chore(deps): bump the python-minor-patch group with 4 updates

[dependabot]

Bumps the python-minor-patch group with 4 updates: hypothesis, ruff, ty and mutmut.

Updates hypothesis from 6.161.2 to 6.164.0

Commits

• 4b8467b Bump hypothesis version to 6.164.0 and update changelog
• 47bb9d1 Merge pull request #4833 from Zac-HD/claude/hypothesis-issue-4149-16nmgw
• b2b77ec Bump hypothesis version to 6.163.1 and update changelog
• bc2af6c Merge pull request #4832 from Zac-HD/claude/hypothesis-nocover-cleanup-1yu7ao
• cef8c21 ignore mock xp namespace warning
• 65022c4 fix parents
• 0c45285 clean up tests, simplify configs, parse complex constants
• 13ccc11 be explicit in allowed types
• f3b6dfe Exclude test code from the combined coverage report
• 71b7bc0 Recognize zipimported stdlib when filtering explanations
• Additional commits viewable in compare view

Updates ruff from 0.16.0 to 0.16.1

Release notes

Sourced from ruff's releases.

0.16.1

Release Notes

Released on 2026-07-30.

Preview features

• Add an option to opt out of human-readable names (#27160)
• [flake8-pytest-style] Make fixes safe by default and unsafe only when comments are present (PT018) (#27201)
• [pyupgrade] Skip fix when a defaulted TypeVar precedes a non-defaulted one (UP040, UP046, UP047) (#27133)
• [ruff] Fix false positive with unpacked arguments (RUF065) (#26959)

Bug fixes

• Bump gen-lsp-types to gracefully handle unknown enumeration values in LSP messages (#27230)
• [flake8-bugbear] Mark range as immutable (B008) (#27247)
• [flake8-comprehensions] NFKC-normalize keyword names in C408 fix (#26813)
• [flake8-return] Fix false positive when variable is read in finally clause (RET504) (#25441)
• [pydocstyle] Skip section detection inside RST directive bodies (D214, D405, D413) (#23635)
• [refurb] Parenthesize yield arguments in the FURB192 fix (#27192)

Rule changes

• [flake8-pytest-style] Mark PT022 fixes as unsafe (#26440)
• [refurb] Mark fixes that remove unknown separators as unsafe (FURB105) (#27200)

Server

• Fix indexing of excluded nested Ruff workspaces (#27303)
• Lint TOML files in the LSP (#26862)

Documentation

• Cover pycon Markdown formatting (#27153)
• [flake8-bandit] Document TYPE_CHECKING exception (S101) (#27004)
• [flake8-import-conventions] Document that extend-aliases can override default aliases (#27191)
• [pylint] Add missing fix safety gotchas for non-augmented-assignment (PLR6104) (#27250)

Other changes

• Reduce syntax error noise by swallowing dedents like indents (#27170)
• Vendor latest annotate-snippets (#27033)

Contributors

• @​bxff
• @​anishgirianish
• @​Avasam
• @​epage
• @​LHMQ878

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.1

Released on 2026-07-30.

Preview features

• Add an option to opt out of human-readable names (#27160)
• [flake8-pytest-style] Make fixes safe by default and unsafe only when comments are present (PT018) (#27201)
• [pyupgrade] Skip fix when a defaulted TypeVar precedes a non-defaulted one (UP040, UP046, UP047) (#27133)
• [ruff] Fix false positive with unpacked arguments (RUF065) (#26959)

Bug fixes

• Bump gen-lsp-types to gracefully handle unknown enumeration values in LSP messages (#27230)
• [flake8-bugbear] Mark range as immutable (B008) (#27247)
• [flake8-comprehensions] NFKC-normalize keyword names in C408 fix (#26813)
• [flake8-return] Fix false positive when variable is read in finally clause (RET504) (#25441)
• [pydocstyle] Skip section detection inside RST directive bodies (D214, D405, D413) (#23635)
• [refurb] Parenthesize yield arguments in the FURB192 fix (#27192)

Rule changes

• [flake8-pytest-style] Mark PT022 fixes as unsafe (#26440)
• [refurb] Mark fixes that remove unknown separators as unsafe (FURB105) (#27200)

Server

• Fix indexing of excluded nested Ruff workspaces (#27303)
• Lint TOML files in the LSP (#26862)

Documentation

• Cover pycon Markdown formatting (#27153)
• [flake8-bandit] Document TYPE_CHECKING exception (S101) (#27004)
• [flake8-import-conventions] Document that extend-aliases can override default aliases (#27191)
• [pylint] Add missing fix safety gotchas for non-augmented-assignment (PLR6104) (#27250)

Other changes

• Reduce syntax error noise by swallowing dedents like indents (#27170)
• Vendor latest annotate-snippets (#27033)

Contributors

• @​bxff
• @​anishgirianish
• @​Avasam
• @​epage
• @​LHMQ878
• @​MichaReiser

... (truncated)

Commits

• 80790b3 Bump 0.16.1 (#27330)
• 63830f3 [ty] Borrow from constraint set storage less often (#27328)
• f40dca9 [ty] Preserve forwarded expanded-variadic diagnostic sources (#27266)
• 0d80497 Lint TOML files in the LSP (#26862)
• d91586b Update prek dependencies (#27293)
• 7da4b8b [ty] Respect bounds and constraints in generic materializations (#27228)
• b20daf7 [ty] refactor: add helper function to send partial results (#27249)
• 4d4c8fa [ty] Emit diagnostic when specializing a non-generic class (#26883)
• 7c3e2db [ty] Fix enum class container assignability (#27318)
• d5ef97f [flake8-return] Fix false positive when variable is read in finally claus...
• Additional commits viewable in compare view

Updates ty from 0.0.63 to 0.0.65

Release notes

Sourced from ty's releases.

0.0.65

Release Notes

Released on 2026-07-29.

LSP server

• Support comprehension walruses in IDE features (#26476)

Library support

• Pydantic: Allow mutation of private attributes on frozen models (#27257)
• Pydantic: Synthesize __replace__ for models (#27220)

Diagnostics

• Correct ParamSpec forwarded-argument diagnostic locations (#27263)
• Recover forwarded callable object and constructor sources (#27264)
• Recover forwarded functools.partial diagnostic sources (#27265)

Core type checking

• Fix gradual class assignability with generic receivers (#27223)
• Lazily materialize protocol attributes (#27267)
• Narrow tagged unions through all type kinds (#27226)
• Prefer static constrained TypeVar solutions (#27057)
• Preserve frozen-dataclass setter delegation (#27217)
• Preserve inference when filtering constructor overloads (#27254)
• Reject frozen-dataclass field deletion through subclasses (#27001)
• Stabilize recursive type-constraint ordering (#27176)
• Support materialized class type expressions (#27258)

Performance

• Avoid quadratic inference for large literal unions (#27178)
• Cache protocol receiver binding (#27301)

Contributors

• @​thejchap
• @​benedikt-bartscher
• @​carljm
• @​charliermarsh

Install ty 0.0.65

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ty/releases/download/0.0.65/ty-installer.sh | sh
</tr></table> 

... (truncated)

Changelog

Sourced from ty's changelog.

0.0.65

Released on 2026-07-29.

LSP server

• Support comprehension walruses in IDE features (#26476)

Library support

• Pydantic: Allow mutation of private attributes on frozen models (#27257)
• Pydantic: Synthesize __replace__ for models (#27220)

Diagnostics

• Correct ParamSpec forwarded-argument diagnostic locations (#27263)
• Recover forwarded callable object and constructor sources (#27264)
• Recover forwarded functools.partial diagnostic sources (#27265)

Core type checking

• Fix gradual class assignability with generic receivers (#27223)
• Lazily materialize protocol attributes (#27267)
• Narrow tagged unions through all type kinds (#27226)
• Prefer static constrained TypeVar solutions (#27057)
• Preserve frozen-dataclass setter delegation (#27217)
• Preserve inference when filtering constructor overloads (#27254)
• Reject frozen-dataclass field deletion through subclasses (#27001)
• Stabilize recursive type-constraint ordering (#27176)
• Support materialized class type expressions (#27258)

Performance

• Avoid quadratic inference for large literal unions (#27178)
• Cache protocol receiver binding (#27301)

Contributors

• @​thejchap
• @​benedikt-bartscher
• @​carljm
• @​charliermarsh

0.0.64

Released on 2026-07-27.

Bug fixes

• Fix identity narrowing for NewTypes (#26439)

... (truncated)

Commits

• 87de836 Bump version to 0.0.65 (#4113)
• d784bad README: Add link to Stable milestone (#4112)
• b4c1978 Update actions/setup-python action to v7 (#4110)
• 8d216a3 Update actions/checkout action to v7.0.1 (#4107)
• 06f44e9 Update dependency prek to v0.4.10 (#4108)
• b3665fd Update prek dependencies (#4109)
• 5e64a13 Bump version to 0.0.64 (#4097)
• See full diff in compare view

Updates mutmut from 3.6.0 to 3.7.0

Changelog

Sourced from mutmut's changelog.

3.7.0

* Fix the trampoline dropping a generator's return value, so ``yield from`` on a mutated generator no longer yields ``None`` instead of its result


Fix async generators, so that aclose()/athrow() are handled by the except/finally blocks of the mutated function instead of being swallowed by the trampoline


Fix max_stack_depth when a test changes the working directory (for example via a tmpdir fixture)


Fix type_check_command reporting type errors in copied files that have no mutants


Per-function source hashing for incremental cache invalidation — only re-test mutants in functions that changed


Cross-call dependency tracking — invalidate mutants in callers when a called function changes


Use git to detect non-Python dependency file changes; falls back to a curated file list when git is unavailable


Add cache_invalidation_exclude config to suppress noisy files from change detection


Add use_git_change_detection config (default true) to opt out of git-based detection


Add uv.lock, poetry.lock, Pipfile.lock, and pdm.lock to the list of files copied by default


Invalidate cached results automatically when result-affecting config fields change


Make mutmut browse, show and apply much faster and use far less memory, by storing where each mutant is in the mutated file instead of parsing the whole file to find it

Commits

• 4f12080 Release 3.7.0
• f5156fd Updated authors
• 0092be2 fix: forward generator return value through the trampoline (#542)
• 9e4af73 Read mutants from a line span index instead of parsing the mutated file (#543)
• 32f0b42 chore(readme): fix typo (#537)
• 523a19c update changelog
• 70b26ff lockfiles
• 1d11c1b misc: update authors (#532)
• 8799708 fix(#525): implement full async-gen wrapper (#530)
• c01561b fix record_trampoline_hit when tmpdir changed working directory
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[codspeed-hq]

Merging this PR will not alter performance

✅ 4 untouched benchmarks

---

_{Comparing dependabot/uv/python-minor-patch-37efdb989f (f6b10a7) with main (c0f4e48)}