chore(deps-dev): bump the python group with 3 updates

[dependabot]

Bumps the python group with 3 updates: hypothesis, ruff and wemake-python-styleguide.

Updates hypothesis from 6.165.9 to 6.165.10

Commits

• 6384dee Bump hypothesis version to 6.165.10 and update changelog
• c7ca59d Merge pull request #4864 from dgutson/claude-stateful-and-example
• 3fc38f1 claude: teach /hypothesis about stateful tests and @​example
• 16f24b7 Merge pull request #4862 from Zac-HD/claude/upstream-regex-issues-fkke9q
• 3a19d89 fix context flag restoration
• 3f94912 Clarify re.ASCII wording in changelog entry
• 9d0a9a8 Fix from_regex handling of negative classes, re.ASCII, and zero-min repeats
• See full diff in compare view

Updates ruff from 0.16.3 to 0.16.4

Release notes

Sourced from ruff's releases.

0.16.4

Release Notes

Released on 2026-08-20.

Preview features

• [flake8-use-pathlib] Add autofix for PTH116 (#26460)
• [refurb] Restrict delete-full-slice to lists (FURB131) (#27711)
• [refurb] Skip FURB101 and FURB103 when the open argument is a file descriptor (#27643)

Bug fixes

• Fix InvalidInstruction on Windows CPUs that do not support POPCNT (#27803)
• [pyflakes] Emit semantic syntax errors in string type definitions as F722 (#27835)
• [pylint] Allow os._exit imports in import-private-name (PLC2701) (#27738)

Rule changes

• [syntax-errors] Align mixed t-string/bytes error message with CPython 3.14 (#27766)
• [ruff] Add ctypes.LittleEndianStructure and related types to existing exception (RUF012) (#27753)
• [syntax-errors] Detect duplicate keyword arguments (#17804)
• [syntax-errors] Detect parameters declared nonlocal (#27628)

Server

• Offer display-only fixes and mark safe fixes preferred (#27807)
• Support pull diagnostics for notebook cells (#27779)

Documentation

• Add default indicator to rules table (#27724)
• Fix broken link to Python docs (#27757)

Other changes

• Fix s390x stacker assembly in release builds (#27776)
• Guarantee minimum stack size when parsing a module, standalone expression, and suites (#25464)
• Reduce configuration deserialization code size (#27924)
• Check packed AST index bounds (#27849)

Contributors

• @​AbhinavMir
• @​eduardorittner
• @​royb3
• @​MichaReiser
• @​carljm
• @​rosstitmarsh
• @​ntBre

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.4

Released on 2026-08-20.

Preview features

• [flake8-use-pathlib] Add autofix for PTH116 (#26460)
• [refurb] Restrict delete-full-slice to lists (FURB131) (#27711)
• [refurb] Skip FURB101 and FURB103 when the open argument is a file descriptor (#27643)

Bug fixes

• Fix InvalidInstruction on Windows CPUs that do not support POPCNT (#27803)
• [pyflakes] Emit semantic syntax errors in string type definitions as F722 (#27835)
• [pylint] Allow os._exit imports in import-private-name (PLC2701) (#27738)

Rule changes

• [syntax-errors] Align mixed t-string/bytes error message with CPython 3.14 (#27766)
• [ruff] Add ctypes.LittleEndianStructure and related types to existing exception (RUF012) (#27753)
• [syntax-errors] Detect duplicate keyword arguments (#17804)
• [syntax-errors] Detect parameters declared nonlocal (#27628)

Server

• Offer display-only fixes and mark safe fixes preferred (#27807)
• Support pull diagnostics for notebook cells (#27779)

Documentation

• Add default indicator to rules table (#27724)
• Fix broken link to Python docs (#27757)

Other changes

• Fix s390x stacker assembly in release builds (#27776)
• Guarantee minimum stack size when parsing a module, standalone expression, and suites (#25464)
• Reduce configuration deserialization code size (#27924)
• Check packed AST index bounds (#27849)

Contributors

• @​AbhinavMir
• @​eduardorittner
• @​royb3
• @​MichaReiser
• @​carljm
• @​rosstitmarsh
• @​ntBre
• @​zaniebot

... (truncated)

Commits

• 11c76bf Bump 0.16.4 (#27937)
• d53c8c5 Isolate playground builds from deployment credentials (#27839)
• cab001e Disable uv preview for releases and pre-commit hooks (#27939)
• f8d575f [ty] Clarify writing guidance for human readers (#27912)
• ca45fae Set --preview and --default-index for the uv-lock hook (#27935)
• 4827bf7 Export UV_DEFAULT_INDEX in release.sh (#27934)
• d1087a4 [ty] Handle assignment expressions in string annotations (#27921)
• 680cce4 [ty] Optimize inherited recursive protocol comparisons (#27922)
• 974d3cb Upgrade ecosystem-analyzer and mypy_primer to the latest upstream pins (#27932)
• b169b40 Install cargo tools locked (#27929)
• Additional commits viewable in compare view

Updates wemake-python-styleguide from 1.7.1 to 1.8.0

Release notes

Sourced from wemake-python-styleguide's releases.

Version 1.8.0 aka The Slop Slayer

This release makes WPS a first-class citizen in AI-assisted workflows and adds python3.15 support with new rules for its features.

AI features

wemake-python-styleguide is crazy good at improving the agents' code quality. Use it in your workflows to make the final code simpler and more readable.

MCP server for violation explanations

An optional MCP server exposes an explain_violation tool, so your agent can look up any WPS rule locally — same docs as the website, no internet access needed (#3770):

pip install 'wemake-python-styleguide[mcp]'
mcp run wemake_python_styleguide/mcp.py:mcp

Now, when the agent hits an unfamiliar violation:

> flake8 --select=WPS .
  example.py:14:1: WPS482 Found a lazy import
> explain_violation('WPS482')  # via MCP
Forbid lazy imports. It is an overly complicated feature ...

/wps agent skill

A reusable skill for coding agents (Claude Code, Codex, Cursor and friends) that teaches them the write-fix-lint-repeat loop: run flake8 --select=WPS,E999, fix the code (not the config!), and only # noqa when a human says so (#3773).

The skill lives in .agents/skills/wps.md — drop it into your repo or use context7 and your agent writes WPS-clean Python from the start.

Features

python3.15 official support (#3758)

Including rules for brand-new syntax:

• WPS482: forbid lazy imports (#3639). Emitted on python3.15+ only. Returning an object from a function does exactly the same thing:

... (truncated)

Changelog

Sourced from wemake-python-styleguide's changelog.

1.8.0 aka The Slop Slayer

AI features

wemake-python-styleguide is crazy good at improving the agents' code quality. Use it in your workflows to make the final code simpler and more readable.

• Adds an optional MCP server for violation explanations, #3770
• Adds /wps skill for agents, #3773

Features

• Adds python3.15 official support, #3758
• Adds support for t strings, it now follows the same rules as f string everywhere, #3702
• Adds WPS482: forbid lazy imports, #3639
• Adds WPS483: forbid MappingProxyType on python3.15+, #3762

Bugfixes

• Fixes missing violations in llms-full.txt

Misc

• Improves WPS365 docs, #3776
• Improves wps explain FOO error message, when FOO is not found, #3775

Commits

• ceb6b41 Version 1.8.0 (#3777)
• 76b3ac3 feat: extend f-string rules to t-strings (#3613) (#3702)
• b5b507e Improve AI docs (#3776)
• 2b5ddd5 Refactor mcp feature (#3775)
• 92affcb Fix
• 33cc5fe Simplify the skill after Claudes review
• bf945bc Simplify the skill after Claudes review
• d8783a8 Fix MCP docs
• 13e86ca Add MCP violation explanation server (#3772)
• adab78e Forbid MappingProxyType (#3763)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions