chore(deps): bump the python-minor-patch group with 3 updates

[dependabot]

Bumps the python-minor-patch group with 3 updates: ruff, ty and assertpy2.

Updates ruff from 0.16.4 to 0.16.5

Release notes

Sourced from ruff's releases.

0.16.5

Release Notes

Released on 2026-08-27.

Preview features

• Allow rules without codes (#28049)
• Introduce category selectors (#27666)
• Update preview default rules and categories (#27877)

Bug fixes

• [flake8-async] Detect blocking generic HTTP requests (ASYNC210) (#28024)
• [flake8-datetimez] Allow timezone-safe strptime chains (DTZ007) (#28023)
• [flake8-simplify] Respect side effects in lambda defaults (SIM401) (#28000)

Server

• Fix duplicated "of" in ClientOptions doc comment (#27978)

Documentation

• Document rule acceptance guidelines (#27910)
• Document the new category selectors (#27906)

Contributors

• @​AlexWaygood
• @​sharkdp
• @​jelle-openai
• @​charliermarsh
• @​ntBre
• @​aarushkandukoori

Install ruff 0.16.5

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ruff/releases/download/0.16.5/ruff-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/ruff/releases/download/0.16.5/ruff-installer.ps1 | iex"

Download ruff 0.16.5

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.5

Released on 2026-08-27.

Preview features

• Allow rules without codes (#28049)
• Introduce category selectors (#27666)
• Update preview default rules and categories (#27877)

Bug fixes

• [flake8-async] Detect blocking generic HTTP requests (ASYNC210) (#28024)
• [flake8-datetimez] Allow timezone-safe strptime chains (DTZ007) (#28023)
• [flake8-simplify] Respect side effects in lambda defaults (SIM401) (#28000)

Server

• Fix duplicated "of" in ClientOptions doc comment (#27978)

Documentation

• Document rule acceptance guidelines (#27910)
• Document the new category selectors (#27906)

Contributors

• @​AlexWaygood
• @​sharkdp
• @​jelle-openai
• @​charliermarsh
• @​ntBre
• @​aarushkandukoori

Commits

• 9e4938c Bump 0.16.5 (#28110)
• aad0e90 Allow rules without codes (#28049)
• 5fdab73 Update preview default rules and categories (#27877)
• 29c8e5b Document rule acceptance guidelines (#27910)
• 50a4d7f Document the new category selectors (#27906)
• ada8795 Introduce category selectors (#27666)
• d894723 [ty] Infer lambda parameters through callable type aliases (#28109)
• 2685fde [ty] Narrow functional enum members in == and match (#28103)
• efcffd2 [ty] Intersection simplifications with subtype-related generic specialization...
• eb78048 [ty] Bump ecosystem-analyzer for HTML escaping (#28104)
• Additional commits viewable in compare view

Updates ty from 0.0.74 to 0.0.75

Release notes

Sourced from ty's releases.

0.0.75

Release Notes

Released on 2026-08-26.

Preview features

• Initialize PEP 723 script environments in the CLI (#27544)
• Refresh PEP 723 script environments in watch mode (#27617)
• Run PEP 723 script synchronization on bounded workers (#27615)

Bug fixes

• Specialize Self bounds of inherited methods (#27990)

LSP server

• Add "Go to Definition" support for pytest fixtures (#27444)

Documentation

• Fix documented Python package build command (#4384)
• Link untyped-call tracking issue in migration guide (#4382)

Library support

• Resolve imported pytest fixture exposures (#27539)
• Resolve installed core pytest fixture providers (#27770)
• Resolve pytest fixtures through conftest (#27540)

Diagnostics

• Add more autofixes (#28029)
• Add a dedicated missing-slot diagnostic (#28039)
• Explain missing storage for declared slotted attributes (#27969)
• Improve diagnostic spans for unpacked variable assignments (#28041)

Core type checking

• Account for known subclasses in equality inference (#28005)
• Expand ParamSpec signatures inferred from bound receivers (#28020)
• Fix Self binding in ParamSpec protocols (#28016)
• Fix TypedDict variance inference (#28052)
• Fix unsound narrowing through branch-assigned conditions (#28006)
• Ignore inconsistent binding decorators on overloads (#28036)
• Infer yield from send/return types from the iterator returned by __iter__ (#27987)
• Infer tuple type parameters from union arguments (#28062)
• Infer variance through nonrecursive protocol references (#28065)
• Preserve bounds of non-literal metaclasses (#28046)
• Preserve correlated generic-call inference (#28043)

... (truncated)

Changelog

Sourced from ty's changelog.

0.0.75

Released on 2026-08-26.

Preview features

• Initialize PEP 723 script environments in the CLI (#27544)
• Refresh PEP 723 script environments in watch mode (#27617)
• Run PEP 723 script synchronization on bounded workers (#27615)

Bug fixes

• Specialize Self bounds of inherited methods (#27990)

LSP server

• Add "Go to Definition" support for pytest fixtures (#27444)

Documentation

• Fix documented Python package build command (#4384)
• Link untyped-call tracking issue in migration guide (#4382)

Library support

• Resolve imported pytest fixture exposures (#27539)
• Resolve installed core pytest fixture providers (#27770)
• Resolve pytest fixtures through conftest (#27540)

Diagnostics

• Add more autofixes (#28029)
• Add a dedicated missing-slot diagnostic (#28039)
• Explain missing storage for declared slotted attributes (#27969)
• Improve diagnostic spans for unpacked variable assignments (#28041)

Core type checking

• Account for known subclasses in equality inference (#28005)
• Expand ParamSpec signatures inferred from bound receivers (#28020)
• Fix Self binding in ParamSpec protocols (#28016)
• Fix TypedDict variance inference (#28052)
• Fix unsound narrowing through branch-assigned conditions (#28006)
• Ignore inconsistent binding decorators on overloads (#28036)
• Infer yield from send/return types from the iterator returned by __iter__ (#27987)
• Infer tuple type parameters from union arguments (#28062)
• Infer variance through nonrecursive protocol references (#28065)
• Preserve bounds of non-literal metaclasses (#28046)
• Preserve correlated generic-call inference (#28043)
• Preserve invariant materialization constraints (#28047)

... (truncated)

Commits

• a553dcc Bump version to 0.0.75 (#4396)
• 26b1b50 Update prek dependencies (#4392)
• 73d226e Fix documented Python package build command (#4384)
• 5e264da Link untyped-call tracking issue in migration guide (#4382)
• See full diff in compare view

Updates assertpy2 from 2.23.0 to 2.24.0

Release notes

Sourced from assertpy2's releases.

2.24.0

Failure clustering is on by default, and the typed surface narrowed in five places.

Read Behaviour changes before upgrading, especially if a type checker runs in your CI.

TL;DR

New
Failing tests are grouped by what they differ at	one line naming the shared cause instead of reading twenty tracebacks for it
assertpy2_profile = "strict"	the diagnostics stop warning and start failing the tests they find
is_instance_of(int | str)	a union and a nested tuple are what isinstance takes, so they are what the signature takes
A chain a raising block requires is left alone	with pytest.raises(...): assert_that(x).is_positive() stopped being reported as dangling

Typing
A value with only a capability has its own surface	a mapping-shaped value kept all 152 assertion names, ordering and text included
Seven families a capable value cannot answer are refused	text, dates, bytes, whole numbers, the filesystem, the call, and the ordering six
Five numeric assertions ask the value to convert	is_nan and friends reach math.isnan, which needs __float__ or __index__
Decimal and Fraction keep the numeric family	neither is an int or a float, so both landed on the fallback and lost it
Every exported symbol has a type a checker can name	100% type completeness, gated, and Pyrefly joined ty, mypy and Pyright

Fixed
A failing is_instance_of crashed instead of failing	a tuple has no __name__, and the message read it on the failure path
A union printed as Union	the name of the thing you passed is the one worth printing
An async predicate passed whatever it answered	a coroutine object is truthy, so satisfies(is_ready) was green on any value
A snapshot refusal raised a bare AssertionError	every other failure this library raises carries actual, expected and diff
An empty setting took the whole run down	assertpy2_dangling = with nothing after it reached -W error as an INTERNALERROR
conforms_to_openapi(method=1) crashed	'int' object has no attribute 'lower' named neither the argument nor the call
A subclass that changes neither __eq__ nor __hash__ walked	membership took the quadratic path on StrEnum and on every int subclass

Failing tests are grouped by what they differ at

Three tests, one cause.

Before

FAILED test_orders.py::test_first  - assertpy2.AssertionFailure: Expected <{...
FAILED test_orders.py::test_second - assertpy2.AssertionFailure: Expected <{...
FAILED test_orders.py::test_third  - assertpy2.AssertionFailure: Expected <{...
3 failed in 0.05s

Now

assertpy2 failure clusters:
  3 of 3 failing tests differ at status
</tr></table> 

... (truncated)

Commits

• 2c35f1c chore: bump version to 2.24.0
• bc209a9 fix: let the object fallback answer the numeric assertions a registered numbe...
• 7977310 test: measure the umbrella float restriction on a value that reaches the umbr...
• f14efed fix: refuse the numeric assertions a capable value cannot convert for
• bdb6c69 test: raise the clustering benchmark to 200 so a few instructions stop readin...
• f74d1fc style: cut every comment to what the code cannot say itself
• b19f739 style: give variables real names in place of single letters
• f408f50 docs: name pyrefly as the fourth gated checker and refresh the recorded counts
• 3efd1b5 fix: keep the json alias readable by ty, which ignores a fully quoted one
• 7884c0a test: require a written reason on every checker skip, and give the last two t...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions