chore(deps): update all dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Pending	Age	Confidence
astral-sh/ruff-pre-commit	repository	patch	v0.14.6 -> v0.14.7	v0.14.8
astral-sh/uv-pre-commit	repository	patch	0.9.11 -> 0.9.15
jsh9/pydoclint	repository	patch	0.8.2 -> 0.8.3
pre-commit/mirrors-mypy	repository	minor	v1.18.2 -> v1.19.0
pycqa/pylint	repository	patch	v4.0.3 -> v4.0.4
		lockFileMaintenance	All locks refreshed
mypy (changelog)	dependency-groups	minor	1.18.2 -> 1.19.0
pydoclint	dependency-groups	patch	0.8.2 -> 0.8.3
pylint (changelog)	dependency-groups	patch	4.0.3 -> 4.0.4
python		patch	3.14.0 -> 3.14.1
ruff (source, changelog)	dependency-groups	patch	0.14.6 -> 0.14.7	0.14.8
uv (source, changelog)	dependency-groups	patch	0.9.12 -> 0.9.15

Note: The pre-commit manager in Renovate is not supported by the pre-commit maintainers or community. Please do not report any problems there, instead create a Discussion in the Renovate repository if you have any questions.

---

Release Notes

astral-sh/ruff-pre-commit (astral-sh/ruff-pre-commit)

v0.14.7

Compare Source

See: https://github.com/astral-sh/ruff/releases/tag/0.14.7

astral-sh/uv-pre-commit (astral-sh/uv-pre-commit)

v0.9.15

Compare Source

See: https://github.com/astral-sh/uv/releases/tag/0.9.15

v0.9.14

Compare Source

See: https://github.com/astral-sh/uv/releases/tag/0.9.14

v0.9.13

Compare Source

See: https://github.com/astral-sh/uv/releases/tag/0.9.13

v0.9.12

Compare Source

See: https://github.com/astral-sh/uv/releases/tag/0.9.12

jsh9/pydoclint (jsh9/pydoclint)

v0.8.3

Compare Source

• Added
  • A new config option --omit-stars-when-documenting-varargs (shortform:
    -oswdv) so docstrings may describe varargs without the leading *
    characters (#​268)
• Fixed
  • A bug where --auto-regenerate-baseline removes entries of files that have
    not yet been fixed (#​274)
• Full diff
  • jsh9/pydoclint@0.8.2...0.8.3

pre-commit/mirrors-mypy (pre-commit/mirrors-mypy)

v1.19.0

Compare Source

pycqa/pylint (pycqa/pylint)

v4.0.4

Compare Source

What's new in Pylint 4.0.4?

Release date: 2025-11-30

False Positives Fixed

• Fixed false positive for invalid-name where module-level constants were incorrectly classified as variables when a class-level attribute with the same name exists.

  Closes #​10719

• Fix a false positive for invalid-name on an UPPER_CASED name inside an if branch that assigns an object.

  Closes #​10745

python/mypy (mypy)

v1.19.0

Compare Source

pylint-dev/pylint (pylint)

v4.0.4

Compare Source

What's new in Pylint 4.0.4?

Release date: 2025-11-30

False Positives Fixed

• Fixed false positive for invalid-name where module-level constants were incorrectly classified as variables when a class-level attribute with the same name exists.

  Closes #​10719

• Fix a false positive for invalid-name on an UPPER_CASED name inside an if branch that assigns an object.

  Closes #​10745

python/cpython (python)

v3.14.1

Compare Source

astral-sh/ruff (ruff)

v0.14.7

Compare Source

Released on 2025-11-28.

Preview features

• [flake8-bandit] Handle string literal bindings in suspicious-url-open-usage (S310) (#​21469)
• [pylint] Fix PLR1708 false positives on nested functions (#​21177)
• [pylint] Fix suppression for empty dict without tuple key annotation (PLE1141) (#​21290)
• [ruff] Add rule RUF066 to detect unnecessary class properties (#​21535)
• [ruff] Catch more dummy variable uses (RUF052) (#​19799)

Bug fixes

• [server] Set severity for non-rule diagnostics (#​21559)
• [flake8-implicit-str-concat] Avoid invalid fix in (ISC003) (#​21517)
• [parser] Fix panic when parsing IPython escape command expressions (#​21480)

CLI

• Show partial fixability indicator in statistics output (#​21513)

Contributors

• @​mikeleppane
• @​senekor
• @​ShaharNaveh
• @​JumboBear
• @​prakhar1144
• @​tsvikas
• @​danparizher
• @​chirizxc
• @​AlexWaygood
• @​MichaReiser

astral-sh/uv (uv)

v0.9.15

Compare Source

Released on 2025-12-02.

Python

• Add CPython 3.14.1
• Add CPython 3.13.10

Enhancements

• Add ROCm 6.4 to --torch-backend=auto (#​16919)
• Add a Windows manifest to uv binaries (#​16894)
• Add LFS toggle to Git sources (#​16143)
• Cache source reads during resolution (#​16888)
• Include PEP 740 attestations when publishing uv to PyPI (#​16910)
• Allow reading requirements from scripts without an extension (#​16923)
• Allow reading requirements from scripts with HTTP(S) paths (#​16891)

Bug fixes

• Fix uv-trampoline-builder builds from crates.io by moving bundled executables (#​16922)
• Respect NO_COLOR and always show the command as a header when paging uv help output (#​16908)
• Use 0o666 permissions for flock files instead of 0o777 (#​16845)
• Revert "Bump astral-tl to v0.7.10 (#​16887)" to narrow down a regression causing hangs in metadata retrieval (#​16938)

Documentation

• Link to the uv version in crates.io member READMEs (#​16939)

v0.9.14

Compare Source

Released on 2025-12-01.

Performance

• Bump astral-tl to v0.7.10 to enable SIMD for HTML parsing (#​16887)

Bug fixes

• Allow earlier post releases with exclusive ordering (#​16881)
• Prefer updating existing .zshenv over creating a new one in tool update-shell (#​16866)
• Respect -e flags in uv add (#​16882)

Enhancements

• Attach subcommand to User-Agent string (#​16837)
• Prefer UV_WORKING_DIR over UV_WORKING_DIRECTORY for consistency (#​16884)

v0.9.13

Compare Source

Released on 2025-11-26.

Bug fixes

• Revert "Allow --with-requirements to load extensionless inline-metadata scripts" to fix reading of requirements files from streams (#​16861)
• Validate URL wheel tags against Requires-Python and required environments (#​16824)

Documentation

• Drop unpublished crates from the uv crates.io README (#​16847)
• Fix the links to uv in crates.io member READMEs (#​16848)

---

Configuration

📅 Schedule: Branch creation - "before 4am on monday" in timezone UTC, Automerge - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) in timezone UTC.

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.