chore(uv): bump the uv-dependencies group with 9 updates

[dependabot]

Bumps the uv-dependencies group with 9 updates:

Package	From	To
boto3	1.43.101	1.43.105
azure-mgmt-compute	38.3.0	38.4.0
cloudflare	5.7.0	5.8.0
datadog-api-client	2.60.0	2.61.0
google-auth	2.58.0	2.59.0
google-cloud-storage	3.14.1	3.15.1
python-gitlab	8.5.0	8.6.0
prek	0.5.3	0.5.4
ruff	0.16.8	0.16.9

Updates boto3 from 1.43.101 to 1.43.105

Commits

• 29c0d66 Merge branch 'release-1.43.105'
• 034df0c Bumping version to 1.43.105
• d6bfbe0 Add changelog entries from botocore
• ca37987 Merge branch 'release-1.43.104'
• f2605d9 Merge branch 'release-1.43.104' into develop
• c468e3d Bumping version to 1.43.104
• f2d1bac Add changelog entries from botocore
• 0470368 Merge branch 'release-1.43.103'
• 378d670 Merge branch 'release-1.43.103' into develop
• 1b65309 Bumping version to 1.43.103
• Additional commits viewable in compare view

Updates azure-mgmt-compute from 38.3.0 to 38.4.0

Release notes

Sourced from azure-mgmt-compute's releases.

azure-mgmt-compute_38.4.0

38.4.0 (2026-09-21)

Features Added

• Model CommunityGalleryImageVersionProperties added property consumption_end_time
• Model CommunityGalleryImageVersionProperties added property image_state
• Enum ConfidentialVMEncryptionType added member DATA_DISK_ENCRYPTED_WITH_CMK
• Model DataDiskImageEncryption added property security_profile
• Model GalleryImageVersionProperties added property image_metadata_profiles
• Model GallerySoftDeletedResourceProperties added property consumption_end_time
• Model GallerySoftDeletedResourceProperties added property hard_deletion_target_time
• Model ImageVersionSecurityProfile added property secrets_provisioning_settings
• Model SharedGalleryImageVersionProperties added property consumption_end_time
• Model SharedGalleryImageVersionProperties added property image_state
• Model SoftDeletePolicy added property grace_period_in_days
• Model SoftDeletePolicy added property retention_period_in_days
• Added model DataDiskImageSecurityProfile
• Added enum GalleryImageVersionState
• Added model ImageMetadataProfile
• Added model MetadataKeyValue
• Added enum MetadataType
• Added model SecretsProvisioningComponent
• Added enum SecretsProvisioningComponentName
• Added model SecretsProvisioningSettings
• Operation group GalleryImageVersionsOperations added parameter bypass_soft_delete in method begin_delete

Commits

• 02e667b [AutoPR azure-mgmt-compute]-generated-from-SDK Generation - Python-6843996 (#...
• a9fdda6 [agentserver-responses] Prepare 2.2.0b2 release (#49177)
• caa6ed6 [azure-ai-ml] Validate artifact cache paths and handle concurrent downloads (...
• 71240a6 [azure-ai-evaluation] Prepare 1.18.7 release (#49184)
• 77ca7dc Fix explicit schema types in AOAI grader evaluations (#49180)
• e06582c [azure-ai-evaluation] Revert configurable AOAI output page size (#49181)
• dba51e2 Add support for session.id attribute (#49179)
• 07a44f4 Sync .github/skills directory with azure-sdk-tools for PR 16634 (#49173)
• 1bebfdc Pin @​typespec/http-client-python to 0.38.0 (#49175)
• 25c5e29 update jinja2 (#49176)
• Additional commits viewable in compare view

Updates cloudflare from 5.7.0 to 5.8.0

Release notes

Sourced from cloudflare's releases.

v5.8.0

5.8.0 (2026-09-25)

Full Changelog: v5.7.0...v5.8.0

This release adds Managed Defense vulnerability discovery, Field Extractors, billing and subscription APIs, Magic Transit BGP filter profiles, registrar transfer APIs, Zero Trust posture policies, and zone observability tracing. It also includes generated signature and response-model corrections. Review the breaking changes before upgrading.

See the v5.8.0 Migration Guide for upgrade examples.

Breaking Changes

• addressing: client.addressing.address_maps.accounts.update() and delete() now take member_account_id as the positional identifier and address_map_id as a keyword argument.
• request bodies: unused body parameters were removed from token value updates, Address Maps IP and zone updates, Cache Reserve clear, DNS scan and zone transfer actions, Email Routing enable/disable, Access bookmarks, and Gateway certificate activation/deactivation.
• r2: request keyword jurisdiction was renamed to cf_r2_jurisdiction across bucket, object, domain, lifecycle, lock, CORS, event-notification, and Sippy operations. The new keyword also accepts fedramp-high.
• firewall and rate_limits: legacy WAF override and rate-limit methods now return None. The Override, OverrideDeleteResponse, RateLimit, RateLimitDeleteResponse, WAFRule, and RewriteAction exports were removed. Firewall bulk edit/update now require an id instead of a body collection, and WAF package retrieval now returns a raw string/object union.
• cloud_connector: RuleUpdateParams.rules is now required.
• response models: Hyperdrive configs, cache origin cloud regions, and Zero Trust organizations now use corrected operation-specific or shared response types. mTLS certificate list(), delete(), and get() now use the shared MTLSCertificate type; create() still returns Optional[MTLSCertificateCreateResponse]. Hyperdrive create parameters are now origin/integration variants, replacing direct Origin, Caching, and MTLS helper imports.
• pagination: Workers deployment listing now returns SyncV4PagePagination and adds page/date filters; Gateway list items and PAC files now return SyncV4PagePaginationArray and add page controls; device override-code listing now returns Optional[OverrideCodeListResponse].
• email_routing: client.email_routing.dns.delete() now uses DELETE and returns Optional[Settings] instead of a page of DNS records. dns.get() is now optional and returns List[DNSRecord] rather than an envelope union.
• waiting_rooms: waiting-room, event, page-preview, status, details, and settings operations now return Optional[...]; callers must handle None.
• browser_rendering: create parameter types for URL/HTML-based rendering endpoints are now unions requiring either url or html. Session endpoints such as devtools.browser.create() are unaffected. Nested Viewport, Cookie, and PDFOptions imports moved under generated variant types.
• pipelines: per-response schema field exports were replaced by shared SourceField, SourceFieldParam, ListField, ListFieldParam, StructField, and StructFieldParam types.
• zero_trust: ApplicationCreateParams for Resource Library applications is now a union requiring either hostnames or ip_subnets. Access Browser RDP and Infrastructure target_attributes response fields are now optional.
• rulesets: generated nested rule symbols were normalized, including BlockRule to RuleBlockRule, CompressResponseRule to RuleResponseCompressionRule, and SetConfigRule to RuleSetConfigurationRule; several response rule fields are now required.
• required fields: Calls SFU/TURN fields, Flagship response type, and Workers domain environment are now required.

... (truncated)

Changelog

Sourced from cloudflare's changelog.

5.8.0 (2026-09-25)

Full Changelog: v5.7.0...v5.8.0

This release adds Managed Defense vulnerability discovery, Field Extractors, billing and subscription APIs, Magic Transit BGP filter profiles, registrar transfer APIs, Zero Trust posture policies, and zone observability tracing. It also includes generated signature and response-model corrections. Review the breaking changes before upgrading.

See the v5.8.0 Migration Guide for upgrade examples.

Breaking Changes

• addressing: client.addressing.address_maps.accounts.update() and delete() now take member_account_id as the positional identifier and address_map_id as a keyword argument.
• request bodies: unused body parameters were removed from token value updates, Address Maps IP and zone updates, Cache Reserve clear, DNS scan and zone transfer actions, Email Routing enable/disable, Access bookmarks, and Gateway certificate activation/deactivation.
• r2: request keyword jurisdiction was renamed to cf_r2_jurisdiction across bucket, object, domain, lifecycle, lock, CORS, event-notification, and Sippy operations. The new keyword also accepts fedramp-high.
• firewall and rate_limits: legacy WAF override and rate-limit methods now return None. The Override, OverrideDeleteResponse, RateLimit, RateLimitDeleteResponse, WAFRule, and RewriteAction exports were removed. Firewall bulk edit/update now require an id instead of a body collection, and WAF package retrieval now returns a raw string/object union.
• cloud_connector: RuleUpdateParams.rules is now required.
• response models: Hyperdrive configs, cache origin cloud regions, and Zero Trust organizations now use corrected operation-specific or shared response types. mTLS certificate list(), delete(), and get() now use the shared MTLSCertificate type; create() still returns Optional[MTLSCertificateCreateResponse]. Hyperdrive create parameters are now origin/integration variants, replacing direct Origin, Caching, and MTLS helper imports.
• pagination: Workers deployment listing now returns SyncV4PagePagination and adds page/date filters; Gateway list items and PAC files now return SyncV4PagePaginationArray and add page controls; device override-code listing now returns Optional[OverrideCodeListResponse].
• email_routing: client.email_routing.dns.delete() now uses DELETE and returns Optional[Settings] instead of a page of DNS records. dns.get() is now optional and returns List[DNSRecord] rather than an envelope union.
• waiting_rooms: waiting-room, event, page-preview, status, details, and settings operations now return Optional[...]; callers must handle None.
• browser_rendering: create parameter types for URL/HTML-based rendering endpoints are now unions requiring either url or html. Session endpoints such as devtools.browser.create() are unaffected. Nested Viewport, Cookie, and PDFOptions imports moved under generated variant types.
• pipelines: per-response schema field exports were replaced by shared SourceField, SourceFieldParam, ListField, ListFieldParam, StructField, and StructFieldParam types.
• zero_trust: ApplicationCreateParams for Resource Library applications is now a union requiring either hostnames or ip_subnets. Access Browser RDP and Infrastructure target_attributes response fields are now optional.
• rulesets: generated nested rule symbols were normalized, including BlockRule to RuleBlockRule, CompressResponseRule to RuleResponseCompressionRule, and SetConfigRule to RuleSetConfigurationRule; several response rule fields are now required.
• required fields: Calls SFU/TURN fields, Flagship response type, and Workers domain environment are now required.
• magic_transit: connector create/edit/update parameters and connector responses no longer contain primary

... (truncated)

Commits

• c9dd895 release: v5.8.0
• 744dc05 chore(release): merge GitHub main for v5.8.0
• 526876a Merge branch 'APIX-1637-main' into 'main'
• 599a9ac release: v5.8.0
• d5f3d7d Build SDK
• 088ede2 Build SDK
• 3b1ad4f Update schema
• b899dca Merge branch 'vaishak/update-terraform' into 'main'
• c3e4bf9 Merge branch 'vaishak/reseal-2' into 'main'
• 3b39d99 fix(python): custom code conflict
• Additional commits viewable in compare view

Updates datadog-api-client from 2.60.0 to 2.61.0

Release notes

Sourced from datadog-api-client's releases.

2.61.0

See ./CHANGELOG.md for details

Changelog

Sourced from datadog-api-client's changelog.

2.61.0/2026-09-24

Added

• Document Deployment Gate evaluation APIs #4049
• Update GCP V2 API spec to support is_org_folder_resource_collection_enabled #4041
• allow billing read for ListQuotas GET endpoint #4034
• Document run_as attribute and with_run_as param for downtime v2 API #4027
• Add draft monitor permissions definition #4021
• Add sensitivePrivileges field to Workflow Automation spec #4020
• Document NDM device tag sources #4013
• Document GetBudget response metadata #4010
• LLMObs Document version-pinned prompt composition #4005
• Add versioned prompt configuration #4004
• Document OAuth v2 OIDC discovery endpoint #4003
• Add prometheus remote write source and sink to obs-pipelines public api spec #3999
• Allow up to three timeseries anomaly investigation results #3998
• Security findings default and regular inbox rules API spec #3996
• Add Integration Accounts v2 API for Snowflake #3995
• Add downtime duration policy to Monitor Config Policy API spec #3993
• Add overflow and metrics destinations, deprecate generate_datadog_metrics, add custom auth for http_client #3992
• promote GET /api/v2/on-call/schedules to a public ListOnCallSchedules operation #3991
• Add documentation for name filter query parameter in ListStatusPages #3990
• Add embedded app widgets to the Dashboard API #3986
• Support frontend annotation display blocks #3985
• Accept the linear ticket creation target in security pipelines automation #3984
• Add timeseries anomaly investigations API #3976
• Add monitor IDs to deployment rules #3974
• Change usage quotas public APIs to only required billing_edit #3973
• Add sensitive_data and serverless_function_code_vulnerability to security finding notification API spec #3972
• Add Integration Accounts v2 API for Databricks #3968
• Add source to target and model configuration options to data quality monitors #3965
• Publish product catalog SKUs and pricing API in preview #3964
• Add unit cost ROI endpoints to Cloud Cost Management #3963
• Update Observability Pipelines Splunk TCP source in OpenAPI spec #3962
• Add annotated interaction details endpoint #3954
• [DEM-68] - Publish DEM Journey APIs #3952
• Add canceled_description to maintenance response attributes #3950
• Add Feature Flag creation options #3944
• Add workflow run as configuration #3928
• Document NDM device tag sources #3909
• Promote Code Coverage v2 endpoints to stable #3880
• Document include_scopes query param on GET /api/v2/permissions #3845

Removed

• Remove deprecated queried_tags_window_seconds and related_asset_tags fields #4045
• Deprecate POST incidents /cases/page endpoint #4035
• Remove actor_handle and actor_type from the CSM ownership feedback request #3969

Fixed

• Fix static analysis OpenAPI drift #4044

... (truncated)

Commits

• 2e5c154 Bump versions and add changelog entries. (#4065)
• 93eab94 Regenerate client from commit fd55db6 of spec repo (#4050)
• 4919735 Regenerate client from commit 20014b8 of spec repo (#4048)
• 730f440 Regenerate client from commit 8aeb78f of spec repo (#4005)
• 4a17590 Regenerate client from commit 25a0f62 of spec repo (#4040)
• ed441b6 Regenerate client from commit df2bc66 of spec repo (#4004)
• bf9ed97 Regenerate client from commit 76326c8 of spec repo (#3968)
• f66d203 Regenerate client from commit 964c48e of spec repo (#3983)
• 8f89a6b Regenerate client from commit a603c17 of spec repo (#4000)
• 0fe4a8c Regenerate client from commit 4b5e808 of spec repo (#4025)
• Additional commits viewable in compare view

Updates google-auth from 2.58.0 to 2.59.0

Commits

• 1d9f468 chore(main): release google-auth 2.59.0 (#18465)
• c7c133a chore(bigtable): Added an internal batch completed callback to the data clien...
• 8cb3c6a perf(spanner): optimize query option merging and prevent in-place mutation (#...
• 58031be perf(spanner): short-circuit trace_call when tracing is inactive (#18356)
• ce72986 perf(spanner): optimize query result decoding and type resolution (#18330)
• 7cead02 fix(storage): add correct app hub uri prefix to aco traces (#18483)
• a1e0e00 feat(firestore): add PyMongo duck-typing serialization support (#18406)
• 13be295 feat(firestore): add BSON cross-type query ordering support (#18405)
• ce2544f feat(firestore): add BSON read deserialization support (#18402)
• 11207f8 chore(gapic-generator): update dependencies (#18470)
• Additional commits viewable in compare view

Updates google-cloud-storage from 3.14.1 to 3.15.1

Commits

• d6bed5a chore: release main (#18464)
• 78ff458 feat(gapic-generator): add schema support for resumable uploads (#18480)
• af2100a tests: add showcase to golden files (#18479)
• e1d306a fix: resolve error where google/longrunning/operations.proto is missing (#18477)
• 7871fa9 fix(gapic-generator): init mock response in version header test (#18488)
• 0b488a3 feat(bigtable): Reroute Mutations Batcher to use data client (#18200)
• 30b4f44 fix(google-auth-oauthlib): prevent ipv6 address reuse (#18463)
• 1d9f468 chore(main): release google-auth 2.59.0 (#18465)
• c7c133a chore(bigtable): Added an internal batch completed callback to the data clien...
• 8cb3c6a perf(spanner): optimize query option merging and prevent in-place mutation (#...
• Additional commits viewable in compare view

Updates python-gitlab from 8.5.0 to 8.6.0

Release notes

Sourced from python-gitlab's releases.

v8.6.0 (2026-09-28)

This release is published under the LGPL-3.0-or-later License.

Bug Fixes

• COPYING: Use the combined LGPGL and GPL license text. (b6e65dd)

• renovate: Add a 7-day cooldown for updates (6bb4216)

Features

• hooks: Add all available project hook attributes (f57c33b)

Testing

• Don't delete source branch by default for projects (aff7954)

---

Detailed Changes: v8.5.0...v8.6.0

Changelog

Sourced from python-gitlab's changelog.

v8.6.0 (2026-09-28)

Bug Fixes

• COPYING: Use the combined LGPGL and GPL license text. (b6e65dd)

• renovate: Add a 7-day cooldown for updates (6bb4216)

Features

• hooks: Add all available project hook attributes (f57c33b)

Testing

• Don't delete source branch by default for projects (aff7954)

Commits

• 51eb17e chore: release v8.6.0
• ce92c8f chore(deps): update all non-major dependencies
• a3e3713 chore(deps): update gitlab/gitlab-ee docker tag to v19.3.2-ee.0 (#3448)
• a47b5e0 chore(deps): update all non-major dependencies
• c58ca36 chore(deps): update pre-commit hook pycqa/isort to v9
• 50b7c1e chore(deps): update dependency isort to v9
• dc9afed chore(deps): update all non-major dependencies
• c56d5fd chore(deps): update gitlab/gitlab-ee docker tag to v19.3.1-ee.0 (#3443)
• 3032667 chore(deps): update dependency types-setuptools to v84
• f4a643f chore(deps): update pre-commit hook maxbrunet/pre-commit-renovate to v44
• Additional commits viewable in compare view

Updates prek from 0.5.3 to 0.5.4

Release notes

Sourced from prek's releases.

0.5.4

Release Notes

Released on 2026-09-28.

Highlights

Faster builtin hooks

In our end-to-end benchmark, prek is about 38% faster than 0.5.3, with some builtin hooks up to 273% faster (check-yaml: 273%, check-json: 80%, check-merge-conflict: 71%).

Enhancements

• Add include_deleted to allow hooks to include deleted files (#2733)
• Add --check and simplify end-of-file-fixer (#2764)
• Add --check to file-contents-sorter (#2765)
• Add --check to requirements-txt-fixer (#2766)
• Add --check to trailing-whitespace (#2763)
• Expose and document prek util generate-shell-completion (#2727)
• Support hide_status in project and user configuration (#2760)
• Support look-around regex in builtin pattern hooks (#2732)

Performance

• Cache the resolved Git executable on macOS (#2726)
• Combine and cache Git repository path queries (#2724)
• Optimize common builtin hook execution (#2768)
• Optimize scanning in mixed-line-ending and trailing-whitespace (#2769)
• Scan check-merge-conflict files in fixed-size blocks (#2781)
• Use SIMD UTF-8 validation in check-json, check-toml, and check-yaml (#2770)

Bug fixes

• Retry transient rename failures on Windows (#2756)
• Use PATH to resolve prek in completion scripts (#2719)

Documentation

• Clarify the flow and scope of usage guides (#2710)
• Reorganize usage guides and reference documentation (#2709)

Other changes

• Sync latest identify tags (#2762)

Contributors

• @​github-actions

... (truncated)

Changelog

Sourced from prek's changelog.

0.5.4

Released on 2026-09-28.

Highlights

Faster builtin hooks

In our end-to-end benchmark, prek is about 38% faster than 0.5.3, with some builtin hooks up to 273% faster (check-yaml: 273%, check-json: 80%, check-merge-conflict: 71%).

Enhancements

• Add include_deleted to allow hooks to include deleted files (#2733)
• Add --check and simplify end-of-file-fixer (#2764)
• Add --check to file-contents-sorter (#2765)
• Add --check to requirements-txt-fixer (#2766)
• Add --check to trailing-whitespace (#2763)
• Expose and document prek util generate-shell-completion (#2727)
• Support hide_status in project and user configuration (#2760)
• Support look-around regex in builtin pattern hooks (#2732)

Performance

• Cache the resolved Git executable on macOS (#2726)
• Combine and cache Git repository path queries (#2724)
• Optimize common builtin hook execution (#2768)
• Optimize scanning in mixed-line-ending and trailing-whitespace (#2769)
• Scan check-merge-conflict files in fixed-size blocks (#2781)
• Use SIMD UTF-8 validation in check-json, check-toml, and check-yaml (#2770)

Bug fixes

• Retry transient rename failures on Windows (#2756)
• Use PATH to resolve prek in completion scripts (#2719)

Documentation

• Clarify the flow and scope of usage guides (#2710)
• Reorganize usage guides and reference documentation (#2709)

Other changes

• Sync latest identify tags (#2762)

Contributors

• @​github-actions
• @​j178

Commits

• 77c4056 Summarize builtin hook speedups
• 7a6b8d1 Bump version to 0.5.4
• c7ec693 Update ubuntu:26.04 Docker digest to da6fc2b (#2772)
• eee5822 Scan check-merge-conflict files in fixed-size blocks (#2781)
• 4c579dc Update dependency uv to v0.12.17 (#2773)
• 1f2a621 Update Rust crate clap to v4.6.7 (#2775)
• aeea7a5 Update GitHub Actions (#2778)
• 51ca2db Update Rust crate rustix to v1.1.5 (#2777)
• 80e8bcc Update Rust crate clap_complete to v4.6.11 (#2776)
• 0f23764 Update Rust crate async-compression to v0.4.48 (#2774)
• Additional commits viewable in compare view

Updates ruff from 0.16.8 to 0.16.9

Release notes

Sourced from ruff's releases.

0.16.9

Release Notes

Released on 2026-09-24.

Preview features

• [ruff] Avoid false positives for overloaded division (RUF069) (#28309)

Bug fixes

• [flake8-bugbear] Avoid false positives for calls with keyword arguments (B009, B010, B043) (#28776)
• [flake8-tidy-imports] Allow lazy imports to be used in deferred annotations (TID255) (#28767)

Rule changes

• Update LibCST-based fixes for Python 3.15 (#28616)
• [flake8-pyi] Mention stubs in the diagnostic message (PYI002) (#28542)

Documentation

• Fix horizontal overflow on the rules documentation page (#28699)
• Update rules table with category information (#28651)
• [flake8-annotations] Clarify that ANN401 checks return types in addition to arguments (#28334)
• [flake8-bugbear] Document type-checker interaction (B010) (#28509)
• [flake8-comprehensions] Document map/generator exception behavior (C417) (#27794)
• [ruff] Mention related isort settings (RUF022) (#28719)

Contributors

• @​qinpei-dev
• @​sanjayrohith
• @​ntBre
• @​webdevsamran
• @​zaniebot
• @​ewdurbin
• @​MichaReiser
• @​spaceone
• @​IbrahimKhan12
• @​devtechedge
• @​GruffElixir

Install ruff 0.16.9

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ruff/releases/download/0.16.9/ruff-installer.sh | sh

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.9

Released on 2026-09-24.

Preview features

• [ruff] Avoid false positives for overloaded division (RUF069) (#28309)

Bug fixes

• [flake8-bugbear] Avoid false positives for calls with keyword arguments (B009, B010, B043) (#28776)
• [flake8-tidy-imports] Allow lazy imports to be used in deferred annotations (TID255) (#28767)

Rule changes

• Update LibCST-based fixes for Python 3.15 (#28616)
• [flake8-pyi] Mention stubs in the diagnostic message (PYI002) (#28542)

Documentation

• Fix horizontal overflow on the rules documentation page (#28699)
• Update rules table with category information (#28651)
• [flake8-annotations] Clarify that ANN401 checks return types in addition to arguments (#28334)
• [flake8-bugbear] Document type-checker interaction (B010) (#28509)
• [flake8-comprehensions] Document map/generator exception behavior (C417) (#27794)
• [ruff] Mention related isort settings (RUF022) (#28719)

Contributors

• @​qinpei-dev
• @​sanjayrohith
• @​ntBre
• @​webdevsamran
• @​zaniebot
• @​ewdurbin
• @​MichaReiser
• @​spaceone
• @​IbrahimKhan12
• @​devtechedge
• @​GruffElixir

Commits

• 0be08a2 Bump version to 0.16.9 (#28882)
• b4920b7 Rename ruff_cli to ruff_command_line (#28881)
• 47c751b Update dependency astral-sh/uv to v0.12.18 (#28880)
• 8c244e5 [flake8-comprehensions] Document map/generator exception behavior (C417...
• 5edf5a1 Use target form in rooster.version_files (#28876)
• 915bb2b [ty] Prefer existing @ paths over response files in Ruff and ty (#28877)
• 4710e1a ci(github): update version number in placeholder of issue template (#28871)
• eedfc62 [ty] Propagate outer type context through cast calls (#28855)
• ceaa6a0 [ty] Contain rendered code within Markdown fences (#28869)
• dba0f30 authorize ruff-pre-commit dispatch via OIDC (#28867)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Labels

The following labels could not be found: dependencies, python, uv. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[github-actions]

Foundry-managed Dependabot approval