chore(deps-dev): bump the python-dev-tools group with 2 updates

[dependabot]

Bumps the python-dev-tools group with 2 updates: black and ruff.

Updates black from 26.5.1 to 26.10.0

Release notes

Sourced from black's releases.

26.10.0

Stable style

• --line-ranges no longer inserts an empty line after a docstring when the range covers only the docstring itself (#5312)
• Fix # fmt: skip on a bracketed ternary turning the surrounding tuple into a call (#5464)
• Fix crash when # fmt: skip is placed on a one-line function or class with PEP 695 type parameters (#5429)
• Fix an inline comment after the closing bracket of optional parentheses being moved inside the parentheses when the parenthesized expression contains own-line comments (#5395)
• Fix unparseable output when # fmt: skip is placed on a bracket of an if, while, for, or with header (#5401, #5405)
• Fix crash when formatting parenthesized expressions with multiple inline comments and # fmt: skip (#5414)
• Fix parsing Jupyter notebook assignment magics when non-ASCII characters appear earlier on the line (#5381)
• Preserve blank lines that come immediately before a # fmt: on comment (#5300)
• Keep the parentheses around the target of an annotated assignment (e.g. (x): int = 5), which prevent CPython from including the name in __annotations__ (#5321)
• Stop treating a t-string in docstring position as a docstring (e.g. t" spam " as the first statement of a module, class or function) (#5287)
• Fix unparseable output for a t-string whose replacement field contains a quote (e.g. t'\'{a["b"]}\'') (#5265)
• Fix unparseable output for a triple-quoted string whose body ends in an already-escaped double quote (e.g. '''\'''\"''') (#5262)
• Fix --skip-magic-trailing-comma dropping the trailing comma from a split single-element tuple used as a lambda parameter default (#5246)
• Fix unstable formatting when an inline comment sits on optional parentheses (e.g. a parenthesized assert message) (#5241)
• Fix --skip-magic-trailing-comma dropping the trailing comma of a one-element subscript (a[x,]) when the line is long enough to be split and contains a power operator (#5272)
• Fix crash when a standalone comment sits between tokens of a comprehension or lambda (#5144)
• Fix inline comments on a bracket inside a comprehension being dropped (#5330)
• Respect the magic trailing comma in a PEP 695 type parameter list containing a *TypeVarTuple or **ParamSpec (#5244)
• Fix crash when a comment-only # fmt: off/# fmt: on block is followed by a with statement after another standalone comment (#5189)
• Fix a crash when splitting case case if ... match patterns at very small line lengths (#5147)
• Fix multiline docstring indentation when leading tabs are used inside indented docstrings (#5148)
• Respect # fmt: skip on a line that opens a bracket (e.g. from x import ( # fmt: skip) when a standalone comment is among the bracket's contents (#5161)
• Fix an AST safety error when separate # type: ignore comments in a parenthesized

... (truncated)

Changelog

Sourced from black's changelog.

Version 26.10.0

Stable style

• --line-ranges no longer inserts an empty line after a docstring when the range covers only the docstring itself (#5312)
• Fix # fmt: skip on a bracketed ternary turning the surrounding tuple into a call (#5464)
• Fix crash when # fmt: skip is placed on a one-line function or class with PEP 695 type parameters (#5429)
• Fix an inline comment after the closing bracket of optional parentheses being moved inside the parentheses when the parenthesized expression contains own-line comments (#5395)
• Fix unparseable output when # fmt: skip is placed on a bracket of an if, while, for, or with header (#5401, #5405)
• Fix crash when formatting parenthesized expressions with multiple inline comments and # fmt: skip (#5414)
• Fix parsing Jupyter notebook assignment magics when non-ASCII characters appear earlier on the line (#5381)
• Preserve blank lines that come immediately before a # fmt: on comment (#5300)
• Keep the parentheses around the target of an annotated assignment (e.g. (x): int = 5), which prevent CPython from including the name in __annotations__ (#5321)
• Stop treating a t-string in docstring position as a docstring (e.g. t" spam " as the first statement of a module, class or function) (#5287)
• Fix unparseable output for a t-string whose replacement field contains a quote (e.g. t'\'{a["b"]}\'') (#5265)
• Fix unparseable output for a triple-quoted string whose body ends in an already-escaped double quote (e.g. '''\'''\"''') (#5262)
• Fix --skip-magic-trailing-comma dropping the trailing comma from a split single-element tuple used as a lambda parameter default (#5246)
• Fix unstable formatting when an inline comment sits on optional parentheses (e.g. a parenthesized assert message) (#5241)
• Fix --skip-magic-trailing-comma dropping the trailing comma of a one-element subscript (a[x,]) when the line is long enough to be split and contains a power operator (#5272)
• Fix crash when a standalone comment sits between tokens of a comprehension or lambda (#5144)
• Fix inline comments on a bracket inside a comprehension being dropped (#5330)
• Respect the magic trailing comma in a PEP 695 type parameter list containing a *TypeVarTuple or **ParamSpec (#5244)
• Fix crash when a comment-only # fmt: off/# fmt: on block is followed by a with statement after another standalone comment (#5189)
• Fix a crash when splitting case case if ... match patterns at very small line lengths (#5147)
• Fix multiline docstring indentation when leading tabs are used inside indented docstrings (#5148)
• Respect # fmt: skip on a line that opens a bracket (e.g. from x import ( # fmt: skip) when a standalone comment is among the bracket's contents (#5161)

... (truncated)

Commits

• 4f1883b Prepare release 26.10.0 (#5478)
• 93e5c82 Do not split a docstring on non-newline characters (#5461)
• 2f3f992 Fix superlinear runtime growth with the number of input files (#5450)
• d078e8e Refactor release process to be more automated and use immutable releases (#5296)
• 6408e69 Preserve leaf line numbers in append_leaves to prevent pragma line collapse (...
• cf8560b Add is_formatted output to GitHub Action (#3526) (#5408)
• 9b65aa3 docs(contributing): fix two grammar typos in issue_triage.md (#5426)
• e1c4783 Fix --force-exclude for paths containing .. (#5471)
• 34bfc69 Fix duplicated comments when string_processing rewrites a line (#5449)
• 5fe7881 Fix preview blank lines after a stub method (#5439)
• Additional commits viewable in compare view

Updates ruff from 0.16.10 to 0.17.0

Release notes

Sourced from ruff's releases.

0.17.0

Release Notes

Released on 2026-10-09.

The executables in our macOS and Windows release archives and ruff wheels are now code-signed. macOS executables are signed with an Apple Developer ID certificate and notarized by Apple. Windows executables have timestamped Authenticode signatures from Azure Artifact Signing. This enables verification of the release publisher and binary integrity, supports publisher-based allowlisting, and should reduce security warnings and antivirus false positives.

Breaking changes

• Update the default and latest Python versions for 3.15 (#28792)

  Ruff now defaults to Python 3.11 instead of 3.10 when no Python version is configured through target-version or requires-python. When checking for syntax errors without a configured Python version, Ruff now defaults to Python 3.15 instead of 3.14.

• Update the default rule set (#28786)

  Several of the flake8-datetimez rules (DTZ001, DTZ005, DTZ006, DTZ007, DTZ011, DTZ012, and DTZ901) are no longer enabled by default, while undefined-local-with-nested-import-star-usage (F406), which corresponds to a syntax error, is now enabled by default.

• Update Rust crate quick-junit to 0.8.0 (#27295)

  JUnit output now uses a skipped attribute instead of disabled on <testsuite> elements and includes a skipped attribute on the root <testsuites> element.

• [flake8-import-conventions] Add datetime as dt as a conventional alias (ICN001) (#28790)

• Support Unicode dummy variable names (#28722)

  The default lint.dummy-variable-rgx now recognizes underscore-prefixed Unicode names, such as _次, as dummy variables.

• Update to Unicode 17 (#21229, #28784)

  Ruff now uses Unicode 17 data for identifier normalization and named character escapes ("\N{...}").

• Always show unsafe and display-only fixes in the CLI (#27810)

  The default full output format now shows unsafe fixes and suggestions requiring manual review, regardless of the unsafe-fixes setting. Actually applying unsafe fixes still requires explicit opt-in.

• Remove the Python dependency from conda-forge builds (conda-forge/ruff-feedstock#361)

  The conda-forge build no longer depends on Python, now supports linux-riscv64, win-arm64, and linux-ppc64le platforms, and now includes shell completions. However, no longer depending on Python means that python -m ruff and import ruff will no longer work. Use ruff directly from PATH instead. PyPI installations and those from the standalone installer are unaffected.

• Remove support for ruff-lsp (#28750)

  Support for ruff-lsp, the legacy Python language server deprecated in Ruff v0.9.5, has been removed. The Ruff VS Code extension now always uses the native language server; ruff.nativeServer is deprecated and ignored. See the migration guide.

Stabilization

The following rules have been stabilized and are no longer in preview:

• lazy-import-mismatch (TID254)
• lazy-import-immediately-resolved (TID255)
• os-path-commonprefix (RUF071)

... (truncated)

Changelog

Sourced from ruff's changelog.

0.17.0

Released on 2026-10-09.

The executables in our macOS and Windows release archives and ruff wheels are now code-signed. macOS executables are signed with an Apple Developer ID certificate and notarized by Apple. Windows executables have timestamped Authenticode signatures from Azure Artifact Signing. This enables verification of the release publisher and binary integrity, supports publisher-based allowlisting, and should reduce security warnings and antivirus false positives.

Breaking changes

• Update the default and latest Python versions for 3.15 (#28792)

  Ruff now defaults to Python 3.11 instead of 3.10 when no Python version is configured through target-version or requires-python. When checking for syntax errors without a configured Python version, Ruff now defaults to Python 3.15 instead of 3.14.

• Update the default rule set (#28786)

  Several of the flake8-datetimez rules (DTZ001, DTZ005, DTZ006, DTZ007, DTZ011, DTZ012, and DTZ901) are no longer enabled by default, while undefined-local-with-nested-import-star-usage (F406), which corresponds to a syntax error, is now enabled by default.

• Update Rust crate quick-junit to 0.8.0 (#27295)

  JUnit output now uses a skipped attribute instead of disabled on <testsuite> elements and includes a skipped attribute on the root <testsuites> element.

• [flake8-import-conventions] Add datetime as dt as a conventional alias (ICN001) (#28790)

• Support Unicode dummy variable names (#28722)

  The default lint.dummy-variable-rgx now recognizes underscore-prefixed Unicode names, such as _次, as dummy variables.

• Update to Unicode 17 (#21229, #28784)

  Ruff now uses Unicode 17 data for identifier normalization and named character escapes ("\N{...}").

• Always show unsafe and display-only fixes in the CLI (#27810)

... (truncated)

Commits

• 5b27c1c Bump version to 0.17.0 (#29259)
• 8f362bf Integrate vendored Unicode names into Ruff
• 88a50d6 Revert upstream Unicode loose matching
• 276832a Revert upstream Unicode alias normalization
• 26911ca Vendor unicode_names2 from upstream
• 27e3797 [ruff] Stabilize os-path-commonprefix (RUF071) (#28764)
• bbb52c1 [flake8-tidy-imports] Stabilize lazy-import-immediately-resolved (`TID255...
• 5aa9cbd [flake8-tidy-imports] Stabilize lazy-import-mismatch (TID254) (#28760)
• dba1bc8 [flake8-import-conventions] Add datetime as dt as a conventional alias (`...
• ef23c9c Update default and latest Python versions for 3.15 (#28792)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions