Update dev dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence	Type	Update
mypy (changelog)	==1.19.1 → ==1.20.0			dependency-groups	minor
ruff (source, changelog)	==0.15.7 → ==0.15.9			dependency-groups	patch
sass-embedded	^1.98.0 → 1.98.0			devDependencies	pin
tox (changelog)	==4.50.3 → ==4.52.0			dependency-groups	minor
tox-uv (changelog)	==1.33.4 → ==1.34.0			dependency-groups	minor
types-requests (changelog)	==2.32.4.20260107 → ==2.33.0.20260402			dependency-groups	minor

---

Release Notes

python/mypy (mypy)

v1.20.0

Compare Source

astral-sh/ruff (ruff)

v0.15.9

Compare Source

Released on 2026-04-02.

Preview features

• [pyflakes] Flag annotated variable redeclarations as F811 in preview mode (#​24244)
• [ruff] Allow dunder-named assignments in non-strict mode for RUF067 (#​24089)

Bug fixes

• [flake8-errmsg] Avoid shadowing existing msg in fix for EM101 (#​24363)
• [flake8-simplify] Ignore pre-initialization references in SIM113 (#​24235)
• [pycodestyle] Fix W391 fixes for consecutive empty notebook cells (#​24236)
• [pyupgrade] Fix UP008 nested class matching (#​24273)
• [pyupgrade] Ignore strings with string-only escapes (UP012) (#​16058)
• [ruff] RUF072: skip formfeeds on dedent (#​24308)
• [ruff] Avoid re-using symbol in RUF024 fix (#​24316)
• [ruff] Parenthesize expression in RUF050 fix (#​24234)
• Disallow starred expressions as values of starred expressions (#​24280)

Rule changes

• [flake8-simplify] Suppress SIM105 for except* before Python 3.12 (#​23869)
• [pyflakes] Extend F507 to flag %-format strings with zero placeholders (#​24215)
• [pyupgrade] UP018 should detect more unnecessarily wrapped literals (UP018) (#​24093)
• [pyupgrade] Fix UP008 callable scope handling to support lambdas (#​24274)
• [ruff] RUF010: Mark fix as unsafe when it deletes a comment (#​24270)

Formatter

• Add nested-string-quote-style formatting option (#​24312)

Documentation

• [flake8-bugbear] Clarify RUF071 fix safety for non-path string comparisons (#​24149)
• [flake8-type-checking] Clarify import cycle wording for TC001/TC002/TC003 (#​24322)

Other changes

• Avoid rendering fix lines with trailing whitespace after | (#​24343)

Contributors

• @​charliermarsh
• @​MichaReiser
• @​tranhoangtu-it
• @​dylwil3
• @​zsol
• @​renovate
• @​bitloi
• @​danparizher
• @​chinar-amrutkar
• @​second-ed
• @​getehen
• @​Redovo1
• @​matthewlloyd
• @​zanieb
• @​InSyncWithFoo
• @​RenzoMXD

v0.15.8

Compare Source

Released on 2026-03-26.

Preview features

• [ruff] New rule unnecessary-if (RUF050) (#​24114)
• [ruff] New rule useless-finally (RUF072) (#​24165)
• [ruff] New rule f-string-percent-format (RUF073): warn when using % operator on an f-string (#​24162)
• [pyflakes] Recognize frozendict as a builtin for Python 3.15+ (#​24100)

Bug fixes

• [flake8-async] Use fully-qualified anyio.lowlevel import in autofix (ASYNC115) (#​24166)
• [flake8-bandit] Check tuple arguments for partial paths in S607 (#​24080)
• [pyflakes] Skip undefined-name (F821) for conditionally deleted variables (#​24088)
• E501/W505/formatter: Exclude nested pragma comments from line width calculation (#​24071)
• Fix %foo? parsing in IPython assignment expressions (#​24152)
• analyze graph: resolve string imports that reference attributes, not just modules (#​24058)

Rule changes

• [eradicate] ignore ty: ignore comments in ERA001 (#​24192)
• [flake8-bandit] Treat sys.executable as trusted input in S603 (#​24106)
• [flake8-self] Recognize Self annotation and self assignment in SLF001 (#​24144)
• [pyflakes] F507: Fix false negative for non-tuple RHS in %-formatting (#​24142)
• [refurb] Parenthesize generator arguments in FURB142 fixer (#​24200)

Performance

• Speed up diagnostic rendering (#​24146)

Server

• Warn when Markdown files are skipped due to preview being disabled (#​24150)

Documentation

• Clarify extend-ignore and extend-select settings documentation (#​24064)
• Mention AI policy in PR template (#​24198)

Other changes

• Use trusted publishing for NPM packages (#​24171)

Contributors

• @​bitloi
• @​Sim-hu
• @​mvanhorn
• @​chinar-amrutkar
• @​markjm
• @​RenzoMXD
• @​vivekkhimani
• @​seroperson
• @​moktamd
• @​charliermarsh
• @​ntBre
• @​zanieb
• @​dylwil3
• @​MichaReiser

tox-dev/tox (tox)

v4.52.0

Compare Source

What's Changed

• remove unsupported --remote flag from gh repo fork by @​rahuldevikar in #​3908
• ✨ feat(config): support escaped dots in -x override keys by @​gaborbernat in #​3910
• 🐛 fix(docs): auto-generate manpage from CLI parser by @​gaborbernat in #​3911
• ✨ feat(runner): add PEP 723 inline script metadata support by @​gaborbernat in #​3912

Full Changelog: tox-dev/tox@4.51.0...4.52.0

v4.51.0

Compare Source

What's Changed

• 🔒 ci(workflows): add zizmor security auditing by @​gaborbernat in #​3896
• Add base_python_file config option by @​rahuldevikar in #​3899
• prevent machine ISA from overriding explicit env factors by @​rahuldevikar in #​3904
• 🐛 fix(config): fix handling of env_list in nested contexts by @​Daverball in #​3905
• fix: enable persist-credentials for release workflow by @​rahuldevikar in #​3907

New Contributors

• @​Daverball made their first contribution in #​3905

Full Changelog: tox-dev/tox@4.50.3...4.51.0

tox-dev/tox-uv (tox-uv)

v1.34.0

Compare Source

What's Changed

• 🔒 ci(workflows): add zizmor security auditing by @​gaborbernat in #​317
• ✨ feat(runner): add PEP 723 inline script metadata support by @​gaborbernat in #​319

Full Changelog: tox-dev/tox-uv@1.33.4...1.34.0

---

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[cloudflare-workers-and-pages]

Deploying bats-ai with    Cloudflare Pages

Latest commit:	a4fbaea
Status:	✅  Deploy successful!
Preview URL:	https://4f2d16f1.bats-ai.pages.dev
Branch Preview URL:	https://renovate-dev-deps.bats-ai.pages.dev

View logs

[renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: uv.lock

Command failed: uv lock --upgrade-package mypy --upgrade-package ruff --upgrade-package tox --upgrade-package tox-uv --upgrade-package types-requests
Using CPython 3.13.12
  × No solution found when resolving dependencies for split (markers:
  │ python_full_version >= '3.14' and sys_platform == 'win32'):
  ╰─▶ Because django-stubs[compatible-mypy]==5.2.9 depends on mypy>=1.13,<1.20
      and bats-ai:type depends on django-stubs[compatible-mypy]==5.2.9, we can
      conclude that bats-ai:type depends on mypy>=1.13,<1.20.
      And because bats-ai:type depends on mypy==1.20.0 and your project
      requires bats-ai:type, we can conclude that your project's requirements
      are unsatisfiable.

      hint: While the active Python version is 3.13, the resolution failed for
      other Python versions supported by your project. Consider limiting your
      project's supported Python versions using `requires-python`.