Update Python Tools

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Age	Adoption	Passing	Confidence
astral-sh/ruff-pre-commit	repository	patch	v0.16.1 → v0.16.4
ruff (source, changelog)	dependency-groups	patch	==0.16.1 → ==0.16.4
tox-dev/pyproject-fmt	repository	minor	v2.27.0 → v2.28.0
uv (source, changelog)		patch	0.12.1 → 0.12.5

Note: The pre-commit manager in Renovate is not supported by the pre-commit maintainers or community. Please do not report any problems there, instead create a Discussion in the Renovate repository if you have any questions.

---

Release Notes

astral-sh/ruff-pre-commit (astral-sh/ruff-pre-commit)

v0.16.4

Compare Source

See: https://github.com/astral-sh/ruff/releases/tag/0.16.4

v0.16.3

Compare Source

v0.16.2

Compare Source

See: https://github.com/astral-sh/ruff/releases/tag/0.16.2

astral-sh/ruff (ruff)

v0.16.4

Compare Source

Released on 2026-08-20.

Preview features

• [flake8-use-pathlib] Add autofix for PTH116 (#​26460)
• [refurb] Restrict delete-full-slice to lists (FURB131) (#​27711)
• [refurb] Skip FURB101 and FURB103 when the open argument is a file descriptor (#​27643)

Bug fixes

• Fix InvalidInstruction on Windows CPUs that do not support POPCNT (#​27803)
• [pyflakes] Emit semantic syntax errors in string type definitions as F722 (#​27835)
• [pylint] Allow os._exit imports in import-private-name (PLC2701) (#​27738)

Rule changes

• [syntax-errors] Align mixed t-string/bytes error message with CPython 3.14 (#​27766)
• [ruff] Add ctypes.LittleEndianStructure and related types to existing exception (RUF012) (#​27753)
• [syntax-errors] Detect duplicate keyword arguments (#​17804)
• [syntax-errors] Detect parameters declared nonlocal (#​27628)

Server

• Offer display-only fixes and mark safe fixes preferred (#​27807)
• Support pull diagnostics for notebook cells (#​27779)

Documentation

• Add default indicator to rules table (#​27724)
• Fix broken link to Python docs (#​27757)

Other changes

• Fix s390x stacker assembly in release builds (#​27776)
• Guarantee minimum stack size when parsing a module, standalone expression, and suites (#​25464)
• Reduce configuration deserialization code size (#​27924)
• Check packed AST index bounds (#​27849)

Contributors

• @​AbhinavMir
• @​eduardorittner
• @​royb3
• @​MichaReiser
• @​carljm
• @​rosstitmarsh
• @​ntBre
• @​zaniebot
• @​ewdurbin
• @​woodruffw
• @​Sacrimento
• @​lakshayxi
• @​WhiteFox0-0
• @​baltasarblanco

v0.16.3

Compare Source

Released on 2026-08-13.

Preview features

• [pylint] Fix false negatives on negative numbers (PLR6104) (#​27251)
• [pyupgrade] Add rule to replace while 1 with while True (UP048) (#​27190)

Bug fixes

• [flake8-bandit] Also check keyword arguments (S602, S603, S607, S609) (#​27687)
• [pylint] Allow continue in finally on Python 3.8 (#​27626)
• [pylint] Fix PLE1307 false positive with bools (#​27651)
• [pylint] Fix false positives and negatives with %b format character (PLE1300, PLE1307) (#​27560)
• [pylint] Improve handling of concatenated strings (PLE1300) (#​27659)

Rule changes

• [numpy] Make np.chararray autofix backwards-compatible (NPY201) (#​27527)

Performance

• Enable PGO for Linux x86-64 Ruff releases (#​27570)
• Enable PGO for Linux ARM64 Ruff releases (#​27574)
• Enable PGO for Windows x86-64 Ruff releases (#​27573)
• Enable PGO for macOS ARM64 Ruff releases (#​27572)
• Reduce Expr size to 64 bytes (#​27591)

CLI

• Hyperlink rule codes in ruff check --statistics output (#​27646)

Documentation

• [ruff] Also suggest asyncio.TaskGroup (RUF006) (#​27461)

Other changes

• Use mimalloc v3 (#​27586)

Contributors

• @​Andrej730
• @​alonfaraj
• @​romero-deshaw
• @​Avasam
• @​tjkuson
• @​charliermarsh
• @​chirizxc
• @​saberoueslati
• @​MichaReiser

v0.16.2

Compare Source

Released on 2026-08-06.

Bug fixes

• [flake8-pyi] Avoid false positives on singledispatch functions (PYI041) (#​27335)

Server

• Register formatting capabilities dynamically to exclude TOML files (#​27332)

Contributors

• @​MeGaGiGaGon
• @​charliermarsh
• @​epage
• @​sharkdp
• @​ntBre

tox-dev/pyproject-fmt (tox-dev/pyproject-fmt)

v2.28.0

Compare Source

Full Changelog: tox-dev/pyproject-fmt@v2.27.1...v2.28.0

v2.27.1

Compare Source

Full Changelog: tox-dev/pyproject-fmt@v2.27.0...v2.27.1

astral-sh/uv (uv)

v0.12.5

Compare Source

Released on 2026-08-14.

Python

• Add CPython 3.10.21, 3.11.16, and 3.12.14 (#​21138)
• Prefer newer versions and standard variants when selecting between equally prioritized Python interpreters (#​21134)

Enhancements

• Simplify errors and hints for invalid editable requirements, and redact credentials in requirement URLs (#​21130)

Preview features

• Allow --index and --default-index to select configured package indexes by name with the index-by-name preview feature (#​17455)
• Include distribution artifact URLs and hashes in CycloneDX SBOM exports by default (#​21131)
• Fall back to logical file sizes when using cache-physical-space on filesystems that do not support physical-space accounting (#​21133)

Bug fixes

• Resolve relative package index paths in PEP 723 scripts against the script directory (#​21097)

v0.12.4

Compare Source

Released on 2026-08-13.

Enhancements

• Prefer post-quantum key exchange and enable opt-in TLS diagnostics (#​21054)
• Accept whitespace before versions in noncompliant wildcard comparisons such as Requires-Python: >= 3.5.* (#​21012)
• Report a specific error when a PEP 723 closing tag contains trailing whitespace or other content (#​20944)
• Omit source-span carets from diagnostics for empty PEP 508 requirements (#​21094)

Preview features

• Add uv check --no-install-project and respect UV_NO_INSTALL_PROJECT to install dependencies without building or installing the project (#​21085)
• Make the ty subprocess invoked by uv check honor uv's color and progress settings, including quiet mode (#​21086)

Performance

• Speed up resolutions with long runs of unavailable package versions by coalescing gaps in the resolver's version ranges (#​20804)
• Speed up Simple API parsing by deserializing PyPI and Pyx file metadata directly (#​21041)

Bug fixes

• Use windowed pythonw.exe launchers for virtual environments created from managed Python minor-version links (#​19235)
• Allow uv lock to proceed when .venv is an unusable project environment (#​21068)
• Respect fork-strategy when ordering forks created from environments or existing lockfile resolution-markers (#​21000)
• Preserve consecutive wildcard Python minor-version exclusions such as !=3.11.*, !=3.12.* in uv.lock (#​21045)
• Preserve inline comments on the final item in dependency arrays when uv add updates it (#​21008)
• Recover from stale base-interpreter cache metadata when an existing virtual environment exposes a version mismatch (#​21073)
• Prevent interpreter cache reuse across different PYTHONEXECUTABLE and __PYVENV_LAUNCHER__ overrides (#​21075)
• Show standard styling, usage guidance, and line termination for invalid uv version --bump values (#​21076)

v0.12.3

Compare Source

Released on 2026-08-07.

Python

• Add CPython 3.13.15 (#​20997)

Preview features

• Add --output-format to select automatic, human-readable, or raw-byte output for uv cache size (#​20992)
• Preserve JSON output from uv workspace metadata --quiet while suppressing diagnostics (#​20991)
• Reduce memory usage for large workspaces by streaming uv workspace metadata JSON output (#​20990)

Performance

• Reduce Linux startup latency by initializing the workspace cache before spawning another thread (#​20989)
• Reuse compiled workspace exclusion patterns during workspace discovery (#​20988)
• Speed up conflict-heavy resolutions by avoiding materialized range complements (#​20982)
• Avoid slow procfs reads during Python interpreter discovery on Linux (#​20987)

Documentation

• Add PEP 740 attestations to the GitHub Actions publishing example (#​20986)
• Restrict the GitHub Actions publishing example to Python version tags (#​20973)
• Correct --python-pin to --pin-python in the uv init --bare example (#​20876)

v0.12.2

Compare Source

Released on 2026-08-05.

Python

• Add CPython 3.15.0rc1 (#​20948)
• Add CPython 3.14.7 (#​20971)

Enhancements

• Ensure diagnostic hints end with a newline to prevent malformed terminal output (#​20959)

Preview features

• Audit one or all installed tools with uv tool audit (#​20921)
• Report physically reclaimed disk space during cache cleanup with the cache-physical-space preview feature (#​20925)

Configuration

• Add UV_RUN_RLIMIT_NOFILE to set the open-file limit for commands launched by uv run (#​20926)

Performance

• Speed up uv.lock parsing for wheel entries (#​20881)
• Speed up uv.lock parsing for source distribution entries (#​20882)
• Speed up filename extraction from distribution URLs (#​20879)
• Reduce filesystem metadata lookups during bytecode compilation (#​20928)
• Reuse file metadata when building source distributions (#​20927)

Bug fixes

• Preserve compatibility with older uv versions when recording artifact sizes in cached wheels and source distributions (#​20963)
• Avoid including workspace-root default dependency groups when syncing or exporting a selected workspace member unless explicitly requested (#​20930)

Documentation

• Separate build and publish jobs in the GitHub Actions publishing guide (#​20946)
• Ensure the GitHub Actions publishing example waits for the build job to finish (#​20957)
• Correct typos in the Docker integration guide (#​20970)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM, on day 1 of the month (* 0-3 1 * *)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.