[dependabot]

Bumps the uv group with 2 updates in the /build/docker/test directory: basedpyright and ruff.

Updates basedpyright from 1.39.9 to 1.40.2

Release notes

Sourced from basedpyright's releases.

v1.40.2 (pyright 1.1.414)

What's Changed

• Fix typeshed packaging for the browser-basedpyright npm package by @​BertalanD in DetachHead/basedpyright#1890
• generate builtin docstrings for python 3.15 by @​DetachHead in DetachHead/basedpyright#1895

Full Changelog: DetachHead/basedpyright@v1.40.1...v1.40.2

v1.40.1 (pyright 1.1.414)

What's Changed

• Merge 1.1.414 by @​DetachHead in DetachHead/basedpyright#1883
• fix multi-line display of indented lines in builtin docstrings by @​tommyming in DetachHead/basedpyright#1882

Full Changelog: DetachHead/basedpyright@v1.40.0...v1.40.1

v1.40.0 (pyright 1.1.412)

What's Changed

• drop support for python 3.8 and 3.9 in the pypi package, which are EOL by @​DetachHead in DetachHead/basedpyright#1876
  • users who still need to use unsupported Python versions can still install the basedpyright npm package
• fix rendering of newlines for builtin docstrings by @​tommyming in DetachHead/basedpyright#1871
• migrate the docs site to zensical by @​DetachHead in DetachHead/basedpyright#1795
• move locale env variable docs to the more appropriate "Environment Variables" page by @​DetachHead in DetachHead/basedpyright#1878
• Support new Python Environments API when enabled by @​Weidav in DetachHead/basedpyright#1860

New Contributors

• @​tommyming made their first contribution in DetachHead/basedpyright#1871
• @​Weidav made their first contribution in DetachHead/basedpyright#1860

Full Changelog: DetachHead/basedpyright@v1.39.10...v1.40.0

v1.39.10 (pyright 1.1.412)

What's Changed

• add allowedUntypedLibraries and failOnWarnings to pyrightconfig.schema.json by @​DetachHead in DetachHead/basedpyright#1851
• Update pycharm setup instructions by @​charliecloudberry in DetachHead/basedpyright#1862
• Merge 1.1.412 by @​DetachHead in DetachHead/basedpyright#1869
• fix redundant workspace/configuration request by @​DetachHead in DetachHead/basedpyright#1847

New Contributors

• @​vmphase made their first contribution in DetachHead/basedpyright#1866

Full Changelog: DetachHead/basedpyright@v1.39.9...v1.39.10

Commits

• 3447596 asdf
• 9c403f1 retry vscode publish because vs marketplace was down
• fa4b52d 1.40.2
• 3ca944f pin python version to 3.15
• 1f4822c add python 3.15 builtin docstrings
• 77cfb2d bump python dependencies & pnpm (#1877)
• a8a92cd formatting
• d55e86a Fix typeshed packaging for browser-basedpyright
• c63390c delete dependabot config. too much of a pain in the ass to configure it to no...
• 278e99c delete weekly typechecker benchmark workflow
• Additional commits viewable in compare view

Updates ruff from 0.15.22 to 0.17.1

Release notes

Sourced from ruff's releases.

0.17.1

Release Notes

Released on 2026-10-15.

Preview features

• [pycodestyle] Don't treat None, True, or False as keywords (E271-E274) (#29322)

Bug fixes

• Fix dedent with multiple leading comments (#29382)
• [flake8-pyi] Detect legacy positional-only parameters in __new__ methods (PYI063) (#28502)
• [flake8-pyi] Fix false positives on quoted annotations (PYI036) (#29274)
• [perflint] Avoid invalid comprehension suggestions (PERF401, PERF403) (#29366)

Rule changes

• Treat more collections and weakref containers as mutable (#29213)

Documentation

• [flake8-import-conventions] Update default and example aliases (#29333)

Contributors

• @​fixfon
• @​mmaxjr
• @​joshuavetos
• @​nekomario28
• @​ntBre
• @​shan3520

Install ruff 0.17.1

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ruff/releases/download/0.17.1/ruff-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/ruff/releases/download/0.17.1/ruff-installer.ps1 | iex"

Download ruff 0.17.1

| File | Platform | Checksum |

... (truncated)

Changelog

Sourced from ruff's changelog.

0.17.1

Released on 2026-10-15.

Preview features

• [pycodestyle] Don't treat None, True, or False as keywords (E271-E274) (#29322)

Bug fixes

• Fix dedent with multiple leading comments (#29382)
• [flake8-pyi] Detect legacy positional-only parameters in __new__ methods (PYI063) (#28502)
• [flake8-pyi] Fix false positives on quoted annotations (PYI036) (#29274)
• [perflint] Avoid invalid comprehension suggestions (PERF401, PERF403) (#29366)

Rule changes

• Treat more collections and weakref containers as mutable (#29213)

Documentation

• [flake8-import-conventions] Update default and example aliases (#29333)

Contributors

• @​fixfon
• @​mmaxjr
• @​joshuavetos
• @​nekomario28
• @​ntBre
• @​shan3520

0.17.0

Released on 2026-10-09.

The executables in our macOS and Windows release archives and ruff wheels are now code-signed. macOS executables are signed with an Apple Developer ID certificate and notarized by Apple. Windows executables have timestamped Authenticode signatures from Azure Artifact Signing. This enables verification of the release publisher and binary integrity, supports publisher-based allowlisting, and should reduce security warnings and antivirus false positives.

Breaking changes

• Update the default and latest Python versions for 3.15 (#28792)

  Ruff now defaults to Python 3.11 instead of 3.10 when no Python version is configured through target-version or requires-python. When checking for syntax errors without a configured Python version, Ruff now defaults to Python 3.15

... (truncated)

Commits

• 4683270 Bump version to 0.17.1 (#29420)
• 3514027 [ty] Update typing conformance suite pin (#29417)
• 8294556 Update referenced PR security-review workflow (#29237)
• d1e1b1f [ty] Preserve recursive aliases when rebuilding intersections (#29057)
• 9352615 [perflint] Avoid invalid comprehension suggestions (PERF401, PERF403) (...
• 83a3afc Fix dedent with multiple leading comments (#29382)
• b42a873 [ty] Clarify object attribute write-contract rationale (#29384)
• d01678e [ty] Clarify object attribute write-contract rationale (#29384)
• 355b42a [ty] Avoid writable override contracts from object (#29373)
• e26e6d2 [ty] Collect intersection inference through constraint relations (#28677)
• Additional commits viewable in compare view

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.