chore(deps-dev): Bump the development-dependencies group across 1 directory with 4 updates

[dependabot]

Updates the requirements on pytest, mypy, ty and hatchling to permit the latest version.
Updates pytest to 9.1.1

Release notes

Sourced from pytest's releases.

9.1.1

pytest 9.1.1 (2026-06-19)

Bug fixes

• #14220: Fixed a logic bug in pytest.RaisesGroup which would might cause it to display incorrect "It matches FooError() which was paired with BarError" messages.
• #14591: Fixed a regression in pytest 9.1.0 which caused overriding a parametrized fixture with an indirect @​pytest.mark.parametrize to fail with "duplicate parametrization of '<fixture name>'".
• #14606: Fixed list-item typing errors from mypy in @pytest.mark.parametrize <pytest.mark.parametrize ref> argvalues parameter.
• #14608: Fixed a regression in pytest 9.1.0 where conftest.py files located in <invocation dir>/test* were no longer loaded as initial conftests when invoked without arguments. This could cause certain hooks (like pytest_addoption) in these files to not fire.

Commits

• cf470ec Prepare release version 9.1.1
• e0c8ce6 Merge pull request #14625 from pytest-dev/patchback/backports/9.1.x/a07c31a97...
• 1b82d16 Merge pull request #14624 from pytest-dev/patchback/backports/9.1.x/b375b79ec...
• 501c4bc Merge pull request #14596 from bluetech/doc-classmethod
• b61f588 Merge pull request #14622 from chrisburr/fix-14608-initial-conftest-test-subdir
• 9a567e0 [automated] Update plugin list (#14617) (#14618)
• ef8b299 Merge pull request #14620 from pytest-dev/patchback/backports/9.1.x/680f9f3ed...
• 66abd07 Merge pull request #14220 from bysiber/fix-stale-iexp-raisesgroup
• 79fbf93 Merge pull request #14612 from pytest-dev/patchback/backports/9.1.x/974ed48b6...
• 0d312eb Merge pull request #14611 from bluetech/parametrize-argvalues-typing
• Additional commits viewable in compare view

Updates mypy to 2.2.0

Changelog

Sourced from mypy's changelog.

Mypy Release Notes

Next Release

Packaging changes

• No longer provide mypyc-accelerated wheels for macOS x86_64 [mypyc-wheels #119](mypyc/mypy_mypyc-wheels#119)

Mypy 2.3

We've just uploaded mypy 2.3.0 to the Python Package Index (PyPI). Mypy is a static type checker for Python. This release includes new features, performance improvements and bug fixes. You can install it as follows:

python3 -m pip install -U mypy

You can read the full documentation for this release on Read the Docs.

The Upcoming Switch to the New Native Parser

We are planning to enable the new native parser (--native-parser) by default soon. We recommend that you test the native parser in your projects and report any issues in the mypy issue tracker.

Mypyc Free-threading Memory Safety

Free-threaded Python builds that don't have the GIL require additional synchronization primitives or lock-free algorithms to ensure memory safety when there are race conditions (for example, when a thread reads a list item while another thread writes the same list item concurrently). This release greatly improves memory safety of free threading.

List operations are now memory-safe on free threaded Python builds, even in the presence of race conditions. This has some performance cost. For list-heavy workloads, using librt.vecs.vec instead of list is often significantly faster, but note that vec is not (and likely won't be) fully memory safe, and the user is expected to avoid race conditions. The newly introduced librt.threading.Lock helps with this. Using variable-length tuples can also be more efficient than lists, since tuples are immutable and don't require expensive synchronization to ensure memory safety.

Instance attribute access is also (mostly) memory safe now on free-threaded builds in the presence of race conditions. We are planning to fix the remaining unsafe cases in a future release.

Full list of changes:

• Make attribute access memory safe on free-threaded builds (Jukka Lehtosalo, PR 21705)
• Fix unsafe borrowing of instance attributes with free-threading (Jukka Lehtosalo, PR 21688)
• Make list get/set item more memory safe on free-threaded builds (Jukka Lehtosalo, PR 21683)
• Don't borrow list items on free-threaded builds (Jukka Lehtosalo, PR 21679)
• Make multiple assignment from list memory-safe on free-threaded builds (Jukka Lehtosalo, PR 21684)

... (truncated)

Commits

• b3c4a5b Mark release
• 396f508 [Chore] Update changelog for 2.2 (#21691)
• 9592a9e Upload wasm wheels to PyPI (#21671)
• 1dc6962 Bump ast-serialize to 0.6.0 (#21664)
• 96a7913 Bump librt to 0.12.0 (#21663)
• 5ef0902 Fix the exportjson tool (.ff cache to .json conversion) (#21628)
• 8d621ad Support --shadow-file with --native-parser (#21623)
• 74ecdd8 Sync typeshed (#21612)
• 0cd1541 [mypyc] Make function wrappers thread-safe on free-threaded builds (#21620)
• 22a9cfd [mypyc] Make list remove and index thread-safe on free-threaded builds (#21614)
• Additional commits viewable in compare view

Updates ty to 0.0.58

Release notes

Sourced from ty's releases.

0.0.58

Release Notes

Released on 2026-07-09.

Bug fixes

• Fix protocol matching for class variables (#26669)
• Fix reflected binary dispatch for runtime classes (#26623)
• Support cached properties in protocols (#26681)

Diagnostics

• Add assignability context to upper-bound diagnostics (#26645)
• Add blanket ignore comment rule (#26426)
• Improve protocol attribute diagnostic context (#26644)

Library support

• Pydantic: Add fields from mixin classes (#26631)
• Pydantic: Add support for validate_by_{name,alias} (#26598)
• Pydantic: Add support for validation_alias (#26629)
• Pydantic: Fix float conversion in unions (#26655)
• Pydantic: Ignore private attributes (#26630)
• Pydantic: Make BaseSettings fields optional by default (#26628)
• Pydantic: Recognize frozen models via config (#26648)
• Pydantic: Support dict model configurations (#26632)
• Pydantic: Support validation of RootModel fields (#26634)
• Pydantic: Understand ellipsis as providing no default value (#26637)

Core type checking

• Gate membership narrowing on __contains__ semantics (#25964)
• Handle callable classes in solver (#26090)
• Infer ModuleType.__doc__ as str in the presence of a docstring (#26505)
• Infer metaclass-declared attributes on class instances (#26512)
• Respect user stub overlays during module resolution (#26123)

Performance

• Avoid allocating decorated parameter names (#26666)
• Optimize TypeCollector (#26593)

Contributors

• @​carljm
• @​charliermarsh
• @​mtshiba
• @​MichaReiser
• @​sharkdp

... (truncated)

Changelog

Sourced from ty's changelog.

0.0.58

Released on 2026-07-09.

Bug fixes

• Fix protocol matching for class variables (#26669)
• Fix reflected binary dispatch for runtime classes (#26623)
• Support cached properties in protocols (#26681)

Diagnostics

• Add assignability context to upper-bound diagnostics (#26645)
• Add blanket ignore comment rule (#26426)
• Improve protocol attribute diagnostic context (#26644)

Library support

• Pydantic: Add fields from mixin classes (#26631)
• Pydantic: Add support for validate_by_{name,alias} (#26598)
• Pydantic: Add support for validation_alias (#26629)
• Pydantic: Fix float conversion in unions (#26655)
• Pydantic: Ignore private attributes (#26630)
• Pydantic: Make BaseSettings fields optional by default (#26628)
• Pydantic: Recognize frozen models via config (#26648)
• Pydantic: Support dict model configurations (#26632)
• Pydantic: Support validation of RootModel fields (#26634)
• Pydantic: Understand ellipsis as providing no default value (#26637)

Core type checking

• Gate membership narrowing on __contains__ semantics (#25964)
• Handle callable classes in solver (#26090)
• Infer ModuleType.__doc__ as str in the presence of a docstring (#26505)
• Infer metaclass-declared attributes on class instances (#26512)
• Respect user stub overlays during module resolution (#26123)

Performance

• Avoid allocating decorated parameter names (#26666)
• Optimize TypeCollector (#26593)

Contributors

• @​carljm
• @​charliermarsh
• @​mtshiba
• @​MichaReiser
• @​sharkdp
• @​kaapstorm

... (truncated)

Commits

• 17d3f6d Bump version to 0.0.58 (#3955)
• 03cfaaf Bump version to 0.0.57 (#3927)
• 1b3b573 Update actions/attest-build-provenance action to v4.1.1 (#3928)
• 0e9cbe1 Update actions/cache action to v6.1.0 (#3930)
• 83f4009 Update actions/setup-python action to v6.3.0 (#3931)
• ad99bb9 Update prek dependencies (#3929)
• aeeeed5 Update astral-sh/setup-uv action to v8.3.1 (#3932)
• d171a78 Document PYTHONPATH support in module discovery (#3889)
• c6920a2 Fix trailing whitespace (#3911)
• 546f220 chore: pin pre-commit refs and lock prek in CI (#3897)
• Additional commits viewable in compare view

Updates hatchling to 1.31.0

Release notes

Sourced from hatchling's releases.

Hatchling v1.31.0

Fixed

• Only rewrite the shebang of a shared script when a Python shebang is present on the first line, preserving binary files and other content verbatim instead of dropping leading bytes.

Commits

• 4b3fd7d release Hatchling v1.31.0
• 19ced89 Fix env-dependency extras being dropped when a metadata hook is configured (#...
• 3b45c75 Prepare hatchling for release 1.31.0 (#2330)
• e3d9b95 Addresses bug where blank lines are dropped when there is no shebang (#2328)
• 9bc573c Prepare for 1.17.1 hatch release (#2329)
• bbb12bb Pass --no-header to uv pip compile for deterministic lockfiles (#2327)
• 8c06373 Fix uv lock check header comparison (#2317)
• 5cfbb54 fix: skip extend injection if already present in ruff config (#2305)
• cf85971 fix: use TemporaryDirectory + pylock*.toml for temp lock files (#2303)
• 40c471c Docs: Add hatch-calver to version scheme plugins (#1725)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions