Update Python dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
ruff (source, changelog)	==0.15.13 → ==0.15.14
tombi	==0.11.5 → ==1.0.0
ty (changelog)	==0.0.37 → ==0.0.39
types-grpcio (changelog)	==1.0.0.20260514 → ==1.0.0.20260518
types-protobuf (changelog)	==7.34.1.20260508 → ==7.34.1.20260518
uvicorn (changelog)	==0.47.0 → ==0.48.0
zensical (changelog)	==0.0.42 → ==0.0.43

---

Release Notes

astral-sh/ruff (ruff)

v0.15.14

Compare Source

Released on 2026-05-21.

Preview features

• [airflow] Implement airflow-task-implicit-multiple-outputs (AIR202) (#​25152)
• [flake8-use-pathlib] Mark PTH101 fix as unsafe when first argument is a class attribute annotated as int (#​25086)
• [pylint] Implement too-many-try-statements (W0717) (#​23970)
• [ruff] Add incorrect-decorator-order (RUF074) (#​23461)
• [ruff] Add fallible-context-manager (RUF075) (#​22844)

Bug fixes

• Fix lambda formatting in interpolated string expressions (#​25144)
• Treat generic frozenset annotations as immutable (#​25251)
• [flake8-type-checking] Avoid strict behavior when future-annotations are enabled (TC001, TC002, TC003) (#​25035)
• [pylint] Avoid false positives in else clause (PLR1733) (#​25177)

Rule changes

• [flake8-comprehensions] Skip C417 for lambdas with positional-only parameters (#​25272)
• [flake8-simplify] Preserve f-string source verbatim in SIM101 fix (#​25061)

Performance

• Avoid unnecessary parser lookahead for operators (#​25290)

Documentation

• Update code example setting Neovim LSP log level (#​25284)

Other changes

• Add full PEP 798 support (#​25104)
• Add a parser recursion limit (#​24810)
• Update various ruff_python_stdlib APIs (#​25273)

Contributors

• @​ocaballeror
• @​lerebear
• @​samuelcolvin
• @​baltasarblanco
• @​aconal-com
• @​anishgirianish
• @​JelleZijlstra
• @​AlexWaygood
• @​ntBre
• @​adityasingh2400
• @​charliermarsh
• @​Dev-iL
• @​neutrinoceros
• @​shivamtiwari3
• @​Dev-X25874

tombi-toml/tombi (tombi)

v1.0.0

Compare Source

What's Changed

🐛 Bug Fixes

• fix: restore cargo document links for standalone dependencies by @​ya7010 in #​1913

🛠️ Other Changes

• Refactor: Cargo.toml files for improved readability and consistency in dependency definitions by @​ya7010 in #​1910
• fix: pin Cargo.toml schema to TOML 1.0 by @​ya7010 in #​1911

Full Changelog: tombi-toml/tombi@v0.11.7...v1.0.0

v0.11.7

Compare Source

What's Changed

🚀 New Features

• Add default feature hover support for Cargo dependencies by @​ya7010 in #​1908
• feat(serde_tombi): support inline serialization control by @​ya7010 in #​1909

🐛 Bug Fixes

• Fix goto type definition for annotation-only schemas by @​ya7010 in #​1906

Full Changelog: tombi-toml/tombi@v0.11.6...v0.11.7

v0.11.6

Compare Source

What's Changed

We have updated the TOML version in Cargo.toml to v1.1.0 🎉

Users running Rust versions prior to 1.94 should create a tombi.toml file and specify the version as shown below.

[[schemas]]
toml-version = "v1.0.0"
path = "tombi://www.schemastore.org/cargo.json"
include = ["Cargo.toml"]

🚨 Breaking Changes

• set Cargo.toml default TOML version to v1.1.0 by @​Natural-selection1 in #​1903

🐛 Bug Fixes

• Allow annotation-only property schemas in strict mode by @​ya7010 in #​1904

🛠️ Other Changes

• Split winget release workflow from PR #​1866 by @​ya7010 in #​1892
• ci: move winget publish after install script update by @​ya7010 in #​1893
• Fix hover defaults with invalid array items by @​ya7010 in #​1894
• Update tombi.toml to enable document-link and simplify configuration by @​ya7010 in #​1898
• Improve markdown formatting for strict schema diagnostics by @​ya7010 in #​1897
• chore: Refine error message for strict schema diagnostics to enhance clarity and consistency in instructions. by @​ya7010 in #​1900
• Support panic = "immediate-abort" in cargo.json by @​silvanshade in #​1899
• Fix format --check on read-only files by @​ya7010 in #​1902

New Contributors

• @​silvanshade made their first contribution in #​1899
• @​Natural-selection1 made their first contribution in #​1903

Full Changelog: tombi-toml/tombi@v0.11.5...v0.11.6

astral-sh/ty (ty)

v0.0.39

Compare Source

Released on 2026-05-22.

This release removes the Python 3.9 branches from our vendored standard library stubs. ty now only has "full" support for
Python 3.10 and later, but will still report version-specific syntax errors and other diagnostics when --python-version 3.9
is provided via the CLI.

Bug fixes

• Avoid panicking on __new__ assignments to classes (#​25282)
• Preserve declaration order when synthesizing class fields (#​25249)
• Respect dict-compatible fallbacks in TypedDict unions (#​25242)
• Retain recursively-defined state in binary expressions (#​25277)

LSP server

• Add Quick Fix to remove redundant cast (#​25211)
• Classify property declaration semantic tokens (#​25322)
• Escape HTML syntax in docstring rendering (#​25247)
• Prefer symbols from standard library over those of the same name from third party libraries for import completions. (#​25108)
• Support type aliases in document symbols (#​25302)

Diagnostics

• Add error context for extra callable parameters (#​25269)

Performance

• Avoid exponential blow-up in fall-through narrowing (#​25278)
• Speed up include filtering for projects with many literal include patterns (#​25266)

Core type checking

• Allow enum member accesses on self (#​25077)
• Emit a diagnostic for subclassing with order=True (#​21704)
• Full-scope bidirectional inference for unconstrained container literals (#​25279)
• Infer dict(TypedDict) as dict[str, object] (#​24852)
• Refine Callable class-decorator fallback for unknown results (#​25250)
• Reject incompatible explicit variance in generic base classes (#​25327)
• Support multi-inference through type aliases (#​25245)
• Sync vendored typeshed stubs (#​25271, #​25172)

Contributors

• @​ibraheemdev
• @​MatthewMckee4
• @​sqqueak
• @​lerebear
• @​sharkdp
• @​dhimasardinata
• @​MichaReiser
• @​charliermarsh

v0.0.38

Compare Source

Released on 2026-05-19.

Bug fixes

• Fix panic in enum literal during cycle recovery (#​25237)
• Fix panic from lazy NewType base expansion during cycle recovery (#​25234)
• Fix class-body global lookup before class binding (#​25224)
• Handle aliased dict fallbacks in TypedDict unions (#​25241)
• Ignore _generate_next_value_ with custom construction hooks (#​25210)

LSP server

• Fix find references for except handlers (#​25231)
• Preserve delimiters when folding expressions (#​24999)
• Use incremental file walk on .gitignore changes (#​25183)

Core type checking

• Add first-class support for enum complements (#​24961)
• Allow known non-field writes on frozen dataclass subclasses (#​25087)
• Ignore generic specialization in layout compatibility checks (#​25178)
• Preserve short-circuit bindings in all condition consumers (#​25160)
• Support class decorators (#​25091)
• Support custom _generate_next_value_ methods in enums (#​25196)

Contributors

• @​MatthewMckee4
• @​MichaReiser
• @​charliermarsh
• @​lerebear
• @​thejchap

Kludex/uvicorn (uvicorn)

v0.48.0: Version 0.48.0

Compare Source

What's Changed

• Default ssl_ciphers to None and use OpenSSL defaults by @​Kludex in #​2940
• Ignore duplicate forwarding headers in ProxyHeadersMiddleware by @​Kludex in #​2944

Full Changelog: Kludex/uvicorn@0.47.0...0.48.0

zensical/zensical (zensical)

v0.0.43: 0.0.43

Compare Source

Summary

This version fixes further edge cases in link validation, and adds support for UTF-8 encoding with byte-order-marks.

Changelog

Bug fixes

• 1e873a3 compat – ignore links in code after literal dollar during link validation (#​691)
• 62a0feb zensical – report path.md/#anchor as invalid during link validation (#​690)
• 7be40c6 compat – ignore GitHub-style callouts during link validation (#​688)
• 85c3b1e compat – ignore [TOC] marker during link validation (#​686)
• daafc8b zensical – filter out icons folder when watching theme directories (#​693)
• 913fd61 zensical – strip Byte-Order-Mark (BOM) from Markdown files (#​687)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.