Bump the actions group with 5 updates

[dependabot]

Bumps the actions group with 5 updates:

Package	From	To
ruff	0.14.8	0.14.9
beartype	0.22.8	0.22.9
basedpyright	1.35.0	1.36.1
pyrefly	0.45.0	0.46.0
ty	0.0.1a32	0.0.1a34

Updates ruff from 0.14.8 to 0.14.9

Release notes

Sourced from ruff's releases.

0.14.9

Release Notes

Released on 2025-12-11.

Preview features

• [ruff] New RUF100 diagnostics for unused range suppressions (#21783)
• [pylint] Detect subclasses of builtin exceptions (PLW0133) (#21382)

Bug fixes

• Fix comment placement in lambda parameters (#21868)
• Skip over trivia tokens after re-lexing (#21895)
• [flake8-bandit] Fix false positive when using non-standard CSafeLoader path (S506). (#21830)
• [flake8-bugbear] Accept immutable slice default arguments (B008) (#21823)

Rule changes

• [pydocstyle] Suppress D417 for parameters with Unpack annotations (#21816)

Performance

• Use memchr for computing line indexes (#21838)

Documentation

• Document *.pyw is included by default in preview (#21885)
• Document range suppressions, reorganize suppression docs (#21884)
• Update mkdocs-material to 9.7.0 (Insiders now free) (#21797)

Contributors

• @​Avasam
• @​MichaReiser
• @​charliermarsh
• @​amyreese
• @​phongddo
• @​prakhar1144
• @​mahiro72
• @​ntBre
• @​LoicRiegel

Install ruff 0.14.9

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/astral-sh/ruff/releases/download/0.14.9/ruff-installer.sh | sh

... (truncated)

Changelog

Sourced from ruff's changelog.

0.14.9

Released on 2025-12-11.

Preview features

• [ruff] New RUF100 diagnostics for unused range suppressions (#21783)
• [pylint] Detect subclasses of builtin exceptions (PLW0133) (#21382)

Bug fixes

• Fix comment placement in lambda parameters (#21868)
• Skip over trivia tokens after re-lexing (#21895)
• [flake8-bandit] Fix false positive when using non-standard CSafeLoader path (S506). (#21830)
• [flake8-bugbear] Accept immutable slice default arguments (B008) (#21823)

Rule changes

• [pydocstyle] Suppress D417 for parameters with Unpack annotations (#21816)

Performance

• Use memchr for computing line indexes (#21838)

Documentation

• Document *.pyw is included by default in preview (#21885)
• Document range suppressions, reorganize suppression docs (#21884)
• Update mkdocs-material to 9.7.0 (Insiders now free) (#21797)

Contributors

• @​Avasam
• @​MichaReiser
• @​charliermarsh
• @​amyreese
• @​phongddo
• @​prakhar1144
• @​mahiro72
• @​ntBre
• @​LoicRiegel

Commits

• 3f63ea4 Prepare 0.14.9 release (#21927)
• c8851ec [ty] Defer all parameter and return type annotations (#21906)
• d442433 [ty] Fix workspace symbols to return members too (#21926)
• c055d66 Document range suppressions, reorganize suppression docs (#21884)
• 7a578ce Ignore ruff:isort like ruff:noqa in new suppressions (#21922)
• 34f7a04 [ty] Handle Definitions in SemanticModel::scope (#21919)
• c9fe4e2 [ty] Attach salsa db when running ide tests for easier debugging (#21917)
• fbeeb05 [ty] Don't show hover for expressions with no inferred type (#21924)
• 4fdb4e8 [ty] avoid unions of generic aliases of the same class in fixpoint (#21909)
• c548ef2 [ty] Squash false positive logs for failing to find builtins as a real module
• Additional commits viewable in compare view

Updates beartype from 0.22.8 to 0.22.9

Release notes

Sourced from beartype's releases.

Beartype 0.22.9: Party in Da QA House

@​beartype 0.22.9 celebrates one million @​beartype downloads a day! We wanted to rent out a loft warehouse space, flip a dry ice machine off Ebay for pennies, shadow-drop DJ Lorien Testard, invite all our GitHub homies, and get down and funky with this QA quinceañera. It didn't happen. I released instead. The memories we might have made are only another patch release in the 0.22.X dev cycle. Bear friends, it's your time to shine tonight:

# Via "pip", the once-great venerable master packager now fallen on hard times:
$ pip install --upgrade beartype      # <-- you go, pipe-smoking pip
Via "uv", the plucky upstart spiky-haired kid wielding a sword larger than its body:
$ uv pip install --upgrade beartype   # <-- when you no longer have the strength to care about lock files
Via "conda", the corporate scientist in casual lab attire who wants to be your buddy, pal:
$ conda config --add channels conda-forge  # <-- where did python packaging go wrong?
$ conda install conda-forge::beartype      # <-- it all seemed so simple, once.

@​beartype 0.22.9: "Wave your keyboards in the air like those bugs don't care."

one million downloads a day says you can't stop this party

@​beartype 0.22.9 is helping @​leycec and his beautiful science wife to eat food. Thanks entirely to...

GitHub Sponsors: Befriend the Bear and Get a Bear for Life

This release comes courtesy these proud GitHub Sponsors, without whom everyone in the @​leycec family would currently be eating grasshoppers in the abandoned back lot again:

• @​sesco-llc (SESCO Enterprises), "The Power of Innovation in Trading": this inspires me to get out of the house and do something https://sescollc.com
• @​DylanModesitt (Dylan Modesitt), quantitative strategies energy trading associate: ...wikipedia, don't fail me now! https://dylanmodesitt.com
• [Tidelift][], graciously paying out recurring income to security-sensitive open-source projects like @​beartype: so much hype https://www.sonarsource.com/products/sonarqube/advanced-security

If you represent a security-conscious corporate, government, or non-profit, the best way bar none for you to support @​beartype and secure your own workflow is by subscribing to [Tidelift][] through [SonarQube Advanced Security][]. Security giant [Sonar][] recently acquired [Tidelift][], guaranteeing the economic viability of the Tidelift model for billions of future open-source projects that have yet to be born. Join the jargon-laden conversation and pay someone else to think about unreadable acronyms like SAST, SCA, and SBOM for once.

Thanks so much, masters of fintech and lifted tides.

The Masters of Fintech and Lifted Tides. That's who.

PyInstaller: Bundling Your Type-Checked Apps Since Now

@​beartype 0.22.9 brings official support for... wait. [PyInstaller][]? Hasn't @​beartype supported [PyInstaller][] since the beginning? Yeah. We thought so too. Then Meta was all like: "Oh no you don't, @​beartype." 😂

@​beartype has officially supported competing products like Nuitka for years. Now PyInstaller joins the ranks. But it's not just PyInstaller. @​beartype 0.22.9 should also resolve any similar pending issues with other app bundling frameworks like... uhh, Briefcase? No idea, honestly. That's untested wishful thinking. The very best kind.

@​beartype 0.22.9: When you realize a small part of you still cares about desktop apps.

Your bundled app moments after being packaged with @​beartype. It's... not good.

... (truncated)

Commits

• 9430c65 Beartype 0.22.9: Party in Da QA House
• 9a3c642 PyInstaller x 3.
• e29b2d5 Superficial ty compatibility.
• 8cd5e99 PyInstaller x 2.
• 0302808 PyInstaller x 1.
• cf3f9d7 Pytest subprocess sanitization x 1.
• ae62686 Mypy integration test improved.
• fbfddc4 Synchronous generator code optimized.
• eca38eb Beartype 0.23.0 restarted. sigh
• See full diff in compare view

Updates basedpyright from 1.35.0 to 1.36.1

Commits

• ec7ca52 1.36.1
• 31baa79 fix crash in the playground (#1675)
• c35738a 1.36.0
• 4e60f30 Simplify the semantic tokens, clarify documentation, and test another Any case
• a8e6275 Improve semantic tokens for Any, unknown, and unions
• d3517c1 fix issue where updating LanguageServerBase.documentsWithDiagnostics can so...
• 7c393c3 add --baselinemode argument and fail by deault in CI if baseline file needs...
• See full diff in compare view

Updates pyrefly from 0.45.0 to 0.46.0

Commits

• b9fcb7a Update pyrefly version]
• db0d49b Fix unused parameter lint error
• bcd9f78 Fix maturin version pin
• 6edff54 fix numba jit decorators special casing
• 6deeae9 Register the dunder repr call as an artificial call
• 08e2bf8 Revert back to debug = 1 for now (#1844)
• aacf5fe add version support to textDocument/publishDiagnostics (#1382)
• c04dc36 fix panic: capacity overflow with large tuple expansion #1826 (#1830)
• c9364f2 test document symbols
• b785ba5 Add test that shows Typeshed path not being used from config
• Additional commits viewable in compare view

Updates ty from 0.0.1a32 to 0.0.1a34

Release notes

Sourced from ty's releases.

0.0.1-alpha.34

Release Notes

Released on 2025-12-12.

Bug fixes

• Improve solving of a type variable with an upper bound when that type variable appears as one element in a union type (#21893)
• Accurately emulate runtime semantics for kw_only=True dataclasses such that only fields declared in the immediate class body are understood as being keyword-only (#21820)
• Avoid inferring types for invalid binary expressions in string annotations (#21911)
• Fix logic used to determine whether two @final instance types are disjoint (#21769)
• Fix logic used to determine whether two @final type[] types are disjoint (#21770)
• Fix false-positive diagnostics that could arise when analysing cyclic types (#21910), (#21909)

LSP server

• Fix outdated version in publish diagnostics after didChange (#21943)
• Fix workspace symbols to return members too (#21926)
• Adjust scope completions to use all reachable symbols (#21872)
• Classify cls as class parameter for semantic highlighting (#21944)
• Don't show on-hover tooltips for expressions with no inferred type (#21924)
• Ignore __all__ for document and workspace symbol requests (#21928)
• Recognize __all__ += submodule.__all__ in auto-import (#21918)
• Stabilize rename (#21940)

Other changes

• Support checking files without extensions (#21867)
• Improve performance and semantics by deferring inference of all parameter and return-type annotations (#21906)
• Improve resolution of absolute imports in tests (#21817)
• Infer the implicit type of the cls parameter in @classmethod method bodies (#21685)
• Support the implicit type of the cls parameter in signatures of @classmethod methods (#21771)
• Uniformly use "not supported" in diagnostics (#21916)
• Implement the equivalence relation for TypedDicts (#21784)
• Ensure that the type of the class object C is always considered assignable to type[C[Unknown]] if C is a generic class (#21883)
• Improve bad specialization results and error messages (#21840)
• Support NewTypes of float and complex (#21886)

Contributors

• @​charliermarsh
• @​oconnor663
• @​MichaReiser
• @​BurntSushi
• @​lucach
• @​ibraheemdev
• @​mtshiba
• @​dcreager
• @​sharkdp
• @​carljm

... (truncated)

Changelog

Sourced from ty's changelog.

Changelog

0.0.1-alpha.34

Released on 2025-12-12.

Bug fixes

• Improve solving of a type variable with an upper bound when that type variable appears as one element in a union type (#21893)
• Accurately emulate runtime semantics for kw_only=True dataclasses such that only fields declared in the immediate class body are understood as being keyword-only (#21820)
• Avoid inferring types for invalid binary expressions in string annotations (#21911)
• Fix logic used to determine whether two @final instance types are disjoint (#21769)
• Fix logic used to determine whether two @final type[] types are disjoint (#21770)
• Fix false-positive diagnostics that could arise when analysing cyclic types (#21910), (#21909)

LSP server

• Fix outdated version in publish diagnostics after didChange (#21943)
• Fix workspace symbols to return members too (#21926)
• Adjust scope completions to use all reachable symbols (#21872)
• Classify cls as class parameter for semantic highlighting (#21944)
• Don't show on-hover tooltips for expressions with no inferred type (#21924)
• Ignore __all__ for document and workspace symbol requests (#21928)
• Recognize __all__ += submodule.__all__ in auto-import (#21918)
• Stabilize rename (#21940)

Other changes

• Support checking files without extensions (#21867)
• Improve performance and semantics by deferring inference of all parameter and return-type annotations (#21906)
• Improve resolution of absolute imports in tests (#21817)
• Infer the implicit type of the cls parameter in @classmethod method bodies (#21685)
• Support the implicit type of the cls parameter in signatures of @classmethod methods (#21771)
• Uniformly use "not supported" in diagnostics (#21916)
• Implement the equivalence relation for TypedDicts (#21784)
• Ensure that the type of the class object C is always considered assignable to type[C[Unknown]] if C is a generic class (#21883)
• Improve bad specialization results and error messages (#21840)
• Support NewTypes of float and complex (#21886)

Contributors

• @​charliermarsh
• @​oconnor663
• @​MichaReiser
• @​BurntSushi
• @​lucach
• @​ibraheemdev
• @​mtshiba
• @​dcreager
• @​sharkdp

... (truncated)

Commits

• ef3d48a Bump version to 0.0.1-alpha.34 (#1868)
• 5e31bc9 Remove documentation of experimental.rename (#1863)
• e6c0420 Update mkdocs-material to 9.7.0 (#1860)
• 35e23aa Bump version to 0.0.1-alpha.33 (#1829)
• 5c02e0b Stabilize auto-import (#1810)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[jorenham]

@dependabot rebase