build(deps-dev): bump the python-dev group with 3 updates

[dependabot]

Bumps the python-dev group with 3 updates: hypothesis, prek and ty.

Updates hypothesis from 6.168.3 to 6.168.5

Commits

• ca2a4c6 Bump hypothesis version to 6.168.5 and update changelog
• c1c9957 Merge pull request #4894 from MarcoGorelli/django-from-field-return-type
• d862501 Bump hypothesis version to 6.168.4 and update changelog
• de4ec1c Merge pull request #4887 from HypothesisWorks/create-pull-request/patch
• 8a80889 add pypy312 support
• 9ee265d Update pinned dependencies
• f92f61c Fix the return type of django's from_field
• See full diff in compare view

Updates prek from 0.5.4 to 0.5.5

Release notes

Sourced from prek's releases.

0.5.5

Release Notes

Released on 2026-10-05.

Enhancements

• Add Nushell completion generation (#2785)
• Add ppc64le wheel and binary builds (#2809)

Performance

• Avoid JSON imports when querying Python interpreters (#2790)
• Avoid duplicate diffs after hooks rewrite files (#2815)
• Batch file reads in shebang checks (#2793)
• Check cached hook environments concurrently (#2797)
• Overlap Git discovery with worktree status checks (#2821)
• Query staged additions only for case conflicts (#2802)
• Reduce worker overhead in XML and pygrep checks (#2789)
• Reuse Git worktree state during hook startup (#2787)
• Reuse intent-to-add paths when saving unstaged changes (#2788)
• Run Git queries concurrently for case-conflict checks (#2792)
• Share Bun and Deno version queries across environments (#2795)
• Share Lua runtime probes across hook environments (#2796)
• Share Ruby version queries across hook environments (#2794)
• Share mise version queries across hook environments (#2798)
• Skip site initialization in Python interpreter probes (#2822)
• Skip untracked files in destroyed symlink checks (#2799)
• Skip unused file input for always-run hooks (#2813)

Bug fixes

• Preserve staged and unstaged changes on conflicted stash restore (#2803)
• Default missing core.fileMode in shebang checks (#2832)
• Match protected branch patterns from the start (#2829)
• Normalize explicit paths in shebang index checks (#2831)
• Preserve empty trailing-whitespace character sets (#2830)
• Reject empty files in check-json (#2826)
• Reject trailing data in check-json (#2828)
• Round up file sizes in check-added-large-files (#2827)

Documentation

• Redesign the prek badge and refresh logo details (#2818)

Contributors

• @​imphil
• @​j178

... (truncated)

Changelog

Sourced from prek's changelog.

0.5.5

Released on 2026-10-05.

Enhancements

• Add Nushell completion generation (#2785)
• Add ppc64le wheel and binary builds (#2809)

Performance

• Avoid JSON imports when querying Python interpreters (#2790)
• Avoid duplicate diffs after hooks rewrite files (#2815)
• Batch file reads in shebang checks (#2793)
• Check cached hook environments concurrently (#2797)
• Overlap Git discovery with worktree status checks (#2821)
• Query staged additions only for case conflicts (#2802)
• Reduce worker overhead in XML and pygrep checks (#2789)
• Reuse Git worktree state during hook startup (#2787)
• Reuse intent-to-add paths when saving unstaged changes (#2788)
• Run Git queries concurrently for case-conflict checks (#2792)
• Share Bun and Deno version queries across environments (#2795)
• Share Lua runtime probes across hook environments (#2796)
• Share Ruby version queries across hook environments (#2794)
• Share mise version queries across hook environments (#2798)
• Skip site initialization in Python interpreter probes (#2822)
• Skip untracked files in destroyed symlink checks (#2799)
• Skip unused file input for always-run hooks (#2813)

Bug fixes

• Preserve staged and unstaged changes on conflicted stash restore (#2803)
• Default missing core.fileMode in shebang checks (#2832)
• Match protected branch patterns from the start (#2829)
• Normalize explicit paths in shebang index checks (#2831)
• Preserve empty trailing-whitespace character sets (#2830)
• Reject empty files in check-json (#2826)
• Reject trailing data in check-json (#2828)
• Round up file sizes in check-added-large-files (#2827)

Documentation

• Redesign the prek badge and refresh logo details (#2818)

Contributors

• @​imphil
• @​j178

Commits

• 77cca67 Bump version to 0.5.5 (#2839)
• f4e2695 Update Rust crate jsonc-parser to 0.34.0 (#2838)
• 399e9d1 Update GitHub Actions (#2837)
• 19e77d1 Update prek hooks (#2771)
• e261e0c Update dependency uv to v0.12.19 (#2835)
• bc53e2c Update Rust crate thiserror to v2.0.21 (#2836)
• 4a981d2 Default missing core.fileMode in shebang checks (#2832)
• e031022 Preserve empty trailing-whitespace character sets (#2830)
• 0b1871a Normalize explicit paths in shebang index checks (#2831)
• 9d4aede Match protected branch patterns from the start (#2829)
• Additional commits viewable in compare view

Updates ty from 0.0.84 to 0.0.85

Release notes

Sourced from ty's releases.

0.0.85

Release Notes

Released on 2026-10-06.

Preview features

• Refresh uv project metadata when uv files change (#28529)

Bug fixes

• Avoid recursive lambda class decorator panics (#28984)
• Compare observable notebook state for equality (#28874)
• Detect recursive alias cycles through intersections (#28916)
• Fix anchoring of include and exclude patterns after the project's root changed (#28995)
• Fix stack overflow when inferring dynamic class metaclasses (#28917)
• Normalize recursive dataclass transform metadata (#28920)
• Normalize recursive TypedDicts during cycle recovery (#28918)
• Preserve cycle markers in ParamSpec specialization (#29024)

CLI

• Prefer existing @ paths over response files in Ruff and ty (#28877)

LSP server

• Add namespace package support to import completions. (#28202)
• Avoid stale I/O diagnostics when closing deleted files (#28988)
• Contain rendered code within Markdown fences (#28869)
• Refresh Python settings when virtual environments change (#28650)

Diagnostic improvements

• Add opt-in truthiness-test-of-none-union rule (#28889)
• Avoid disjoint-cast diagnostics in situations where the value could have been inferred as being compatible with the casted type if it had only been inferred with the right type context (#28851)
• Bound nested callable signature display (#29049)
• Explain outdated uv versions in metadata errors (#28959)
• Improve display of string literal types that include unicode characters or double quotes (#29089)
• Improve uv metadata diagnostics (#28990)
• Preserve constrained type-variable failure diagnostics (#28768)
• Preserve generic inference errors during diagnostic recovery (#28811)
• Report deprecated overloads in decorator applications (#28999)

Core type checking

• Bound methods without a receiver are not callable (#28981)
• Fix member lookup on union-bounded type variables (#29018)
• Fix type variable inference for final class objects (#29097)
• Freshen ParamSpec identities consistently (#28826)
• Honor generic property setters in protocol compatibility (#28562)

... (truncated)

Changelog

Sourced from ty's changelog.

0.0.85

Released on 2026-10-06.

Preview features

• Refresh uv project metadata when uv files change (#28529)

Bug fixes

• Avoid recursive lambda class decorator panics (#28984)
• Compare observable notebook state for equality (#28874)
• Detect recursive alias cycles through intersections (#28916)
• Fix anchoring of include and exclude patterns after the project's root changed (#28995)
• Fix stack overflow when inferring dynamic class metaclasses (#28917)
• Normalize recursive dataclass transform metadata (#28920)
• Normalize recursive TypedDicts during cycle recovery (#28918)
• Preserve cycle markers in ParamSpec specialization (#29024)

CLI

• Prefer existing @ paths over response files in Ruff and ty (#28877)

LSP server

• Add namespace package support to import completions. (#28202)
• Avoid stale I/O diagnostics when closing deleted files (#28988)
• Contain rendered code within Markdown fences (#28869)
• Refresh Python settings when virtual environments change (#28650)

Diagnostic improvements

• Add opt-in truthiness-test-of-none-union rule (#28889)
• Avoid disjoint-cast diagnostics in situations where the value could have been inferred as being compatible with the casted type if it had only been inferred with the right type context (#28851)
• Bound nested callable signature display (#29049)
• Explain outdated uv versions in metadata errors (#28959)
• Improve display of string literal types that include unicode characters or double quotes (#29089)
• Improve uv metadata diagnostics (#28990)
• Preserve constrained type-variable failure diagnostics (#28768)
• Preserve generic inference errors during diagnostic recovery (#28811)
• Report deprecated overloads in decorator applications (#28999)

Core type checking

• Bound methods without a receiver are not callable (#28981)
• Fix member lookup on union-bounded type variables (#29018)
• Fix type variable inference for final class objects (#29097)
• Freshen ParamSpec identities consistently (#28826)
• Honor generic property setters in protocol compatibility (#28562)
• Infer nominal generic specializations from bounded type variables (#28812)

... (truncated)

Commits

• d7fc5ef Bump version to 0.0.85 (#4679)
• bc4fd9e Include reproducers in daily fuzz issues (#4671)
• 03d47ff Group uv workflow and pre-commit updates (#4670)
• a86a22f Update dependency astral-sh/uv to v0.12.23 (#4669)
• 1447551 Enable Renovate updates for the release preparation uv version (#4668)
• 9f2b16a Set FORCE_COLOR for fuzzing environment (#4663)
• 05add1d Add a daily ty fuzzing workflow (#4643)
• ad39415 Correct file exclusion guide examples (#4638)
• 2ea9c49 Update language server feature documentation (#4637)
• 449e387 Correct type inference and narrowing FAQ (#4639)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

• Configuration used: defaults
• Review profile: CHILL
• Plan: Advanced
• Run ID: fc97e6f3-97a2-4235-b3a3-e4f96a63ce61

---

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

---

_{Comment @coderabbitai help to get the list of available commands.}

[github-actions]

Benchmark Results

🔴 Regression detected — threshold: 30%

scan-clean

Metric	Base	Compare	Change
files_per_second	197.8 files/s	206.1 files/s	✅ +4.2%
scan_max_ms	5481.8 ms	4874.8 ms	✅ -11.1%
scan_mean_ms	5060.2 ms	4856.5 ms	✅ -4.0%
scan_min_ms	4813.3 ms	4840.5 ms	➡️ +0.6%

scan-violations

Metric	Base	Compare	Change
files_per_second	120.7 files/s	122.0 files/s	✅ +1.1%
scan_max_ms	1696.8 ms	1665.4 ms	✅ -1.8%
scan_mean_ms	1665.7 ms	1647.0 ms	✅ -1.1%
scan_min_ms	1640.5 ms	1636.9 ms	✅ -0.2%

fix-violations

Metric	Base	Compare	Change
fix_files_per_second	50.0 files/s	50.1 files/s	✅ +0.1%
fix_max_ms	4068.1 ms	4040.8 ms	✅ -0.7%
fix_mean_ms	4018.2 ms	4013.5 ms	✅ -0.1%
fix_min_ms	3993.2 ms	3999.6 ms	➡️ +0.2%

cpu

Metric	Base	Compare	Change
cpu_clean_mean_ms	0.6 ms	0.6 ms	➡️ +1.1%
cpu_fix_mean_ms	1.6 ms	1.6 ms	➡️ +1.3%
cpu_violations_mean_ms	0.6 ms	0.6 ms	➡️ +0.1%

import

Metric	Base	Compare	Change
import_package_max_ms	184.9 ms	360.3 ms	🔴 +94.9%
import_package_mean_ms	156.1 ms	219.9 ms	🔴 +40.9%
import_package_min_ms	140.6 ms	143.6 ms	➡️ +2.1%
import_rules_max_ms	238.9 ms	415.1 ms	🔴 +73.8%
import_rules_mean_ms	236.5 ms	299.0 ms	➡️ +26.4%
import_rules_min_ms	233.0 ms	240.0 ms	➡️ +3.0%

View benchmark history

_{Updated 2026-10-12 18:15 UTC}

[github-actions]

📊 Test Coverage Report

Coverage: 89.13%

📥 Coverage XML available as artifact: coverage-xml