Skip to content

chore(deps): update dependency ty to v0.0.84 - #283

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/ty-0.x
Open

chore(deps): update dependency ty to v0.0.84#283
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/ty-0.x

Conversation

@renovate

@renovate renovate Bot commented Sep 13, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
ty (changelog) ==0.0.78 → ==0.0.84 age confidence

Release Notes

astral-sh/ty (ty)

v0.0.84

Compare Source

Released on 2026-09-24.

This release addresses GHSA-vxvm-j4xq-q7m4, a use-after-free vulnerability during incremental type checking that can result in arbitrary code execution when analyzing a specially crafted Python project. Users who run ty on untrusted code should upgrade to 0.0.84 or newer.

Bug fixes
  • Fix stale diagnostics from the LSP server after toggling showSyntaxErrors (#​28759)
LSP server
  • Complete string keys from dictionary initializers (#​28820)
  • Support LSP requests against closed documents (#​28595)
  • Select projects for external files using import search paths (#​28594)
  • Use workspace editor settings for external files (#​28639)
Performance
  • Avoid repeated subtyping checks for materialized recursive protocols (#​28774)
  • Skip reading notebooks when discovering scripts (#​28781)
Core type checking
  • Avoid incorrect simplification of TypeIs materializations (#​28817)
  • Fix disjointness of generic class types (#​28787)
  • Fix staticmethod shadowing through generic receivers and unions (#​28766)
  • Infer callable signatures from bounded type variables (#​28599)
  • Infer constant membership in inline list and set literals (e.g. "foo" in ["foo"] is now inferred as Literal[True]) (#​28676)
  • Infer through optional generic containers in the legacy solver (#​28791)
  • Preserve call narrowing during cyclic inference (#​28708)
  • Preserve intersections of type guard return types (#​28796)
  • Use subtyping for constraint-set implication (#​28657)
Configuration
  • Disable invalid-legacy-positional-parameter by default (#​28834)
Other changes
  • Only consider reachable definitions when determining whether a condition should be exempted from redundant-condition(-strict) due to the condition being defined relative to sys.version_info, sys.platform, os.name or typing.TYPE_CHECKING (#​28788)
Contributors

v0.0.83

Compare Source

Released on 2026-09-21.

Bug fixes
  • Fix hangs from repeated partial application (#​28754)
  • Preserve PEP 695 bindings across nested classes (#​28723)
LSP server
  • Include required imports in every inlay hint (#​28724)
  • Preserve fast name filtering for normalized Unicode source (#​28701)
  • Refresh diagnostics after workspace configuration changes (#​28755)
Diagnostic improvements
  • Expand unreachable-code annotations for redundant conditions (#​28674)
  • Improve diagnostics for async generator stubs (#​28692)
  • Improve primary diagnostic annotations for redundant-condition(-strict) diagnostics (#​28666)
  • Point misplaced tuple ellipsis diagnostics at each ellipsis (#​28709)
Other changes
  • Add rules that detect suspicious uses of Callable, Iterable, Iterator or Generator types in a boolean context (#​28554)
  • Allow slots to override abstract properties (#​28698)
  • Avoid leaking Unknown from unconstrained collection use-sites (#​28659)
  • Diagnose unguarded cycles in implicit and PEP 613 aliases (#​28704)
  • Eagerly bind unused Self receivers (#​28662)
  • Generalize receiver binding for wrapped callables (#​28725)
  • More faithful representation of bound methods (#​28410)
  • Only classify evidence bounds for constrained type variables (#​28700)
  • Preserve inferred bindings during annotation cycles (#​28717)
  • Preserve quoted aliases during cycle recovery (#​28710)
  • Reject class-scoped type variables in init receivers (#​28706)
  • Reject unsafe TypedDict updates from hidden fields (#​28711)
  • Respect fixed caller type variables when selecting constraints (#​28652)
  • Reuse cached type alias inference for diagnostics (#​28696)
  • Simplify unions of disjoint exclusions (#​28684)
  • Update typing conformance suite (#​28718)
Contributors

v0.0.82

Compare Source

Released on 2026-09-17.

Preview features
  • Ignore Python version from uv metadata (#​28646)
  • Watch script dependencies in CLI watch mode (#​28125)
CLI
  • Only skip uv workspace metadata for a single script (#​28581)
  • Support dependency lints with --config-file (#​28573)
LSP server
  • Filter string literal completions by typed text (#​28612)
  • Find member references across files (#​28669)
  • Find parameter references across files (#​28670)
  • Preserve valid LSP settings when configuration resolution fails (#​28653)
  • Reuse identifier matcher in LSP operations (#​28663)
  • Watch script dependencies in the language server (#​28522)
Diagnostic improvements
  • Add an autofix for unused awaitables (#​28668)
  • Add annotations for unreachable code caused by boolean operands (#​28521)
  • Add subdiagnostics to redundant-condition rules warning about reachability implications (#​28263)
  • Clarify diagnostics for unimplemented abstract members (#​28538)
  • Extend unreachable-code annotations to while, assert, and match statements (#​28290)
Core type checking
  • Allow experimental intersection syntax in PEP 695 aliases (#​28513)
  • Bound aliased intersection expansion during inference (#​28546)
  • Check declared variance against final method bindings (#​28155)
  • Fix recursive protocol checks for decorated methods (#​28293)
  • Freshen constructor-owned Self with class type variables (#​28592)
  • Improve disjointness of functools.partial types (#​28660)
  • Include constraint-set assignability in more checks (#​28642)
  • Infer conditional literals from peers in unspecialized contexts (#​28633)
  • Infer generic elements from gradual tuples (#​28637)
  • Introduce Recursive types and fully support recursive implicit type aliases (#​28425)
  • Narrow type context during tuple inference (#​28658)
  • Preserve field metadata after overload resolution (#​28635)
  • Preserve gradual class assignability in constraint-set checks (#​28638)
  • Preserve gradual tuple lengths during callable inference (#​28588)
  • Preserve tuple shapes during concatenation (#​28617)
  • Reject abstract class instantiation (#​28167)
  • Respect frozen=False overrides on Pydantic subclasses (#​28515)
  • Support type[A & B] (#​27124)
  • Sync vendored typeshed stubs (#​28597). Typeshed diff
  • Treat imports as bindings instead of declarations (#​27325)
Performance
  • Compact reachable binding and declaration histories (#​28349)
  • Compare bound-method receivers before signatures (#​28384)
  • Deduplicate intermediate intersection branches (#​28649)
  • Optimize fuel management in the constraint solver (#​28568)
  • Skip inferring concrete methods during abstract-method discovery (#​28613)
  • Skip legacy namespace parsing for __init__ files without pkg (#​28665)
Memory usage improvements
  • Avoid storing constraint nodes twice (#​28375)
Contributors

v0.0.81

Compare Source

Released on 2026-09-14.

Bug fixes
  • Escape glob characters in anchored directory paths (#​28518)
  • Ignore divergent markers when detecting descriptors (#​28514)
CLI
  • Anchor default exclude patterns at the project root (#​28463)
Core type checking
  • Avoid rebinding extracted method calls (#​28469)
  • Default-specialize class objects in meta-protocol checks (#​28265)
  • Fix MRO ordering for generic bases (#​28172)
  • Fix assignability of bounded typevars to intersection types (#​28479)
  • Fix variadic partial signature reduction (#​28586)
  • Handle gradual metaclass ancestry and conflicts (#​28474)
  • Preserve recursive metadata in union transformations (#​28497)
  • Preserve runtime comparison semantics when narrowing tagged unions (#​28053)
  • Preserve wrapped signatures in nominal descriptor checks (#​28466)
  • Reject reassignment of enum members (#​28462)
  • Report override conflicts introduced by new bases (#​28530)
  • Resolve dependencies within correlated inference alternatives (#​28252)
  • Respect instance dictionary storage for slotted classes (#​27749)
  • Validate explicitly overridden constructor signatures (#​28115)
Performance
  • Avoid redundant superclass member inference (#​28587)
  • Reuse rendered union elements when displaying types (#​28494)
Memory usage improvements
  • Reduce retained AST memory by shrinking expressions (#​28335)
  • Share strings in dependency metadata (#​28141)
Contributors

v0.0.80

Compare Source

Released on 2026-09-09.

Bug fixes
  • Fix --force-exclude for directories with an excluded ancestor (#​28451)
  • Preserve metaclass candidates after conflicts (#​28461)
LSP server
  • Give existing autofixes descriptive titles (#​28456)
  • Prevent LSP hangs during inlay hint bursts (#​28390)
Diagnostic improvements
  • Preserve redundant-condition diagnostics with unreachable operands (#​28374)
Core type checking
  • Check captured receivers when calling wrapped classmethods (#​28467)
  • Fix cached classmethods on generic classes (#​28207)
  • Fix disjointness of type guards and boolean literals (#​28363)
  • Infer tuple variance from the full tuple spec (#​28446)
  • Infer tuple variance more precisely (#​28426)
  • Preserve callable identity across specialized types (#​28409)
  • Preserve callback type context through ParamSpec forwarding (#​28439)
  • Preserve wrapped functions in precise functools.partial relations (#​28460)
  • Respect descriptor protocol for __set__ itself (#​28408)
  • Respect type-variable bounds in argument context (#​28448)
  • Unwrap union alternatives in overload implementations (#​28468)
Performance
  • Distribute len inference over unions (#​28470)
  • Fast-path concrete literal intersections (#​28348)
Memory usage improvements
  • Avoid excess capacity in multi-binding tables (#​28412)
  • Share equivalent place tables within a file (#​28319)
  • Share names in synthesized constructor parameters (#​28398)
Contributors

v0.0.79

Compare Source

Released on 2026-09-07.

Bug fixes
  • Avoid dict keyword-call panics when typing is shadowed (#​28292)
  • Discover configs in models derived from legacy generic classes (#​28397)
  • Normalize recursive collection-use constraints (#​28332)
  • Recover cycles when constructing known class instances (#​28289)
CLI
  • Embed archive checksums in the shell installer (#​4458)
Diagnostic improvements
  • Add Literal fixes for diagnostics flagging invalid type annotations (#​28185)
  • Add await fixes for redundant conditions (#​28169)
  • Add assert_never fixes for redundant final elif branches (#​28178)
  • Add defensive assertion fallback for redundant elif fixes (#​28179)
  • Add rules to detect always-truthy and always-falsy conditions (#​28034)
  • Preserve deprecations on decorated callables (#​28256)
  • Require a direct dependency for reveal_type backport fixes (#​28177)
  • Suggest variable-length tuple annotations for redundant conditions (#​28168)
Core type checking
  • Align TypeIs and isinstance narrowing (#​28193)
  • Avoid falling back to Unknown when collecting type context constraints (#​28297)
  • Ensure f is identity(f) evaluates to Literal[True] (#​28360)
  • Fix callable specialization with union-valued ParamSpec (#​28085)
  • Infer variance through recursive protocols (#​28077)
  • Narrow types with ordered length comparisons (#​28264)
  • Preserve gradual type context during generic call inference (#​28091)
  • Preserve nominal subtyping for top-materialized protocols (#​28271)
  • Preserve outer type variables during ParamSpec inference (#​28306)
  • Preserve protocol intersections when narrowing gradual types (#​28391)
  • Promote literals in nested (non-covariant) positions (#​28389)
  • Reject missing attributes on type[] aliases (#​28267)
  • Solve formal unions using constraint-sets (#​28312)
  • Sync vendored typeshed stubs (#​28331). Typeshed diff
Performance
  • Avoid unnecessary work when building specializations (#​28369)
  • Bypass materialization queries for simple types (#​28367)
  • Cache exception suppression for context managers (#​28376)
  • Intern statement call predicates (#​28373)
  • Lazily compute argument-context specializations (#​28378)
  • Pre-size packed AST index chunks (#​28372)
  • Reduce repeated work in use-def merges (#​28365)
  • Skip decorator flags query for undecorated methods (#​28338)
Memory usage improvements
  • Avoid caching simple type specializations (#​28333)
  • Box cached MRO error details (#​28351)
  • Reuse generic aliases as MRO query keys (#​28350)
  • Reuse interned bound method signatures (#​28346)
  • Reuse stored function signatures without caching duplicates (#​28347)
  • Share retained use-def tables across scopes (#​28313)
  • Store single narrowing operations inline (#​28345)
  • Store uncommon signature metadata out of line (#​28339)
Other changes
  • Declare support for Python 3.15 (#​4476)
Contributors

Configuration

📅 Schedule: (in timezone Europe/Paris)

  • Branch creation
    • "before 6am on Monday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot changed the title chore(deps): update dependency ty to v0.0.80 chore(deps): update dependency ty to v0.0.81 Sep 15, 2026
@renovate
renovate Bot force-pushed the renovate/ty-0.x branch 2 times, most recently from 9380dc4 to 0bfc5a7 Compare September 17, 2026 20:29
@renovate renovate Bot changed the title chore(deps): update dependency ty to v0.0.81 chore(deps): update dependency ty to v0.0.82 Sep 17, 2026
@renovate renovate Bot changed the title chore(deps): update dependency ty to v0.0.82 chore(deps): update dependency ty to v0.0.83 Sep 22, 2026
@renovate renovate Bot changed the title chore(deps): update dependency ty to v0.0.83 chore(deps): update dependency ty to v0.0.84 Sep 25, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

@merylldindin merylldindin

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@merylldindin