chore(deps): bump the runtime-deps group with 2 updates

[dependabot]

Bumps the runtime-deps group with 2 updates: hypothesis and ty.

Updates hypothesis from 6.156.4 to 6.156.6

Commits

• 276c391 Bump hypothesis version to 6.156.6 and update changelog
• c6e2305 Merge pull request #4791 from dylan-bakr/strip-auth-on-redirect
• 988999a use add_unredirected_header instead
• e8458dd Bump hypothesis version to 6.156.5 and update changelog
• db2968a Merge pull request #4794 from Liam-DeVoe/publish-x86-wheels
• a4d3a6d build 32bit wheels for windows and linux
• 8343697 remove unused # type: ignore comment
• ed741f0 create RELEASE.rst
• eeb0fe9 claude: strip Authorization header on cross-host redirect
• 227074f claude: create test
• See full diff in compare view

Updates ty from 0.0.58 to 0.0.59

Release notes

Sourced from ty's releases.

0.0.59

Release Notes

Released on 2026-07-12.

Bug fixes

• Guard descriptor classification cycles (#26690)
• Respect init=False in dataclass field-order checks (#26749)
• Avoid duplicate diagnostics for overloaded TypeIs (#26716)

Library support

• Pydantic: Support custom __init__ methods (#26699)
• Pydantic: Support field metadata in Annotated (#26650)

Core type checking

• Allow unsound equality-based narrowing for builtins (#26414)
• Bind Self in implicit dunder calls (#26711)
• Correct protocol method receiver binding (#26701)
• Exempt ParamSpec callables from the dunder descriptor heuristic (#26696)
• Remove transitive TypeVar artifacts during collection inference (#26714)

LSP server

• Avoid broad invalidation from file check eligibility (#26741)
• Correct how we expand tabs in docstrings (#26679)
• Resolve ambiguity in Google-style docstring parsing in favour of observations from popular projects (#26673)

CLI

• Avoid allocation for every stdout write (#26698)
• Buffer diagnostic output (#26702)

Performance

• Cache generic context (#26745)
• Cache known class instances (#26746)
• Reuse common TypedDict constraints through intersections (#26747)
• Use purpose-specific types for completion and module text (#26664)

Contributors

• @​carljm
• @​MichaReiser
• @​charliermarsh
• @​lerebear
• @​ibraheemdev
• @​sharkdp

... (truncated)

Changelog

Sourced from ty's changelog.

0.0.59

Released on 2026-07-12.

Bug fixes

• Guard descriptor classification cycles (#26690)
• Respect init=False in dataclass field-order checks (#26749)
• Avoid duplicate diagnostics for overloaded TypeIs (#26716)

Library support

• Pydantic: Support custom __init__ methods (#26699)
• Pydantic: Support field metadata in Annotated (#26650)

Core type checking

• Allow unsound equality-based narrowing for builtins (#26414)
• Bind Self in implicit dunder calls (#26711)
• Correct protocol method receiver binding (#26701)
• Exempt ParamSpec callables from the dunder descriptor heuristic (#26696)
• Remove transitive TypeVar artifacts during collection inference (#26714)

LSP server

• Avoid broad invalidation from file check eligibility (#26741)
• Correct how we expand tabs in docstrings (#26679)
• Resolve ambiguity in Google-style docstring parsing in favour of observations from popular projects (#26673)

CLI

• Avoid allocation for every stdout write (#26698)
• Buffer diagnostic output (#26702)

Performance

• Cache generic context (#26745)
• Cache known class instances (#26746)
• Reuse common TypedDict constraints through intersections (#26747)
• Use purpose-specific types for completion and module text (#26664)

Contributors

• @​carljm
• @​MichaReiser
• @​charliermarsh
• @​lerebear
• @​ibraheemdev
• @​sharkdp

Commits

• 71bdf31 Bump version to 0.0.59 (#3979)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.