Update Python dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
ruff (source, changelog)	^0.15.2 → ^0.15.4
tox (changelog)	^4.44.0 → ^4.46.3

---

Release Notes

astral-sh/ruff (ruff)

v0.15.4

Compare Source

Released on 2026-02-26.

This is a follow-up release to 0.15.3 that resolves a panic when the new rule PLR1712 was enabled with any rule that analyzes definitions, such as many of the ANN or D rules.

Bug fixes

• Fix panic on access to definitions after analyzing definitions (#​23588)
• [pyflakes] Suppress false positive in F821 for names used before del in stub files (#​23550)

Documentation

• Clarify first-party import detection in Ruff (#​23591)
• Fix incorrect import-heading example (#​23568)

Contributors

• @​stakeswky
• @​ntBre
• @​thejcannon
• @​GeObts

v0.15.3

Compare Source

Released on 2026-02-26.

Preview features

• Drop explicit support for .qmd file extension (#​23572)

  This can now be enabled instead by setting the extension option:

  # ruff.toml
  extension = { qmd = "markdown" }
  
  # pyproject.toml
  [tool.ruff]
  extension = { qmd = "markdown" }

• Include configured extensions in file discovery (#​23400)

• [flake8-bandit] Allow suspicious imports in TYPE_CHECKING blocks (S401-S415) (#​23441)

• [flake8-bugbear] Allow B901 in pytest hook wrappers (#​21931)

• [flake8-import-conventions] Add missing conventions from upstream (ICN001, ICN002) (#​21373)

• [pydocstyle] Add rule to enforce docstring section ordering (D420) (#​23537)

• [pylint] Implement swap-with-temporary-variable (PLR1712) (#​22205)

• [ruff] Add unnecessary-assign-before-yield (RUF070) (#​23300)

• [ruff] Support file-level noqa in RUF102 (#​23535)

• [ruff] Suppress diagnostic for invalid f-strings before Python 3.12 (RUF027) (#​23480)

• [flake8-bandit] Don't flag BaseLoader/CBaseLoader as unsafe (S506) (#​23510)

Bug fixes

• Avoid infinite loop between I002 and PYI025 (#​23352)
• [pyflakes] Fix false positive for @overload from lint.typing-modules (F811) (#​23357)
• [pyupgrade] Fix false positive for TypeVar default before Python 3.12 (UP046) (#​23540)
• [pyupgrade] Fix handling of \N in raw strings (UP032) (#​22149)

Rule changes

• Render sub-diagnostics in the GitHub output format (#​23455)

• [flake8-bugbear] Tag certain B007 diagnostics as unnecessary (#​23453)

• [ruff] Ignore unknown rule codes in RUF100 (#​23531)

  These are now flagged by RUF102 instead.

Documentation

• Fix missing settings links for several linters (#​23519)
• Update isort action comments heading (#​23515)
• [pydocstyle] Fix double comma in description of D404 (#​23440)

Other changes

• Update the Python module (notably find_ruff_bin) for parity with uv (#​23406)

Contributors

• @​zanieb
• @​o1x3
• @​assadyousuf
• @​kar-ganap
• @​denyszhak
• @​amyreese
• @​carljm
• @​anishgirianish
• @​Bnyro
• @​danparizher
• @​ntBre
• @​gcomneno
• @​jaap3
• @​stakeswky

tox-dev/tox (tox)

v4.46.3

Compare Source

What's Changed

• 👷 ci(schemastore): branch from upstream master by @​gaborbernat in #​3828
• Fix outdated min version of virtualenv by @​kajinamit in #​3829

New Contributors

• @​kajinamit made their first contribution in #​3829

Full Changelog: tox-dev/tox@4.46.2...4.46.3

v4.46.2

Compare Source

What's Changed

• 👷 ci(schemastore): fix PR creation for fork by @​gaborbernat in #​3827

Full Changelog: tox-dev/tox@4.46.1...4.46.2

v4.46.1

Compare Source

What's Changed

• 🐛 fix(config): allow glob patterns in ini depends by @​gaborbernat in #​3825
• 👷 ci(schemastore): fix git push auth in update workflow by @​gaborbernat in #​3826
• 🐛 fix(schema): add additionalProperties to partial-tox.json by @​gaborbernat in #​3824

Full Changelog: tox-dev/tox@4.46.0...4.46.1

v4.46.0

Compare Source

What's Changed

• Add architecture (ISA) awareness to Python discovery by @​rahuldevikar in #​3815
• ✨ feat(config): add env_base templates for TOML by @​gaborbernat in #​3817
• 🐛 fix(deps): drop chardet for req file decoding by @​gaborbernat in #​3820
• 🐛 fix(cli): allow --help with invalid config by @​gaborbernat in #​3821

Full Changelog: tox-dev/tox@4.45.0...4.46.0

v4.45.0

Compare Source

What's Changed

• Fix user guide link in README.md by @​cpburnz in #​3805
• 🐛 fix(type): resolve ty 0.0.17 compatibility by @​gaborbernat in #​3807
• 📝 docs: add redirects for old URLs (#​3806) by @​gaborbernat in #​3808
• Bump dependency requirements by @​gaborbernat in #​3812
• fix: cross-section substitution resolves to empty when no factors match by @​worksbyfriday in #​3810
• ✨ feat(schema): enhance schema command with IDE integration by @​gaborbernat in #​3813
• 🐛 fix(env): break circular dependency in environment_variables resolution by @​gaborbernat in #​3816

New Contributors

• @​cpburnz made their first contribution in #​3805

Full Changelog: tox-dev/tox@4.44.0...4.45.0

---

Configuration

📅 Schedule: Branch creation - Between 03:00 AM and 03:59 AM, only on Friday ( * 3 * * 5 ) in timezone Etc/UTC, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.