chore(deps-dev): bump the dev-dependencies group with 4 updates

[dependabot]

Bumps the dev-dependencies group with 4 updates: redis[hiredis], djlint, ty and types-docker.

Updates redis[hiredis] from 8.0.1 to 8.1.0

Release notes

Sourced from redis[hiredis]'s releases.

8.1.0

Changes

✨ Highlights

Async maintenance notifications

redis-py now supports server-pushed maintenance notifications in the asyncio stack for both standalone and cluster clients, bringing the async client to parity with the sync implementation. When a Redis deployment signals maintenance events (such as node migration or failover windows), the async client reacts through the maintenance-notifications handler (redis/maint_notifications.py and its async integration under redis/asyncio/), allowing applications to adapt connection handling during maintenance without downtime. (#4177)

Expanded command coverage

This release adds a batch of new command surfaces across core data types and modules:

• Lists — LMOVEM / BLMOVEM for moving multiple elements between lists (#4174).
• Sets — SDIFFCARD and SUNIONCARD cardinality commands (#4171).
• Streams — MAXCOUNT / MAXSIZE options for XREAD and XREADGROUP (#4173).
• Time Series — TS.READ (#4170), TS.QUERYLABELS (#4197), TS.NRANGE / TS.NREVRANGE (#4163), and an exclude_empty (EXCLUDEEMPTY) option for TS.MRANGE / TS.MREVRANGE (#4188).
• Search — FT.ALIASLIST (#4198) and a COLLECT reducer for aggregations (#4179).
• Sentinel — replica sentinel aliases (#4127).

🚀 New Features

• Add replica sentinel aliases (#4127)
• Add TS.NRANGE and TS.NREVRANGE support to the timeseries command surface (#4163)
• feat: add TS.READ command support to the timeseries module (#4170)
• feat: add SDIFFCARD and SUNIONCARD command support (#4171)
• feat: add MAXCOUNT/MAXSIZE support to XREAD and XREADGROUP (#4173)
• feat: add LMOVEM and BLMOVEM commands for moving multiple list elements (#4174)
• feat: add async maintenance-notifications support for standalone and cluster clients (#4177)
• feat: add COLLECT reducer support to search aggregations (#4179)
• feat: add exclude_empty (EXCLUDEEMPTY) option to TS.MRANGE and TS.MREVRANGE (#4188)
• feat: add TS.QUERYLABELS support to the timeseries command surface (#4197)
• feat: add FT.ALIASLIST support (#4198)

⚠️ Experimental

• feat: add client-side HIMPORT fieldset support for standalone and cluster clients (#4205)

The feature considered unstable and public API might be changed in the future minor version

🐛 Bug Fixes

• fix: detect closed pooled connection without consuming pending push data (RESP3 + hiredis) (#4156)
• Fix Sentinel pool capacity loss after failover (#4193)

... (truncated)

Commits

• e013126 Testing with 8.10 GA (#4227)
• 059d1e9 Fixed TS.NRANGE commands to correctly apply aggregators (#4225)
• d486a0a Fix FIELDNAME alias dropping first character of un-prefixed fields (#4224)
• fb93104 feat: add client-side HIMPORT fieldset support for standalone and cluster cli...
• 9197609 Fix lat/lon swap in search querystring geo() helper (#4223)
• 14714a0 fix: Fixed double decoding issue with unquote() (#4222)
• 227280a Update lib version to 8.1.0
• 88d16d0 Decode ACL LOG string values on the default RESP3 legacy callback (#4201)
• 599fd75 feat: add FT.ALIASLIST support (#4198)
• 71e275e test: add VectorField RERANK serialization tests for sync and async search (#...
• Additional commits viewable in compare view

Updates djlint from 1.42.3 to 1.43.1

Release notes

Sourced from djlint's releases.

v1.43.1

Fix

• H025 no longer reports the closing tag of a multi-line <script> or <style> as an orphan - a regression in 1.43.0. A genuinely unmatched </script> is still reported.

v1.43.0

Feature

• New --stdin-filename option gives content piped in on stdin (djlint -) its real path, so per-file-ignores matches against that name and linter messages report it. Per-file ignores were previously dead for piped input, since nothing matches the name -. Path separators are normalized as they are for files on disk.

Fix

• An apostrophe inside a template tag nested in an attribute value (title="{% translate "You don't have permission" %}") no longer swallows the rest of the document, which made H025 report every enclosing element as an orphan. A template tag in a value is now skipped whole unless it holds a >, so a quoted literal like a="{{" is still left alone.
• A line that starts with a closing tag and ends with a whole tag (</span>tail<textarea>y</textarea>) unindents again; everything after it stayed one level too deep.
• A template block tag followed by a whole html tag on the same line ({% endif %} <td class="x">y</td>) indents as a block tag again, so {% endif %} unindents and {% else %} aligns with its {% if %}. A line only takes that shape once the tag fits on one line, so reformatting an already formatted file moved it.
• A tag opened after the end of a verbatim block on the same line (</pre> <span>x) is tracked again; its closing tag took a level from a tag opened before the block, dedenting that tag's siblings.
• A template control block written across lines is kept that way when it opens against a tag (<div>{% if x %}), and the choice is no longer applied to the wrong block. Blocks were paired with the source by position, which does not line up with the expanded html; they are now matched by tag and contents.
• A tag whose style, srcset, data-srcset or sizes value was written over several lines is no longer spread over multiple lines and pulled back together on the next run. max_attribute_length is now measured against what is written out, not against padding that the rewrite drops.
• A <pre> or <textarea> opened on a line that also holds a self-contained comment (<pre>x<!--c-->) is recognized as opening a verbatim block again. Its contents were re-indented instead of left alone, and the closing </pre> gained an indent level on every run - unbounded whitespace growth inside preformatted text.
• A closing tag that starts its line no longer dedents when the tag it closes was opened after text on an earlier line (text <b>bold / </b> tail). The loss accumulated, so a document repeating that shape drifted further left with each occurrence. A closing tag with nothing to pair against still dedents as before.
• A < inside a one-line <script>, <style>, <textarea> or <title> no longer counts as a tag when indenting. <script>var a = '<span>'</script> left a phantom open <span> on the tag stack, leaving everything after it one level too deep.
• An inline element that opens after text on its line and closes on a later line no longer dedents everything that follows it by one level (text <b>bold / more</b> tail inside a <p>) - a regression in 1.40.8. The wrong output was idempotent, so it survived later runs.
• A Go template comment {{/* ... */}} is no longer read as a block close tag. It starts with {{/, the handlebars block-close prefix, so it popped a block off the stack: H037 reported Duplicate attribute found. for mutually exclusive attributes such as <a {{if .A}}href="a"{{else}}{{/* c */}}href="b"{{end}}>, and the formatter unindented the rest of the block. A comment renders as nothing, so H037 no longer treats one as a template-generated attribute name prefix either.
• A tag that merely touches an ignored block is no longer treated as being inside it. A tag ending exactly where an ignored block starts - such as {% if x %}{# comment #} - was skipped by the linter, most visibly making T038 report End tag has no matching block tag for a balanced {% if %}. Affects every rule that skips ignored blocks (H025, H037, H041, H042, T002, T003, T027, T038, T039) and every kind of ignored block.
• A bare djlint:off pragma no longer ignores the tag written immediately before it. <img>{# djlint:off #} silently dropped every error on that <img>, while <img>{# djlint:off H013 #} correctly reported it - a pragma covers what follows it, not what precedes it.

Changelog

Sourced from djlint's changelog.

[1.43.1] - 2026-07-28

Fix

• H025 no longer reports the closing tag of a multi-line <script> or <style> as an orphan - a regression in 1.43.0. A genuinely unmatched </script> is still reported.

[1.43.0] - 2026-07-27

Feature

• New --stdin-filename option gives content piped in on stdin (djlint -) its real path, so per-file-ignores matches against that name and linter messages report it. Per-file ignores were previously dead for piped input, since nothing matches the name -. Path separators are normalized as they are for files on disk.

Fix

• An apostrophe inside a template tag nested in an attribute value (title="{% translate "You don't have permission" %}") no longer swallows the rest of the document, which made H025 report every enclosing element as an orphan. A template tag in a value is now skipped whole unless it holds a >, so a quoted literal like a="{{" is still left alone.
• A line that starts with a closing tag and ends with a whole tag (</span>tail<textarea>y</textarea>) unindents again; everything after it stayed one level too deep.
• A template block tag followed by a whole html tag on the same line ({% endif %} <td class="x">y</td>) indents as a block tag again, so {% endif %} unindents and {% else %} aligns with its {% if %}. A line only takes that shape once the tag fits on one line, so reformatting an already formatted file moved it.
• A tag opened after the end of a verbatim block on the same line (</pre> <span>x) is tracked again; its closing tag took a level from a tag opened before the block, dedenting that tag's siblings.
• A template control block written across lines is kept that way when it opens against a tag (<div>{% if x %}), and the choice is no longer applied to the wrong block. Blocks were paired with the source by position, which does not line up with the expanded html; they are now matched by tag and contents.
• A tag whose style, srcset, data-srcset or sizes value was written over several lines is no longer spread over multiple lines and pulled back together on the next run. max_attribute_length is now measured against what is written out, not against padding that the rewrite drops.
• A <pre> or <textarea> opened on a line that also holds a self-contained comment (<pre>x<!--c-->) is recognized as opening a verbatim block again. Its contents were re-indented instead of left alone, and the closing </pre> gained an indent level on every run - unbounded whitespace growth inside preformatted text.
• A closing tag that starts its line no longer dedents when the tag it closes was opened after text on an earlier line (text <b>bold / </b> tail). The loss accumulated, so a document repeating that shape drifted further left with each occurrence. A closing tag with nothing to pair against still dedents as before.
• A < inside a one-line <script>, <style>, <textarea> or <title> no longer counts as a tag when indenting. <script>var a = '<span>'</script> left a phantom open <span> on the tag stack, leaving everything after it one level too deep.
• An inline element that opens after text on its line and closes on a later line no longer dedents everything that follows it by one level (text <b>bold / more</b> tail inside a <p>) - a regression in 1.40.8. The wrong output was idempotent, so it survived later runs.
• A Go template comment {{/* ... */}} is no longer read as a block close tag. It starts with {{/, the handlebars block-close prefix, so it popped a block off the stack: H037 reported Duplicate attribute found. for mutually exclusive attributes such as <a {{if .A}}href="a"{{else}}{{/* c */}}href="b"{{end}}>, and the formatter unindented the rest of the block. A comment renders as nothing, so H037 no longer treats one as a template-generated attribute name prefix either.
• A tag that merely touches an ignored block is no longer treated as being inside it. A tag ending exactly where an ignored block starts - such as {% if x %}{# comment #} - was skipped by the linter, most visibly making T038 report End tag has no matching block tag for a balanced {% if %}. Affects every rule that skips ignored blocks (H025, H037, H041, H042, T002, T003, T027, T038, T039) and every kind of ignored block.
• A bare djlint:off pragma no longer ignores the tag written immediately before it. <img>{# djlint:off #} silently dropped every error on that <img>, while <img>{# djlint:off H013 #} correctly reported it - a pragma covers what follows it, not what precedes it.

Commits

• c442403 v1.43.1
• c69b4d8 fix(linter): don't orphan the closing tag of a multi-line script/style
• 6d3c807 chore(deps): lock file maintenance (#2305)
• 9b9b10e chore(deps): update dependency sass to v1.102.0 (#2304)
• cad0853 chore(deps): lock file maintenance (#2303)
• f647c3a chore(deps): update dependency postcss to v8.5.23 (#2301)
• 6e993b3 v1.43.0
• 659b7b6 perf: rewrite any generator as a for loop
• 3f843bb docs: condense the unreleased changelog
• e864bf6 fix(linter): don't let quotes inside a template tag end an attribute
• Additional commits viewable in compare view

Updates ty from 0.0.63 to 0.0.65

Release notes

Sourced from ty's releases.

0.0.65

Release Notes

Released on 2026-07-29.

LSP server

• Support comprehension walruses in IDE features (#26476)

Library support

• Pydantic: Allow mutation of private attributes on frozen models (#27257)
• Pydantic: Synthesize __replace__ for models (#27220)

Diagnostics

• Correct ParamSpec forwarded-argument diagnostic locations (#27263)
• Recover forwarded callable object and constructor sources (#27264)
• Recover forwarded functools.partial diagnostic sources (#27265)

Core type checking

• Fix gradual class assignability with generic receivers (#27223)
• Lazily materialize protocol attributes (#27267)
• Narrow tagged unions through all type kinds (#27226)
• Prefer static constrained TypeVar solutions (#27057)
• Preserve frozen-dataclass setter delegation (#27217)
• Preserve inference when filtering constructor overloads (#27254)
• Reject frozen-dataclass field deletion through subclasses (#27001)
• Stabilize recursive type-constraint ordering (#27176)
• Support materialized class type expressions (#27258)

Performance

• Avoid quadratic inference for large literal unions (#27178)
• Cache protocol receiver binding (#27301)

Contributors

• @​thejchap
• @​benedikt-bartscher
• @​carljm
• @​charliermarsh

Install ty 0.0.65

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ty/releases/download/0.0.65/ty-installer.sh | sh
</tr></table> 

... (truncated)

Changelog

Sourced from ty's changelog.

0.0.65

Released on 2026-07-29.

LSP server

• Support comprehension walruses in IDE features (#26476)

Library support

• Pydantic: Allow mutation of private attributes on frozen models (#27257)
• Pydantic: Synthesize __replace__ for models (#27220)

Diagnostics

• Correct ParamSpec forwarded-argument diagnostic locations (#27263)
• Recover forwarded callable object and constructor sources (#27264)
• Recover forwarded functools.partial diagnostic sources (#27265)

Core type checking

• Fix gradual class assignability with generic receivers (#27223)
• Lazily materialize protocol attributes (#27267)
• Narrow tagged unions through all type kinds (#27226)
• Prefer static constrained TypeVar solutions (#27057)
• Preserve frozen-dataclass setter delegation (#27217)
• Preserve inference when filtering constructor overloads (#27254)
• Reject frozen-dataclass field deletion through subclasses (#27001)
• Stabilize recursive type-constraint ordering (#27176)
• Support materialized class type expressions (#27258)

Performance

• Avoid quadratic inference for large literal unions (#27178)
• Cache protocol receiver binding (#27301)

Contributors

• @​thejchap
• @​benedikt-bartscher
• @​carljm
• @​charliermarsh

0.0.64

Released on 2026-07-27.

Bug fixes

• Fix identity narrowing for NewTypes (#26439)

... (truncated)

Commits

• 87de836 Bump version to 0.0.65 (#4113)
• d784bad README: Add link to Stable milestone (#4112)
• b4c1978 Update actions/setup-python action to v7 (#4110)
• 8d216a3 Update actions/checkout action to v7.0.1 (#4107)
• 06f44e9 Update dependency prek to v0.4.10 (#4108)
• b3665fd Update prek dependencies (#4109)
• 5e64a13 Bump version to 0.0.64 (#4097)
• See full diff in compare view

Updates types-docker from 7.2.0.20260724 to 7.2.0.20260728

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions