deps(deps-dev): bump the pip group with 2 updates (#2051)
Bumps the pip group with 2 updates:
[ruff](https://github.com/astral-sh/ruff) and
[mypy](https://github.com/python/mypy).
Updates `ruff` from 0.14.7 to 0.14.10
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/astral-sh/ruff/releases">ruff's
releases</a>.</em></p>
<blockquote>
<h2>0.14.10</h2>
<h2>Release Notes</h2>
<p>Released on 2025-12-18.</p>
<h3>Preview features</h3>
<ul>
<li>[formatter] Fluent formatting of method chains (<a
href="https://redirect.github.com/astral-sh/ruff/pull/21369">#21369</a>)</li>
<li>[formatter] Keep lambda parameters on one line and parenthesize the
body if it expands (<a
href="https://redirect.github.com/astral-sh/ruff/pull/21385">#21385</a>)</li>
<li>[<code>flake8-implicit-str-concat</code>] New rule to prevent
implicit string concatenation in collections (<code>ISC004</code>) (<a
href="https://redirect.github.com/astral-sh/ruff/pull/21972">#21972</a>)</li>
<li>[<code>flake8-use-pathlib</code>] Make fixes unsafe when types
change in compound statements (<code>PTH104</code>, <code>PTH105</code>,
<code>PTH109</code>, <code>PTH115</code>) (<a
href="https://redirect.github.com/astral-sh/ruff/pull/22009">#22009</a>)</li>
<li>[<code>refurb</code>] Extend support for <code>Path.open</code>
(<code>FURB101</code>, <code>FURB103</code>) (<a
href="https://redirect.github.com/astral-sh/ruff/pull/21080">#21080</a>)</li>
</ul>
<h3>Bug fixes</h3>
<ul>
<li>[<code>pyupgrade</code>] Fix parsing named Unicode escape sequences
(<code>UP032</code>) (<a
href="https://redirect.github.com/astral-sh/ruff/pull/21901">#21901</a>)</li>
</ul>
<h3>Rule changes</h3>
<ul>
<li>[<code>eradicate</code>] Ignore <code>ruff:disable</code> and
<code>ruff:enable</code> comments in <code>ERA001</code> (<a
href="https://redirect.github.com/astral-sh/ruff/pull/22038">#22038</a>)</li>
<li>[<code>flake8-pytest-style</code>] Allow <code>match</code> and
<code>check</code> keyword arguments without an expected exception type
(<code>PT010</code>) (<a
href="https://redirect.github.com/astral-sh/ruff/pull/21964">#21964</a>)</li>
<li>[syntax-errors] Annotated name cannot be global (<a
href="https://redirect.github.com/astral-sh/ruff/pull/20868">#20868</a>)</li>
</ul>
<h3>Documentation</h3>
<ul>
<li>Add <code>uv</code> and <code>ty</code> to the Ruff README (<a
href="https://redirect.github.com/astral-sh/ruff/pull/21996">#21996</a>)</li>
<li>Document known lambda formatting deviations from Black (<a
href="https://redirect.github.com/astral-sh/ruff/pull/21954">#21954</a>)</li>
<li>Update <code>setup.md</code> (<a
href="https://redirect.github.com/astral-sh/ruff/pull/22024">#22024</a>)</li>
<li>[<code>flake8-bandit</code>] Fix broken link (<code>S704</code>) (<a
href="https://redirect.github.com/astral-sh/ruff/pull/22039">#22039</a>)</li>
</ul>
<h3>Other changes</h3>
<ul>
<li>Fix playground Share button showing "Copied!" before
clipboard copy completes (<a
href="https://redirect.github.com/astral-sh/ruff/pull/21942">#21942</a>)</li>
</ul>
<h3>Contributors</h3>
<ul>
<li><a href="https://github.com/dylwil3"><code>@dylwil3</code></a></li>
<li><a
href="https://github.com/charliecloudberry"><code>@charliecloudberry</code></a></li>
<li><a
href="https://github.com/charliermarsh"><code>@charliermarsh</code></a></li>
<li><a
href="https://github.com/chirizxc"><code>@chirizxc</code></a></li>
<li><a href="https://github.com/ntBre"><code>@ntBre</code></a></li>
<li><a href="https://github.com/zanieb"><code>@zanieb</code></a></li>
<li><a
href="https://github.com/amyreese"><code>@amyreese</code></a></li>
<li><a
href="https://github.com/hauntsaninja"><code>@hauntsaninja</code></a></li>
<li><a href="https://github.com/11happy"><code>@11happy</code></a></li>
<li><a
href="https://github.com/mahiro72"><code>@mahiro72</code></a></li>
<li><a
href="https://github.com/MichaReiser"><code>@MichaReiser</code></a></li>
<li><a
href="https://github.com/phongddo"><code>@phongddo</code></a></li>
<li><a
href="https://github.com/PeterJCLaw"><code>@PeterJCLaw</code></a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md">ruff's
changelog</a>.</em></p>
<blockquote>
<h2>0.14.10</h2>
<p>Released on 2025-12-18.</p>
<h3>Preview features</h3>
<ul>
<li>[formatter] Fluent formatting of method chains (<a
href="https://redirect.github.com/astral-sh/ruff/pull/21369">#21369</a>)</li>
<li>[formatter] Keep lambda parameters on one line and parenthesize the
body if it expands (<a
href="https://redirect.github.com/astral-sh/ruff/pull/21385">#21385</a>)</li>
<li>[<code>flake8-implicit-str-concat</code>] New rule to prevent
implicit string concatenation in collections (<code>ISC004</code>) (<a
href="https://redirect.github.com/astral-sh/ruff/pull/21972">#21972</a>)</li>
<li>[<code>flake8-use-pathlib</code>] Make fixes unsafe when types
change in compound statements (<code>PTH104</code>, <code>PTH105</code>,
<code>PTH109</code>, <code>PTH115</code>) (<a
href="https://redirect.github.com/astral-sh/ruff/pull/22009">#22009</a>)</li>
<li>[<code>refurb</code>] Extend support for <code>Path.open</code>
(<code>FURB101</code>, <code>FURB103</code>) (<a
href="https://redirect.github.com/astral-sh/ruff/pull/21080">#21080</a>)</li>
</ul>
<h3>Bug fixes</h3>
<ul>
<li>[<code>pyupgrade</code>] Fix parsing named Unicode escape sequences
(<code>UP032</code>) (<a
href="https://redirect.github.com/astral-sh/ruff/pull/21901">#21901</a>)</li>
</ul>
<h3>Rule changes</h3>
<ul>
<li>[<code>eradicate</code>] Ignore <code>ruff:disable</code> and
<code>ruff:enable</code> comments in <code>ERA001</code> (<a
href="https://redirect.github.com/astral-sh/ruff/pull/22038">#22038</a>)</li>
<li>[<code>flake8-pytest-style</code>] Allow <code>match</code> and
<code>check</code> keyword arguments without an expected exception type
(<code>PT010</code>) (<a
href="https://redirect.github.com/astral-sh/ruff/pull/21964">#21964</a>)</li>
<li>[syntax-errors] Annotated name cannot be global (<a
href="https://redirect.github.com/astral-sh/ruff/pull/20868">#20868</a>)</li>
</ul>
<h3>Documentation</h3>
<ul>
<li>Add <code>uv</code> and <code>ty</code> to the Ruff README (<a
href="https://redirect.github.com/astral-sh/ruff/pull/21996">#21996</a>)</li>
<li>Document known lambda formatting deviations from Black (<a
href="https://redirect.github.com/astral-sh/ruff/pull/21954">#21954</a>)</li>
<li>Update <code>setup.md</code> (<a
href="https://redirect.github.com/astral-sh/ruff/pull/22024">#22024</a>)</li>
<li>[<code>flake8-bandit</code>] Fix broken link (<code>S704</code>) (<a
href="https://redirect.github.com/astral-sh/ruff/pull/22039">#22039</a>)</li>
</ul>
<h3>Other changes</h3>
<ul>
<li>Fix playground Share button showing "Copied!" before
clipboard copy completes (<a
href="https://redirect.github.com/astral-sh/ruff/pull/21942">#21942</a>)</li>
</ul>
<h3>Contributors</h3>
<ul>
<li><a href="https://github.com/dylwil3"><code>@dylwil3</code></a></li>
<li><a
href="https://github.com/charliecloudberry"><code>@charliecloudberry</code></a></li>
<li><a
href="https://github.com/charliermarsh"><code>@charliermarsh</code></a></li>
<li><a
href="https://github.com/chirizxc"><code>@chirizxc</code></a></li>
<li><a href="https://github.com/ntBre"><code>@ntBre</code></a></li>
<li><a href="https://github.com/zanieb"><code>@zanieb</code></a></li>
<li><a
href="https://github.com/amyreese"><code>@amyreese</code></a></li>
<li><a
href="https://github.com/hauntsaninja"><code>@hauntsaninja</code></a></li>
<li><a href="https://github.com/11happy"><code>@11happy</code></a></li>
<li><a
href="https://github.com/mahiro72"><code>@mahiro72</code></a></li>
<li><a
href="https://github.com/MichaReiser"><code>@MichaReiser</code></a></li>
<li><a
href="https://github.com/phongddo"><code>@phongddo</code></a></li>
<li><a
href="https://github.com/PeterJCLaw"><code>@PeterJCLaw</code></a></li>
</ul>
<h2>0.14.9</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/astral-sh/ruff/commit/45bbb4cbffe73cf925d4579c2e3eb413e0539390"><code>45bbb4c</code></a>
Bump 0.14.10 (<a
href="https://redirect.github.com/astral-sh/ruff/issues/22058">#22058</a>)</li>
<li><a
href="https://github.com/astral-sh/ruff/commit/42b972753aa9737140d3c715dc1fa2a4d20eba02"><code>42b9727</code></a>
[ty] Use datatest instead of dirtest (<a
href="https://redirect.github.com/astral-sh/ruff/issues/21937">#21937</a>)</li>
<li><a
href="https://github.com/astral-sh/ruff/commit/f7ec1784005ba8659203155dc0c195f746f8b45b"><code>f7ec178</code></a>
[ty] Gracefully handle client requests that can't be deserialized (<a
href="https://redirect.github.com/astral-sh/ruff/issues/22051">#22051</a>)</li>
<li><a
href="https://github.com/astral-sh/ruff/commit/c31516473296a8b745af946b827d3342ef81060f"><code>c315164</code></a>
[ty] Don't suggest keyword statements when only expressions are
valid</li>
<li><a
href="https://github.com/astral-sh/ruff/commit/bb1955e98c5bd35a322f58fcab5d68aab255a7a4"><code>bb1955e</code></a>
[ty] Use cursor context in a few more places...</li>
<li><a
href="https://github.com/astral-sh/ruff/commit/070e08a043f47845f60632b528ef27cc37078405"><code>070e08a</code></a>
[ty] Move <code>completion</code> function to the top</li>
<li><a
href="https://github.com/astral-sh/ruff/commit/bab3924833c9f432776f93d4ed83b6cfbafc20e3"><code>bab3924</code></a>
[ty] Refactor completion generation</li>
<li><a
href="https://github.com/astral-sh/ruff/commit/10748b2fdb021e4d8e548f09e8e182c69d7c1f5a"><code>10748b2</code></a>
[<code>flake8-pytest-style</code>] Allow <code>match</code> and
<code>check</code> keyword arguments without a...</li>
<li><a
href="https://github.com/astral-sh/ruff/commit/56539db5206c519d80446d96155ef832689c5a6e"><code>56539db</code></a>
[ty] Fix some configuration panics in the LSP (<a
href="https://redirect.github.com/astral-sh/ruff/issues/22040">#22040</a>)</li>
<li><a
href="https://github.com/astral-sh/ruff/commit/8d32ad1cab7b78675e8fe56740013d61e315142c"><code>8d32ad1</code></a>
[ty] Add support for attribute docstrings (<a
href="https://redirect.github.com/astral-sh/ruff/issues/22036">#22036</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/astral-sh/ruff/compare/0.14.7...0.14.10">compare
view</a></li>
</ul>
</details>
<br />
Updates `mypy` from 1.19.0 to 1.19.1
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/python/mypy/blob/master/CHANGELOG.md">mypy's
changelog</a>.</em></p>
<blockquote>
<h3>Mypy 1.19.1</h3>
<ul>
<li>Fix noncommutative joins with bounded TypeVars (Shantanu, PR <a
href="https://redirect.github.com/python/mypy/pull/20345">20345</a>)</li>
<li>Respect output format for cached runs by serializing raw errors in
cache metas (Ivan Levkivskyi, PR <a
href="https://redirect.github.com/python/mypy/pull/20372">20372</a>)</li>
<li>Allow <code>types.NoneType</code> in match cases (A5rocks, PR <a
href="https://redirect.github.com/python/mypy/pull/20383">20383</a>)</li>
<li>Fix mypyc generator regression with empty tuple (BobTheBuidler, PR
<a
href="https://redirect.github.com/python/mypy/pull/20371">20371</a>)</li>
<li>Fix crash involving Unpack-ed TypeVarTuple (Shantanu, PR <a
href="https://redirect.github.com/python/mypy/pull/20323">20323</a>)</li>
<li>Fix crash on star import of redefinition (Ivan Levkivskyi, PR <a
href="https://redirect.github.com/python/mypy/pull/20333">20333</a>)</li>
<li>Fix crash on typevar with forward ref used in other module (Ivan
Levkivskyi, PR <a
href="https://redirect.github.com/python/mypy/pull/20334">20334</a>)</li>
<li>Fail with an explicit error on PyPy (Ivan Levkivskyi, PR <a
href="https://redirect.github.com/python/mypy/pull/20389">20389</a>)</li>
</ul>
<h3>Acknowledgements</h3>
<p>Thanks to all mypy contributors who contributed to this release:</p>
<ul>
<li>A5rocks</li>
<li>BobTheBuidler</li>
<li>bzoracler</li>
<li>Chainfire</li>
<li>Christoph Tyralla</li>
<li>David Foster</li>
<li>Frank Dana</li>
<li>Guo Ci</li>
<li>iap</li>
<li>Ivan Levkivskyi</li>
<li>James Hilton-Balfe</li>
<li>jhance</li>
<li>Joren Hammudoglu</li>
<li>Jukka Lehtosalo</li>
<li>KarelKenens</li>
<li>Kevin Kannammalil</li>
<li>Marc Mueller</li>
<li>Michael Carlstrom</li>
<li>Michael J. Sullivan</li>
<li>Piotr Sawicki</li>
<li>Randolf Scholz</li>
<li>Shantanu</li>
<li>Sigve Sebastian Farstad</li>
<li>sobolevn</li>
<li>Stanislav Terliakov</li>
<li>Stephen Morton</li>
<li>Theodore Ando</li>
<li>Thiago J. Barbalho</li>
<li>wyattscarpenter</li>
</ul>
<p>I’d also like to thank my employer, Dropbox, for supporting mypy
development.</p>
<h2>Mypy 1.18</h2>
<p>We’ve just uploaded mypy 1.18.1 to the Python Package Index (<a
href="https://pypi.org/project/mypy/">PyPI</a>).
Mypy is a static type checker for Python. This release includes new
features, performance</p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/python/mypy/commit/412c19a6bde31e7afa7f41afdf8356664689ae80"><code>412c19a</code></a>
Bump version to 1.19.1</li>
<li><a
href="https://github.com/python/mypy/commit/20aea0a6ca0710f5427239bdd2fd8e8bf1caf634"><code>20aea0a</code></a>
Update changelog for 1.19.1 (<a
href="https://redirect.github.com/python/mypy/issues/20414">#20414</a>)</li>
<li><a
href="https://github.com/python/mypy/commit/2b23b507524bf1bd7513eea6f2a16fb91e072cb6"><code>2b23b50</code></a>
Serialize raw errors in cache metas (<a
href="https://redirect.github.com/python/mypy/issues/20372">#20372</a>)</li>
<li><a
href="https://github.com/python/mypy/commit/f60f90fb8872bf722e32aefd548daaf6d8560e05"><code>f60f90f</code></a>
Fail on PyPy in main instead of setup.py (<a
href="https://redirect.github.com/python/mypy/issues/20389">#20389</a>)</li>
<li><a
href="https://github.com/python/mypy/commit/58d485b4ea4776e0b9d4045b306cb0818ecc2aa6"><code>58d485b</code></a>
Fail with an explicit error on PyPy (<a
href="https://redirect.github.com/python/mypy/issues/20384">#20384</a>)</li>
<li><a
href="https://github.com/python/mypy/commit/a4b31a26788b70c4a2a19adbafa2bbda43dc2e8b"><code>a4b31a2</code></a>
Allow <code>types.NoneType</code> in match cases (<a
href="https://redirect.github.com/python/mypy/issues/20383">#20383</a>)</li>
<li><a
href="https://github.com/python/mypy/commit/8a6eff478416cd3ed3931a6ed77ce61c88ab69e9"><code>8a6eff4</code></a>
[mypyc] fix generator regression with empty tuple (<a
href="https://redirect.github.com/python/mypy/issues/20371">#20371</a>)</li>
<li><a
href="https://github.com/python/mypy/commit/70eceea682c041c0d8e8462dffef9c7bb252e014"><code>70eceea</code></a>
Fix noncommutative joins with bounded TypeVars (<a
href="https://redirect.github.com/python/mypy/issues/20345">#20345</a>)</li>
<li><a
href="https://github.com/python/mypy/commit/3890fc49bf7cc02db04b1e63eb2540aaacdeecc0"><code>3890fc4</code></a>
Fix crash involving Unpack-ed TypeVarTuple (<a
href="https://redirect.github.com/python/mypy/issues/20323">#20323</a>)</li>
<li><a
href="https://github.com/python/mypy/commit/c93d917a86993e06dcc88e508f28f4f5199ce1c8"><code>c93d917</code></a>
Fix crash on star import of redefinition (<a
href="https://redirect.github.com/python/mypy/issues/20333">#20333</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/python/mypy/compare/v1.19.0...v1.19.1">compare
view</a></li>
</ul>
</details>
<br />
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>