Skip to content

chore(deps): update dependency ty to v0.0.84 - #1775

Merged
renovate[bot] merged 1 commit into
mainfrom
renovate/ty-0.x
Sep 25, 2026
Merged

renovate[bot] merged 1 commit into
mainfrom
renovate/ty-0.x

Conversation

@renovate

@renovate renovate Bot commented Sep 25, 2026 •

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
ty (changelog) ==0.0.83 → ==0.0.84 age confidence

Release Notes

astral-sh/ty (ty)

v0.0.84

Compare Source

Released on 2026-09-24.

This release addresses GHSA-vxvm-j4xq-q7m4, a use-after-free vulnerability during incremental type checking that can result in arbitrary code execution when analyzing a specially crafted Python project. Users who run ty on untrusted code should upgrade to 0.0.84 or newer.

Bug fixes
  • Fix stale diagnostics from the LSP server after toggling showSyntaxErrors (#​28759)
LSP server
  • Complete string keys from dictionary initializers (#​28820)
  • Support LSP requests against closed documents (#​28595)
  • Select projects for external files using import search paths (#​28594)
  • Use workspace editor settings for external files (#​28639)
Performance
  • Avoid repeated subtyping checks for materialized recursive protocols (#​28774)
  • Skip reading notebooks when discovering scripts (#​28781)
Core type checking
  • Avoid incorrect simplification of TypeIs materializations (#​28817)
  • Fix disjointness of generic class types (#​28787)
  • Fix staticmethod shadowing through generic receivers and unions (#​28766)
  • Infer callable signatures from bounded type variables (#​28599)
  • Infer constant membership in inline list and set literals (e.g. "foo" in ["foo"] is now inferred as Literal[True]) (#​28676)
  • Infer through optional generic containers in the legacy solver (#​28791)
  • Preserve call narrowing during cyclic inference (#​28708)
  • Preserve intersections of type guard return types (#​28796)
  • Use subtyping for constraint-set implication (#​28657)
Configuration
  • Disable invalid-legacy-positional-parameter by default (#​28834)
Other changes
  • Only consider reachable definitions when determining whether a condition should be exempted from redundant-condition(-strict) due to the condition being defined relative to sys.version_info, sys.platform, os.name or typing.TYPE_CHECKING (#​28788)
Contributors

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added the dependencies Pull requests that update a dependency file label Sep 25, 2026
@codecov

codecov Bot commented Sep 25, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 99.92%. Comparing base (a988e50) to head (c3538e9).

Additional details and impacted files
@@           Coverage Diff           @@
##             main    #1775   +/-   ##
=======================================
  Coverage   99.92%   99.92%           
=======================================
  Files          37       37           
  Lines        1333     1333           
  Branches       71       71           
=======================================
  Hits         1332     1332           
  Partials        1        1           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@renovate
renovate Bot merged commit 7f7d5ff into main Sep 25, 2026
21 checks passed
@renovate
renovate Bot deleted the renovate/ty-0.x branch September 25, 2026 18:15

This branch was successfully deployed

1 active deployment
release — c3538e9a Deployed Sep 25, 2026 by renovate[bot] via release #3914
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants