[dependabot]

Bumps the development-dependencies group with 3 updates in the / directory: ruff, ty and pytest-asyncio.

Updates ruff from 0.17.2 to 0.17.3

Release notes

Sourced from ruff's releases.

0.17.3

Release Notes

Released on 2026-10-26.

Preview features

• [suspicious] Add shared-clock-mock (#29074)

Bug fixes

• [pyupgrade] Avoid incorrect conversions to f-strings (UP032) (#25485)

Performance

• Buffer stdout in ruff format (#29631)
• Specialize ASCII identifier lexing (#29503)
• Speed up identifier and keyword lexing (#29463)

Documentation

• [flake8-bandit] Describe what the rule actually checks for httpx (S113) (#27936)

Contributors

• @​itsvedantkumar
• @​charliermarsh
• @​anishgirianish

Install ruff 0.17.3

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ruff/releases/download/0.17.3/ruff-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/ruff/releases/download/0.17.3/ruff-installer.ps1 | iex"

Download ruff 0.17.3

File	Platform	Checksum
ruff-aarch64-apple-darwin.tar.gz	Apple Silicon macOS	checksum
ruff-x86_64-apple-darwin.tar.gz	Intel macOS	checksum
ruff-aarch64-pc-windows-msvc.zip	ARM64 Windows	checksum

... (truncated)

Changelog

Sourced from ruff's changelog.

0.17.3

Released on 2026-10-26.

Preview features

• [suspicious] Add shared-clock-mock (#29074)

Bug fixes

• [pyupgrade] Avoid incorrect conversions to f-strings (UP032) (#25485)

Performance

• Buffer stdout in ruff format (#29631)
• Specialize ASCII identifier lexing (#29503)
• Speed up identifier and keyword lexing (#29463)

Documentation

• [flake8-bandit] Describe what the rule actually checks for httpx (S113) (#27936)

Contributors

• @​itsvedantkumar
• @​charliermarsh
• @​anishgirianish

Commits

• ba65abf Bump version to 0.17.3 (#29745)
• fb2f921 [ty] Fix narrowing of strings and integers compared with enum members (#29743)
• d181287 [ty] Index nominal union alternatives (#29196)
• 07872ad [ty] Preserve string literals in comparisons with LiteralString (#29741)
• 95888b2 [ty] Preserve narrowing after guarded match subject captures (#29558)
• 3c8166b [ty] Fix hang when negating recursive unions of instance types (#29652)
• 3fd20e0 [ty] Preserve generic callback specializations during return refinement (#29667)
• 2f0a29e [ty] Record predicate truthiness alongside expression inference (#29706)
• 60f104a [ty] Honor @​override on overload implementations in stubs (#29470)
• 207ec3a [ty] Add diagnostic baseline support (#27636)
• Additional commits viewable in compare view

Updates ty from 0.0.91 to 0.0.92

Release notes

Sourced from ty's releases.

0.0.92

Release Notes

Released on 2026-10-26.

Core type checking

• Infer the types of Django model primary keys (pk and the automatic id) with django-types (#29642)
• Infer Django foreign key <field>_id types from the referenced field (#29664)
• Recognize get_<field>_display() on Django model fields with choices (#29651)
• Recognize get_next_by_<field>() and get_previous_by_<field>() on non-nullable Django date and datetime fields (#29653)

Bug fixes

• Preserve generic callback parameters when forwarding overloaded functions through a ParamSpec (#29649)
• Check implicit and PEP 613 type aliases as type expressions at their definitions (#29200)

CLI

• Emit SARIF reports with ty check --output-format sarif (#29635)

LSP server

• Skip scanning for scripts at startup and reload when uv script environments are disabled (#29697)

Diagnostic improvements

• Abbreviate large nested tuple types in diagnostics and inlay hints (#29691)
• Point to the expression that makes a type alias invalid, even when the alias is imported (#29654)

Performance

• Avoid redundant work when checking inherited attributes (#29699)
• Check for instance storage without inferring method assignments (#29709)
• Collect receiver annotations once per class (#29703)
• Check non-recursive protocol members before recursive ones (#29542)
• Reuse class member lookups when checking overrides (#29716)
• Reuse each generic context's inferable type variables (#29700)
• Short-circuit comparisons involving top and bottom callable signatures (#29537)
• Skip inferred writes when a declaration determines an instance member (#29702)
• Skip method signature inference for concrete decorator results (#29708)

Contributors

• @​charliermarsh
• @​ntBre
• @​carljm
• @​dcreager
• @​sharkdp

... (truncated)

Changelog

Sourced from ty's changelog.

0.0.92

Released on 2026-10-26.

Core type checking

• Infer the types of Django model primary keys (pk and the automatic id) with django-types (#29642)
• Infer Django foreign key <field>_id types from the referenced field (#29664)
• Recognize get_<field>_display() on Django model fields with choices (#29651)
• Recognize get_next_by_<field>() and get_previous_by_<field>() on non-nullable Django date and datetime fields (#29653)

Bug fixes

• Preserve generic callback parameters when forwarding overloaded functions through a ParamSpec (#29649)
• Check implicit and PEP 613 type aliases as type expressions at their definitions (#29200)

CLI

• Emit SARIF reports with ty check --output-format sarif (#29635)

LSP server

• Skip scanning for scripts at startup and reload when uv script environments are disabled (#29697)

Diagnostic improvements

• Abbreviate large nested tuple types in diagnostics and inlay hints (#29691)
• Point to the expression that makes a type alias invalid, even when the alias is imported (#29654)

Performance

• Avoid redundant work when checking inherited attributes (#29699)
• Check for instance storage without inferring method assignments (#29709)
• Collect receiver annotations once per class (#29703)
• Check non-recursive protocol members before recursive ones (#29542)
• Reuse class member lookups when checking overrides (#29716)
• Reuse each generic context's inferable type variables (#29700)
• Short-circuit comparisons involving top and bottom callable signatures (#29537)
• Skip inferred writes when a declaration determines an instance member (#29702)
• Skip method signature inference for concrete decorator results (#29708)

Contributors

• @​charliermarsh
• @​ntBre
• @​carljm
• @​dcreager
• @​sharkdp

Commits

• 3933e69 Bump version to 0.0.92 (#4821)
• 9aaec9b Handle AI policy labels through Actions (#4812)
• e1b8efa Update uv to 0.13.5 (#4809)
• 6f5d433 Remove unnecessary checkouts from release jobs (#4806)
• f0ea525 Remove unused mold setup from daily tests (#4797)
• b136893 [ty] Skip compression for release archive uploads (#4800)
• 69d24b8 [ty] Build global artifacts without waiting for Docker (#4801)
• 8b17a9a Update rustup in the Docker builder (#4785)
• See full diff in compare view

Updates pytest-asyncio from 1.4.0 to 1.4.1

Release notes

Sourced from pytest-asyncio's releases.

pytest-asyncio v1.4.1

1.4.1 - 2026-10-25

Added

• Declared support for Python 3.15 (#1588)

Fixed

• Allow AsyncIterable as a return type for asynchronous generator fixtures decorated with pytest_asyncio.fixture (#1090)

Notes for Downstream Packagers

• Source-tree development dependencies now use PEP 735 dependency groups and uv.lock. (#1518)

Commits

• 6af7f5c chore: Prepare release of v1.4.1.
• 32ccf64 Support 3.15 (#1588)
• 9830071 Build(deps): Bump certifi from 2026.6.17 to 2026.10.19 (#1590)
• 0238023 Build(deps): Bump virtualenv from 21.7.13 to 21.14.13 (#1589)
• 93893ec Build(deps): Bump astral-sh/setup-uv from 10.2.0 to 10.3.0 (#1583)
• f287e5e Build(deps): Bump actions/download-artifact from 8.0.1 to 8.0.2 (#1581)
• b71da4f Build(deps-dev): Bump hypothesis from 6.168.3 to 6.168.5 (#1582)
• d8c51d8 Build(deps): Bump actions/upload-artifact from 7.0.1 to 7.0.2 (#1580)
• b12808b Build(deps): Bump virtualenv from 21.7.12 to 21.7.13 (#1578)
• e0601f0 Build(deps-dev): Bump coverage from 7.16.1 to 7.16.2 (#1577)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration

• Source mode: Auto
• Repository: Unavailable
• Branch: Unavailable
• File: No configuration file from this repository applied
• Commit: Unavailable
• Layers: Organization UI
• Review profile: CHILL
• Plan: Advanced
• Run ID: fd04af0c-55fd-4081-9181-cc1789a8c2c1

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}