chore: bump the python-dev group with 3 updates

[dependabot]

Bumps the python-dev group with 3 updates: pydoclint, pytest-mock and ruff.

Updates pydoclint from 0.9.1 to 0.10.1

Release notes

Sourced from pydoclint's releases.

0.10.1

What's Changed

• Rewrite README and restructure docs by @​jsh9 in jsh9/pydoclint#307
• Use stacked pytest parametrize instead of itertools.product in tests by @​jsh9 in jsh9/pydoclint#308

Full Changelog: jsh9/pydoclint@0.10.0...0.10.1

0.10.0

What's Changed

• Use external changelog diff checking hook by @​jsh9 in jsh9/pydoclint#297
• Add separate options for private, underscore-only, and special dunder names by @​jsh9 in jsh9/pydoclint#306

Full Changelog: jsh9/pydoclint@0.9.1...0.10.0

Changelog

Sourced from pydoclint's changelog.

[0.10.1] - 2026-09-27

• Changed
  • Rewrote the README and restructured the docs
• Fixed
  • Stale docs content and the broken DOC103/DOC603 docs link
• Added
  • docs/llms.txt and a pre-commit check for orphan docs and broken links
• Maintenance
  • Replaced itertools.product with stacked @pytest.mark.parametrize decorators in tests/test_main.py
• Full diff
  • jsh9/pydoclint@0.10.0...0.10.1

[0.10.0] - 2026-09-27

• Added
  • --ignore-underscore-only-args (-iuoa, default: True)
  • --ignore-special-dunder-args (-isda, default: False)
  • --ignore-private-class-attributes (-ipca, default: True)
  • --ignore-underscore-only-class-attributes (-iuoca, default: True)
  • --ignore-special-dunder-class-attributes (-isdca, default: True)
• Fixed
  • Allowed conventional underscore-only class attribute placeholders, such as _: dataclasses.KW_ONLY, to be ignored independently of private class attributes (#302). This is a name-based fix, so a KW_ONLY pseudo-field whose name is not underscore-only is still treated like any other attribute
  • Accepted Flake8 boolean option values case-insensitively (such as false), so the lowercase values shown in migration messages work in Flake8 config files
• Changed
  • Star arguments are now classified without their leading * or **, so *_ and **__ are ignored by --ignore-underscore-only-args, and *_args is ignored by --ignore-private-args
  • --skip-checking-private-functions now also skips functions named __ or ___ (it already skipped _); special dunder methods such as __init__ are still checked
  • --ignore-private-args no longer controls special dunder arguments (such as __value__). If you set --ignore-private-args=True and want them to stay ignored, also set --ignore-special-dunder-args=True
  • Changed the Visitor keyword arguments from ignoreUnderscoreArgs and shouldDocumentPrivateClassAttributes to ignoreUnderscoreOnlyArgs, ignoreSpecialDunderArgs, ignorePrivateClassAttributes, ignoreUnderscoreOnlyClassAttributes, and ignoreSpecialDunderClassAttributes; this is a breaking change for code that uses Visitor directly
• Removed
  • Removed --ignore-underscore-args; using it now fails with guidance to delete it when it has the new default value or replace it with --ignore-underscore-only-args

... (truncated)

Commits

• e0aeee3 Use stacked pytest parametrize instead of itertools.product in tests (#308)
• f87ba10 Rewrite README and restructure docs (#307)
• 4bfdb3c Add separate options for private, underscore-only, and special dunder names (...
• b72c91f Use external changelog diff checking hook (#297)
• See full diff in compare view

Updates pytest-mock from 3.15.1 to 3.16.0

Release notes

Sourced from pytest-mock's releases.

v3.16.0

2026-09-27

• #604: Fixed duplicate_iterators=True for async functions spied with mocker.spy.
• #611: Fixed async mock assertion introspection to use awaited arguments instead of the latest call's arguments.
• #606: mocker.resetall(return_value=True, side_effect=True) now also applies to non-callable mocks, such as those returned by mocker.create_autospec(SomeClass, instance=True). Previously both arguments were silently ignored for them.
• #547: Added SpyType for annotating mocker.spy results.
• Dropped support for EOL Python 3.9.
• #147: Removed handling of RuntimeError: stop called on unstarted patcher, which can no longer occur in the supported Python versions.
• Added support for Python 3.15.

Changelog

Sourced from pytest-mock's changelog.

3.16.0

2026-09-27

• [#604](https://github.com/pytest-dev/pytest-mock/issues/604) <https://github.com/pytest-dev/pytest-mock/pull/604>_: Fixed duplicate_iterators=True for async functions spied with mocker.spy.
• [#611](https://github.com/pytest-dev/pytest-mock/issues/611) <https://github.com/pytest-dev/pytest-mock/pull/611>_: Fixed async mock assertion introspection to use awaited arguments instead of the latest call's arguments.
• [#606](https://github.com/pytest-dev/pytest-mock/issues/606) <https://github.com/pytest-dev/pytest-mock/pull/606>_: mocker.resetall(return_value=True, side_effect=True) now also applies to non-callable mocks, such as those returned by mocker.create_autospec(SomeClass, instance=True). Previously both arguments were silently ignored for them.
• [#547](https://github.com/pytest-dev/pytest-mock/issues/547) <https://github.com/pytest-dev/pytest-mock/issues/547>_: Added SpyType for annotating mocker.spy results.
• Dropped support for EOL Python 3.9.
• [#147](https://github.com/pytest-dev/pytest-mock/issues/147) <https://github.com/pytest-dev/pytest-mock/issues/147>_: Removed handling of RuntimeError: stop called on unstarted patcher, which can no longer occur in the supported Python versions.
• Added support for Python 3.15.

Commits

• f3b531f Release 3.16.0
• 71ed673 Fix duplicate_iterators for async spies (#604)
• 0797e3d Fix async assertion argument introspection (#611)
• e24c334 docs: import os in the opening usage example (#612)
• 9e7eb7b [pre-commit.ci] pre-commit autoupdate (#613)
• 445fd4d [pre-commit.ci] pre-commit autoupdate (#610)
• a8bd0b1 Honour resetall() arguments for non-callable mocks (#606)
• 6559fdf [pre-commit.ci] pre-commit autoupdate (#608)
• 466d026 [pre-commit.ci] pre-commit autoupdate (#605)
• 164defe [pre-commit.ci] pre-commit autoupdate (#603)
• Additional commits viewable in compare view

Updates ruff from 0.16.9 to 0.16.10

Release notes

Sourced from ruff's releases.

0.16.10

Release Notes

Released on 2026-10-01.

Preview features

• Add a migration guide for categories (#28087)
• [pyupgrade] Add rule for context manager iterator annotations (UP052) (#29000)

Performance

• Reduce memory used by diagnostics (#28951)

Server

• Avoid running uv format in untrusted workspaces (#28873)

Documentation

• Fix links to moved changelog sections and renamed mdtests (#28941)
• Add Python 3.15 as a supported version (#28907)
• Add ty as a type checker example (#28906)

Other changes

• Update Rust toolchain to 1.99 and MSRV to 1.97 (#29047)

Contributors

• @​ntBre
• @​spaceone
• @​HardMax71
• @​charliermarsh

Install ruff 0.16.10

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ruff/releases/download/0.16.10/ruff-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/ruff/releases/download/0.16.10/ruff-installer.ps1 | iex"

Download ruff 0.16.10

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.10

Released on 2026-10-01.

Preview features

• Add a migration guide for categories (#28087)
• [pyupgrade] Add rule for context manager iterator annotations (UP052) (#29000)

Performance

• Reduce memory used by diagnostics (#28951)

Server

• Avoid running uv format in untrusted workspaces (#28873)

Documentation

• Fix links to moved changelog sections and renamed mdtests (#28941)
• Add Python 3.15 as a supported version (#28907)
• Add ty as a type checker example (#28906)

Other changes

• Update Rust toolchain to 1.99 and MSRV to 1.97 (#29047)

Contributors

• @​ntBre
• @​spaceone
• @​HardMax71
• @​charliermarsh

Commits

• 3265ed1 Bump version to 0.16.10 (#29055)
• e786964 Authorize shared PR security-review workflow to publish findings (#29052)
• a81291e [ty] Defer uv workspace discovery until after project configuration (#28525)
• b6a74d2 [ty] Refresh uv project metadata when uv files change (#28529)
• 41d30df Update Rust toolchain to 1.99 and MSRV to 1.97 (#29047)
• 317e0a3 [ty] Bound nested callable signature display (#29049)
• 8546752 [ty] Fix member lookup on union-bounded type variables (#29018)
• 56180bc [ty] Specialize instance members once (#29043)
• aa9a1ff [ty] Avoid stale I/O diagnostics when closing deleted files (#28988)
• 2d25346 [ty] Improve unresolved-import documentation (#29039)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[github-actions]

Approved automatically for a trusted Dependabot revision.