chore: bump the python-packages group across 1 directory with 4 updates

[dependabot]

Updates the requirements on pyarrow, whenever, ruff and ty to permit the latest version.
Updates pyarrow to 25.0.0

Release notes

Sourced from pyarrow's releases.

Apache Arrow 25.0.0

Release Notes URL: https://arrow.apache.org/release/25.0.0.html

Commits

• 59bea6e MINOR: [Release] Update versions for 25.0.0
• 381fab6 MINOR: [Release] Update .deb/.rpm changelogs for 25.0.0
• 7f72d5b MINOR: [Release] Update CHANGELOG.md for 25.0.0
• fe2f85c GH-50336: [Release][Archery] Fix archery GitHub integration for release scrip...
• c658548 GH-50293: [CI] Run check-labels for all triggers to avoid cancelling further ...
• f83c8ca GH-50330: [C++][R][Parquet] Add missing typename in RleBitPackedDecoderGetRun...
• 35e0f63 GH-50318: [R][CI] Install missing libpng-dev for test-r-linux-as-cran (#50328)
• 61ca7a9 GH-50295: [C++][R] #include <ranges> in vector_select_k.cc breaks macOS CRAN ...
• 1b6edb8 GH-50291: [Python][Packaging] Stop using nightly build dependencies for build...
• e183ea9 MINOR: [Docs] Add Timestamp With Offset to canonical extension types status (...
• Additional commits viewable in compare view

Updates whenever to 0.10.3

Release notes

Sourced from whenever's releases.

0.10.3

• Fixed the pure Python implementation accepting invalid basic-format times with a separatorless fraction (e.g. 20200101 or 20103000). These now raise ValueError like the Rust extension, instead of an AssertionError or silently parsing a wrong value. Thanks to @​gaoflow for the report and fix (#391).
• Fixed several ISO parser edge cases involving malformed numeric components, empty fractions, 24:00, trailing duration separators, and overflow in the Rust duration parsers.
• Removed CI checks for PyPy 3.10, which is EOL.
• Parsing a non-ASCII timezone ID now raises ValueError instead of TimeZoneNotFoundError in the pure Python version, making it consistent with the Rust extension. Thanks to @​gaoflow for the report and fix (#393)

Changelog

Sourced from whenever's changelog.

0.10.3 (2026-07-17)

• Fixed the pure Python implementation accepting invalid basic-format times with a separatorless fraction (e.g. 20200101 or 20103000). These now raise ValueError like the Rust extension, instead of an AssertionError or silently parsing a wrong value. Thanks to @​gaoflow for the report and fix (#391).
• Fixed several ISO parser edge cases involving malformed numeric components, empty fractions, 24:00, trailing duration separators, and overflow in the Rust duration parsers.
• Removed CI checks for PyPy 3.10, which is EOL.
• Parsing a non-ASCII timezone ID now raises ValueError instead of TimeZoneNotFoundError in the pure Python version, making it consistent with the Rust extension. Thanks to @​gaoflow for the report and fix (#393)

0.10.2 (2026-07-06)

• Fixed an issue in the pure Python implementation where invalid format patterns containing a trimmed-fraction (F) field would raise an AttributeError instead of the intended ValueError. Thanks to @​gaoflow for this report and fix (#386).

0.10.1 (2026-07-03)

Improved

• Reduced import time by ~60% when the Rust extension is active. This was achieved by deferring the import of several internal submodules and timezone database setup until they are actually needed.

Added

• Added "week_mon" and "week_sun" as valid units for start_of() and end_of() on Date, PlainDateTime, ZonedDateTime, and OffsetDateTime.

Fixed

• Restored utility functions to whenever.__all__ and ensured dir(whenever) includes lazily loaded public attributes without importing them.
• Fixed Date.today_in_system_tz() in the Rust extension so it uses whenever's cached system timezone instead of from datetime.
• Fixed ZonedDateTime.start_of() and end_of() around DST transitions. Calendar-unit boundaries are exactly 1 nanosecond before the next start_of(). Sub-day units preserve the current occurrence of repeated local times when possible, while correctly handling gaps and folds shorter than the requested unit.
• Fixed a pure-Python regression introduced in 0.10.0 that could return incorrect offsets for part of a year. This occurred when a timezone switched from explicitly recorded transitions to recurring transition rules partway through that year.

... (truncated)

Commits

• a107d67 fix in changelog
• e79f3d3 prepare release
• fa4b6f6 Align pattern timezone ID parsing
• bb4d0d1 enable "quiet" mode for Makefile targets
• 38e0b7d removed pypy3.10 from CI (EOL)
• 010c375 bump mypy and other dependencies
• 1644642 patch additional ISO8601 edge cases
• 96f174e Reject invalid basic-format times with a separatorless fraction
• See full diff in compare view

Updates ruff to 0.15.22

Release notes

Sourced from ruff's releases.

0.15.22

Release Notes

Released on 2026-07-16.

Preview features

• [pycodestyle] Add an autofix for E402 (#22212)
• [refurb] Allow subclassing builtins in stub files (FURB189) (#26812)
• [ruff] Add rule to replace noqa comments with ruff:ignore (RUF105) (#26423)
• [ruff] Add rule to use human-readable names in ruff:ignore comments (RUF106) (#26682)
• [ruff] Add rule to use human-readable names in configuration selectors (RUF201) (#26772)

Bug fixes

• [flake8-pyi] Fix false positive in __all__ (PYI053) (#26872)

Rule changes

• [pylint] Ignore mutable type updates in redefined-loop-name (PLW2901) (#25733)

Performance

• Avoid redundant lexer token bookkeeping (#26765)
• Avoid redundant pending-indentation writes (#26774)
• Avoid unnecessary identifier lookahead (#26525)
• Reuse parser scratch buffers (#26798)

Documentation

• Document argfile support (#26803)
• [flake8-datetimez] Clarify naming guidance for datetime.today (DTZ002) (#26658)
• [pycodestyle] Document E731 fix safety (#26847)
• [ruff] Clarify intentional async contexts for unused-async (RUF029) (#26641)

Contributors

• @​dwego
• @​MichaReiser
• @​Joosboy
• @​KaufmanDmitriy
• @​PeterJCLaw
• @​ntBre
• @​charliermarsh

Install ruff 0.15.22

Install prebuilt binaries via shell script

</tr></table> 

... (truncated)

Changelog

Sourced from ruff's changelog.

0.15.22

Released on 2026-07-16.

Preview features

• [pycodestyle] Add an autofix for E402 (#22212)
• [refurb] Allow subclassing builtins in stub files (FURB189) (#26812)
• [ruff] Add rule to replace noqa comments with ruff:ignore (RUF105) (#26423)
• [ruff] Add rule to use human-readable names in ruff:ignore comments (RUF106) (#26682)
• [ruff] Add rule to use human-readable names in configuration selectors (RUF201) (#26772)

Bug fixes

• [flake8-pyi] Fix false positive in __all__ (PYI053) (#26872)

Rule changes

• [pylint] Ignore mutable type updates in redefined-loop-name (PLW2901) (#25733)

Performance

• Avoid redundant lexer token bookkeeping (#26765)
• Avoid redundant pending-indentation writes (#26774)
• Avoid unnecessary identifier lookahead (#26525)
• Reuse parser scratch buffers (#26798)

Documentation

• Document argfile support (#26803)
• [flake8-datetimez] Clarify naming guidance for datetime.today (DTZ002) (#26658)
• [pycodestyle] Document E731 fix safety (#26847)
• [ruff] Clarify intentional async contexts for unused-async (RUF029) (#26641)

Contributors

• @​dwego
• @​MichaReiser
• @​Joosboy
• @​KaufmanDmitriy
• @​PeterJCLaw
• @​ntBre
• @​charliermarsh

0.15.21

Released on 2026-07-09.

Preview features

... (truncated)

Commits

• 0177a7e Bump 0.15.22 (#26884)
• fe8ba85 [pycodestyle] Document E731 fix safety (#26847)
• f3cf7c8 [ruff] Add rule-codes-in-selectors (RUF201) (#26772)
• d244fd7 Document argfile support (#26803)
• f239758 [flake8-pyi] Fix false positive in __all__ (PYI053) (#26872)
• 54acbcd [ty] Support TypeVarTuple and Unpack (#25240)
• 87fc38c [ty] Parallelize subtype hierarchy search (#26875)
• e454f91 [ty] Share interned query keys across Salsa queries (#26794)
• 6f361a7 [ty] only collect expected types for files open in the editor (#25546)
• 6d6b2b3 [ty] Avoid allocations during Salsa interned lookups (#26877)
• Additional commits viewable in compare view

Updates ty to 0.0.61

Release notes

Sourced from ty's releases.

0.0.61

Release Notes

Released on 2026-07-17.

Bug fixes

• Avoid recursive protocol structural comparisons (#26721)

LSP server

• Render Google docstrings as structured Markdown (#26599)

Library support

• Pydantic: Collect field metadata through subscripted generic Annotated aliases (#26885)

Diagnostics

• Avoid extending own-line suppressions in --add-ignore (#26808)

Core type checking

• Derive descriptor setter domains for protocols (#26683)
• Enforce declared receiver TypeVar domains (#26863)
• Infer isinstance results for aliases and type variables (#26961)
• Infer isinstance results for fixed class tuples (#26935)
• Narrow inline list and set membership checks (#26955)
• Narrow tagged unions by tag truthiness (#26887)
• Narrow walrus expression values (#26949)
• Project intersections in to_instance (#26892)
• Remove inferable TypeVar artifacts recursively (#26787)
• Respect mixin receiver domains in method overrides (#26941)
• Support TypeVarTuple and Unpack (#25240)

Performance

• Deduplicate completion labels (#26890)
• Only collect expected types for files open in the editor (#25546)
• Parallelize subtype hierarchy search (#26875)
• Share heap-backed parser names with CharStr (#26594)
• Use the new incremental checker from the ignore crate (#26933)

Contributors

• @​MichaReiser
• @​denyszhak
• @​lerebear
• @​dhruvmanila
• @​charliermarsh

... (truncated)

Changelog

Sourced from ty's changelog.

0.0.61

Released on 2026-07-17.

Bug fixes

• Avoid recursive protocol structural comparisons (#26721)

LSP server

• Render Google docstrings as structured Markdown (#26599)

Library support

• Pydantic: Collect field metadata through subscripted generic Annotated aliases (#26885)

Diagnostics

• Avoid extending own-line suppressions in --add-ignore (#26808)

Core type checking

• Derive descriptor setter domains for protocols (#26683)
• Enforce declared receiver TypeVar domains (#26863)
• Infer isinstance results for aliases and type variables (#26961)
• Infer isinstance results for fixed class tuples (#26935)
• Narrow inline list and set membership checks (#26955)
• Narrow tagged unions by tag truthiness (#26887)
• Narrow walrus expression values (#26949)
• Project intersections in to_instance (#26892)
• Remove inferable TypeVar artifacts recursively (#26787)
• Respect mixin receiver domains in method overrides (#26941)
• Support TypeVarTuple and Unpack (#25240)

Performance

• Deduplicate completion labels (#26890)
• Only collect expected types for files open in the editor (#25546)
• Parallelize subtype hierarchy search (#26875)
• Share heap-backed parser names with CharStr (#26594)
• Use the new incremental checker from the ignore crate (#26933)

Contributors

• @​MichaReiser
• @​denyszhak
• @​lerebear
• @​dhruvmanila
• @​charliermarsh
• @​BurntSushi

... (truncated)

Commits

• 56b2c24 Update changelog for 0.0.61 (#4028)
• 4c865c8 Bump version to 0.0.61 (#4027)
• ae554ec Bump version to 0.0.60 (#4008)
• 4f78ec5 Update astral-sh/setup-uv action to v8.3.2 (#3997)
• 0f9b587 Update prek dependencies (#3999)
• 9afd373 Update dependency prek to v0.4.8 (#3998)
• 391f499 Update docker/build-push-action action to v7.3.0 (#4000)
• 990dfce Update docker/login-action action to v4.4.0 (#4001)
• 1b1e873 Update docker/metadata-action action to v6.2.0 (#4002)
• aece09f Update docker/setup-buildx-action action to v4.2.0 (#4003)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions