deps(deps): bump the pip group with 2 updates (#1902)

Bumps the pip group with 2 updates:
[ruff](https://github.com/astral-sh/ruff) and
[mypy](https://github.com/python/mypy).

Updates `ruff` from 0.12.11 to 0.13.2
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/astral-sh/ruff/releases">ruff's
releases</a>.</em></p>
<blockquote>
<h2>0.13.2</h2>
<h2>Release Notes</h2>
<p>Released on 2025-09-25.</p>
<h3>Preview features</h3>
<ul>
<li>[<code>flake8-async</code>] Implement
<code>blocking-path-method</code> (<code>ASYNC240</code>) (<a
href="https://redirect.github.com/astral-sh/ruff/pull/20264">#20264</a>)</li>
<li>[<code>flake8-bugbear</code>] Implement
<code>map-without-explicit-strict</code> (<code>B912</code>) (<a
href="https://redirect.github.com/astral-sh/ruff/pull/20429">#20429</a>)</li>
<li>[<code>flake8-bultins</code>] Detect class-scope builtin shadowing
in decorators, default args, and attribute initializers
(<code>A003</code>) (<a
href="https://redirect.github.com/astral-sh/ruff/pull/20178">#20178</a>)</li>
<li>[<code>ruff</code>] Implement <code>logging-eager-conversion</code>
(<code>RUF065</code>) (<a
href="https://redirect.github.com/astral-sh/ruff/pull/19942">#19942</a>)</li>
<li>Include <code>.pyw</code> files by default when linting and
formatting (<a
href="https://redirect.github.com/astral-sh/ruff/pull/20458">#20458</a>)</li>
</ul>
<h3>Bug fixes</h3>
<ul>
<li>Deduplicate input paths (<a
href="https://redirect.github.com/astral-sh/ruff/pull/20105">#20105</a>)</li>
<li>[<code>flake8-comprehensions</code>] Preserve trailing commas for
single-element lists (<code>C409</code>) (<a
href="https://redirect.github.com/astral-sh/ruff/pull/19571">#19571</a>)</li>
<li>[<code>flake8-pyi</code>] Avoid syntax error from conflict with
<code>PIE790</code> (<code>PYI021</code>) (<a
href="https://redirect.github.com/astral-sh/ruff/pull/20010">#20010</a>)</li>
<li>[<code>flake8-simplify</code>] Correct fix for positive
<code>maxsplit</code> without separator (<code>SIM905</code>) (<a
href="https://redirect.github.com/astral-sh/ruff/pull/20056">#20056</a>)</li>
<li>[<code>pyupgrade</code>] Fix <code>UP008</code> not to apply when
<code>__class__</code> is a local variable (<a
href="https://redirect.github.com/astral-sh/ruff/pull/20497">#20497</a>)</li>
<li>[<code>ruff</code>] Fix <code>B004</code> to skip invalid
<code>hasattr</code>/<code>getattr</code> calls (<a
href="https://redirect.github.com/astral-sh/ruff/pull/20486">#20486</a>)</li>
<li>[<code>ruff</code>] Replace <code>-nan</code> with <code>nan</code>
when using the value to construct a <code>Decimal</code>
(<code>FURB164</code> ) (<a
href="https://redirect.github.com/astral-sh/ruff/pull/20391">#20391</a>)</li>
</ul>
<h3>Documentation</h3>
<ul>
<li>Add 'Finding ways to help' to CONTRIBUTING.md (<a
href="https://redirect.github.com/astral-sh/ruff/pull/20567">#20567</a>)</li>
<li>Update import path to <code>ruff-wasm-web</code> (<a
href="https://redirect.github.com/astral-sh/ruff/pull/20539">#20539</a>)</li>
<li>[<code>flake8-bandit</code>] Clarify the supported hashing functions
(<code>S324</code>) (<a
href="https://redirect.github.com/astral-sh/ruff/pull/20534">#20534</a>)</li>
</ul>
<h3>Other changes</h3>
<ul>
<li>[<code>playground</code>] Allow hover quick fixes to appear for
overlapping diagnostics (<a
href="https://redirect.github.com/astral-sh/ruff/pull/20527">#20527</a>)</li>
<li>[<code>playground</code>] Fix non‑BMP code point handling in quick
fixes and markers (<a
href="https://redirect.github.com/astral-sh/ruff/pull/20526">#20526</a>)</li>
</ul>
<h3>Contributors</h3>
<ul>
<li><a
href="https://github.com/BurntSushi"><code>@​BurntSushi</code></a></li>
<li><a href="https://github.com/mtshiba"><code>@​mtshiba</code></a></li>
<li><a
href="https://github.com/second-ed"><code>@​second-ed</code></a></li>
<li><a
href="https://github.com/danparizher"><code>@​danparizher</code></a></li>
<li><a
href="https://github.com/ShikChen"><code>@​ShikChen</code></a></li>
<li><a
href="https://github.com/PieterCK"><code>@​PieterCK</code></a></li>
<li><a
href="https://github.com/GDYendell"><code>@​GDYendell</code></a></li>
<li><a href="https://github.com/RazerM"><code>@​RazerM</code></a></li>
<li><a href="https://github.com/TaKO8Ki"><code>@​TaKO8Ki</code></a></li>
<li><a
href="https://github.com/amyreese"><code>@​amyreese</code></a></li>
<li><a href="https://github.com/ntBre"><code>@​ntbre</code></a></li>
<li><a
href="https://github.com/MichaReiser"><code>@​MichaReiser</code></a></li>
</ul>
<h2>Install ruff 0.13.2</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md">ruff's
changelog</a>.</em></p>
<blockquote>
<h2>0.13.2</h2>
<p>Released on 2025-09-25.</p>
<h3>Preview features</h3>
<ul>
<li>[<code>flake8-async</code>] Implement
<code>blocking-path-method</code> (<code>ASYNC240</code>) (<a
href="https://redirect.github.com/astral-sh/ruff/pull/20264">#20264</a>)</li>
<li>[<code>flake8-bugbear</code>] Implement
<code>map-without-explicit-strict</code> (<code>B912</code>) (<a
href="https://redirect.github.com/astral-sh/ruff/pull/20429">#20429</a>)</li>
<li>[<code>flake8-bultins</code>] Detect class-scope builtin shadowing
in decorators, default args, and attribute initializers
(<code>A003</code>) (<a
href="https://redirect.github.com/astral-sh/ruff/pull/20178">#20178</a>)</li>
<li>[<code>ruff</code>] Implement <code>logging-eager-conversion</code>
(<code>RUF065</code>) (<a
href="https://redirect.github.com/astral-sh/ruff/pull/19942">#19942</a>)</li>
<li>Include <code>.pyw</code> files by default when linting and
formatting (<a
href="https://redirect.github.com/astral-sh/ruff/pull/20458">#20458</a>)</li>
</ul>
<h3>Bug fixes</h3>
<ul>
<li>Deduplicate input paths (<a
href="https://redirect.github.com/astral-sh/ruff/pull/20105">#20105</a>)</li>
<li>[<code>flake8-comprehensions</code>] Preserve trailing commas for
single-element lists (<code>C409</code>) (<a
href="https://redirect.github.com/astral-sh/ruff/pull/19571">#19571</a>)</li>
<li>[<code>flake8-pyi</code>] Avoid syntax error from conflict with
<code>PIE790</code> (<code>PYI021</code>) (<a
href="https://redirect.github.com/astral-sh/ruff/pull/20010">#20010</a>)</li>
<li>[<code>flake8-simplify</code>] Correct fix for positive
<code>maxsplit</code> without separator (<code>SIM905</code>) (<a
href="https://redirect.github.com/astral-sh/ruff/pull/20056">#20056</a>)</li>
<li>[<code>pyupgrade</code>] Fix <code>UP008</code> not to apply when
<code>__class__</code> is a local variable (<a
href="https://redirect.github.com/astral-sh/ruff/pull/20497">#20497</a>)</li>
<li>[<code>ruff</code>] Fix <code>B004</code> to skip invalid
<code>hasattr</code>/<code>getattr</code> calls (<a
href="https://redirect.github.com/astral-sh/ruff/pull/20486">#20486</a>)</li>
<li>[<code>ruff</code>] Replace <code>-nan</code> with <code>nan</code>
when using the value to construct a <code>Decimal</code>
(<code>FURB164</code> ) (<a
href="https://redirect.github.com/astral-sh/ruff/pull/20391">#20391</a>)</li>
</ul>
<h3>Documentation</h3>
<ul>
<li>Add 'Finding ways to help' to CONTRIBUTING.md (<a
href="https://redirect.github.com/astral-sh/ruff/pull/20567">#20567</a>)</li>
<li>Update import path to <code>ruff-wasm-web</code> (<a
href="https://redirect.github.com/astral-sh/ruff/pull/20539">#20539</a>)</li>
<li>[<code>flake8-bandit</code>] Clarify the supported hashing functions
(<code>S324</code>) (<a
href="https://redirect.github.com/astral-sh/ruff/pull/20534">#20534</a>)</li>
</ul>
<h3>Other changes</h3>
<ul>
<li>[<code>playground</code>] Allow hover quick fixes to appear for
overlapping diagnostics (<a
href="https://redirect.github.com/astral-sh/ruff/pull/20527">#20527</a>)</li>
<li>[<code>playground</code>] Fix non‑BMP code point handling in quick
fixes and markers (<a
href="https://redirect.github.com/astral-sh/ruff/pull/20526">#20526</a>)</li>
</ul>
<h3>Contributors</h3>
<ul>
<li><a
href="https://github.com/BurntSushi"><code>@​BurntSushi</code></a></li>
<li><a href="https://github.com/mtshiba"><code>@​mtshiba</code></a></li>
<li><a
href="https://github.com/second-ed"><code>@​second-ed</code></a></li>
<li><a
href="https://github.com/danparizher"><code>@​danparizher</code></a></li>
<li><a
href="https://github.com/ShikChen"><code>@​ShikChen</code></a></li>
<li><a
href="https://github.com/PieterCK"><code>@​PieterCK</code></a></li>
<li><a
href="https://github.com/GDYendell"><code>@​GDYendell</code></a></li>
<li><a href="https://github.com/RazerM"><code>@​RazerM</code></a></li>
<li><a href="https://github.com/TaKO8Ki"><code>@​TaKO8Ki</code></a></li>
<li><a
href="https://github.com/amyreese"><code>@​amyreese</code></a></li>
<li><a href="https://github.com/ntBre"><code>@​ntbre</code></a></li>
<li><a
href="https://github.com/MichaReiser"><code>@​MichaReiser</code></a></li>
</ul>
<h2>0.13.1</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/astral-sh/ruff/commit/b0bdf0334e38417f8617057cd0392a4b53954120"><code>b0bdf03</code></a>
Bump 0.13.2 (<a
href="https://redirect.github.com/astral-sh/ruff/issues/20576">#20576</a>)</li>
<li><a
href="https://github.com/astral-sh/ruff/commit/7331d393c555ece88aa69f685562163790ddf611"><code>7331d39</code></a>
Update rooster to 0.1.0 (<a
href="https://redirect.github.com/astral-sh/ruff/issues/20575">#20575</a>)</li>
<li><a
href="https://github.com/astral-sh/ruff/commit/529e5fa6c24ea68501adb18245eab27c701598d2"><code>529e5fa</code></a>
[ty] Ecosystem analyzer: timing report (<a
href="https://redirect.github.com/astral-sh/ruff/issues/20571">#20571</a>)</li>
<li><a
href="https://github.com/astral-sh/ruff/commit/efbb80f7475c63b62981444d5c429109ff12ad32"><code>efbb80f</code></a>
[ty] Remove hack in protocol satisfiability check (<a
href="https://redirect.github.com/astral-sh/ruff/issues/20568">#20568</a>)</li>
<li><a
href="https://github.com/astral-sh/ruff/commit/9f3cffc65cb834661e17263245761a66f9474af0"><code>9f3cffc</code></a>
Add 'Finding ways to help' to CONTRIBUTING.md (<a
href="https://redirect.github.com/astral-sh/ruff/issues/20567">#20567</a>)</li>
<li><a
href="https://github.com/astral-sh/ruff/commit/21be94ac33f445d8a681babec6c56ca3d1b67156"><code>21be94a</code></a>
[ty] Explicitly test assignability/subtyping between unions of nominal
types ...</li>
<li><a
href="https://github.com/astral-sh/ruff/commit/b7d5dc98c193cc5cab00d557b6a392d35137d990"><code>b7d5dc9</code></a>
[ty] Add tests for interactions of <code>@classmethod</code>,
<code>@staticmethod</code>, and proto...</li>
<li><a
href="https://github.com/astral-sh/ruff/commit/e1bb74b25a0f730a5baff263d753ffe03cf857b1"><code>e1bb74b</code></a>
[ty] Match variadic argument to variadic parameter (<a
href="https://redirect.github.com/astral-sh/ruff/issues/20511">#20511</a>)</li>
<li><a
href="https://github.com/astral-sh/ruff/commit/edeb45804ef9dbe348d393f3ab77288062a3c77e"><code>edeb458</code></a>
[ty] fallback to resolve_real_module in file_to_module (<a
href="https://redirect.github.com/astral-sh/ruff/issues/20461">#20461</a>)</li>
<li><a
href="https://github.com/astral-sh/ruff/commit/bea92c822980b1575d58542dffa2c960393d7603"><code>bea92c8</code></a>
[ty] More precise type inference for dictionary literals (<a
href="https://redirect.github.com/astral-sh/ruff/issues/20523">#20523</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/astral-sh/ruff/compare/0.12.11...0.13.2">compare
view</a></li>
</ul>
</details>
<br />

Updates `mypy` from 1.17.1 to 1.18.2
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/python/mypy/blob/master/CHANGELOG.md">mypy's
changelog</a>.</em></p>
<blockquote>
<h3>Mypy 1.18.2</h3>
<ul>
<li>Fix crash on recursive alias (Ivan Levkivskyi, PR <a
href="https://redirect.github.com/python/mypy/pull/19845">19845</a>)</li>
<li>Add additional guidance for stubtest errors when runtime is
<code>object.__init__</code> (Stephen Morton, PR <a
href="https://redirect.github.com/python/mypy/pull/19733">19733</a>)</li>
<li>Fix handling of None values in f-string expressions in mypyc
(BobTheBuidler, PR <a
href="https://redirect.github.com/python/mypy/pull/19846">19846</a>)</li>
</ul>
<h3>Acknowledgements</h3>
<p>Thanks to all mypy contributors who contributed to this release:</p>
<ul>
<li>Ali Hamdan</li>
<li>Anthony Sottile</li>
<li>BobTheBuidler</li>
<li>Brian Schubert</li>
<li>Chainfire</li>
<li>Charlie Denton</li>
<li>Christoph Tyralla</li>
<li>CoolCat467</li>
<li>Daniel Hnyk</li>
<li>Emily</li>
<li>Emma Smith</li>
<li>Ethan Sarp</li>
<li>Ivan Levkivskyi</li>
<li>Jahongir Qurbonov</li>
<li>Jelle Zijlstra</li>
<li>Joren Hammudoglu</li>
<li>Jukka Lehtosalo</li>
<li>Marc Mueller</li>
<li>Omer Hadari</li>
<li>Piotr Sawicki</li>
<li>PrinceNaroliya</li>
<li>Randolf Scholz</li>
<li>Robsdedude</li>
<li>Saul Shanabrook</li>
<li>Shantanu</li>
<li>Stanislav Terliakov</li>
<li>Stephen Morton</li>
<li>wyattscarpenter</li>
</ul>
<p>I’d also like to thank my employer, Dropbox, for supporting mypy
development.</p>
<h2>Mypy 1.17</h2>
<p>We’ve just uploaded mypy 1.17 to the Python Package Index (<a
href="https://pypi.org/project/mypy/">PyPI</a>).
Mypy is a static type checker for Python. This release includes new
features and bug fixes.
You can install it as follows:</p>
<pre><code>python3 -m pip install -U mypy
</code></pre>
<p>You can read the full documentation for this release on <a
href="http://mypy.readthedocs.io">Read the Docs</a>.</p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/python/mypy/commit/df05f05555ee62dbdb9960c64cad186172e92be1"><code>df05f05</code></a>
remove +dev from version</li>
<li><a
href="https://github.com/python/mypy/commit/01a7a1285d03cb7a330359b22cb462aacb5f9720"><code>01a7a12</code></a>
Update changelog for 1.18.2 (<a
href="https://redirect.github.com/python/mypy/issues/19873">#19873</a>)</li>
<li><a
href="https://github.com/python/mypy/commit/ca5abf09f3bfc543ac9c18a364696bc5da20bc03"><code>ca5abf0</code></a>
Typeshed cherry-pick: Make type of <code>unitest.mock.Any</code> a
subclass of <code>Any</code> (<a
href="https://redirect.github.com/python/mypy/issues/1">#1</a>...</li>
<li><a
href="https://github.com/python/mypy/commit/9d794b57d9c5b03d61caa3286756c05e0ae3021b"><code>9d794b5</code></a>
[mypyc] fix: inappropriate <code>None</code>s in f-strings (<a
href="https://redirect.github.com/python/mypy/issues/19846">#19846</a>)</li>
<li><a
href="https://github.com/python/mypy/commit/2c0510c84868b6bb42ef0f305b701e530a85c25f"><code>2c0510c</code></a>
stubtest: additional guidance on errors when runtime is
object.<strong>init</strong> (<a
href="https://redirect.github.com/python/mypy/issues/19733">#19733</a>)</li>
<li><a
href="https://github.com/python/mypy/commit/2f3f03c3e39e68dbfa3544c01a34f99803b3e1c2"><code>2f3f03c</code></a>
Bump version to 1.18.2+dev for point release</li>
<li><a
href="https://github.com/python/mypy/commit/76698412bc1f3ca99000d52649acd5a0e06aa71d"><code>7669841</code></a>
Fix crash on recursive alias in indirection.py (<a
href="https://redirect.github.com/python/mypy/issues/19845">#19845</a>)</li>
<li><a
href="https://github.com/python/mypy/commit/03fbaa941bccc3a9f8aea796d586603b67119bf2"><code>03fbaa9</code></a>
bump version to 1.18.1 due to wheels failure</li>
<li><a
href="https://github.com/python/mypy/commit/b44a1fbf0cf9fd90fd29d6bcd9f64c55dd2fd4c8"><code>b44a1fb</code></a>
removed +dev from version</li>
<li><a
href="https://github.com/python/mypy/commit/7197a99d1aebb1b7a584f82a53c44efb7dddf136"><code>7197a99</code></a>
Removed Unreleased in the Changelog for Release 1.18 (<a
href="https://redirect.github.com/python/mypy/issues/19827">#19827</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/python/mypy/compare/v1.17.1...v1.18.2">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

pyproject.toml

@@ -43,8 +43,8 @@ pgp = ["gpg"]
 paramiko = ["paramiko"]
 colordiff = ["rich"]
 dev = [
-    "ruff==0.12.11",
-    "mypy==1.17.1",
+    "ruff==0.13.2",
+    "mypy==1.18.2",
     "dissolve>=0.1.1",
     "codespell==2.4.1",
 ]