[dependabot]

Bumps the deps group with 3 updates: sqlalchemy, ruff and ty.

Updates sqlalchemy from 2.0.51 to 2.0.52

Release notes

Sourced from sqlalchemy's releases.

2.0.52

Released: August 11, 2026

platform

• [platform] [bug] Python 3.15 support has been added and tested, including minimal changes for full compatibility.

  References: #13477

orm

• [orm] [bug] Fixed a result-column misalignment bug in ORM-enabled UPDATE statements where synchronize_session="fetch" is in use, either explicitly or because the statement uses constructs such as CTEs that implicitly select for it. Columns in rows returned by .returning() could be returned under incorrect keys (e.g. row[SomeClass.a] returning the value of a different column), a problem most likely to manifest under concurrent workloads. ORM DELETE statements were not affected.

  References: #13439

• [orm] [bug] Fixed bug where a failed _orm.Session.bulk_insert_mappings(), _orm.Session.bulk_update_mappings() or _orm.Session.bulk_save_objects() call could leave the _orm.Session permanently in a "flushing" state, such as when the transaction could not be begun because a previous flush had left it needing a rollback. Unlike _orm.Session.flush(), the bulk methods set the internal flushing flag and began the transaction outside of the try/finally block that resets it, so that neither _orm.Session.rollback() nor _orm.Session.close() would clear it, and every subsequent flush would raise InvalidRequestError: Session is already flushing. Pull request courtesy Hamody We.

  References: #13485

• [orm] [bug] Fixed issue where unpickling an ORM object that were loaded using loader options making use of wildcard tokens, such as _orm.load_only() or _orm.raiseload() with "*", would fail with KeyError or IndexError if the process doing the unpickling had not yet constructed a loader path making use of that same token. This would typically be observed when the object were unpickled in a separate process, such as with the spawn or forkserver multiprocessing start methods, the latter of which became the default on POSIX platforms as of Python 3.14. The internal collection of these tokens is now established up front, so that it is identical in every process.

... (truncated)

Commits

• See full diff in compare view

Updates ruff from 0.16.1 to 0.16.2

Release notes

Sourced from ruff's releases.

0.16.2

Release Notes

Released on 2026-08-06.

Bug fixes

• [flake8-pyi] Avoid false positives on singledispatch functions (PYI041) (#27335)

Server

• Register formatting capabilities dynamically to exclude TOML files (#27332)

Contributors

• @​MeGaGiGaGon
• @​charliermarsh
• @​epage
• @​sharkdp
• @​ntBre

Install ruff 0.16.2

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ruff/releases/download/0.16.2/ruff-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/ruff/releases/download/0.16.2/ruff-installer.ps1 | iex"

Download ruff 0.16.2

File	Platform	Checksum
ruff-aarch64-apple-darwin.tar.gz	Apple Silicon macOS	checksum
ruff-x86_64-apple-darwin.tar.gz	Intel macOS	checksum
ruff-aarch64-pc-windows-msvc.zip	ARM64 Windows	checksum
ruff-i686-pc-windows-msvc.zip	x86 Windows	checksum
ruff-x86_64-pc-windows-msvc.zip	x64 Windows	checksum
ruff-aarch64-unknown-linux-gnu.tar.gz	ARM64 Linux	checksum
ruff-i686-unknown-linux-gnu.tar.gz	x86 Linux	checksum
ruff-powerpc64-unknown-linux-gnu.tar.gz	PPC64 Linux	checksum
ruff-powerpc64le-unknown-linux-gnu.tar.gz	PPC64LE Linux	checksum
ruff-riscv64gc-unknown-linux-gnu.tar.gz	RISCV Linux	checksum
ruff-s390x-unknown-linux-gnu.tar.gz	S390x Linux	checksum

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.2

Released on 2026-08-06.

Bug fixes

• [flake8-pyi] Avoid false positives on singledispatch functions (PYI041) (#27335)

Server

• Register formatting capabilities dynamically to exclude TOML files (#27332)

Contributors

• @​MeGaGiGaGon
• @​charliermarsh
• @​epage
• @​sharkdp
• @​ntBre

Commits

• 5b48a04 Bump 0.16.2 (#27555)
• 1b9e5fc Update Swatinem/rust-cache action to v2.9.2 (#27568)
• c4e86fc [ty] Add helper extension methods for half-range and equality constraints (#2...
• 17a00de [ty] Reuse primer commands in memory reports (#27553)
• 6ea296b [ty] Normalize type labels in structured docstrings (#26923)
• 2fc445f [ty] Diagnose invalid getattr calls (#27502)
• 22c7823 [ty] Enable (but downrank) auto-import completion suggestions from stub-only ...
• 05160d5 [ty] Diagnose invalid descriptor __get__ calls (#27400)
• baea3d0 [ty] Expose strict analysis options in the playground (#27543)
• c88946e [ty] Bump ecosystem-analyzer for strict project settings (#27542)
• Additional commits viewable in compare view

Updates ty from 0.0.66 to 0.0.70

Release notes

Sourced from ty's releases.

0.0.70

Release Notes

Released on 2026-08-10.

LSP server

• Enable and downrank auto-import completions from stub-only modules (#27433)
• Fix signature help at end of file (#27622)
• Normalize type labels in structured docstrings (#26923)
• Preserve typing-only completion ranking in TYPE_CHECKING blocks (#27549)

CLI

• Avoid deadlock when scheduling watch checks (#27605)

Diagnostics

• Add an opt-in unsound-return-statement lint (#27561)
• Add an opt-in unsound-yield lint (#27593)
• Diagnose invalid __getattr__ calls (#27502)
• Diagnose invalid descriptor __get__ calls (#27400)

Core type checking

• Consider object members in protocol comparisons (#27532)
• Exclude quantified constraints from semantic type walks (#27613)
• Expand Generator aliases when evaluating return, send, and yield types (#27577)
• Infer precise TypedDict key-membership truthiness (#27579)
• Infer variance through type[T] (#27534)
• Preserve contextual inference for declarations in loops (#27594)
• Recognize overlapping NewType types and their underlying values (#27522)
• Require ClassVar declarations for protocol members (#27530)
• Stabilize recursive gradual type alias materialization (#27563)
• Support Annotated inside type[...] (#27629)
• Validate augmented assignment stores (#27545)

Contributors

• @​AlexWaygood
• @​carljm
• @​charliermarsh
• @​MichaReiser
• @​lerebear

Install ty 0.0.70

Install prebuilt binaries via shell script

</tr></table> 

... (truncated)

Changelog

Sourced from ty's changelog.

0.0.70

Released on 2026-08-10.

LSP server

• Enable and downrank auto-import completions from stub-only modules (#27433)
• Fix signature help at end of file (#27622)
• Normalize type labels in structured docstrings (#26923)
• Preserve typing-only completion ranking in TYPE_CHECKING blocks (#27549)

CLI

• Avoid deadlock when scheduling watch checks (#27605)

Diagnostics

• Add an opt-in unsound-return-statement lint (#27561)
• Add an opt-in unsound-yield lint (#27593)
• Diagnose invalid __getattr__ calls (#27502)
• Diagnose invalid descriptor __get__ calls (#27400)

Core type checking

• Consider object members in protocol comparisons (#27532)
• Exclude quantified constraints from semantic type walks (#27613)
• Expand Generator aliases when evaluating return, send, and yield types (#27577)
• Infer precise TypedDict key-membership truthiness (#27579)
• Infer variance through type[T] (#27534)
• Preserve contextual inference for declarations in loops (#27594)
• Recognize overlapping NewType types and their underlying values (#27522)
• Require ClassVar declarations for protocol members (#27530)
• Stabilize recursive gradual type alias materialization (#27563)
• Support Annotated inside type[...] (#27629)
• Validate augmented assignment stores (#27545)

Contributors

• @​AlexWaygood
• @​carljm
• @​charliermarsh
• @​MichaReiser
• @​lerebear

0.0.69

Released on 2026-08-06.

Core type checking

... (truncated)

Commits

• bf8c9f3 Bump version to 0.0.70 (#4228)
• 340b882 Document the unsound-return-statement rule (#4211)
• 1dca844 Bump version to 0.0.69 (#4202)
• 557a078 Link to actual docs page rather than README in issue creation menu "Documenta...
• 23a6000 Bump version to 0.0.68 (#4199)
• dc3b7af Update typing FAQ for numeric tower displays (#4198)
• 261fd8f Bump version to 0.0.67 (#4192)
• 91ded4e release: use self-repo references (#4190)
• 83bd8c8 Update bug report issue template (#4189)
• 7ce0eee Update prek dependencies (#4178)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[github-actions]

PR Preview Action v1.8.1
Preview removed because the pull request was closed.
2026-08-15 09:59 UTC