build(deps-dev): bump the dev-dependencies group with 3 updates

[dependabot]

Updates the requirements on hypothesis, coverage and ty to permit the latest version.
Updates hypothesis to 6.151.4

Release notes

Sourced from hypothesis's releases.

Hypothesis for Python - version 6.151.4

This patch adjusts how we compute the stopping threshold introduced in version 6.151.3, while still maintaining 99% confidence that <1% of test cases pass.

The canonical version of these notes (with links) is on readthedocs.

Commits

• fefce87 Bump hypothesis-python version to 6.151.4 and update changelog
• cfb0d37 Merge pull request #4650 from Liam-DeVoe/stopping-rule
• e4d7549 drop long comment
• a09166c adjust stopping rule
• f3d71e9 Bump hypothesis-python version to 6.151.3 and update changelog
• 42126d6 Merge pull request #4643 from ajdavis/issue-4623-filter-condition
• f69cad6 response to comments
• 34282ed Merge pull request #4649 from Liam-DeVoe/next
• 7de805f Bump hypothesis-python version to 6.151.2 and update changelog
• 559b1c1 Merge pull request #4646 from HypothesisWorks/create-pull-request/patch
• Additional commits viewable in compare view

Updates coverage to 7.13.2

Changelog

Sourced from coverage's changelog.

Version 7.13.2 — 2026-01-25

• Fix: when Python is installed via symlinks, for example with Homebrew, the standard library files could be incorrectly included in coverage reports. This is now fixed, closing issue 2115_.

• Fix: if a data file is created with no read permissions, the combine step would fail completely. Now a warning is issued and the file is skipped. Closes issue 2117_.

.. _issue 2115: coveragepy/coveragepy#2115 .. _issue 2117: coveragepy/coveragepy#2117

.. _changes_7-13-1:

Version 7.13.1 — 2025-12-28

• Added: the JSON report now includes a "start_line" key for function and class regions, indicating the first line of the region in the source. Closes issue 2110_.

• Added: The debug data command now takes file names as arguments on the command line, so you can inspect specific data files without needing to set the COVERAGE_FILE environment variable.

• Fix: the JSON report used to report module docstrings as executed lines, which no other report did, as described in issue 2105_. This is now fixed, thanks to Jianrong Zhao.

• Fix: coverage.py uses a more disciplined approach to detecting where third-party code is installed, and avoids measuring it. This shouldn't change any behavior. If you find that it does, please get in touch.

• Performance: data files that will be combined now record their hash as part of the file name. This lets us skip duplicate data more quickly, speeding the combining step.

• Docs: added a section explaining more about what is considered a missing branch and how it is reported: :ref:branch_explain, as requested in issue 1597. Thanks to Ayisha Mohammed <pull 2092_>.

• Tests: the test suite misunderstood what core was being tested if COVERAGE_CORE wasn't set on 3.14+. This is now fixed, closing issue 2109_.

.. _issue 1597: coveragepy/coveragepy#1597 .. _pull 2092: coveragepy/coveragepy#2092

... (truncated)

Commits

• 513e971 docs: sample HTML for 7.13.2
• 27a8230 docs: prep for 7.13.2
• 27d8daa refactor: plural does more
• a2f248c fix: stdlib might be through a symlink. #2115
• bc52a22 debug: re-organize Matchers to show more of what they do
• f338d81 debug: build is a tuple, don't show it on two lines
• 92020e4 refactor(test): convert to parametrized
• 6387d0a test: let (most) tests run with no network
• 1d31e33 build: workflows sometimes need more than 10 min
• 6294978 refactor: an error message is now uniform across versions
• Additional commits viewable in compare view

Updates ty to 0.0.14

Release notes

Sourced from ty's releases.

0.0.14

Release Notes

Released on 2026-01-26.

Bug fixes

• Consider keyword arguments when unpacking a variadic argument (#22796)
• Fix binary operator false-positive for constrained TypeVars (#22782)
• Fix docstring rendering for literal blocks after doctests (#22676)
• Fix false-positive unsupported-operator for "symmetric" TypeVars (#22756)
• Fix panic when overriding a final method using an assignment (#22831)
• Fix unary operator false-positive for constrained TypeVars (#22783)
• Fix generic functions with a generic (ParamSpec) decorator (#22544)
• Fix memo.changed_at assertion panics (#22498)

LSP server

• Look up attributes on metaclasses for Go to Definition (#22758)
• Suppress type inlay hints for leading-underscore assignments (#22855)

Configuration

• Add allowed-unresolved-imports setting (#22800)

Other changes

• Add assert-type-unspellable-subtype diagnostic, for failed assert_type() where the actual type is a subtype of the named type that can't be spelled in a type expression (#22815)
• Add a new empty-body return code for functions with stub bodies that have non-None return annotations (#22846)
• Add diagnostic disambiguation for different type aliases with the same name (#22852)
• Add support for dict literals and dict() calls as default values for parameters with TypedDict types (#22161)
• Add support for subscripts on intersections (#22654)
• Avoid duplicate syntax errors for await outside functions (#22826)
• Emit an error if the same type parameter appears more than once in a Generic[] subscript (#22738)
• Emit diagnostic for unimplemented abstract method on @​final class (#22753)
• Fix GitLab Code Quality output format for empty diagnostics (#22833)
• Fix assignment in decorated method causing Unknown fallback (#22778)
• Fix false negative when using a non-runtime-checkable protocol in a match class pattern (#22836)
• Improve completion rankings for raise-from/except contexts (#22775)
• Improve invalid assignment diagnostics with type context (#22643)
• Improve support for kwarg splats in dictionary literals (#22781)
• Infer TypedDict types with >=1 required key as being always truthy (#22808)
• Point to an overload with an invalid @final decoator when emitting invalid-overload errors for invalid @final decorators (#22812)
• Require both *args and **kwargs when calling a ParamSpec callable (#22820)
• Stricter validation of TypedDict definitions (#22811)
• Support recursive and stringified annotations in functional typing.NamedTuples (#22718)
• Support solving generics involving PEP 695 type aliases (#22678)
• Use a more lenient fallback type for failed namedtuple() and NamedTuple calls (#22765)
• Use type context from augmented assignment dunder calls (#22540)
• Check that starred arguments in function calls are iterable (#22805)

... (truncated)

Changelog

Sourced from ty's changelog.

0.0.14

Released on 2026-01-26.

Bug fixes

• Consider keyword arguments when unpacking a variadic argument (#22796)
• Fix binary operator false-positive for constrained TypeVars (#22782)
• Fix docstring rendering for literal blocks after doctests (#22676)
• Fix false-positive unsupported-operator for "symmetric" TypeVars (#22756)
• Fix panic when overriding a final method using an assignment (#22831)
• Fix unary operator false-positive for constrained TypeVars (#22783)
• Fix generic functions with a generic (ParamSpec) decorator (#22544)
• Fix memo.changed_at assertion panics (#22498)

LSP server

• Look up attributes on metaclasses for Go to Definition (#22758)
• Suppress type inlay hints for leading-underscore assignments (#22855)

Configuration

• Add allowed-unresolved-imports setting (#22800)

Other changes

• Add assert-type-unspellable-subtype diagnostic, for failed assert_type() where the actual type is a subtype of the named type that can't be spelled in a type expression (#22815)
• Add a new empty-body return code for functions with stub bodies that have non-None return annotations (#22846)
• Add diagnostic disambiguation for different type aliases with the same name (#22852)
• Add support for dict literals and dict() calls as default values for parameters with TypedDict types (#22161)
• Add support for subscripts on intersections (#22654)
• Avoid duplicate syntax errors for await outside functions (#22826)
• Emit an error if the same type parameter appears more than once in a Generic[] subscript (#22738)
• Emit diagnostic for unimplemented abstract method on @​final class (#22753)
• Fix GitLab Code Quality output format for empty diagnostics (#22833)
• Fix assignment in decorated method causing Unknown fallback (#22778)
• Fix false negative when using a non-runtime-checkable protocol in a match class pattern (#22836)
• Improve completion rankings for raise-from/except contexts (#22775)
• Improve invalid assignment diagnostics with type context (#22643)
• Improve support for kwarg splats in dictionary literals (#22781)
• Infer TypedDict types with >=1 required key as being always truthy (#22808)
• Point to an overload with an invalid @final decoator when emitting invalid-overload errors for invalid @final decorators (#22812)
• Require both *args and **kwargs when calling a ParamSpec callable (#22820)
• Stricter validation of TypedDict definitions (#22811)
• Support recursive and stringified annotations in functional typing.NamedTuples (#22718)
• Support solving generics involving PEP 695 type aliases (#22678)
• Use a more lenient fallback type for failed namedtuple() and NamedTuple calls (#22765)
• Use type context from augmented assignment dunder calls (#22540)
• Check that starred arguments in function calls are iterable (#22805)

... (truncated)

Commits

• 16597f5 Bump version to 0.0.14 (#2632)
• 342e6b3 Update actions/checkout action to v6.0.2 (#2624)
• a390952 Update prek dependencies (#2625)
• 1d3d416 Update actions/cache action to v5.0.2 (#2623)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.