chore(deps): bump the python-minor-patch group with 3 updates

[dependabot]

Bumps the python-minor-patch group with 3 updates: ruff, ty and mutmut.

Updates ruff from 0.16.7 to 0.16.8

Release notes

Sourced from ruff's releases.

0.16.8

Release Notes

Released on 2026-09-16.

Bug fixes

• Visit functional TypedDict keyword arguments correctly (#28584)
• [flake8-simplify] Detect nested async with under sync parent (SIM117) (#27821)
• [flake8-simplify] Preserve operand order in SIM109 fix (#27824)
• [pyupgrade] Preserve required parentheses in multiline UP040 fixes (#28164)
• [pyupgrade] Skip TypeVarTuple and ParamSpec conversions with bounds or constraints (UP040, UP046, UP047) (#28505)

Rule changes

• Add support for __lazy_modules__ (#28459)
• Recognize PEP-728 TypedDict class keywords (#28533)
• Recognize quoted types in typing.TypeForm (#28507)
• Support conditional assignment to __lazy_modules__ (#28491)
• [flake8-type-checking] Prefer lazy imports over TYPE_CHECKING on Python 3.15 and later (TC001, TC002, TC003) (#28541)
• [pyupgrade] Make the fix for UP040 always unsafe (#28526)
• [pyupgrade] Stop recommending deprecated ByteString aliases (UP035) (#28498)
• [ruff, flake8-use-pathlib] Recognize the parent_mode argument (RUF064, PTH103) (#28528)
• [ruff] Detect \Z in pytest.raises() match patterns (RUF043) (#28598)

CLI

• Use rule name and code in formatter incompatibility warnings (#28571)

Configuration

• [flake8-tidy-imports] Add extend-banned-api (#28644)

Contributors

• @​VedantMadane
• @​alzeph
• @​charliermarsh
• @​fredrikblau
• @​ntBre
• @​zsol
• @​Aniket-a14
• @​r-b-1

Install ruff 0.16.8

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ruff/releases/download/0.16.8/ruff-installer.sh | sh
</tr></table> 

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.8

Released on 2026-09-16.

Bug fixes

• Visit functional TypedDict keyword arguments correctly (#28584)
• [flake8-simplify] Detect nested async with under sync parent (SIM117) (#27821)
• [flake8-simplify] Preserve operand order in SIM109 fix (#27824)
• [pyupgrade] Preserve required parentheses in multiline UP040 fixes (#28164)
• [pyupgrade] Skip TypeVarTuple and ParamSpec conversions with bounds or constraints (UP040, UP046, UP047) (#28505)

Rule changes

• Add support for __lazy_modules__ (#28459)
• Recognize PEP-728 TypedDict class keywords (#28533)
• Recognize quoted types in typing.TypeForm (#28507)
• Support conditional assignment to __lazy_modules__ (#28491)
• [flake8-type-checking] Prefer lazy imports over TYPE_CHECKING on Python 3.15 and later (TC001, TC002, TC003) (#28541)
• [pyupgrade] Make the fix for UP040 always unsafe (#28526)
• [pyupgrade] Stop recommending deprecated ByteString aliases (UP035) (#28498)
• [ruff, flake8-use-pathlib] Recognize the parent_mode argument (RUF064, PTH103) (#28528)
• [ruff] Detect \Z in pytest.raises() match patterns (RUF043) (#28598)

CLI

• Use rule name and code in formatter incompatibility warnings (#28571)

Configuration

• [flake8-tidy-imports] Add extend-banned-api (#28644)

Contributors

• @​VedantMadane
• @​alzeph
• @​charliermarsh
• @​fredrikblau
• @​ntBre
• @​zsol
• @​Aniket-a14
• @​r-b-1

Commits

• 62914c4 Bump version to 0.16.8 (#28648)
• c47e0cd [ty] Bound aliased intersection expansion during inference (#28546)
• ff4747b renovate: update uv hashes correctly with setup-uv (#28621)
• 94efeaa [ty] Compact reachable binding and declaration histories (#28349)
• 50020fb [ty] Avoid storing constraint nodes twice (#28375)
• 446bb68 [ty] Compare bound-method receivers before signatures (#28384)
• 304ab86 [flake8-type-checking] Prefer lazy imports over TYPE_CHECKING on 3.15+ (`...
• d940b24 [ty] Watch script dependencies in CLI watch mode (#28125)
• fe9f065 [flake8-tidy-imports] Add extend-banned-api (#28644)
• 31131db [ty] Support type[A & B] (#27124)
• Additional commits viewable in compare view

Updates ty from 0.0.80 to 0.0.82

Release notes

Sourced from ty's releases.

0.0.82

Release Notes

Released on 2026-09-17.

Preview features

• Ignore Python version from uv metadata (#28646)
• Watch script dependencies in CLI watch mode (#28125)

CLI

• Only skip uv workspace metadata for a single script (#28581)
• Support dependency lints with --config-file (#28573)

LSP server

• Filter string literal completions by typed text (#28612)
• Find member references across files (#28669)
• Find parameter references across files (#28670)
• Preserve valid LSP settings when configuration resolution fails (#28653)
• Reuse identifier matcher in LSP operations (#28663)
• Watch script dependencies in the language server (#28522)

Diagnostic improvements

• Add an autofix for unused awaitables (#28668)
• Add annotations for unreachable code caused by boolean operands (#28521)
• Add subdiagnostics to redundant-condition rules warning about reachability implications (#28263)
• Clarify diagnostics for unimplemented abstract members (#28538)
• Extend unreachable-code annotations to while, assert, and match statements (#28290)

Core type checking

• Allow experimental intersection syntax in PEP 695 aliases (#28513)
• Bound aliased intersection expansion during inference (#28546)
• Check declared variance against final method bindings (#28155)
• Fix recursive protocol checks for decorated methods (#28293)
• Freshen constructor-owned Self with class type variables (#28592)
• Improve disjointness of functools.partial types (#28660)
• Include constraint-set assignability in more checks (#28642)
• Infer conditional literals from peers in unspecialized contexts (#28633)
• Infer generic elements from gradual tuples (#28637)
• Introduce Recursive types and fully support recursive implicit type aliases (#28425)
• Narrow type context during tuple inference (#28658)
• Preserve field metadata after overload resolution (#28635)
• Preserve gradual class assignability in constraint-set checks (#28638)
• Preserve gradual tuple lengths during callable inference (#28588)
• Preserve tuple shapes during concatenation (#28617)
• Reject abstract class instantiation (#28167)

... (truncated)

Changelog

Sourced from ty's changelog.

0.0.82

Released on 2026-09-17.

Preview features

• Ignore Python version from uv metadata (#28646)
• Watch script dependencies in CLI watch mode (#28125)

CLI

• Only skip uv workspace metadata for a single script (#28581)
• Support dependency lints with --config-file (#28573)

LSP server

• Filter string literal completions by typed text (#28612)
• Find member references across files (#28669)
• Find parameter references across files (#28670)
• Preserve valid LSP settings when configuration resolution fails (#28653)
• Reuse identifier matcher in LSP operations (#28663)
• Watch script dependencies in the language server (#28522)

Diagnostic improvements

• Add an autofix for unused awaitables (#28668)
• Add annotations for unreachable code caused by boolean operands (#28521)
• Add subdiagnostics to redundant-condition rules warning about reachability implications (#28263)
• Clarify diagnostics for unimplemented abstract members (#28538)
• Extend unreachable-code annotations to while, assert, and match statements (#28290)

Core type checking

• Allow experimental intersection syntax in PEP 695 aliases (#28513)
• Bound aliased intersection expansion during inference (#28546)
• Check declared variance against final method bindings (#28155)
• Fix recursive protocol checks for decorated methods (#28293)
• Freshen constructor-owned Self with class type variables (#28592)
• Improve disjointness of functools.partial types (#28660)
• Include constraint-set assignability in more checks (#28642)
• Infer conditional literals from peers in unspecialized contexts (#28633)
• Infer generic elements from gradual tuples (#28637)
• Introduce Recursive types and fully support recursive implicit type aliases (#28425)
• Narrow type context during tuple inference (#28658)
• Preserve field metadata after overload resolution (#28635)
• Preserve gradual class assignability in constraint-set checks (#28638)
• Preserve gradual tuple lengths during callable inference (#28588)
• Preserve tuple shapes during concatenation (#28617)
• Reject abstract class instantiation (#28167)
• Respect frozen=False overrides on Pydantic subclasses (#28515)

... (truncated)

Commits

• 6999edb Bump version to 0.0.82 (#4547)
• 69ee79c Update prek dependencies (#4534)
• 9bbaccc Remove accidental uv version constraint (#4537)
• edb7fab Update astral-sh/setup-uv action to v10.1.0 (#4535)
• bc531b1 Update dependency prek to v0.4.14 (#4533)
• 66d7e3f renovate: track uv versions/checksums with setup-uv (#4532)
• 4edd772 Bump version to 0.0.81 (#4528)
• 8cfdd79 Use paid GitHub-hosted runners for Linux (#4502)
• See full diff in compare view

Updates mutmut from 3.7.0 to 3.8.0

Release notes

Sourced from mutmut's releases.

3.8.0

What's Changed

• feat: mutate ternary conditions by @​espressolee in boxed/mutmut#546
• fix: mutate methods of decorated classes by @​Sanjays2402 in boxed/mutmut#539
• Add mutation score badge support by @​rxdt in boxed/mutmut#549
• wip: don't mutate lines excluded from coverage by @​nedbat in boxed/mutmut#547
• chore: add support python3.15 by @​even-even in boxed/mutmut#551
• Fix mutants missed when tests clear os.environ by @​DSeaStar in boxed/mutmut#552
• chore: up mypy to 2.3.1 by @​even-even in boxed/mutmut#553
• Honour 'pragma: no mutate block' on else/except/finally arms by @​dylanpulver in boxed/mutmut#559
• refac: main decomposition by @​nicklafleur in boxed/mutmut#561
• ci: pre-commit workflow by @​nicklafleur in boxed/mutmut#567
• fix: delete twice "-24" param and up ruff for tests it by @​even-even in boxed/mutmut#565
• Fix "pragma: no mutate" on match/case headers being silently ignored by @​mathieu-lacage in boxed/mutmut#554
• misc: update history by @​nicklafleur in boxed/mutmut#576
• feat: process isolation and fork-safe test runners by @​nicklafleur in boxed/mutmut#566
• Fix obsolete test names never being removed from the stats file by @​t-roi33 in boxed/mutmut#569
• Release 3.8.0 by @​nicklafleur in boxed/mutmut#581

New Contributors

• @​espressolee made their first contribution in boxed/mutmut#546
• @​rxdt made their first contribution in boxed/mutmut#549
• @​nedbat made their first contribution in boxed/mutmut#547
• @​DSeaStar made their first contribution in boxed/mutmut#552
• @​dylanpulver made their first contribution in boxed/mutmut#559
• @​mathieu-lacage made their first contribution in boxed/mutmut#554
• @​t-roi33 made their first contribution in boxed/mutmut#569

Full Changelog: boxed/mutmut@3.7.0...3.8.0

Changelog

Sourced from mutmut's changelog.

3.8.0

* Fix obsolete test names never being removed from ``mutants/mutmut-stats.json`` (`[#564](https://github.com/boxed/mutmut/issues/564)`)


Fix # pragma: no mutate block being silently ignored when placed on an else, except, except* or finally header, and on the try line of a try/except* ([#559](https://github.com/boxed/mutmut/issues/559))


Fix # pragma: no mutate being silently ignored on match and case headers ([#554](https://github.com/boxed/mutmut/issues/554))


Fix mutants being reported as survived when a test uses patch.dict(os.environ, ..., clear=True) ([#511](https://github.com/boxed/mutmut/issues/511), [#552](https://github.com/boxed/mutmut/issues/552))


Fix mutate_only_covered_lines mutating code that coverage.py excludes from measurement (# pragma: no cover, exclude_lines, exclude_also) ([#547](https://github.com/boxed/mutmut/issues/547))


Fix mutations that delete ignored code. Dropping a case from a match, or an argument from a call, is a mutation of the enclosing node, so it used to be made even when the removed lines were themselves ignored ([#547](https://github.com/boxed/mutmut/issues/547))


Fix methods of decorated classes (for example @dataclass) not being mutated ([#480](https://github.com/boxed/mutmut/issues/480), [#539](https://github.com/boxed/mutmut/issues/539))


Fix time measurement including test setup/teardown instead of only the main test run ([#544](https://github.com/boxed/mutmut/issues/544))


Fix mutants stopped by the CPU-time limit being reported as killed instead of timed out ([#565](https://github.com/boxed/mutmut/issues/565))


Fix mutate_only_covered_lines breaking when the test suite imports a dependency that cannot be initialized twice in one process, which raised for numpy and libyaml, produced misleading type errors for cryptography, and segfaulted for asyncpg. Coverage is now gathered in a separate process, so the modules the coverage run imports are no longer unloaded and re-imported in the main process ([#528](https://github.com/boxed/mutmut/issues/528), [#566](https://github.com/boxed/mutmut/issues/566))


Mutate the condition of ternary expressions ([#196](https://github.com/boxed/mutmut/issues/196), [#546](https://github.com/boxed/mutmut/issues/546))


Add a process_isolation config for choosing which process mutant workers are forked from. The new forkserver strategy keeps mutmut's main process free of pytest and your conftest.py, routing every fork through a dedicated fork server process, for test setups that are not fork-safe (gevent, grpc, torch). Tune what it preloads with forkserver_warmup ([#578](https://github.com/boxed/mutmut/issues/578), [#566](https://github.com/boxed/mutmut/issues/566))


Add a badge command that writes a shields.io endpoint file, for publishing the mutation score ([#549](https://github.com/boxed/mutmut/issues/549))


Support python3.15 ([#551](https://github.com/boxed/mutmut/issues/551))

Commits

• 14a7230 Release 3.8.0 (#581)
• 4ff5d9e Fix obsolete test names never being removed from the stats file (#569)
• c3a8f4b feat: process isolation and fork-safe test runners (#566)
• 7f8ba00 misc: update history (#576)
• 301df52 Fix pragma: no mutate on match/case headers being silently ignored
• 630e846 fix: delete twice "-24" param and up ruff for tests it
• b1d1270 ci: pre-commit workflow (#567)
• 748bfc0 refac: main decomposition (#561)
• 2f39c84 Honour 'pragma: no mutate block' on else/except/finally arms (#559)
• e450cfc chore: up mypy to 2.3.1
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[codspeed]

Merging this PR will not alter performance

✅ 4 untouched benchmarks

---

_{Comparing dependabot/uv/python-minor-patch-32d7a5a3fd (a154eec) with main (cb0fee8)}