deps(deps-dev): bump the dev-dependencies group across 1 directory with 3 updates

[dependabot]

Updates the requirements on ruff, prek and pylint to permit the latest version.
Updates ruff from 0.16.5 to 0.16.6

Release notes

Sourced from ruff's releases.

0.16.6

Release Notes

Released on 2026-09-03.

Preview features

• Move pytest-fixture-autouse to the restriction category (#28219)
• [flake8-pytest-style] Add an autofix for PT020 (#27993)
• [flake8-tidy-imports] Prevent fix loop between TID254 and TID255 (#28262)
• [isort] Exclude pragma comments from line length calculation (I001) (#27313)

Bug fixes

• Validate unary expressions when parsing (#28233)
• [flake8-async, pylint] Recognize builtins.open (ASYNC230, PLW1514) (#28021)
• [flake8-bugbear] Fix panic on match subjects (B031) (#27781)
• [flake8-datetimez] Reject tzinfo=None for datetime bounds (DTZ901) (#28022)
• [flake8-pytest-style] Avoid duplicate PT017 diagnostics (#27918)
• [ruff] Remove lint.external hint for Ruff-specific suppressions (RUF102) (#27923)

Rule changes

• [flake8-use-pathlib] Add display-only fix for os.listdir (PTH208) (#28027)

Documentation

• Add another example and glob reference for lint.per-file-ignores (#28106)
• Add duplicate work guidance (#28229)
• [flake8-async] Document thread offloading (ASYNC240) (#28008)
• [pyupgrade] Clarify default encoding argument handling (UP012) (#27315)

Other changes

• Allow unary plus in match patterns on Python 3.15 (#28231)

Contributors

• @​flying-sheep
• @​pikammmmm
• @​fly1d
• @​waterWang
• @​Pierre-Sassoulas
• @​ntBre
• @​jelle-openai
• @​ericbuehl
• @​tjkuson
• @​AbhinavMir
• @​Whning0513
• @​chirizxc

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.6

Released on 2026-09-03.

Preview features

• Move pytest-fixture-autouse to the restriction category (#28219)
• [flake8-pytest-style] Add an autofix for PT020 (#27993)
• [flake8-tidy-imports] Prevent fix loop between TID254 and TID255 (#28262)
• [isort] Exclude pragma comments from line length calculation (I001) (#27313)

Bug fixes

• Validate unary expressions when parsing (#28233)
• [flake8-async, pylint] Recognize builtins.open (ASYNC230, PLW1514) (#28021)
• [flake8-bugbear] Fix panic on match subjects (B031) (#27781)
• [flake8-datetimez] Reject tzinfo=None for datetime bounds (DTZ901) (#28022)
• [flake8-pytest-style] Avoid duplicate PT017 diagnostics (#27918)
• [ruff] Remove lint.external hint for Ruff-specific suppressions (RUF102) (#27923)

Rule changes

• [flake8-use-pathlib] Add display-only fix for os.listdir (PTH208) (#28027)

Documentation

• Add another example and glob reference for lint.per-file-ignores (#28106)
• Add duplicate work guidance (#28229)
• [flake8-async] Document thread offloading (ASYNC240) (#28008)
• [pyupgrade] Clarify default encoding argument handling (UP012) (#27315)

Other changes

• Allow unary plus in match patterns on Python 3.15 (#28231)

Contributors

• @​flying-sheep
• @​pikammmmm
• @​fly1d
• @​waterWang
• @​Pierre-Sassoulas
• @​ntBre
• @​jelle-openai
• @​ericbuehl
• @​tjkuson
• @​AbhinavMir
• @​Whning0513
• @​chirizxc

Commits

• 22f65a2 Bump 0.16.6 (#28280)
• 7cc9f1e [ty] Document CallableTypeKind variants (#28277)
• 056ce07 Add UV_LOCKED to all workflows (#28261)
• 6d6e35d [flake8-pytest-style] Avoid duplicate PT017 diagnostics (#27918)
• 80b4891 [ty] Temporarily disable tuple types in property tests (#28275)
• 3f7a54d [flake8-tidy-imports] Prevent fix loop between TID254 and TID255 (#28262)
• 35656cf [ty] Preserve deprecations on decorated callables (#28256)
• d2626c8 [ty] Reject missing attributes on type[] aliases (#28267)
• ee6a6d1 [ty] Support ParamSpecs in ConstraintSet (#28028)
• 7f6a170 [ty] Move bound APIs to constraint owners (#28094)
• Additional commits viewable in compare view

Updates prek to 0.5.2

Release notes

Sourced from prek's releases.

0.5.2

Release Notes

Released on 2026-09-03.

Enhancements

• Allow unknown tags by default in check-yaml (#2678)

Contributors

• @​j178

Install prek 0.5.2

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/j178/prek/releases/download/v0.5.2/prek-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://github.com/j178/prek/releases/download/v0.5.2/prek-installer.ps1 | iex"

Install prebuilt binaries via Homebrew

brew install prek

Download prek 0.5.2

File	Platform	Checksum
prek-aarch64-apple-darwin.tar.gz	Apple Silicon macOS	checksum
prek-x86_64-apple-darwin.tar.gz	Intel macOS	checksum
prek-aarch64-pc-windows-msvc.zip	ARM64 Windows	checksum
prek-x86_64-pc-windows-msvc.zip	x64 Windows	checksum
prek-aarch64-unknown-linux-gnu.tar.gz	ARM64 Linux	checksum
prek-x86_64-unknown-linux-gnu.tar.gz	x64 Linux	checksum
prek-aarch64-unknown-linux-musl.tar.gz	ARM64 MUSL Linux	checksum
prek-x86_64-unknown-linux-musl.tar.gz	x64 MUSL Linux	checksum

Verifying GitHub Artifact Attestations

The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:

</tr></table> 

... (truncated)

Changelog

Sourced from prek's changelog.

0.5.2

Released on 2026-09-03.

Enhancements

• Allow unknown tags by default in check-yaml (#2678)

Contributors

• @​j178

0.5.1

Released on 2026-09-01.

Enhancements

• Add --hide-status <passed|failed|skipped> for hook reports (#2644)
• Add prek init for repository setup (#2636)
• Apply hook env during environment creation (#2650)
• Disable error snippets in check-yaml diagnostics (#2664)
• Show hooks excluded by skip selectors (#2645)
• Support Pixi for Conda environments (#2667)
• Support cargo-binstall for Rust CLI dependencies (#2658)
• Warn about unused keys in user settings (#2665)

Bug fixes

• Reject unsupported YAML tags in check-yaml (#2656)

Documentation

• Clarify local hook documentation (#2640)
• Clarify pre-commit command compatibility (#2635)
• Document automatic PR fixes with autofix.ci (#2643)
• Document check-yaml unsafe support (#2632)
• Improve setup and workflow documentation (#2637)

Other changes

• Drop low-usage release targets (#2651)
• Generate a prek manifest JSON schema (#2648)

Contributors

• @​j178

0.5.0

... (truncated)

Commits

• bfaa03c Bump version to 0.5.2 (#2679)
• f0ce4c2 Allow unknown tags by default in check-yaml (#2678)
• 78bb3fe Show verbose builtin details by default (#2676)
• 57ea73d Add --allow-unknown-tags to check-yaml to disable tag checks (#2675)
• 695f3d0 Show hook selectors first in prek run help (#2673)
• edf43d5 Reapply "Reject unsupported YAML tags in check-yaml (#2656)" (#2672)
• ed225b1 Bump version to 0.5.2 (#2671)
• de6e614 Revert unsupported YAML tag rejection in check-yaml (#2670)
• 10a896e Bump version to 0.5.1 (#2669)
• 8648709 Support Pixi for Conda environments (#2667)
• Additional commits viewable in compare view

Updates pylint from 4.0.7 to 4.0.8

Release notes

Sourced from pylint's releases.

v4.0.8

What's new in Pylint 4.0.8?

Release date: 2026-08-29

False Positives Fixed

• Fix a false positive for :ref:unspecified-encoding when an open call uses a mode argument that cannot be inferred.

  Closes #10201

• Fix a false positive for invalid-name (C0103) on names assigned in an if __name__ == "__main__": block. Such a block reads like a script body, so a name there is now accepted if it matches either the constant or the variable naming style.

  Closes #10766

• Fix false positives for :ref:invalid-str-returned, :ref:invalid-repr-returned, :ref:invalid-format-returned, :ref:invalid-bytes-returned, :ref:invalid-hash-returned, :ref:invalid-index-returned, :ref:invalid-length-returned, :ref:invalid-length-hint-returned, :ref:invalid-getnewargs-returned and :ref:invalid-getnewargs-ex-returned when the returned value is an instance of a subclass of the expected builtin type, such as self in a str subclass or a namedtuple.

  Closes #11306

• Fix false positives for :ref:bad-string-format-type when the argument is an instance of a subclass of int, float or str, such as bool or an IntEnum member formatted with %d.

  Closes #11315

False Negatives Fixed

• redundant-unittest-assert now also flags assertEqual and assertNotEqual when both compared values are constants, e.g. self.assertEqual(5, 5).

  Closes #11321

Other Bug Fixes

... (truncated)

Commits

• ecb84ba Bump pylint to 4.0.8, update changelog (#11355)
• 989e9c5 [Backport maintenance/4.0.x] Support isort 9 (#11354)
• 8c1ee95 Flag assertEqual and assertNotEqual between two constants in W1503
• eadefe3 Fix false positive bad-string-format-type for subclasses of builtin types
• db00e3b [Backport maintenance/4.0.x] fix(docparams): guard decorated_with_property ag...
• 7909c17 Accept subclass instances in the invalid-*-returned checks
• d19640d [Backport maintenance/4.0.x] Fix invalid-name false positive in `if _name...
• 94e5704 Skip unspecified-encoding for unknown open modes (#11163)
• d59b329 fix(refactoring): handle non-AssignName targets in use-yield-from (#11286) (#...
• eea0569 [Backport maintenance/4.0.x] Fix crash in docparams on raising a non-exceptio...
• See full diff in compare view

[github-actions]

Auto-approved version-update:semver-patch update for ruff, prek, pylint