fix(deps): update python dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
pydantic (changelog)	^2.13.4 → ^2.13.5
ruff (source, changelog)	^0.16.4 → ^0.16.6
typer (changelog)	^0.27.1 → ^0.27.2

---

Release Notes

pydantic/pydantic (pydantic)

v2.13.5

Compare Source

astral-sh/ruff (ruff)

v0.16.6

Compare Source

Released on 2026-09-03.

Preview features

• Move pytest-fixture-autouse to the restriction category (#​28219)
• [flake8-pytest-style] Add an autofix for PT020 (#​27993)
• [flake8-tidy-imports] Prevent fix loop between TID254 and TID255 (#​28262)
• [isort] Exclude pragma comments from line length calculation (I001) (#​27313)

Bug fixes

• Validate unary expressions when parsing (#​28233)
• [flake8-async, pylint] Recognize builtins.open (ASYNC230, PLW1514) (#​28021)
• [flake8-bugbear] Fix panic on match subjects (B031) (#​27781)
• [flake8-datetimez] Reject tzinfo=None for datetime bounds (DTZ901) (#​28022)
• [flake8-pytest-style] Avoid duplicate PT017 diagnostics (#​27918)
• [ruff] Remove lint.external hint for Ruff-specific suppressions (RUF102) (#​27923)

Rule changes

• [flake8-use-pathlib] Add display-only fix for os.listdir (PTH208) (#​28027)

Documentation

• Add another example and glob reference for lint.per-file-ignores (#​28106)
• Add duplicate work guidance (#​28229)
• [flake8-async] Document thread offloading (ASYNC240) (#​28008)
• [pyupgrade] Clarify default encoding argument handling (UP012) (#​27315)

Other changes

• Allow unary plus in match patterns on Python 3.15 (#​28231)

Contributors

• @​flying-sheep
• @​pikammmmm
• @​fly1d
• @​waterWang
• @​Pierre-Sassoulas
• @​ntBre
• @​jelle-openai
• @​ericbuehl
• @​tjkuson
• @​AbhinavMir
• @​Whning0513
• @​chirizxc

v0.16.5

Compare Source

Released on 2026-08-27.

Preview features

• Allow rules without codes (#​28049)
• Introduce category selectors (#​27666)
• Update preview default rules and categories (#​27877)

Bug fixes

• [flake8-async] Detect blocking generic HTTP requests (ASYNC210) (#​28024)
• [flake8-datetimez] Allow timezone-safe strptime chains (DTZ007) (#​28023)
• [flake8-simplify] Respect side effects in lambda defaults (SIM401) (#​28000)

Server

• Fix duplicated "of" in ClientOptions doc comment (#​27978)

Documentation

• Document rule acceptance guidelines (#​27910)
• Document the new category selectors (#​27906)

Contributors

• @​AlexWaygood
• @​sharkdp
• @​jelle-openai
• @​charliermarsh
• @​ntBre
• @​aarushkandukoori

fastapi/typer (typer)

v0.27.2

Compare Source

Refactors

• ♻️ Create exceptions module and TyperException base class. PR #​1942 by @​svlandeg.

Docs

• 🐛 Fix showing fast button as external link in animated terminals in docs. PR #​1912 by @​phalberg.

Internal

• ⬆️ Bump setup-uv action to 10.0.1. PR #​1940 by @​YuriiMotov.
• 👷 Migrate automatic labels to Latest Changes. PR #​1931 by @​tiangolo.
• 👷 Remove legacy label check. PR #​1930 by @​tiangolo.
• 🔐 Use PR Submit for pull requests. PR #​1928 by @​tiangolo.
• 👷 Use GitHub CLI for Git authentication. PR #​1927 by @​tiangolo.
• 👷 Use PR Push commit identity. PR #​1926 by @​tiangolo.
• 🔒 Replace pre-commit PAT with PR Push. PR #​1923 by @​tiangolo.
• 👷 Remove Zensical docs cache. PR #​1922 by @​tiangolo.
• 🔥 Remove the old Latest Changes workflow. PR #​1921 by @​tiangolo.
• ⬆ Bump the python-packages group with 6 updates. PR #​1917 by @​dependabot[bot].
• ⬆ Bump pymdown-extensions from 10.21.3 to 11.0. PR #​1910 by @​dependabot[bot].
• ⬆ Bump the github-actions group with 5 updates. PR #​1916 by @​dependabot[bot].

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.