Build(deps-dev): Bump the python-type-checkers group across 1 directory with 3 updates

[dependabot]

Bumps the python-type-checkers group with 3 updates in the /python directory: pyright, pyrefly and ty.

Updates pyright from 1.1.411 to 1.1.414

Commits

• 1aa6dfe Pyright NPM Package update to 1.1.414 (#370)
• 5ecb4df tests: retry network tests (#369)
• 978501b chore: bump timeout for pylance version check
• 474b7be Pyright NPM Package update to 1.1.413 (#365)
• 4502e5d ci: auto merge version bumps (#368)
• f9a9a6e [pyright updated to 1.1.412] Update Version (#364)
• See full diff in compare view

Updates pyrefly from 1.2.0 to 1.3.0

Release notes

Sourced from pyrefly's releases.

Pyrefly v1.3.0

Release date: September 10, 2026

Pyrefly v1.3.0 bundles 934 commits from 71 contributors.

---

🔍Release Highlights

Type Checking

• New diagnostics and more accurate type inference. Pyrefly now catches invalid literal regular expressions, invalid mock.patch targets, unsupported dataclass_transform arguments, incompatible Protocol.__call__ overrides, and unimplemented abstract methods. Pattern-match exhaustiveness, overload resolution, narrowing, and generic inference are also more accurate.
• Better support for major Python frameworks. Pyrefly understands same-file Django reverse relationships, checks SQLAlchemy updates against model fields, and recognizes attributes registered on PyTorch modules.

Language Server

• Search the whole workspace for methods and nested definitions. Workspace symbol search now covers methods, nested classes and functions, and class attributes even in unopened files.
• New editor refactorings and quick fixes. Change Signature updates a function and its call sites together, while new quick fixes remove unused imports and insert assert x is not None. Inlay hints can also insert required imports and link to definitions.

Configuration & CLI

• Target individual Pyrefly errors with standard suppression comments. # type: ignore[pyrefly:<code>] suppresses a specific Pyrefly diagnostic without hiding unrelated errors on the same line.
• Choose how Pyrefly handles untyped dependencies. The new --replace-untyped-imports-with-any option replaces selected third-party packages that lack stubs or a py.typed marker with Any, and pyrefly init translates mypy's follow_untyped_imports setting automatically.
• Baseline files are easier to maintain and review. Baselines can match by concise description instead of source position, use a compact format, show existing errors at reduced severity, remove stale entries with --prune-baseline, and reject them in CI with --error-stale-baseline.

Experimental Extensions

• Much broader shape-aware JAX and NumPy support. New JAX stubs cover array creation, manipulation, and linear algebra, while the new pyrefly-numpy-stubs package brings shape checking to NumPy. These stubs use a new type-level shape DSL, which replaces the old @shaped_array API.
• Expanded Polars and pandas DataFrame schema support. Pyrefly tracks Polars schemas through common DataFrame transformations, with support for typed Series and schema annotations. pandas columns= projections now preserve the requested schema as well.

---

✨ New & Improved

Type Checking

• Pattern matching gained stronger exhaustiveness checking, including tuple subjects and open types such as unions. Open-type exhaustiveness now has its own configurable non-exhaustive-match-open-type error kind.
• Overload selection now follows the latest typing specification more closely, producing a safe common return type for gradual arguments and reducing false positives in complex overloads.
• Type inference and narrowing are more precise for membership tests, equality checks, hasattr, wide Literal unions, callable values, reverse tuple slices, and values assigned from Any.
• Dataclass fields backed by descriptors are now checked for incompatible read and write types under the new bad-dataclass-descriptor error kind.
• String targets passed to unittest.mock.patch are validated, with nonexistent attributes reported as missing-attribute-patch-target warnings.
• Literal regular expressions are checked for invalid patterns and capturing groups under the new regex error kind.
• Django support now understands reverse ForeignKey, OneToOneField, and ManyToManyField relationships in the same file, while Django REST Framework serializers avoid false override errors for common Meta and field patterns.
• SQLAlchemy update().values() checks values against mapped model fields.
• PyTorch modules recognize attributes registered through register_buffer and register_parameter.

Language Server

• Workspace symbol search now includes methods, nested classes, nested functions, and class attributes.
• Cross-file call hierarchy, type hierarchy, and find-references now work without first opening every relevant file.

... (truncated)

Commits

• 624bdc4 cut 1.3.0
• ad6958c feat: support Pyrefly-specific type ignore codes
• f1d8f62 Bump fast-uri from 3.1.5 to 3.1.7 in /website (#4789)
• cb178b9 add type stubs for remaining jax.lax APIs (#4875)
• 8ee41ca Model polars join(..., coalesce=...) (#4833) (#4859)
• 5d00010 Find methods and other nested definitions in workspace symbols
• 5b392ca Cache flat symbols for first-party modules
• eaa1fd2 Trim the add_var_bound doc comment to its invariant
• df4cfe0 Add build system integration tests (#3628)
• aec8224 Deduplicate and stably rank workspace symbol results
• Additional commits viewable in compare view

Updates ty from 0.0.78 to 0.0.80

Release notes

Sourced from ty's releases.

0.0.80

Release Notes

Released on 2026-09-09.

Bug fixes

• Fix --force-exclude for directories with an excluded ancestor (#28451)
• Preserve metaclass candidates after conflicts (#28461)

LSP server

• Give existing autofixes descriptive titles (#28456)
• Prevent LSP hangs during inlay hint bursts (#28390)

Diagnostic improvements

• Preserve redundant-condition diagnostics with unreachable operands (#28374)

Core type checking

• Check captured receivers when calling wrapped classmethods (#28467)
• Fix cached classmethods on generic classes (#28207)
• Fix disjointness of type guards and boolean literals (#28363)
• Infer tuple variance from the full tuple spec (#28446)
• Infer tuple variance more precisely (#28426)
• Preserve callable identity across specialized types (#28409)
• Preserve callback type context through ParamSpec forwarding (#28439)
• Preserve wrapped functions in precise functools.partial relations (#28460)
• Respect descriptor protocol for __set__ itself (#28408)
• Respect type-variable bounds in argument context (#28448)
• Unwrap union alternatives in overload implementations (#28468)

Performance

• Distribute len inference over unions (#28470)
• Fast-path concrete literal intersections (#28348)

Memory usage improvements

• Avoid excess capacity in multi-binding tables (#28412)
• Share equivalent place tables within a file (#28319)
• Share names in synthesized constructor parameters (#28398)

Contributors

• @​sharkdp
• @​charliermarsh
• @​ibraheemdev
• @​AlexWaygood

... (truncated)

Changelog

Sourced from ty's changelog.

0.0.80

Released on 2026-09-09.

Bug fixes

• Fix --force-exclude for directories with an excluded ancestor (#28451)
• Preserve metaclass candidates after conflicts (#28461)

LSP server

• Give existing autofixes descriptive titles (#28456)
• Prevent LSP hangs during inlay hint bursts (#28390)

Diagnostic improvements

• Preserve redundant-condition diagnostics with unreachable operands (#28374)

Core type checking

• Check captured receivers when calling wrapped classmethods (#28467)
• Fix cached classmethods on generic classes (#28207)
• Fix disjointness of type guards and boolean literals (#28363)
• Infer tuple variance from the full tuple spec (#28446)
• Infer tuple variance more precisely (#28426)
• Preserve callable identity across specialized types (#28409)
• Preserve callback type context through ParamSpec forwarding (#28439)
• Preserve wrapped functions in precise functools.partial relations (#28460)
• Respect descriptor protocol for __set__ itself (#28408)
• Respect type-variable bounds in argument context (#28448)
• Unwrap union alternatives in overload implementations (#28468)

Performance

• Distribute len inference over unions (#28470)
• Fast-path concrete literal intersections (#28348)

Memory usage improvements

• Avoid excess capacity in multi-binding tables (#28412)
• Share equivalent place tables within a file (#28319)
• Share names in synthesized constructor parameters (#28398)

Contributors

• @​sharkdp
• @​charliermarsh
• @​ibraheemdev
• @​AlexWaygood
• @​MichaReiser

... (truncated)

Commits

• 7fd8e15 Bump version to 0.0.80 (#4501)
• c163f21 Update dependency prek to v0.4.12 (#4494)
• 8ce0450 Update prek dependencies (#4495)
• 5d0aa7a Update actions/attest-build-provenance action to v4.2.2 (#4497)
• e22b86b Update Swatinem/rust-cache action to v2.9.2 (#4496)
• 5cde40f Document uv integration and workspace trust settings (#4339)
• b4cd792 Bump version to 0.0.79 (#4484)
• 52f2d5b Add a GitHub repository threat model for ty (#4481)
• fd0d789 Declare support for Python 3.15 (#4476)
• 7e7a87d Improve rooster-generated changelog sections (#4473)
• Additional commits viewable in compare view

[Copilot]

🟡 Changes recommended

python/uv.lock still resolves the previous versions and must be regenerated.

Get a fresh assessment by requesting another Copilot review.

Pull request overview

Updates Python development type-checking tools.

Changes:

• Bumps Pyright, Pyrefly, and ty to newer versions.

File summaries

File	Description
python/pyproject.toml	Updates three type-checker pins.

Review details

• Files reviewed: 1/1 changed files
• Comments generated: 1
• Review effort level: Balanced

---

💡 Add a code-review agent skill for context-aware, tailored reviews. Learn more in the docs.

[dependabot]

Looks like these dependencies are no longer updatable, so this is no longer needed.