Bump the all group with 3 updates

[dependabot]

Bumps the all group with 3 updates: ruff, ty and huggingface-hub.

Updates ruff from 0.16.0 to 0.16.2

Release notes

Sourced from ruff's releases.

0.16.2

Release Notes

Released on 2026-08-06.

Bug fixes

• [flake8-pyi] Avoid false positives on singledispatch functions (PYI041) (#27335)

Server

• Register formatting capabilities dynamically to exclude TOML files (#27332)

Contributors

• @​MeGaGiGaGon
• @​charliermarsh
• @​epage
• @​sharkdp
• @​ntBre

Install ruff 0.16.2

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ruff/releases/download/0.16.2/ruff-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/ruff/releases/download/0.16.2/ruff-installer.ps1 | iex"

Download ruff 0.16.2

File	Platform	Checksum
ruff-aarch64-apple-darwin.tar.gz	Apple Silicon macOS	checksum
ruff-x86_64-apple-darwin.tar.gz	Intel macOS	checksum
ruff-aarch64-pc-windows-msvc.zip	ARM64 Windows	checksum
ruff-i686-pc-windows-msvc.zip	x86 Windows	checksum
ruff-x86_64-pc-windows-msvc.zip	x64 Windows	checksum
ruff-aarch64-unknown-linux-gnu.tar.gz	ARM64 Linux	checksum
ruff-i686-unknown-linux-gnu.tar.gz	x86 Linux	checksum
ruff-powerpc64-unknown-linux-gnu.tar.gz	PPC64 Linux	checksum
ruff-powerpc64le-unknown-linux-gnu.tar.gz	PPC64LE Linux	checksum
ruff-riscv64gc-unknown-linux-gnu.tar.gz	RISCV Linux	checksum
ruff-s390x-unknown-linux-gnu.tar.gz	S390x Linux	checksum

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.2

Released on 2026-08-06.

Bug fixes

• [flake8-pyi] Avoid false positives on singledispatch functions (PYI041) (#27335)

Server

• Register formatting capabilities dynamically to exclude TOML files (#27332)

Contributors

• @​MeGaGiGaGon
• @​charliermarsh
• @​epage
• @​sharkdp
• @​ntBre

0.16.1

Released on 2026-07-30.

Preview features

• Add an option to opt out of human-readable names (#27160)
• [flake8-pytest-style] Make fixes safe by default and unsafe only when comments are present (PT018) (#27201)
• [pyupgrade] Skip fix when a defaulted TypeVar precedes a non-defaulted one (UP040, UP046, UP047) (#27133)
• [ruff] Fix false positive with unpacked arguments (RUF065) (#26959)

Bug fixes

• Bump gen-lsp-types to gracefully handle unknown enumeration values in LSP messages (#27230)
• [flake8-bugbear] Mark range as immutable (B008) (#27247)
• [flake8-comprehensions] NFKC-normalize keyword names in C408 fix (#26813)
• [flake8-return] Fix false positive when variable is read in finally clause (RET504) (#25441)
• [pydocstyle] Skip section detection inside RST directive bodies (D214, D405, D413) (#23635)
• [refurb] Parenthesize yield arguments in the FURB192 fix (#27192)

Rule changes

• [flake8-pytest-style] Mark PT022 fixes as unsafe (#26440)
• [refurb] Mark fixes that remove unknown separators as unsafe (FURB105) (#27200)

Server

• Fix indexing of excluded nested Ruff workspaces (#27303)
• Lint TOML files in the LSP (#26862)

... (truncated)

Commits

• 5b48a04 Bump 0.16.2 (#27555)
• 1b9e5fc Update Swatinem/rust-cache action to v2.9.2 (#27568)
• c4e86fc [ty] Add helper extension methods for half-range and equality constraints (#2...
• 17a00de [ty] Reuse primer commands in memory reports (#27553)
• 6ea296b [ty] Normalize type labels in structured docstrings (#26923)
• 2fc445f [ty] Diagnose invalid getattr calls (#27502)
• 22c7823 [ty] Enable (but downrank) auto-import completion suggestions from stub-only ...
• 05160d5 [ty] Diagnose invalid descriptor __get__ calls (#27400)
• baea3d0 [ty] Expose strict analysis options in the playground (#27543)
• c88946e [ty] Bump ecosystem-analyzer for strict project settings (#27542)
• Additional commits viewable in compare view

Updates ty from 0.0.65 to 0.0.71

Release notes

Sourced from ty's releases.

0.0.71

Release Notes

Released on 2026-08-12.

Library support

• Respect third-party keyword-only fields before Python 3.10 (#27699)

Diagnostics

• Diagnose invalid __getattribute__ calls (#27506)
• Validate boolean conversion in comprehension filters (#27641)
• Validate unpacked callable argument shapes (#27516)

Core type checking

• Avoid introducing boolean literals when narrowing integers (#27698)
• Fix truthiness inference for subclassable known classes (#27638)
• Handle class objects that may be descriptors (#26687)
• Infer type variables through nominal type[...] parameters (#27689)
• Model exception flow with operation checkpoints (#27471)
• Preserve constrained TypeVar types when slicing (#27645)
• Preserve enum attributes on Self and bounded type variables (#27644)
• Preserve enum exhaustiveness with custom _missing_ methods (#27700)
• Preserve literal-string origin in comparison narrowing (#27582)
• Resolve generic type aliases subscripted inside type[] (#27663)
• Restrict equality impossibility to static bounds (#27655)

Performance

• Avoid deriving sequents for type variables with concrete bounds (#27587)

Contributors

• @​dcreager
• @​augustelalande
• @​charliermarsh
• @​carljm
• @​AlexWaygood
• @​ibraheemdev

Install ty 0.0.71

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ty/releases/download/0.0.71/ty-installer.sh | sh

... (truncated)

Changelog

Sourced from ty's changelog.

0.0.71

Released on 2026-08-12.

Library support

• Respect third-party keyword-only fields before Python 3.10 (#27699)

Diagnostics

• Diagnose invalid __getattribute__ calls (#27506)
• Validate boolean conversion in comprehension filters (#27641)
• Validate unpacked callable argument shapes (#27516)

Core type checking

• Avoid introducing boolean literals when narrowing integers (#27698)
• Fix truthiness inference for subclassable known classes (#27638)
• Handle class objects that may be descriptors (#26687)
• Infer type variables through nominal type[...] parameters (#27689)
• Model exception flow with operation checkpoints (#27471)
• Preserve constrained TypeVar types when slicing (#27645)
• Preserve enum attributes on Self and bounded type variables (#27644)
• Preserve enum exhaustiveness with custom _missing_ methods (#27700)
• Preserve literal-string origin in comparison narrowing (#27582)
• Resolve generic type aliases subscripted inside type[] (#27663)
• Restrict equality impossibility to static bounds (#27655)

Performance

• Avoid deriving sequents for type variables with concrete bounds (#27587)

Contributors

• @​dcreager
• @​augustelalande
• @​charliermarsh
• @​carljm
• @​AlexWaygood
• @​ibraheemdev

0.0.70

Released on 2026-08-10.

LSP server

• Enable and downrank auto-import completions from stub-only modules (#27433)
• Fix signature help at end of file (#27622)
• Normalize type labels in structured docstrings (#26923)

... (truncated)

Commits

• 683e223 Bump version to 0.0.71 (#4244)
• ede66b4 Document unsound-yield in the migration guide (#4239)
• 4c3d909 Validate the PGO pipeline in CI (#4236)
• df9bad1 Enable PGO for Linux ARM64 ty releases (#4218)
• 0ed874c Enable PGO for Windows x86-64 ty releases (#4217)
• 8988165 Enable PGO for macOS ARM64 ty releases (#4216)
• c25c341 Enable PGO for Linux x86-64 ty releases (#4213)
• d95445f Use Depot runners for release builds (#4224)
• c2932e1 Use an eight-core Ubuntu 24.04 runner for prek CI (#4235)
• bf8c9f3 Bump version to 0.0.70 (#4228)
• Additional commits viewable in compare view

Updates huggingface-hub from 1.25.1 to 1.27.0

Release notes

Sourced from huggingface-hub's releases.

[v1.27.0] Automatic hf-cli skill install, engine flags for Inference Endpoints & more

🤖 The hf-cli skill installs itself and stays in sync

The hf-cli skill teaches AI agents how to use the hf CLI, but until now you had to know it existed and install it by hand. The standalone installers (bash and PowerShell) now install it globally by default, pass --exclude-skill / -ExcludeSkill to skip — and hf update refreshes it afterwards, without ever bringing it back if you opted out or removed it. Any hf command also hints, at most once a day, when the skill is missing or was generated by another hf version. The hint is purely local, never installs anything on its own, and is silenced by HF_HUB_DISABLE_UPDATE_CHECK=1.

# The installer sets up the skill for you...
>>> curl -LsSf https://hf.co/cli/install.sh | bash -s
[INFO] Installing the hf-cli skill for AI agents...
Installed 'hf-cli' to central location: ~/.agents/skills/hf-cli
[INFO] Pass --exclude-skill to skip it.
...or skip it entirely
>>> curl -LsSf https://hf.co/cli/install.sh | bash -s -- --exclude-skill
[INFO] Skipping the hf-cli skill (--exclude-skill)

• [CLI] Install & refresh the hf-cli skill (installer, update, hints) by @​Wauplin in #4608

⚙️ Engine flags for Inference Endpoints, at deploy time and after

--container-command / --container-args no longer require --custom-image. That gate was conservative CLI scoping, not an API constraint: model.command and model.args are top-level fields of the endpoint payload and apply to managed engine images too, which is how the vLLM engine docs recommend passing engine flags. They can now also be changed after deploy — hf endpoints update gained both flags, and HfApi.update_inference_endpoint / InferenceEndpoint.update the matching container_command / container_args parameters. Values replace rather than append: pass an empty string to reset to the image default, or omit the flag to leave it untouched. --health-route and --port still require --custom-image, since they only exist on the custom image payload.

# Engine flags at deploy time, no custom image required anymore
>>> hf endpoints deploy my-endpoint --repo gpt2 --framework pytorch \
      --accelerator cpu --instance-size x2 --instance-type intel-icl \
      --region us-east-1 --vendor aws \
      --container-args "--max-model-len 8192"
Change engine flags on an existing endpoint (previously UI / raw API only)
>>> hf endpoints update my-endpoint --container-args "--enable-auto-tool-choice --tool-call-parser lfm2"
Reset to the image defaults
>>> hf endpoints update my-endpoint --container-args ""

• [Inference Endpoints] Allow container command/args without custom image + support them in update by @​gary149 in #4628

🚀 Baseten joins the inference providers

Baseten is now supported for the conversational task. It serves an OpenAI-compatible chat completions API, so there are no provider-specific quirks: target it with provider="baseten" and your own key, or let auto-routing pick it for any model already mapped on the Hub.

>>> from huggingface_hub import InferenceClient
>>> client = InferenceClient(provider="baseten", api_key="<BASETEN_API_KEY>")
>>> out = client.chat_completion(
...     model="zai-org/GLM-5.2",
...     messages=[{"role": "user", "content": "Hello!"}],
</tr></table>

... (truncated)

Commits

• a7d85da Release: v1.27.0
• 1ea6f21 Release: v1.27.0.rc0
• f4c8347 [Inference Endpoints] Allow container command/args without custom image + sup...
• 9a3222e Bump the actions group with 10 updates (#4636)
• db2c685 [HfFileSystem] Fix bucket prefix collisions (#4630)
• 0234ea1 [HfApi] Add region to ExpandSpaceProperty_T (#4641)
• 77969c8 [Xet] Bump minimum hf-xet to 1.5.2 (#4640)
• b4f4e92 [Inference] Add Baseten as inference provider (#3414)
• b9dddd9 [Cache] Don't try to delete snapshot files twice when deleting a revision (#4...
• 62b8e19 [CLI] Install & refresh the hf-cli skill (installer, update, hints) (#4608)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions