Bump the uv-dependencies group with 2 updates

[dependabot]

Bumps the uv-dependencies group with 2 updates: ruff and ty.

Updates ruff from 0.16.3 to 0.16.4

Release notes

Sourced from ruff's releases.

0.16.4

Release Notes

Released on 2026-08-20.

Preview features

• [flake8-use-pathlib] Add autofix for PTH116 (#26460)
• [refurb] Restrict delete-full-slice to lists (FURB131) (#27711)
• [refurb] Skip FURB101 and FURB103 when the open argument is a file descriptor (#27643)

Bug fixes

• Fix InvalidInstruction on Windows CPUs that do not support POPCNT (#27803)
• [pyflakes] Emit semantic syntax errors in string type definitions as F722 (#27835)
• [pylint] Allow os._exit imports in import-private-name (PLC2701) (#27738)

Rule changes

• [syntax-errors] Align mixed t-string/bytes error message with CPython 3.14 (#27766)
• [ruff] Add ctypes.LittleEndianStructure and related types to existing exception (RUF012) (#27753)
• [syntax-errors] Detect duplicate keyword arguments (#17804)
• [syntax-errors] Detect parameters declared nonlocal (#27628)

Server

• Offer display-only fixes and mark safe fixes preferred (#27807)
• Support pull diagnostics for notebook cells (#27779)

Documentation

• Add default indicator to rules table (#27724)
• Fix broken link to Python docs (#27757)

Other changes

• Fix s390x stacker assembly in release builds (#27776)
• Guarantee minimum stack size when parsing a module, standalone expression, and suites (#25464)
• Reduce configuration deserialization code size (#27924)
• Check packed AST index bounds (#27849)

Contributors

• @​AbhinavMir
• @​eduardorittner
• @​royb3
• @​MichaReiser
• @​carljm
• @​rosstitmarsh
• @​ntBre

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.4

Released on 2026-08-20.

Preview features

• [flake8-use-pathlib] Add autofix for PTH116 (#26460)
• [refurb] Restrict delete-full-slice to lists (FURB131) (#27711)
• [refurb] Skip FURB101 and FURB103 when the open argument is a file descriptor (#27643)

Bug fixes

• Fix InvalidInstruction on Windows CPUs that do not support POPCNT (#27803)
• [pyflakes] Emit semantic syntax errors in string type definitions as F722 (#27835)
• [pylint] Allow os._exit imports in import-private-name (PLC2701) (#27738)

Rule changes

• [syntax-errors] Align mixed t-string/bytes error message with CPython 3.14 (#27766)
• [ruff] Add ctypes.LittleEndianStructure and related types to existing exception (RUF012) (#27753)
• [syntax-errors] Detect duplicate keyword arguments (#17804)
• [syntax-errors] Detect parameters declared nonlocal (#27628)

Server

• Offer display-only fixes and mark safe fixes preferred (#27807)
• Support pull diagnostics for notebook cells (#27779)

Documentation

• Add default indicator to rules table (#27724)
• Fix broken link to Python docs (#27757)

Other changes

• Fix s390x stacker assembly in release builds (#27776)
• Guarantee minimum stack size when parsing a module, standalone expression, and suites (#25464)
• Reduce configuration deserialization code size (#27924)
• Check packed AST index bounds (#27849)

Contributors

• @​AbhinavMir
• @​eduardorittner
• @​royb3
• @​MichaReiser
• @​carljm
• @​rosstitmarsh
• @​ntBre
• @​zaniebot

... (truncated)

Commits

• 11c76bf Bump 0.16.4 (#27937)
• d53c8c5 Isolate playground builds from deployment credentials (#27839)
• cab001e Disable uv preview for releases and pre-commit hooks (#27939)
• f8d575f [ty] Clarify writing guidance for human readers (#27912)
• ca45fae Set --preview and --default-index for the uv-lock hook (#27935)
• 4827bf7 Export UV_DEFAULT_INDEX in release.sh (#27934)
• d1087a4 [ty] Handle assignment expressions in string annotations (#27921)
• 680cce4 [ty] Optimize inherited recursive protocol comparisons (#27922)
• 974d3cb Upgrade ecosystem-analyzer and mypy_primer to the latest upstream pins (#27932)
• b169b40 Install cargo tools locked (#27929)
• Additional commits viewable in compare view

Updates ty from 0.0.72 to 0.0.73

Release notes

Sourced from ty's releases.

0.0.73

Release Notes

Released on 2026-08-18.

LSP server

• Do not prefer unsafe fixes in the language server (#27822)
• Fix signature help in trailing whitespace (#27784)

Library support

• Preserve variadic generics in functools.partial (#27774)

Diagnostics

• Add an opt-in rule flagging function decorators that transform a non-dynamic type into a dynamic type (#27829)
• Disambiguate same-named types in several diagnostics (#27814)
• Show error spans for errors originating in script metadata (#26693)

Core type checking

• Avoid bypassing solver during literal promotion (#27763)
• Expand nested union aliases when finding a TypedDict or callable (#27740)
• Implement intersection meta-type projection (#27660)
• Infer generic protocols from class objects (#27812)
• Model exception-suppressing context managers (#27219)
• Preserve TypeAliasType runtime origin (#27813)
• Preserve class objects in lazy protocol checks (#27815)
• Preserve declared types in exception handlers (#27817)
• Preserve explicit globals after conditional rebinding (#27786)
• Preserve property subclass types and accessors (#27833)
• Preserve required stub fields in generated constructors (#27765)
• Preserve static upper bounds of gradual solutions (#27664)
• Prevent unrelated quantified constraints from destabilizing recursive queries (#27737)
• Separate generic constraint accumulation from legacy projection (#27743)
• Simplify generic protocol inference (#27819)
• Specialize inherited members of unspecialized generic classes (#27658)
• Specialize type variables determined by bound receivers (#27732)
• Support unpacking tuple type aliases (#27825)
• Sync vendored typeshed stubs (#27771). Typeshed diff

Performance

• Cache py.typed contents (#27805)
• Deduplicate exception checkpoints across equivalent branches (#27703)

Contributors

• @​charliermarsh

... (truncated)

Changelog

Sourced from ty's changelog.

0.0.73

Released on 2026-08-18.

LSP server

• Do not prefer unsafe fixes in the language server (#27822)
• Fix signature help in trailing whitespace (#27784)

Library support

• Preserve variadic generics in functools.partial (#27774)

Diagnostics

• Add an opt-in rule flagging function decorators that transform a non-dynamic type into a dynamic type (#27829)
• Disambiguate same-named types in several diagnostics (#27814)
• Show error spans for errors originating in script metadata (#26693)

Core type checking

• Avoid bypassing solver during literal promotion (#27763)
• Expand nested union aliases when finding a TypedDict or callable (#27740)
• Implement intersection meta-type projection (#27660)
• Infer generic protocols from class objects (#27812)
• Model exception-suppressing context managers (#27219)
• Preserve TypeAliasType runtime origin (#27813)
• Preserve class objects in lazy protocol checks (#27815)
• Preserve declared types in exception handlers (#27817)
• Preserve explicit globals after conditional rebinding (#27786)
• Preserve property subclass types and accessors (#27833)
• Preserve required stub fields in generated constructors (#27765)
• Preserve static upper bounds of gradual solutions (#27664)
• Prevent unrelated quantified constraints from destabilizing recursive queries (#27737)
• Separate generic constraint accumulation from legacy projection (#27743)
• Simplify generic protocol inference (#27819)
• Specialize inherited members of unspecialized generic classes (#27658)
• Specialize type variables determined by bound receivers (#27732)
• Support unpacking tuple type aliases (#27825)
• Sync vendored typeshed stubs (#27771). Typeshed diff

Performance

• Cache py.typed contents (#27805)
• Deduplicate exception checkpoints across equivalent branches (#27703)

Contributors

• @​charliermarsh
• @​AlexWaygood

... (truncated)

Commits

• 4bd2833 Bump version to 0.0.73 (#4322)
• 93d0d4f Disable known GitHub cache clients in release workflows (#4317)
• ec4806b Harden release workflow permissions and shell inputs (#4319)
• f61c758 Disable cache-aware actions throughout release workflows (#4321)
• b25dd98 Require wheels for Python tooling dependencies (#4313)
• 07cd61a Manage docs build with a dep group (#4315)
• b37f512 Require the release tooling lockfile (#4316)
• 7a1c4e7 Fix vulnerable Python dependencies (#4282)
• 7abd818 Add dependency cooldowns (#4281)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions