Bump the development-dependencies group across 1 directory with 4 updates - #21

Sourced from ruff's releases.

0.16.3

Release Notes

Released on 2026-08-13.

Preview features

• [pylint] Fix false negatives on negative numbers (PLR6104) (#27251)
• [pyupgrade] Add rule to replace while 1 with while True (UP048) (#27190)

Bug fixes

• [flake8-bandit] Also check keyword arguments (S602, S603, S607, S609) (#27687)
• [pylint] Allow continue in finally on Python 3.8 (#27626)
• [pylint] Fix PLE1307 false positive with bools (#27651)
• [pylint] Fix false positives and negatives with %b format character (PLE1300, PLE1307) (#27560)
• [pylint] Improve handling of concatenated strings (PLE1300) (#27659)

Rule changes

• [numpy] Make np.chararray autofix backwards-compatible (NPY201) (#27527)

Performance

• Enable PGO for Linux x86-64 Ruff releases (#27570)
• Enable PGO for Linux ARM64 Ruff releases (#27574)
• Enable PGO for Windows x86-64 Ruff releases (#27573)
• Enable PGO for macOS ARM64 Ruff releases (#27572)
• Reduce Expr size to 64 bytes (#27591)

CLI

• Hyperlink rule codes in ruff check --statistics output (#27646)

Documentation

• [ruff] Also suggest asyncio.TaskGroup (RUF006) (#27461)

Other changes

• Use mimalloc v3 (#27586)

Contributors

• @​Andrej730
• @​alonfaraj
• @​romero-deshaw
• @​Avasam
• @​tjkuson
• @​charliermarsh

... (truncated)

Sourced from ruff's changelog.

0.16.3

Released on 2026-08-13.

Preview features

• [pylint] Fix false negatives on negative numbers (PLR6104) (#27251)
• [pyupgrade] Add rule to replace while 1 with while True (UP048) (#27190)

Bug fixes

• [flake8-bandit] Also check keyword arguments (S602, S603, S607, S609) (#27687)
• [pylint] Allow continue in finally on Python 3.8 (#27626)
• [pylint] Fix PLE1307 false positive with bools (#27651)
• [pylint] Fix false positives and negatives with %b format character (PLE1300, PLE1307) (#27560)
• [pylint] Improve handling of concatenated strings (PLE1300) (#27659)

Rule changes

• [numpy] Make np.chararray autofix backwards-compatible (NPY201) (#27527)

Performance

• Enable PGO for Linux x86-64 Ruff releases (#27570)
• Enable PGO for Linux ARM64 Ruff releases (#27574)
• Enable PGO for Windows x86-64 Ruff releases (#27573)
• Enable PGO for macOS ARM64 Ruff releases (#27572)
• Reduce Expr size to 64 bytes (#27591)

CLI

• Hyperlink rule codes in ruff check --statistics output (#27646)

Documentation

• [ruff] Also suggest asyncio.TaskGroup (RUF006) (#27461)

Other changes

• Use mimalloc v3 (#27586)

Contributors

• @​Andrej730
• @​alonfaraj
• @​romero-deshaw
• @​Avasam
• @​tjkuson
• @​charliermarsh
• @​chirizxc

... (truncated)

• b0e4702 Bump 0.16.3 (#27723)
• ecdd401 [ty] Separate script and uv modules from project metadata (#27720)
• 1263524 [ty] Simplify display implementations with std::fmt::from_fn (#27718)
• 59196ba [ty] Unify polarity-aware relation construction (#27707)
• b8c5e73 [ty] Disable CodSpeed cycle estimation for instrumented benchmarks (#27706)
• 2b0d210 [ty] Centralize matched argument relations (#27705)
• a9130f3 [pyupgrade] Add rule to replace while 1 with while True (while-one, `...
• c64c7d6 [ty] Model try exception flow with operation checkpoints (#27471)
• 9dea5ef [ty] Avoid deriving sequents for typevars with concrete bounds (#27587)
• 9798e88 [ty] Preserve enum exhaustiveness with custom missing methods (#27700)
• Additional commits viewable in compare view

Sourced from httpx2's releases.

v2.10.0

Highlights

🚀 Performance and memory improvements

• Sending large HTTP/2 request bodies no longer copies the body quadratically - sending a 256 MiB body went from ~36s to under 0.1s (pydantic/httpx2#1127).
• SSE parsing is up to 35x faster on highly fragmented streams (pydantic/httpx2#1117).
• Cookie extraction is now skipped for responses without a Set-Cookie header, making typical requests roughly 8% faster (pydantic/httpx2#1107).

🕸️ WebAssembly / Emscripten support

httpx2 now runs on Pyodide / Emscripten, using a JavaScript fetch-based transport defined in httpx2-jsfetch (pydantic/httpx2#1119, pydantic/httpx2#1114). Thanks @​hoodmane!

httpx2

Added

• Add support for running on WebAssembly / Emscripten via Pyodide by @​hoodmane in pydantic/httpx2#1119
• Add max_event_size to cap SSE event buffering by @​Kludex in pydantic/httpx2#1071
• Add RFC 9110 status code constants by @​mbeijen in pydantic/httpx2#1069
• Add support for Python 3.15 by @​hugovk in pydantic/httpx2#1090

Changed

• Improve SSE chunk buffering performance by @​Kludex in pydantic/httpx2#1117
• Skip cookie extraction without Set-Cookie by @​Kludex in pydantic/httpx2#1107
• Return str | None instead of Any from Headers.get by @​ItsDrike in pydantic/httpx2#1121

Fixed

• Enforce WebSocket max message size across fragments by @​Kludex in pydantic/httpx2#1085
• Ignore unsolicited and duplicate Pong frames by @​Kludex in pydantic/httpx2#1122

httpcore2

Added

• Add support for Python 3.15 by @​hugovk in pydantic/httpx2#1090

Changed

• Avoid quadratic copying when sending large HTTP/2 request bodies by @​Kludex in pydantic/httpx2#1127

Fixed

• Propagate the original exception instead of raising KeyError when an HTTP/2 stream fails by @​yhay81 in pydantic/httpx2#1093
• Start TLS for the wss scheme in SOCKS5 proxy connections by @​Kludex in pydantic/httpx2#1104

🙏 New Contributors

... (truncated)

Sourced from httpx2's changelog.

2.10.0 (August 9th, 2026)

Added

• Add support for running on WebAssembly / Emscripten via Pyodide, using a JavaScript fetch-based transport defined in httpx2-jsfetch. (#1119)
• Add max_event_size to cap SSE event buffering. (#1071)
• Add RFC 9110 status code constants. (#1069)
• Add support for Python 3.15. (#1090)

Changed

• Improve SSE chunk buffering performance. (#1117)
• Skip cookie extraction for responses without Set-Cookie headers. (#1107)
• Return str | None instead of Any from Headers.get. (#1121)

Fixed

• Enforce the WebSocket max message size across fragmented messages. (#1085)
• Ignore unsolicited and duplicate WebSocket Pong frames. (#1122)

2.9.1 (July 24th, 2026)

Fixed

• Alias httpcore imports to httpcore2 in alias_httpx(). (#1082)

2.9.0 (July 23rd, 2026)

Added

• Add alias_httpx(), letting applications make import httpx resolve to httpx2 process-wide. (#1077)

2.8.0 (July 23rd, 2026)

No changes since 2.7.0. Version bumped to stay in lockstep with httpcore2.

2.7.0 (July 14th, 2026)

Changed

• Update the vendored httpx-ws to upstream v0.9.0. (#1067)

2.6.0 (July 14th, 2026)

Added

• Add native WebSocket support by vendoring httpx-ws, installable with httpx2[ws]. (#1042)
• Add support for the QUERY HTTP method via httpx2.query() and client.query(). (#1055)

... (truncated)

• a966320 Version 2.10.0 (#1129)
• dee1d1a Return str | None instead of Any from Headers.get (#1121)
• dec24ad Use httpx2-jsfetch on Emscripten (#1119)
• 454b8b2 Ignore unsolicited and duplicate Pong frames (#1122)
• cbfc0e0 Improve SSE chunk buffering performance (#1117)
• ad141d8 Refactor SSE parser coordination (#1118)
• e0b0124 Make _client depend on the _transports package instead of its submodules ...
• e52f963 Skip dependencies not needed on Emscripten (#1114)
• 5d9eedc Add max_event_size to cap SSE event buffering (#1071)
• 55fad71 Bump the python-packages group across 1 directory with 15 updates (#1112)
• Additional commits viewable in compare view

Sourced from ty's releases.

0.0.71

Release Notes

Released on 2026-08-12.

Library support

• Respect third-party keyword-only fields before Python 3.10 (#27699)

Diagnostics

• Diagnose invalid __getattribute__ calls (#27506)
• Validate boolean conversion in comprehension filters (#27641)
• Validate unpacked callable argument shapes (#27516)

Core type checking

• Avoid introducing boolean literals when narrowing integers (#27698)
• Fix truthiness inference for subclassable known classes (#27638)
• Handle class objects that may be descriptors (#26687)
• Infer type variables through nominal type[...] parameters (#27689)
• Model exception flow with operation checkpoints (#27471)
• Preserve constrained TypeVar types when slicing (#27645)
• Preserve enum attributes on Self and bounded type variables (#27644)
• Preserve enum exhaustiveness with custom _missing_ methods (#27700)
• Preserve literal-string origin in comparison narrowing (#27582)
• Resolve generic type aliases subscripted inside type[] (#27663)
• Restrict equality impossibility to static bounds (#27655)

Performance

• Avoid deriving sequents for type variables with concrete bounds (#27587)

Contributors

• @​dcreager
• @​augustelalande
• @​charliermarsh
• @​carljm
• @​AlexWaygood
• @​ibraheemdev

Install ty 0.0.71

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ty/releases/download/0.0.71/ty-installer.sh | sh

... (truncated)

Sourced from ty's changelog.

0.0.71

Released on 2026-08-12.

Library support

• Respect third-party keyword-only fields before Python 3.10 (#27699)

Diagnostics

• Diagnose invalid __getattribute__ calls (#27506)
• Validate boolean conversion in comprehension filters (#27641)
• Validate unpacked callable argument shapes (#27516)

Core type checking

• Avoid introducing boolean literals when narrowing integers (#27698)
• Fix truthiness inference for subclassable known classes (#27638)
• Handle class objects that may be descriptors (#26687)
• Infer type variables through nominal type[...] parameters (#27689)
• Model exception flow with operation checkpoints (#27471)
• Preserve constrained TypeVar types when slicing (#27645)
• Preserve enum attributes on Self and bounded type variables (#27644)
• Preserve enum exhaustiveness with custom _missing_ methods (#27700)
• Preserve literal-string origin in comparison narrowing (#27582)
• Resolve generic type aliases subscripted inside type[] (#27663)
• Restrict equality impossibility to static bounds (#27655)

Performance

• Avoid deriving sequents for type variables with concrete bounds (#27587)

Contributors

• @​dcreager
• @​augustelalande
• @​charliermarsh
• @​carljm
• @​AlexWaygood
• @​ibraheemdev

0.0.70

Released on 2026-08-10.

LSP server

• Enable and downrank auto-import completions from stub-only modules (#27433)
• Fix signature help at end of file (#27622)
• Normalize type labels in structured docstrings (#26923)

... (truncated)

• 683e223 Bump version to 0.0.71 (#4244)
• ede66b4 Document unsound-yield in the migration guide (#4239)
• 4c3d909 Validate the PGO pipeline in CI (#4236)
• df9bad1 Enable PGO for Linux ARM64 ty releases (#4218)
• 0ed874c Enable PGO for Windows x86-64 ty releases (#4217)
• 8988165 Enable PGO for macOS ARM64 ty releases (#4216)
• c25c341 Enable PGO for Linux x86-64 ty releases (#4213)
• d95445f Use Depot runners for release builds (#4224)
• c2932e1 Use an eight-core Ubuntu 24.04 runner for prek CI (#4235)
• bf8c9f3 Bump version to 0.0.70 (#4228)
• Additional commits viewable in compare view

Sourced from anyio's releases.

4.14.2

• Changed ByteReceiveStream.receive() implementations to raise a ValueError when max_bytes is not a positive integer (#1191)
• Fixed CapacityLimiter.total_tokens rejecting float("inf") when the limiter was instantiated outside of an event loop. The adapter setter checked for infinity by identity (value is math.inf), so only the exact math.inf singleton was accepted, while every backend setter (using math.isinf()) accepts any positive infinity (#1189; PR by @​greymoth-jp).
• Fixed to_process.run_sync() deadlocking when the worker function writes enough data to sys.stderr to fill the (undrained) pipe buffer. The worker process now redirects sys.stderr to os.devnull as well, matching the documented behavior
• Fixed TLSStream.wrap() matching an internationalized (unicode) host name against the peer certificate using IDNA 2003 (via the standard library) instead of IDNA 2008, which could cause the host name to be matched against the wrong certificate (#1208)
• Fixed anyio.open_process() (and run_process()) ignoring the extra_groups argument, as it mistakenly passed the value of the group argument instead (#1209)
• Fixed CapacityLimiter.acquire_nowait() and CapacityLimiter.acquire_nowait_on_behalf_of() raising trio.WouldBlock instead of anyio.WouldBlock on the trio backend when there are no tokens available (#1218)
• Fixed CapacityLimiter on the asyncio backend over-granting tokens (borrowed_tokens exceeding total_tokens and available_tokens going negative) when a non-blocking acquire was made in the window between a token being released and the notified waiter resuming. The freed token is now reserved for the woken waiter right away, so the non-blocking acquire correctly raises WouldBlock (#1170; PR by @​gaoflow)
• Fixed unnecessary CPU spin when delivering cancellation from CancelScope on asyncio under certain conditions, including improper cancel scope nesting (#1111)

• c384f99 Bumped up the version
• dbba29d Fixed 100% CPU spin on cancel scope misuse (#1217)
• 6bbc6c3 Fix CapacityLimiter over-granting tokens on asyncio (#1172)
• 6f82b25 Refactored TestTLSStream.test_receive_invalid_max_bytes() to be less flaky
• be24b04 Relaxed timeouts to fix test flakiness
• 8113506 Fix test flakiness caused by slow callback duration logging
• 1e988b6 Fixed CapacityLimiter raising trio.WouldBlock instead of anyio.WouldBlock (#1...
• 44713f3 Pin setup-uv to a commit sha across downstream jobs (#1213)
• f1b7301 Fixed stderr writes in a worker subprocess causing a deadlock (#1207)
• 212be93 Fix flaky test_tcp_listener_same_port using a hardcoded port (#1206)
• Additional commits viewable in compare view