character sets (#2830)
• Reject empty files in check-json (#2826)
• Reject trailing data in check-json (#2828)
• Round up file sizes in check-added-large-files (#2827)

Documentation

• Redesign the prek badge and refresh logo details (#2818)

Contributors

• @​imphil
• @​j178

... (truncated)

Changelog

Sourced from prek's changelog.

0.5.5

Released on 2026-10-05.

Enhancements

• Add Nushell completion generation (#2785)
• Add ppc64le wheel and binary builds (#2809)

Performance

• Avoid JSON imports when querying Python interpreters (#2790)
• Avoid duplicate diffs after hooks rewrite files (#2815)
• Batch file reads in shebang checks (#2793)
• Check cached hook environments concurrently (#2797)
• Overlap Git discovery with worktree status checks (#2821)
• Query staged additions only for case conflicts (#2802)
• Reduce worker overhead in XML and pygrep checks (#2789)
• Reuse Git worktree state during hook startup (#2787)
• Reuse intent-to-add paths when saving unstaged changes (#2788)
• Run Git queries concurrently for case-conflict checks (#2792)
• Share Bun and Deno version queries across environments (#2795)
• Share Lua runtime probes across hook environments (#2796)
• Share Ruby version queries across hook environments (#2794)
• Share mise version queries across hook environments (#2798)
• Skip site initialization in Python interpreter probes (#2822)
• Skip untracked files in destroyed symlink checks (#2799)
• Skip unused file input for always-run hooks (#2813)

Bug fixes

• Preserve staged and unstaged changes on conflicted stash restore (#2803)
• Default missing core.fileMode in shebang checks (#2832)
• Match protected branch patterns from the start (#2829)
• Normalize explicit paths in shebang index checks (#2831)
• Preserve empty trailing-whitespace character sets (#2830)
• Reject empty files in check-json (#2826)
• Reject trailing data in check-json (#2828)
• Round up file sizes in check-added-large-files (#2827)

Documentation

• Redesign the prek badge and refresh logo details (#2818)

Contributors

• @​imphil
• @​j178

Commits

• 77cca67 Bump version to 0.5.5 (#2839)
• f4e2695 Update Rust crate jsonc-parser to 0.34.0 (#2838)
• 399e9d1 Update GitHub Actions (#2837)
• 19e77d1 Update prek hooks (#2771)
• e261e0c Update dependency uv to v0.12.19 (#2835)
• bc53e2c Update Rust crate thiserror to v2.0.21 (#2836)
• 4a981d2 Default missing core.fileMode in shebang checks (#2832)
• e031022 Preserve empty trailing-whitespace character sets (#2830)
• 0b1871a Normalize explicit paths in shebang index checks (#2831)
• 9d4aede Match protected branch patterns from the start (#2829)
• Additional commits viewable in compare view

Updates ruff from 0.16.9 to 0.16.10

Release notes

Sourced from ruff's releases.

0.16.10

Release Notes

Released on 2026-10-01.

Preview features

• Add a migration guide for categories (#28087)
• [pyupgrade] Add rule for context manager iterator annotations (UP052) (#29000)

Performance

• Reduce memory used by diagnostics (#28951)

Server

• Avoid running uv format in untrusted workspaces (#28873)

Documentation

• Fix links to moved changelog sections and renamed mdtests (#28941)
• Add Python 3.15 as a supported version (#28907)
• Add ty as a type checker example (#28906)

Other changes

• Update Rust toolchain to 1.99 and MSRV to 1.97 (#29047)

Contributors

• @​ntBre
• @​spaceone
• @​HardMax71
• @​charliermarsh

Install ruff 0.16.10

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ruff/releases/download/0.16.10/ruff-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/ruff/releases/download/0.16.10/ruff-installer.ps1 | iex"

Download ruff 0.16.10

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.10

Released on 2026-10-01.

Preview features

• Add a migration guide for categories (#28087)
• [pyupgrade] Add rule for context manager iterator annotations (UP052) (#29000)

Performance

• Reduce memory used by diagnostics (#28951)

Server

• Avoid running uv format in untrusted workspaces (#28873)

Documentation

• Fix links to moved changelog sections and renamed mdtests (#28941)
• Add Python 3.15 as a supported version (#28907)
• Add ty as a type checker example (#28906)

Other changes

• Update Rust toolchain to 1.99 and MSRV to 1.97 (#29047)

Contributors

• @​ntBre
• @​spaceone
• @​HardMax71
• @​charliermarsh

Commits

• 3265ed1 Bump version to 0.16.10 (#29055)
• e786964 Authorize shared PR security-review workflow to publish findings (#29052)
• a81291e [ty] Defer uv workspace discovery until after project configuration (#28525)
• b6a74d2 [ty] Refresh uv project metadata when uv files change (#28529)
• 41d30df Update Rust toolchain to 1.99 and MSRV to 1.97 (#29047)
• 317e0a3 [ty] Bound nested callable signature display (#29049)
• 8546752 [ty] Fix member lookup on union-bounded type variables (#29018)
• 56180bc [ty] Specialize instance members once (#29043)
• aa9a1ff [ty] Avoid stale I/O diagnostics when closing deleted files (#28988)
• 2d25346 [ty] Improve unresolved-import documentation (#29039)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

• Configuration used: Organization UI
• Review profile: ASSERTIVE
• Plan: Advanced
• Run ID: d8e13026-1765-414d-bc1b-2901a7f0c5fe

---

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

---

_{Comment @coderabbitai help to get the list of available commands.}

[snyk-io]

✅ Snyk checks have passed. No issues have been found so far.

Status	Scan Engine	Critical	High	Medium	Low	Total (0)
✅	Open Source Security	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

[github-actions]

Test Results

69 tests   69 ✅  0s ⏱️
 1 suites   0 💤
 1 files     0 ❌

Results for commit 8aca677.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 96.07%. Comparing base (e9d3cab) to head (8aca677).

Additional details and impacted files

@@           Coverage Diff           @@
##              dev    #1094   +/-   ##
=======================================
  Coverage   96.07%   96.07%           
=======================================
  Files           1        1           
  Lines         331      331           
=======================================
  Hits          318      318           
  Misses         13       13           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.