From ca9048b76718e998aa8a07eddf89801d25ae369e Mon Sep 17 00:00:00 2001
From: Martin Pitt <martin@amutable.com>
Date: Sun, 8 Nov 2026 12:56:59 +0000
Subject: [PATCH 1/2] rpm: build the install list typed, not by assignment

ty 0.0.99 rejects assigning the untyped list of SWIG packages to an annotated
list[Package]. Build it as list[Package] directly instead, so that only the
known gap in the SWIG iteration types needs ignoring.

Signed-off-by: Martin Pitt <martin@amutable.com>
---
 package_system/rpm/install.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/package_system/rpm/install.py b/package_system/rpm/install.py
index d236fe3c..112e016e 100755
--- a/package_system/rpm/install.py
+++ b/package_system/rpm/install.py
@@ -101,7 +101,7 @@ def install(
         query.filter_repo_id(["@commandline"])
     goal = libdnf5.base.Goal(base)
     # SWIG exposes iteration at runtime but not in its type information.
-    packages: list[libdnf5.rpm.Package] = list(query)  # ty: ignore[invalid-argument-type]
+    packages = list[libdnf5.rpm.Package](query)  # ty: ignore[invalid-argument-type]
     for pkg in packages:
         goal.add_rpm_install(pkg)
     tx = goal.resolve()

From f230a78132ddf8b09571168f5b4878298f171479 Mon Sep 17 00:00:00 2001
From: "github-actions[bot]" <noreply@amutable.com>
Date: Sun, 8 Nov 2026 04:20:14 +0000
Subject: [PATCH 2/2] deps: bump pinned tool releases
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

- ruff: 0.17.3 → 0.17.4
- ty: 0.0.97 → 0.0.99
- syft: v1.56.0 → v1.57.0
- quarry: 0b5619318478 → b055d7453d68

Signed-off-by: github-actions[bot] <noreply@amutable.com>
---
 examples/image/expected.json | 12 ++++++------
 tine.lock.json               | 36 ++++++++++++++++++------------------
 2 files changed, 24 insertions(+), 24 deletions(-)

diff --git a/examples/image/expected.json b/examples/image/expected.json
index f22a63fa..7713ecc0 100644
--- a/examples/image/expected.json
+++ b/examples/image/expected.json
@@ -1,7 +1,7 @@
 {
   "arm64": {
     "boot-demo.fedora": {
-      "sha256": "5f456c1828f64b0cdec56a21784c8a9b5944764ac8590d2560aee3a8c0b3345f"
+      "sha256": "e3377bc790d7f40a25bd0126b5d18904d29bcc9cbb287047113019845d971b1f"
     },
     "boot-demo.fedora[boot][initrd]": {
       "sha256": "0658f07f0ba724f1531c7e7a18b05730399747996d2640e8356da7ba6098452b"
@@ -13,10 +13,10 @@
       "sha256": "49e38b1fba57b2bb1d9b6d84482b6660f761541c5c7e40d0f62771e6c551c2ad"
     },
     "boot-demo.fedora[disk-manifest]": {
-      "sha256": "ae88a339d4ad33388c093ecd7a4156312893dd04306d2a894513d77dd38d4321"
+      "sha256": "be8c8333741efd20eb61b061aeba2105bc7e5fe63755fbe350d3709326bd585e"
     },
     "boot-demo.fedora[manifests][esp]": {
-      "sha256": "5594b01e4c5bf835ea7295120a54956856cc4c44825f636c15f712ee1c540083"
+      "sha256": "29b830548a2783755d2c469d2ba975a0ab9bc6202b4c289b77a9882b5daf18b2"
     },
     "boot-demo.fedora[manifests][usr]": {
       "sha256": "314c1e4341d5c5ab22d18519c374c76b5001e2718daed02edbc0e854d5b069b6"
@@ -36,7 +36,7 @@
   },
   "x86_64": {
     "boot-demo.fedora": {
-      "sha256": "ba218d33589f4629a4581f2ed96acbb4e48a94409fccca628462413e8029caee"
+      "sha256": "810f4d8cd0ae75dd5d58c09784615409a4c0c5983f44b9a7e68b3e2b758aaab0"
     },
     "boot-demo.fedora[boot][initrd]": {
       "sha256": "92c4e74ec361a81e7dcb0484dfb97ba060f2c3199f790c0524c2811f21306254"
@@ -48,10 +48,10 @@
       "sha256": "1dbd49e1af726cb9023fd1da842d5441736563c5dea426901a98e2b5e22c14cb"
     },
     "boot-demo.fedora[disk-manifest]": {
-      "sha256": "9459f750204275ee3e1ceac18bacc5eb4503f75eb887e0bfac38f40209d11120"
+      "sha256": "8c434b3a0a28f6c6eb6e1609bb766258dbf51c5e0b7e2c79b7161df918561713"
     },
     "boot-demo.fedora[manifests][esp]": {
-      "sha256": "a3fa648dedce1f695ab51f67fbe6f5c6cf77e88d11d0c18ccbf2e8d8c3898fde"
+      "sha256": "a856a70ea0b09588e28798cf88250f550ae2475f705ed6d84cea88c076b79946"
     },
     "boot-demo.fedora[manifests][usr]": {
       "sha256": "0451b4a974d9376d975cf92902fc3a287e1a94679947cbddaebc540d838ba861"
diff --git a/tine.lock.json b/tine.lock.json
index c447fcbf..cf420571 100644
--- a/tine.lock.json
+++ b/tine.lock.json
@@ -56,53 +56,53 @@
   },
   "ruff": {
     "repository": "astral-sh/ruff",
-    "release": "0.17.3",
+    "release": "0.17.4",
     "platforms": {
       "arm64": {
         "artifact": "ruff-aarch64-unknown-linux-musl.tar.gz",
-        "sha256": "650d5991fea0baf8a5ee17672a3b20c45ac238ac85fa09077d66ef0cec31cdcf",
-        "size": 9574296,
+        "sha256": "71491cf93242d1bde15dcc628fd105f27c54738bef6b94050b9363ba6795f97e",
+        "size": 9608470,
         "strip_prefix": "ruff-aarch64-unknown-linux-musl"
       },
       "x86_64": {
         "artifact": "ruff-x86_64-unknown-linux-musl.tar.gz",
-        "sha256": "85e76bbb60e708a22624b31efb227e8bdaa6978177b93c146d352de4caf37ba1",
-        "size": 10407681,
+        "sha256": "d1d6ec9ce1ce0c01e23532a157a677077ba1f82f7cd2cde6f0bd75e65f85df93",
+        "size": 10433557,
         "strip_prefix": "ruff-x86_64-unknown-linux-musl"
       }
     }
   },
   "ty": {
     "repository": "astral-sh/ty",
-    "release": "0.0.97",
+    "release": "0.0.99",
     "platforms": {
       "arm64": {
         "artifact": "ty-aarch64-unknown-linux-musl.tar.gz",
-        "sha256": "ecb8248acf983abf32b304bfa7f88098f942af177d2cca72bfea1967cb2bcd7a",
-        "size": 13520439,
+        "sha256": "1aeb90425e934914f437f30ec7de6f5a55352aa858628903adb08a24a852191e",
+        "size": 13659057,
         "strip_prefix": "ty-aarch64-unknown-linux-musl"
       },
       "x86_64": {
         "artifact": "ty-x86_64-unknown-linux-musl.tar.gz",
-        "sha256": "2a49f551e757f8e02b975270296595145a690428b9531248066c8427d11de4b4",
-        "size": 14683139,
+        "sha256": "cae79385c6db78ecb62ff113edd02d8b79536849beb9771f43a5a68e1df7ca21",
+        "size": 14839660,
         "strip_prefix": "ty-x86_64-unknown-linux-musl"
       }
     }
   },
   "syft": {
     "repository": "anchore/syft",
-    "release": "v1.56.0",
+    "release": "v1.57.0",
     "platforms": {
       "arm64": {
-        "artifact": "syft_1.56.0_linux_arm64.tar.gz",
-        "sha256": "ace61b9397ae28189c674ae332d67a8074dafd71e87724dfb8b22412d8253bb5",
-        "size": 28639815
+        "artifact": "syft_1.57.0_linux_arm64.tar.gz",
+        "sha256": "410cbfa0ae0f63246bc0057843760b1de2833cd23919e025e368fd7681308cdb",
+        "size": 28650676
       },
       "x86_64": {
-        "artifact": "syft_1.56.0_linux_amd64.tar.gz",
-        "sha256": "1c2493cfcf52d3367d6cb25780d9190c111c2219c34c820574c43e8bae15c528",
-        "size": 31413058
+        "artifact": "syft_1.57.0_linux_amd64.tar.gz",
+        "sha256": "9c077a7d43029b3b13e98a8db720661e700c4d58db6352153a06395ae4a2a704",
+        "size": 31424471
       }
     }
   },
@@ -183,6 +183,6 @@
   "quarry": {
     "repository": "https://github.com/amutable/quarry",
     "ref": "main",
-    "commit": "0b5619318478b9c5438763ba06e8914ae3f5d08b"
+    "commit": "b055d7453d68ac2a84c5c73026f844ab5506b9b5"
   }
 }