Update dev dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
ruff (source, changelog)	==0.16.7 → ==0.16.8
tox (changelog)	==4.61.4 → ==4.62.0

---

Release Notes

astral-sh/ruff (ruff)

v0.16.8

Compare Source

Released on 2026-09-16.

Bug fixes

• Visit functional TypedDict keyword arguments correctly (#​28584)
• [flake8-simplify] Detect nested async with under sync parent (SIM117) (#​27821)
• [flake8-simplify] Preserve operand order in SIM109 fix (#​27824)
• [pyupgrade] Preserve required parentheses in multiline UP040 fixes (#​28164)
• [pyupgrade] Skip TypeVarTuple and ParamSpec conversions with bounds or constraints (UP040, UP046, UP047) (#​28505)

Rule changes

• Add support for __lazy_modules__ (#​28459)
• Recognize PEP-728 TypedDict class keywords (#​28533)
• Recognize quoted types in typing.TypeForm (#​28507)
• Support conditional assignment to __lazy_modules__ (#​28491)
• [flake8-type-checking] Prefer lazy imports over TYPE_CHECKING on Python 3.15 and later (TC001, TC002, TC003) (#​28541)
• [pyupgrade] Make the fix for UP040 always unsafe (#​28526)
• [pyupgrade] Stop recommending deprecated ByteString aliases (UP035) (#​28498)
• [ruff, flake8-use-pathlib] Recognize the parent_mode argument (RUF064, PTH103) (#​28528)
• [ruff] Detect \Z in pytest.raises() match patterns (RUF043) (#​28598)

CLI

• Use rule name and code in formatter incompatibility warnings (#​28571)

Configuration

• [flake8-tidy-imports] Add extend-banned-api (#​28644)

Contributors

• @​VedantMadane
• @​alzeph
• @​charliermarsh
• @​fredrikblau
• @​ntBre
• @​zsol
• @​Aniket-a14
• @​r-b-1

tox-dev/tox (tox)

v4.62.0

Compare Source

What's Changed

• 🐛 fix(type): pass the latest ty and close Any gaps by @​gaborbernat in #​4075
• 🐛 fix(config): honor an empty TOX_FACTOR override by @​gaborbernat in #​4074

Full Changelog: tox-dev/tox@4.61.5...4.62.0

v4.61.5

Compare Source

What's Changed

• chore(type): narrow execute_async cwd for pyrefly 1.3 by @​yuefdev in #​4069
• docs: fix the parameter list on Loader.build by @​hxperl in #​4070
• fix(config): reject boolean TOML range bounds by @​yuefdev in #​4066
• fix(config): accept empty set_env lists by @​yuefdev in #​4065
• fix: correct coverage startup environment variable by @​yuefdev in #​4067
• fix(config): let empty factor fallbacks override TOML group defaults by @​glaziermag in #​4072

New Contributors

• @​yuefdev made their first contribution in #​4069
• @​hxperl made their first contribution in #​4070
• @​glaziermag made their first contribution in #​4072

Full Changelog: tox-dev/tox@4.61.4...4.61.5

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.