Bump the development-dependencies group across 1 directory with 3 updates

[dependabot]

Bumps the development-dependencies group with 3 updates in the / directory: ruff, ty and anyio.

Updates ruff from 0.16.1 to 0.16.5

Release notes

Sourced from ruff's releases.

0.16.5

Release Notes

Released on 2026-08-27.

Preview features

• Allow rules without codes (#28049)
• Introduce category selectors (#27666)
• Update preview default rules and categories (#27877)

Bug fixes

• [flake8-async] Detect blocking generic HTTP requests (ASYNC210) (#28024)
• [flake8-datetimez] Allow timezone-safe strptime chains (DTZ007) (#28023)
• [flake8-simplify] Respect side effects in lambda defaults (SIM401) (#28000)

Server

• Fix duplicated "of" in ClientOptions doc comment (#27978)

Documentation

• Document rule acceptance guidelines (#27910)
• Document the new category selectors (#27906)

Contributors

• @​AlexWaygood
• @​sharkdp
• @​jelle-openai
• @​charliermarsh
• @​ntBre
• @​aarushkandukoori

Install ruff 0.16.5

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ruff/releases/download/0.16.5/ruff-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/ruff/releases/download/0.16.5/ruff-installer.ps1 | iex"

Download ruff 0.16.5

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.5

Released on 2026-08-27.

Preview features

• Allow rules without codes (#28049)
• Introduce category selectors (#27666)
• Update preview default rules and categories (#27877)

Bug fixes

• [flake8-async] Detect blocking generic HTTP requests (ASYNC210) (#28024)
• [flake8-datetimez] Allow timezone-safe strptime chains (DTZ007) (#28023)
• [flake8-simplify] Respect side effects in lambda defaults (SIM401) (#28000)

Server

• Fix duplicated "of" in ClientOptions doc comment (#27978)

Documentation

• Document rule acceptance guidelines (#27910)
• Document the new category selectors (#27906)

Contributors

• @​AlexWaygood
• @​sharkdp
• @​jelle-openai
• @​charliermarsh
• @​ntBre
• @​aarushkandukoori

0.16.4

Released on 2026-08-20.

Preview features

• [flake8-use-pathlib] Add autofix for PTH116 (#26460)
• [refurb] Restrict delete-full-slice to lists (FURB131) (#27711)
• [refurb] Skip FURB101 and FURB103 when the open argument is a file descriptor (#27643)

Bug fixes

• Fix InvalidInstruction on Windows CPUs that do not support POPCNT (#27803)
• [pyflakes] Emit semantic syntax errors in string type definitions as F722 (#27835)
• [pylint] Allow os._exit imports in import-private-name (PLC2701) (#27738)

... (truncated)

Commits

• 9e4938c Bump 0.16.5 (#28110)
• aad0e90 Allow rules without codes (#28049)
• 5fdab73 Update preview default rules and categories (#27877)
• 29c8e5b Document rule acceptance guidelines (#27910)
• 50a4d7f Document the new category selectors (#27906)
• ada8795 Introduce category selectors (#27666)
• d894723 [ty] Infer lambda parameters through callable type aliases (#28109)
• 2685fde [ty] Narrow functional enum members in == and match (#28103)
• efcffd2 [ty] Intersection simplifications with subtype-related generic specialization...
• eb78048 [ty] Bump ecosystem-analyzer for HTML escaping (#28104)
• Additional commits viewable in compare view

Updates ty from 0.0.68 to 0.0.78

Release notes

Sourced from ty's releases.

0.0.78

Release Notes

Released on 2026-09-02.

Bug fixes

• Defer decorator-call diagnostics to avoid recursive-default cycles (#28226)
• Make cyclic intersection simplification deterministic (#28156)
• Stabilize cyclic terminal-call reachability (#28216)

Preview features

• Refresh uv workspace metadata when dependencies change (#28224)

Diagnostics

• Add a new disjoint-cast rule (#28129)
• Report deprecated property accessors on intersections (#28250)
• Report deprecations for implicit constructor calls (#28251)
• Report deprecations for overloads, operators, and properties (#28134)
• Respect overload selection in deprecation diagnostics (#28148)

Core type checking

• Fix negative narrowing for protocols with gradual members (#28198)
• Preserve ParamSpec bindings inferred against type context (#28084)
• Preserve generic protocol materialization relations (#28246)
• Preserve uncertain branches during quantification (#28211)
• Respect type variables in top/bottom materializations of invariant generics (#28072)
• Sync vendored typeshed stubs (#28217). Typeshed diff
• Treat captured bound-method receivers covariantly (#28180)
• Unsound intersection simplification for generic iterables (#28068)
• Validate type variable scopes in constructors and aliases (#28130)
• lambda functions are always truthy (#28254)

Performance

• Optimize materialized recursive protocol comparisons (#28079)
• Optimize recursive protocol checks for nested type variables (#28257)

Contributors

• @​charliermarsh
• @​sharkdp
• @​zsol
• @​AlexWaygood
• @​ibraheemdev
• @​carljm

... (truncated)

Changelog

Sourced from ty's changelog.

0.0.78

Released on 2026-09-02.

Bug fixes

• Defer decorator-call diagnostics to avoid recursive-default cycles (#28226)
• Make cyclic intersection simplification deterministic (#28156)
• Stabilize cyclic terminal-call reachability (#28216)

Preview features

• Refresh uv workspace metadata when dependencies change (#28224)

Diagnostics

• Add a new disjoint-cast rule (#28129)
• Report deprecated property accessors on intersections (#28250)
• Report deprecations for implicit constructor calls (#28251)
• Report deprecations for overloads, operators, and properties (#28134)
• Respect overload selection in deprecation diagnostics (#28148)

Core type checking

• Fix negative narrowing for protocols with gradual members (#28198)
• Preserve ParamSpec bindings inferred against type context (#28084)
• Preserve generic protocol materialization relations (#28246)
• Preserve uncertain branches during quantification (#28211)
• Respect type variables in top/bottom materializations of invariant generics (#28072)
• Sync vendored typeshed stubs (#28217). Typeshed diff
• Treat captured bound-method receivers covariantly (#28180)
• Unsound intersection simplification for generic iterables (#28068)
• Validate type variable scopes in constructors and aliases (#28130)
• lambda functions are always truthy (#28254)

Performance

• Optimize materialized recursive protocol comparisons (#28079)
• Optimize recursive protocol checks for nested type variables (#28257)

Contributors

• @​charliermarsh
• @​sharkdp
• @​zsol
• @​AlexWaygood
• @​ibraheemdev
• @​carljm

0.0.77

... (truncated)

Commits

• dca9f98 Bump version to 0.0.78 (#4452)
• 2bd3de2 Update strict-literal-narrowing to strict-equality-semantics (#4438)
• 5fb846c Update prek dependencies (#4444)
• b55cd43 Update docker/login-action action to v4.6.0 (#4445)
• ba84bde fix: update broken registry.bazel.build/docs URLs (#4439)
• 371111b Bump version to 0.0.77 (#4435)
• 1940c8a Bump version to 0.0.76 (#4426)
• c6d3626 Improve uv-lock pre-commit configuration (#4398)
• a553dcc Bump version to 0.0.75 (#4396)
• 26b1b50 Update prek dependencies (#4392)
• Additional commits viewable in compare view

Updates anyio from 4.14.2 to 4.15.0

Release notes

Sourced from anyio's releases.

4.15.0

• Added support for the newer keyword-only arguments on anyio.Path methods to match the standard library pathlib.Path:

  • follow_symlinks on exists() (Python 3.12+)
  • follow_symlinks on is_dir() (Python 3.13+)
  • follow_symlinks on is_file() (Python 3.13+)
  • follow_symlinks on owner() (Python 3.13+)
  • follow_symlinks on group() (Python 3.13+)
  • newline on read_text() (Python 3.13+)

  (#1286, #1293; PR by @​jaideeppyne)

• Added amap, gather, and as_completed utility functions to simplify common patterns (#1173; PR by @​Graeme22)

• Added --anyio-mode command-line option as an alternative to the anyio_mode ini setting, and fix the pytest plugin's auto mode detection to recognize the mode when set via either mechanism(e.g: pytest_asyncio). (#1242; PR by @​EmmanuelNiyonshuti)

• Added the anyio.Future synchronization primitive which behaves similar to asyncio.Future, allowing tasks to wait for a value (or exception) from another task (#1146; PR by @​Vizonex)

• Added guidance for managing multiple memory object stream producers and consumers with cloned streams (#330; PR by @​nightcityblade)

• Added StapledObjectStream.send_nowait() that delegates to the underlying ObjectSendStream, if it implements it (#1241; PR by @​davidbrochart)

• Added the move_on_at() and fail_at() functions to complement move_on_after() and fail_after()

• Changed the default name for a task spawned with TaskGroup.create_task(func()) to match the default task name for the analogous task spawned with TaskGroup.start_soon(func) or TaskGroup.start(func) in more situations. Previously, the default name of a TaskGroup.create_task task never included the module name. (The default name for a task spawned with TaskGroup.start_soon or TaskGroup.start typically includes the module name.) (#1234; PR by @​gschaffner)

• Changed the anyio and anyio.abc modules to lazily (much like 810) import the necessary submodules. This is done by parsing the AST of the module and building a lookup table from the if TYPE_CHECKING: block. A fallback mode has been provided for installations where the source code is unavailable (e.g. PyInstaller). (#1169)

• Fixed free-threading compatibility issues arising from the fact that on Python 3.14 free-threading builds, newly created threads inherit the current context by default, causing AnyIO to behave erroneously in relation to start_blocking_portal() and anyio.to_thread.run_sync() (#1224; PR by @​EmmanuelNiyonshuti)

• Fixed SpooledTemporaryFile.readinto() and readinto1() reading twice before rollover, so the destination buffer was overwritten by the second read and the file position advanced twice, silently losing data (#1215; PR by @​c-tonneslan)

• Added a reason parameter to fail_after (and the new fail_at) allowing for added exception context when raising TimeoutError (#1227; PR by @​Graeme22)

• Fixed the default TaskHandle.name missing part of the task name for tasks started with TaskGroup.start on Trio (#1231; PR by @​gschaffner)

• Fixed anyio.run leaking, or at least, delaying collection of loop and root_task due to the root task being cached in a RunVar. (#1203; PR by @​tapetersen)

• Fixed anyio.Path.with_stem() silently producing a wrong path (e.g. Path(".txt")) instead of raising ValueError when given an empty stem on a path with a non-empty suffix, unlike pathlib.PurePath.with_stem (#1200; PR by @​Sanjays2402)

• Fixed UNIXSocketStream.aclose() raising asyncio.InvalidStateError when a concurrent receive or send operation had just been cancelled on the asyncio backend (#1267; PR by @​alloutflo)

• Fixed the pytest plugin importing the deprecated _pytest.python.CallSpec2 alias, which triggers PytestRemovedIn10Warning on pytest>=9.2 and crashes pytest at startup when filterwarnings = error is configured (#1271; PR by @​matthewfeickert)

• Fixed an asyncio worker thread race that could raise RuntimeError when the event loop closed between checking its state and scheduling the worker result (#1265; PR by @​hansu650)

• Fixed CapacityLimiter on the asyncio backend over-granting tokens when total_tokens was raised while the limiter was over-subscribed (#1223; PR by @​zelinewang)

• Fixed asyncio task groups leaking unawaited coroutines when a custom task constructor fails; default task creation is unaffected (#1274; PR by @​dsfaccini)

... (truncated)

Commits

• 9283662 Bumped up the version
• d137692 Improved the instructions for AI agents
• 033fc52 Shield TemporaryDirectory cleanup from cancellation (#1304)
• 942e9a6 [pre-commit.ci] pre-commit autoupdate (#1305)
• b825c3b Fixed pyproject.toml changes not triggering the test suite
• 9727dc5 Fixed start inconsistencies between trio and asyncio (#1198)
• b05fe6d Fixed wrong type in move_on_after (#1297)
• 44d0c93 Fixed asyncio task group coroutine cleanup (#1275)
• ae25044 [pre-commit.ci] pre-commit autoupdate (#1290)
• 6d3a30d Add follow_symlinks argument to anyio.Path.owner() and group() (#1293)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions