chore(deps-dev): bump the development-dependencies group with 5 updates

[dependabot]

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.

---

Updates the requirements on ruff, mypy, ty, types-requests and hatchling to permit the latest version.
Updates ruff from 0.15.1 to 0.15.10

Release notes

Sourced from ruff's releases.

0.15.10

Release Notes

Released on 2026-04-09.

Preview features

• [flake8-logging] Allow closures in except handlers (LOG004) (#24464)
• [flake8-self] Make SLF diagnostics robust to non-self-named variables (#24281)
• [flake8-simplify] Make the fix for collapsible-if safe in preview (SIM102) (#24371)

Bug fixes

• Avoid emitting multi-line f-string elements before Python 3.12 (#24377)
• Avoid syntax error from E502 fixes in f-strings and t-strings (#24410)
• Strip form feeds from indent passed to dedent_to (#24381)
• [pyupgrade] Fix panic caused by handling of octals (UP012) (#24390)
• Reject multi-line f-string elements before Python 3.12 (#24355)

Rule changes

• [ruff] Treat f-string interpolation as potential side effect (RUF019) (#24426)

Server

• Add support for custom file extensions (#24463)

Documentation

• Document adding fixes in CONTRIBUTING.md (#24393)
• Fix JSON typo in settings example (#24517)

Contributors

• @​charliermarsh
• @​dylwil3
• @​silverstein
• @​anishgirianish
• @​shizukushq
• @​zanieb
• @​AlexWaygood

Install ruff 0.15.10

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ruff/releases/download/0.15.10/ruff-installer.sh | sh

... (truncated)

Changelog

Sourced from ruff's changelog.

Commits

• 252f761 Bump 0.15.10 (#24519)
• 37a1ec8 [ty] Fix assignability of intersections with bounded typevars (#24502)
• f518cc9 [ty] Allow partially stringified type[…] annotations (#24518)
• 16c4090 docs: fix JSON typo in settings example (#24517)
• 99d97bd [ty] Tighten up a few edge cases in Concatenate type-expression parsing (#2...
• 2714e34 [ty] Enable pull-diagnostics by default in E2E tests (#24516)
• d8bc700 LSP: Add support for custom extensions (#24463)
• a45f96d [ty] stop special-casing str constructor (#24514)
• 87a0f01 [ruff] Treat f-string interpolation as potential side effect in RUF019 (#24426)
• e9ba848 [ty] Fix excess subscript argument inference for non-generic types (#24354)
• Additional commits viewable in compare view

Updates mypy from 1.19.1 to 1.20.1

Changelog

Sourced from mypy's changelog.

Mypy 1.20.1

• Always disable sync in SQLite cache (Ivan Levkivskyi, PR 21184)
• Temporarily skip few base64 tests (Ivan Levkivskyi, PR 21193)
• Revert dict.__or__ typeshed change (Ivan Levkivskyi, PR 21186)
• Fix narrowing for match case with variadic tuples (Shantanu, PR 21192)
• Avoid narrowing type[T] in type calls (Shantanu, PR 21174)
• Fix regression for catching empty tuple in except (Shantanu, PR 21153)
• Fix reachability for frozenset and dict view narrowing (Shantanu, PR 21151)
• Fix narrowing with chained comparison (Shantanu, PR 21150)
• Avoid narrowing to unreachable at module level (Shantanu, PR 21144)
• Allow dangerous identity comparisons to Any typed variables (Shantanu, PR 21142)
• --warn-unused-config should not be a strict flag (Ivan Levkivskyi, PR 21139)

Acknowledgements

Thanks to all mypy contributors who contributed to this release:

• A5rocks
• Aaron Wieczorek
• Adam Turner
• Ali Hamdan
• asce
• BobTheBuidler
• Brent Westbrook
• Brian Schubert
• bzoracler
• Chris Burroughs
• Christoph Tyralla
• Colin Watson
• Donghoon Nam
• E. M. Bray
• Emma Smith
• Ethan Sarp
• George Ogden
• getzze
• grayjk
• Gregor Riepl
• Ivan Levkivskyi
• James Hilliard
• James Le Cuirot
• Jeremy Nimmer
• Joren Hammudoglu
• Kai (Kazuya Ito)
• kaushal trivedi
• Kevin Kannammalil
• Lukas Geiger
• Łukasz Langa
• Marc Mueller
• Michael R. Crusoe
• michaelm-openai

... (truncated)

Commits

• c60e8bf Bump version to 1.20.1
• 842e492 Always disable sync in SQLite cache (#21184)
• e82a046 Temporarily skip few base64 tests (#21193)
• f7fa418 Revert dict.or typeshed change (#21186)
• a2e8ee1 Fix narrowing for match case with variadic tuples (#21192)
• 521f88f Avoid narrowing type[T] in type calls (#21174)
• a4876e9 Fix regression for catching empty tuple in except (#21153)
• 6fccffc Fix reachability for frozenset and dict view narrowing (#21151)
• de50419 Fix narrowing with chained comparison (#21150)
• eafcf18 Avoid narrowing to unreachable at module level (#21144)
• Additional commits viewable in compare view

Updates ty from 0.0.17 to 0.0.31

Release notes

Sourced from ty's releases.

0.0.31

Release Notes

Released on 2026-04-15.

Bug fixes

• Avoid panic from double inference for namedtuple(typename=T, field_names=x, **{}) (#24641)
• Avoid panic from double inference with missing functional Enum(...) names (#24638)
• Avoid panic from double inference with functional Enum(value=...) (#24639)
• Fix cases where invalid-key fix doesn't converge, and override-of-final-method produces invalid syntax (#24649)
• Fix unnecessary ty:ignore comments inserted by --add-ignore for diagnostics starting on the same line (#24651)

CLI

• Add --fix mode to enable auto-fix for diagnostics (#24097)

Performance

• Avoid excessive memory usage for dataclasses with many fields (#24620)

Core type checking

• Check inherited NamedTuple field conflicts (#24542)
• Error when duplicate keywords are provided to TypedDict constructors (#24449)
• Respect mixed positional and keyword arguments in TypedDict constructor (#24448)
• Respect subclass shadowing for inherited NamedTuple fields (#24640)
• Skip EnumMeta.__call__ for enum constructor signatures (#24513)

Contributors

• @​sharkdp
• @​Glyphack
• @​MichaReiser
• @​charliermarsh

Install ty 0.0.31

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ty/releases/download/0.0.31/ty-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/ty/releases/download/0.0.31/ty-installer.ps1 | iex"

... (truncated)

Changelog

Sourced from ty's changelog.

0.0.31

Released on 2026-04-15.

Bug fixes

• Avoid panic from double inference for namedtuple(typename=T, field_names=x, **{}) (#24641)
• Avoid panic from double inference with missing functional Enum(...) names (#24638)
• Avoid panic from double inference with functional Enum(value=...) (#24639)
• Fix cases where invalid-key fix doesn't converge, and override-of-final-method produces invalid syntax (#24649)
• Fix unnecessary ty:ignore comments inserted by --add-ignore for diagnostics starting on the same line (#24651)

CLI

• Add --fix mode to enable auto-fix for diagnostics (#24097)

Performance

• Avoid excessive memory usage for dataclasses with many fields (#24620)

Core type checking

• Check inherited NamedTuple field conflicts (#24542)
• Error when duplicate keywords are provided to TypedDict constructors (#24449)
• Respect mixed positional and keyword arguments in TypedDict constructor (#24448)
• Respect subclass shadowing for inherited NamedTuple fields (#24640)
• Skip EnumMeta.__call__ for enum constructor signatures (#24513)

Contributors

• @​sharkdp
• @​Glyphack
• @​MichaReiser
• @​charliermarsh

0.0.30

Released on 2026-04-13.

As of v0.0.30, ty no longer unions Unknown into most inferred types of unannotated attributes. For example:

class Foo:
    def __init__(self) -> None:
        self.value = 1
reveal_type(Foo().value)  # revealed: int
Foo().value = "x"  # error: [invalid-assignment]

... (truncated)

Commits

• daaa404 Bump version to 0.0.31 (#3280)
• 12e86b5 Bump version to 0.0.30 (#3270)
• 67077ad Reorder sections in FAQ (#3267)
• 01144db Update docker/login-action action to v4.1.0 (#3262)
• 48b3fe3 Update prek dependencies (#3261)
• 7c81338 Create a "deployment" for the release-gate job (#3239)
• a447e03 Add a "release-gate" step to the release workflow (#3205)
• 5131a0e Update prek dependencies (#3221)
• 438a78d Bump version to 0.0.29 (#3218)
• 927aad2 Bump version to 0.0.28 (#3206)
• Additional commits viewable in compare view

Updates types-requests from 2.32.4.20260107 to 2.33.0.20260408

Commits

• See full diff in compare view

Updates hatchling to 1.29.0

Release notes

Sourced from hatchling's releases.

Hatchling v1.29.0

Fixed:

• Source Date Epoch no longer fails when set to date before 1980.

Commits

• 1a74daa Noqa release command to unblock GHA for PRs
• 78065f4 For Immutable Releases (#2188)
• 592c0a9 release Hatchling v1.29.0 (#2186)
• 874059b Prerelease doc updates. (#2183)
• 0e31bb6 Immutable releases ci (#2182)
• f400be1 Support a SOURCE_DATE_EPOCH prior to 1980 (#1999)
• 47b55ce Fixing failing tests for changes in Rich markdown rendering (#2172)
• cc4acd6 Add a note guiding users to include SBOM files in the source distribution (#2...
• 9068758 Fix #2164 keep_env type error for hatch shell (#2165)
• bc31cfc Fix warning and tests with packaging 26.0 (#2159)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions