Bump the actions group with 3 updates

[dependabot]

Bumps the actions group with 3 updates: ruff, pytest and pyrefly.

Updates ruff from 0.14.4 to 0.14.5

Release notes

Sourced from ruff's releases.

0.14.5

Release Notes

Released on 2025-11-13.

Preview features

• [flake8-simplify] Apply SIM113 when index variable is of type int (#21395)
• [pydoclint] Fix false positive when Sphinx directives follow a "Raises" section (DOC502) (#20535)
• [pydoclint] Support NumPy-style comma-separated parameters (DOC102) (#20972)
• [refurb] Auto-fix annotated assignments (FURB101) (#21278)
• [ruff] Ignore str() when not used for simple conversion (RUF065) (#21330)

Bug fixes

• Fix syntax error false positive on alternative match patterns (#21362)
• [flake8-simplify] Fix false positive for iterable initializers with generator arguments (SIM222) (#21187)
• [pyupgrade] Fix false positive on relative imports from local .builtins module (UP029) (#21309)
• [pyupgrade] Consistently set the deprecated tag (UP035) (#21396)

Rule changes

• [refurb] Detect empty f-strings (FURB105) (#21348)

CLI

• Add option to provide a reason to --add-noqa (#21294)
• Add upstream linter URL to ruff linter --output-format=json (#21316)
• Add color to --help (#21337)

Documentation

• Add a new "Opening a PR" section to the contribution guide (#21298)
• Added the PyScripter IDE to the list of "Who is using Ruff?" (#21402)
• Update PyCharm setup instructions (#21409)
• [flake8-annotations] Add link to allow-star-arg-any option (ANN401) (#21326)

Other changes

• [configuration] Improve error message when line-length exceeds u16::MAX (#21329)

Contributors

• @​njhearp
• @​11happy
• @​hugovk
• @​Gankra
• @​ntBre
• @​pyscripter
• @​danparizher

... (truncated)

Changelog

Sourced from ruff's changelog.

0.14.5

Released on 2025-11-13.

Preview features

• [flake8-simplify] Apply SIM113 when index variable is of type int (#21395)
• [pydoclint] Fix false positive when Sphinx directives follow a "Raises" section (DOC502) (#20535)
• [pydoclint] Support NumPy-style comma-separated parameters (DOC102) (#20972)
• [refurb] Auto-fix annotated assignments (FURB101) (#21278)
• [ruff] Ignore str() when not used for simple conversion (RUF065) (#21330)

Bug fixes

• Fix syntax error false positive on alternative match patterns (#21362)
• [flake8-simplify] Fix false positive for iterable initializers with generator arguments (SIM222) (#21187)
• [pyupgrade] Fix false positive on relative imports from local .builtins module (UP029) (#21309)
• [pyupgrade] Consistently set the deprecated tag (UP035) (#21396)

Rule changes

• [refurb] Detect empty f-strings (FURB105) (#21348)

CLI

• Add option to provide a reason to --add-noqa (#21294)
• Add upstream linter URL to ruff linter --output-format=json (#21316)
• Add color to --help (#21337)

Documentation

• Add a new "Opening a PR" section to the contribution guide (#21298)
• Added the PyScripter IDE to the list of "Who is using Ruff?" (#21402)
• Update PyCharm setup instructions (#21409)
• [flake8-annotations] Add link to allow-star-arg-any option (ANN401) (#21326)

Other changes

• [configuration] Improve error message when line-length exceeds u16::MAX (#21329)

Contributors

• @​njhearp
• @​11happy
• @​hugovk
• @​Gankra
• @​ntBre
• @​pyscripter
• @​danparizher
• @​MichaReiser

... (truncated)

Commits

• 87dafb8 Bump 0.14.5 (#21435)
• 9e80e5a [ty] Support type[…] and Type[…] in implicit type aliases (#21421)
• f9cc26a [ty] Respect notebook cell boundaries when adding an auto import (#21322)
• d49c326 Update PyCharm setup instructions (#21409)
• e70fccb [ty] Improve LSP test server logging (#21432)
• 90b32f3 [ty] Ensure annotation/type expressions in stub files are always deferred (#2...
• 99694b6 Use profiling profile for cargo test(linux, release) (#21429)
• 67e54ff [ty] Fix panic for cyclic star imports (#21428)
• a01b0d7 [ty] Press 'enter' to rerun all mdtests (#21427)
• 04ab917 [ty] Further improve subscript assignment diagnostics (#21411)
• Additional commits viewable in compare view

Updates pytest from 9.0.0 to 9.0.1

Release notes

Sourced from pytest's releases.

9.0.1

pytest 9.0.1 (2025-11-12)

Bug fixes

• #13895: Restore support for skipping tests via raise unittest.SkipTest.
• #13896: The terminal progress plugin added in pytest 9.0 is now automatically disabled when iTerm2 is detected, it generated desktop notifications instead of the desired functionality.
• #13904: Fixed the TOML type of the verbosity settings in the API reference from number to string.
• #13910: Fixed UserWarning: Do not expect file_or_dir on some earlier Python 3.12 and 3.13 point versions.

Packaging updates and notes for downstreams

• #13933: The tox configuration has been adjusted to make sure the desired version string can be passed into its package_env through the SETUPTOOLS_SCM_PRETEND_VERSION_FOR_PYTEST environment variable as a part of the release process -- by webknjaz.

Contributor-facing changes

• #13891, #13942: The CI/CD part of the release automation is now capable of creating GitHub Releases without having a Git checkout on disk -- by bluetech and webknjaz.
• #13933: The tox configuration has been adjusted to make sure the desired version string can be passed into its package_env through the SETUPTOOLS_SCM_PRETEND_VERSION_FOR_PYTEST environment variable as a part of the release process -- by webknjaz.

Commits

• d1b64aa Prepare release version 9.0.1
• 0a497c7 regendoc: remove CI environment variables (#13950) (#13951)
• a9f7e6e 🧪 Run gh release w/o Git in CI/CD (#13942) (#13947)
• 2682a66 Merge pull request #13944 from pytest-dev/patchback/backports/9.0.x/bef7d34f1...
• a999997 Merge pull request #13941 from nicoddemus/min-pre-commit-version
• 4bd63a0 Merge pull request #13935 from pytest-dev/patchback/backports/9.0.x/ce8b8a7b4...
• 15f93b3 Merge pull request #13933 from webknjaz/maintenance/tox-pep517-env-setuptools...
• 0fa11ae Merge pull request #13927 from pytest-dev/patchback/backports/9.0.x/3d8075743...
• fa45470 Merge pull request #13926 from pytest-dev/patchback/backports/9.0.x/d587e0cf8...
• b4e3973 Merge pull request #13922 from bluetech/fix-argparse-userwarning
• Additional commits viewable in compare view

Updates pyrefly from 0.40.1 to 0.41.3

Release notes

Sourced from pyrefly's releases.

Pyrefly v0.41.0

Status : ALPHA
Release date: 10 November 2025

Pyrefly v0.41.0 bundles 166 commits from 22 contributors.

---

✨ New & Improved

Area	What’s new
Jupyter Notebook support	- Extensive improvements for language server support in Jupyter Notebooks including diagnostics (red squiggles), inlay hints, go-to-definition, hover, semantic tokens, signature help, and completions - No extra configuration required to enable language server for notebook files (.ipynb), they are now included by default.
Type Checking	- Pyrefly now correctly models and narrows types for variables reassigned within loops, fixing several long-standing issues ([#726](https://github.com/facebook/pyrefly/issues/726), [#747](https://github.com/facebook/pyrefly/issues/747)). - Improved pattern matching support for certain built-in types, better aligning with typing specification - More accurate type checking for TypedDicts with union keys
Language Server	- Hover cards on variables now link to built in types. - Unused parameters are now flagged in IDE Deprecated functions now suggested below non-deprecated ones in auto-completions. - Inlay hints are suppressed for variables with unknown or Any types to reduce noise in IDE
Error messages	- Users can now use --info=<error-code> command line flag to set error severity to info for specific error codes. - Users can now filter summarized errors by specific error codes using pyrefly check --summarize-errors --only <error-code>

---

🐛 bug fixes

We closed 15 bug issues this release 👏

• #1505 - fixed incorrect bad-assignment error inside loop with dict.get
• #1411 - Fixed bad-argument-type false positive when a parameter type was inferred as Never
• #1327 - Fixed issue where Hover did not show docstring for nested classes
• #1184 - Fixed a bug where NewType was not treated as a type
• #1301 - Fix for nested folder imports in the Pyrefly website sandbox
• #1173 - Fixed issue where VSCode extension import autocomplete included hidden directories
• And more: #1092, #747, #726, #1407, #1487, #1420, #1417, #1536, #1508, #1487, #1420, #1417

Thank-you to all our contributors who found these bugs and reported them! Did you know this is one of the most helpful contributions you can make to an open-source project? If you find any bugs in Pyrefly we want to know about them! Please open a bug report issue here

---

📦 Upgrade

pip install --upgrade pyrefly==0.41.0

How to safely upgrade your codebase

Upgrading the version of Pyrefly you're using or a third-party library you depend on can reveal new type errors in your code. Fixing them all at once is often unrealistic. We've written scripts to help you temporarily silence them. After upgrading, follow these steps:

1. pyrefly check --suppress-errors
2. run your code formatter of choice
3. pyrefly check --remove-unused-ignores
4. Repeat until you achieve a clean formatting run and a clean type check.

... (truncated)

Commits

• ea27a17 Bump version for fix
• 7497177 Create Type::Intersect in narrowing operations that intersect types with a no...
• 4fbc10c Add partial support for looking up attributes on Type::Intersect
• f097310 Add intersect() and simplify_intersections() to pyrefly_types::simplify
• e59f899 Add a fallback type to Type::Intersect
• 2397d19 Improve display of Type::Intersect
• 388f49a Fix flow handling for targets assigned in for loop headers
• 27961c0 Add a test case for a for loop with reassignment of the target
• 1e872de Move 3p extensions up
• 41c89b4 Organize 3p sidebar
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions