deps: update dependency ty to v0.0.70 by renovate[bot] · Pull Request #182 · arcjet/arcjet-py

renovate · 2026-08-11T18:21:42Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change
ty (changelog)	`==0.0.23` → `==0.0.70`

Release Notes

astral-sh/ty (ty)

`v0.0.70`

Compare Source

Released on 2026-08-10.

LSP server

Enable and downrank auto-import completions from stub-only modules (#27433)
Fix signature help at end of file (#27622)
Normalize type labels in structured docstrings (#26923)
Preserve typing-only completion ranking in TYPE_CHECKING blocks (#27549)

CLI

Avoid deadlock when scheduling watch checks (#27605)

Diagnostics

Add an opt-in unsound-return-statement lint (#27561)
Add an opt-in unsound-yield lint (#27593)
Diagnose invalid __getattr__ calls (#27502)
Diagnose invalid descriptor __get__ calls (#27400)

Core type checking

Consider object members in protocol comparisons (#27532)
Exclude quantified constraints from semantic type walks (#27613)
Expand Generator aliases when evaluating return, send, and yield types (#27577)
Infer precise TypedDict key-membership truthiness (#27579)
Infer variance through type[T] (#27534)
Preserve contextual inference for declarations in loops (#27594)
Recognize overlapping NewType types and their underlying values (#27522)
Require ClassVar declarations for protocol members (#27530)
Stabilize recursive gradual type alias materialization (#27563)
Support Annotated inside type[...] (#27629)
Validate augmented assignment stores (#27545)

Contributors

`v0.0.69`

Compare Source

Released on 2026-08-06.

Core type checking

isinstance narrowing for generic classes is now more gradual by default (#27308)

This new behavior is more similar to what other major type checkers do. For example:
```
def f(xs: object):
    if isinstance(xs, list):
        reveal_type(xs)  # now: `list[Unknown]`, before: `Top[list[Unknown]]`
```
Note: you might consider enabling analysis.strict-generic-narrowing
if you prefer the strictly correct behavior.

Contributors

@sharkdp

`v0.0.68`

Compare Source

Released on 2026-08-05.

Diagnostics

Preserve property getter call errors (#27509)
Simplify numeric tower displays (e.g., float over int | float) (#27406)
Suggest closing open TypedDict types for Mapping compatibility (#27512)

Core type checking

Avoid double inference of Unpack operands in Union (#27525)
Fix panic from mismatched OR-pattern bindings (#27533)

Contributors

`v0.0.67`

Compare Source

Released on 2026-08-05.

LSP server

Fix unused hints for OR-pattern captures (#27438)
Index match-pattern bindings as symbols (#27260)
Retain typing-only symbols in explicit completions (#27435)

Diagnostics

Preserve called types in intersection diagnostics (#27475)
Suppress unimported-reveal diagnostics in stub files and if TYPE_CHECKING blocks (#27508)

Configuration

Remove deprecated src.root setting in favor of environment.root (#27456)

Core type checking

Check property compatibility when matching class objects to protocols (#27402)
Fix constructor calls on narrowed type-variable intersections (#27493)
Fix specialization cycle with deferred TypeVar defaults (#27453)
Infer generic TypedDicts from unpacked TypedDicts (#27439)
Infer generic TypedDicts through synthesized constructor signatures (#27436)
Normalize unpacked callable signatures for assignability (#27450)
Preserve class type parameters through generic decorators (#27442)
Preserve generic class type variables in constructor inference (#27340)
Preserve return constraints for object-variadic callables (#27431)
Preserve return constraints for top callables (#27446)
Recover generic constructor types from failing overloads (#27460)
Reject Self with incompatible explicit receiver annotations (#27454)
Reject unhashable objects for Hashable protocols (#27441)
Reject unsupported dataclass_transform parameters (#27458)
Restore bottom callable subtyping for gradual prefixes (#27519)
Top-materialize is_dataclass type guard (#27455)
Validate constructor calls on unbounded type variables (#27449)

Performance

Avoid exponential slowdown copying narrowed TypedDict unions (#27492)

Contributors

`v0.0.66`

Compare Source

Released on 2026-08-03.

LSP server

Index with-statement targets as symbols (#27256)
Trigger signature help after completing callable with parentheses (#27084)

Library support

Pydantic: Recognize models installed on extra search paths (#27429)

Diagnostics

Detect __aenter__ and __aexit__ that do not return awaitables (#27414)
Diagnose dataclass fields after inherited defaults (#27327)
Emit diagnostic when specializing a non-generic class (#26883)
Improve error context for incompatible callable signatures (#27422)
Preserve forwarded expanded-variadic diagnostic sources (#27266)

Core type checking

Avoid over-materializing user-defined TypeIs return types (#26864)
Fix enum class container assignability (#27318)
Hide stub-only helpers from implicit builtin lookup (#27423)
Move Unknown out of the experimental ty_extensions API (#27430)
Preserve TypeVarTuple context during Generic recovery (#27381)
Preserve exact numeric types in covariant collections (#27311)
Reject ClassVar and Final qualifiers in NamedTuple fields (#27380)
Reject out-of-scope ParamSpec components (#27378)
Reject specializing non-generic subclasses (#27377)
Respect bounds and constraints in generic materializations (#27228)
Sync vendored typeshed stubs (#27401). Typeshed diff

Contributors

`v0.0.65`

Compare Source

Released on 2026-07-29.

LSP server

Support comprehension walruses in IDE features (#26476)

Library support

Pydantic: Allow mutation of private attributes on frozen models (#27257)
Pydantic: Synthesize __replace__ for models (#27220)

Diagnostics

Correct ParamSpec forwarded-argument diagnostic locations (#27263)
Recover forwarded callable object and constructor sources (#27264)
Recover forwarded functools.partial diagnostic sources (#27265)

Core type checking

Fix gradual class assignability with generic receivers (#27223)
Lazily materialize protocol attributes (#27267)
Narrow tagged unions through all type kinds (#27226)
Prefer static constrained TypeVar solutions (#27057)
Preserve frozen-dataclass setter delegation (#27217)
Preserve inference when filtering constructor overloads (#27254)
Reject frozen-dataclass field deletion through subclasses (#27001)
Stabilize recursive type-constraint ordering (#27176)
Support materialized class type expressions (#27258)

Performance

Avoid quadratic inference for large literal unions (#27178)
Cache protocol receiver binding (#27301)

Contributors

`v0.0.64`

Compare Source

Released on 2026-07-27.

Bug fixes

Fix identity narrowing for NewTypes (#26439)
Make reachability analysis idempotent (#27163)

LSP server

Fix ParamSpec declaration hover and type navigation (#27183)
Implement LSP textDocument/implementation request (#25410)
Introduce shared primitives for parsing backticks in docstrings (#26928)
Render NumPy docstrings as structured Markdown (#25925)

CLI

Add --exclude-scripts and --include-scripts (#27169)
Discover uv workspace roots (#25551)

Diagnostics

Add a lint rule for combined abstract and final decorators (#26932)
Change --add-ignore to add space after the colon for ty: ignore (#27120)
Fix missing-override-decorator suggestion before Python 3.12 (#27166)
Reuse full call diagnostics for implicit setter calls (#27115)

Configuration

Allow unresolved unused venv home paths (#27162)
Simplify script metadata query (#27121)

Core type checking

Decorate only overload implementation signatures (#27147)
Don't consider known-instance types, generic aliases or non-singleton special-form types to be single-valued (#27137)
Improve identity comparison inference for singleton types (#27126)
Improve tuple membership and rich comparison inference (#27164)
Model walrus bindings from comprehensions (#26466)
Narrow tagged unions using identity comparisons (#27130)
Preserve Self in __new__ calls (#27003)
Preserve receiver constraints when binding overloaded methods (#27038)
Support generic manual PEP 695 type aliases (#27083)
Treat bivariance as covariant (#24319)

Performance

Avoid cycles when resolving ModuleType globals (#27182)
Avoid expanding optional enum comparisons (#27105)
Avoid repeated inference when copying mixed TypedDict unions (#27108)
Improve importer performance (#27159)
Improve union and intersection builder performance (#27167)

Contributors

`v0.0.63`

Compare Source

Released on 2026-07-23.

Core type checking

Handle generic stringified PEP 613 (typing.TypeAlias) type aliases (#27092)
Allow equality narrowing across non-final classes (#27031)
Allow interpolated string literals to be promoted to str (#27104)
Fix double specialization of generic type aliases (#27058)
Fix intersections of type and TypeForm (#27099)
When narrowing from a match statement leads a variable x to be inferred as A & B, infer the type of x.attr as <type of A.attr> & <type of B.attr> (#27103)

Library support

Pydantic: Stricter validation of sub-model fields in lax mode (#27091)
Pydantic: Support special underscore parameters in BaseSettings models (#27098)

Performance

Avoid exponential narrowing of optional dynamic match subjects (#27100)
Avoid normalizing cached absolute file paths (#26998)

Contributors

`v0.0.62`

Compare Source

Released on 2026-07-21.

Bug fixes

Guard recursive Protocol and TypedDict relations (#26990)
Prevent stack overflows in recursive type relation checks (#26503)
Recover from cancelled file indexing (#26876)

Diagnostics

Avoid editing ignore comments with trailing reasons (#26939)
Prefer innermost inline suppressions (#26940)
Remove unused own-line ignore comments (#27013)
Reuse applicable own-line suppressions in --add-ignore (#26925)

Configuration

Respect rules and analysis in PEP 723 script metadata configurations (#26671)

Core type checking

Accept gradual constrained TypeVar solutions (#26965)
Avoid recursive TypeVarTuple alias expansion (#27032)
Check inherited method conflicts via the MRO (#27019)
Contextually infer custom __setattr__ assignments (#27015)
Fix Callable isinstance reachability (#26970)
Fix Just[float] protocol matching (#27053)
Fix Self binding for classmethod __new__ constructors (#27030)
Fix nested short-circuit flow snapshots (#26956)
Gate TypedDict PEP 728 parameters by Python version (#26968)
Improve match reachability inference around value-pattern branches (#26979)
Make membership and equality narrowing consistent (#26982)
Preserve constrained TypeVar equality narrowing (#26988)
Preserve constrained TypeVar inequality narrowing (#26995)
Preserve unsatisfiable generic call constraints (#26964)
Respect bounded typevars in union inference (#27023)
Respect metaclass __setattr__ for class attributes (#27000)

Performance

Cache non-terminal-call reachability prefixes (#26810)
Cache protocol Self binding (#26997)
Cache sparse reachability checkpoints (#26811)
Defer statement-call narrowing gates (#26793)

Contributors

`v0.0.61`

Compare Source

Released on 2026-07-17.

Bug fixes

Avoid recursive protocol structural comparisons (#26721)

LSP server

Render Google docstrings as structured Markdown (#26599)

Library support

Pydantic: Collect field metadata through subscripted generic Annotated aliases (#26885)

Diagnostics

Avoid extending own-line suppressions in --add-ignore (#26808)

Core type checking

Derive descriptor setter domains for protocols (#26683)
Enforce declared receiver TypeVar domains (#26863)
Infer isinstance results for aliases and type variables (#26961)
Infer isinstance results for fixed class tuples (#26935)
Narrow inline list and set membership checks (#26955)
Narrow tagged unions by tag truthiness (#26887)
Narrow walrus expression values (#26949)
Project intersections in to_instance (#26892)
Remove inferable TypeVar artifacts recursively (#26787)
Respect mixin receiver domains in method overrides (#26941)
Support TypeVarTuple and Unpack (#25240)

Performance

Deduplicate completion labels (#26890)
Only collect expected types for files open in the editor (#25546)
Parallelize subtype hierarchy search (#26875)
Share heap-backed parser names with CharStr (#26594)
Use the new incremental checker from the ignore crate (#26933)

Contributors

`v0.0.60`

Compare Source

Released on 2026-07-15.

Bug fixes

Expand transparent callable workaround with overloads and Awaitable[T] (#26761)
Separate type-mapping caches by transformation mode (#26857)
Avoid recursive protocol union redundancy checks (#26689)
Handle recursive protocols in redundant-cast checks (#26708)

LSP server

Prevent type that is written with a code span from being incorrectly re-wrapped during docstring Markdown rendering (#26723)

Library support

Pydantic: Support populate_by_name and custom initializers (#26764)
Pydantic: Warn about immediately discarded extra arguments (#26762)

Diagnostics

Narrow TypeGuard keyword arguments and remove invalid-type-guard-call (#26809)
Support own-line suppression comments (#26785)

Core type checking

Derive descriptor setter domains for protocols (#26683)
Handle cycles in derived constraint relations (#26814)
Implement unified generic call inference (#26141)
Preserve constraints from bound receivers (#26776)
Project exact-length narrowing through TypeVars (#26852)
Resolve PEP 695 aliases in type[...] annotations (#26842)
Retain sequence pattern narrowing in successful match cases (#26807)
Support class and static protocol methods (#26574)
Support class objects satisfying instance-method protocols (#26789)
Support type[Protocol] (#26649)
Sync vendored typeshed stubs (#26840). Typeshed diff
Treat transparent callable decorators consistently in class assignments (#26720)

Performance

Compare overloaded protocol method returns pairwise (#26684)
Extend PathBounds fast-path to support both upper and lower bounds (#26782)
Skip Self type scans for non-generic instances (#26703)

Contributors

`v0.0.59`

Compare Source

Released on 2026-07-12.

Bug fixes

Guard descriptor classification cycles (#26690)
Respect init=False in dataclass field-order checks (#26749)
Avoid duplicate diagnostics for overloaded TypeIs (#26716)

Library support

Pydantic: Support custom __init__ methods (#26699)
Pydantic: Support field metadata in Annotated (#26650)

Core type checking

Allow unsound equality-based narrowing for builtins (#26414)
Bind Self in implicit dunder calls (#26711)
Correct protocol method receiver binding (#26701)
Exempt ParamSpec callables from the dunder descriptor heuristic (#26696)
Remove transitive TypeVar artifacts during collection inference (#26714)

LSP server

Avoid broad invalidation from file check eligibility (#26741)
Correct how we expand tabs in docstrings (#26679)
Resolve ambiguity in Google-style docstring parsing in favour of observations from popular projects (#26673)

CLI

Avoid allocation for every stdout write (#26698)
Buffer diagnostic output (#26702)

Performance

Cache generic context (#26745)
Cache known class instances (#26746)
Reuse common TypedDict constraints through intersections (#26747)
Use purpose-specific types for completion and module text (#26664)

Contributors

`v0.0.58`

Compare Source

Released on 2026-07-09.

Bug fixes

Fix protocol matching for class variables (#26669)
Fix reflected binary dispatch for runtime classes (#26623)
Support cached properties in protocols (#26681)

Diagnostics

Add assignability context to upper-bound diagnostics (#26645)
Add blanket ignore comment rule (#26426)
Improve protocol attribute diagnostic context (#26644)

Library support

Pydantic: Add fields from mixin classes (#26631)
Pydantic: Add support for validate_by_{name,alias} (#26598)
Pydantic: Add support for validation_alias (#26629)
Pydantic: Fix float conversion in unions (#26655)
Pydantic: Ignore private attributes (#26630)
Pydantic: Make BaseSettings fields optional by default (#26628)
Pydantic: Recognize frozen models via config (#26648)
Pydantic: Support dict model configurations (#26632)
Pydantic: Support validation of RootModel fields (#26634)
Pydantic: Understand ellipsis as providing no default value (#26637)

Core type checking

Gate membership narrowing on __contains__ semantics (#25964)
Handle callable classes in solver (#26090)
Infer ModuleType.__doc__ as str in the presence of a docstring (#26505)
Infer metaclass-declared attributes on class instances (#26512)
Respect user stub overlays during module resolution (#26123)

Performance

Avoid allocating decorated parameter names (#26666)
Optimize TypeCollector (#26593)

Contributors

`v0.0.57`

Compare Source

Released on 2026-07-07.

Bug fixes

Detect async generator expressions containing await (#26568)
Preserve exhaustive gradual match patterns (#26523)

LSP server

Fix selection range behavior for strings (#26532)
Recognize that dedent ends doctest block when parsing docstrings for signature help (#26552)
Render reStructuredText hyperlinks as Markdown in hover docstrings (#25907)
Update __slots__ string when renaming an attribute (#26438)

Documentation

Document PYTHONPATH support in module discovery (#3889)

Library support

Add support for extra arguments in Pydantic model constructors (#26520)
Detect Pydantic model configurations (#26573)
Distinguish lax and strict mode for Pydantic models (#26587)

Core type checking

Fix subtyping/assignability for @property protocol members (#25332)
Narrow isinstance against intersections containing invalid member (#26545)
Narrow match subjects through structural patterns (#25942)
Preserve generic functools.partial signatures (#24583)
Preserve generic variadic callback semantics (#26521)
Preserve invariant materialization on generic specializations (#26578)
Preserve literal enum member names (#26592)

Performance

Avoid exponential invariant constraint paths (#26538)
Batch parallel jobs when finding references (#26534)
Build module names directly in CompactString (#26546)
Elide default use-def state (#26398)
Reuse owned buffers for string literals (#26547)
Use ICF for macOS release builds (#3709)
Use cached class literal lookup for is_subclass_of (#26585)

Contributors

`v0.0.56`

Compare Source

Released on 2026-07-01.

Bug fixes

Avoid MRO cycle when collecting NamedTuple fields (#26464)
Model int and str enum value normalization (#26349)
Prefer reflected operators by runtime class (#26434, #26474)

CLI

Exit with status 130 when interrupted (#26465)

Performance

Avoid exponential OR-pattern reachability (#26481)
Reduce bound typevar identity overhead (#26396)

Core type checking

Infer generic class pattern capture types (#26479)
Narrow exact tuples through sequence patterns (#26424)
Recognize inherited enum member constructors (#26410)
Respect return-context inference when filtering overloads (#26454)
Sync vendored typeshed stubs (#26501). Typeshed diff

Contributors

`v0.0.55`

Compare Source

Released on 2026-06-26.

LSP server

Render full diagnostics in color (#26384)

Documentation

Document colored diagnostic output (#3858)

Performance

Improve vendored filesystem concurrency (#26408)
Optimize enum comparisons in equality evaluation (#26340)
Remove redundant semantic index shrinks (#26392)
Use never-change durability for one-shot checks (#26359)

Core type checking

Correct enum alias detection and scalar constructors (#26345)
Fix structural pattern binding inference (#26411)
Improve variable-length tuple slicing (#26151)
Infer class and mapping pattern bindings (#25941)
Infer empty collection constructors from later uses (#26389)
Skip shadowed submodule bindings during import analysis (#26385)
Sync vendored typeshed stubs (#26406). Typeshed diff
Track literal iterable emptiness for reachability (#25222)
Validate positional class patterns against __match_args__ (#26195)

Contributors

`v0.0.54`

Compare Source

Released on 2026-06-25.

Bug fixes

Avoid duplicate configuration error output (#26375)
Avoid stack overflows in reachability analysis (#26272)
Fix divergent recursive tuple cycle handling in ty (#26316)
Fix panic from relation queries during cycle recovery (#26335)
Fix panics by reverting recursive TypeOf cycle recovery (#26339)
Support basic usages of __class__ closure cells in methods (#26329)

LSP server

Fix typealias token classification inconsistency (#26255)
Implement rust-analyzer's "Click for full compiler diagnostic" feature (#26269)

Performance

Co-locate retained definition usage state (#26019)
Use never-change durability for immutable file inputs (#26353)

Diagnostics

Reject undeclared protocol instance attributes (#26336)

Core type checking

Allow replacing ordinary methods with compatible functions (#26158)
Distinguish typing.TypedDict from typing_extensions.TypedDict (#25843)
Don't treat non-empty ranges as single-valued (#26351)
Handle TypeVar bounds over type[...] in attribute lookup (#26146)
Infer definite equality comparison results (#26337)
Infer mismatched literal comparisons (#26313)
match statements: make class-pattern fallthrough member-aware (#26283)
match statements: prove TypedDict structural patterns exhaustive (#26285)
match statements: resolve positional class-pattern exhaustiveness (#26284)
Model non-exhaustive enum member sets (enum.Flags) (#26277)
Reduce retained definition map storage (#26348)
Reuse equality semantics for membership compatibility (#25955)
Sync vendored typeshed stubs to support builtins.sentinel (#26341)
Treat non-empty range calls as non-empty for reachability (#25220)
Use assignability for divergent constraints (#26334)
Widen inferred class-valued instance attributes (#26338)

Contributors

`v0.0.53`

Compare Source

Released on 2026-06-23.

Bug fixes

Avoid bypassing lazy constraints for Divergent (#26288)
Avoid recursion when projecting narrowing constraints (#26276)
Fix ParamSpec callable signature extraction for callable instances (#26279)
Make multi-arm TypeOf cycle recovery monotonic (#26275)

LSP server

Document all special forms in ty_extensions (#26263)

Performance

Avoid cloning fallback condition flow snapshots (#26203)
Avoid constructing discarded speculative diagnostics (#26251)
Avoid path lookups when sorting same-file diagnostics (#26257)
Cache is_never_satisfied results (#26261)
Defer applying type context to simple standalone expressions (#26252)

Core type checking

Infer types for names bound in match patterns (#25940)
Preserve regular kind for callable instances (#26253)
Simplify intersections of invariant generic types with Any specializations (#26127)

Contributors

`v0.0.52`

Compare Source

Released on 2026-06-22.

Bug fixes

Avoid shadowing hints for attribute assignments (#26164)
Fix dict.pop overloads to accept arbitrary keys with defaults (#26241)
Normalize recursive TypeOf across multiple union arms (#26230)
Normalize recursive TypeOf growth during cycle recovery (#26163)
Normalize recursive protocol growth during cycle recovery (#26246)
Preserve generic alias identity during cycle recovery (#26166)
Recover from dynamic class code generator cycles (#26167)

LSP server

Add a go-to destination for Divergent (#26162)
Publish diagnostics for all open files after a single file is saved (#25929)
Render Markdown for reStructuredText fields in docstrings on hover (#25903)

CLI

Make error-on-warning the default (#26157)

Diagnostics

Make rendering of fix diffs more concise (#26161)

Performance

Avoid allocating disabled error context trees (#26191)
Avoid lookup maps for small place tables (#26177)
Avoid moving boxed use-def map builders (#26211)
Avoid transient AST ID merge map (#26185)
Batch signature typevar freshness scans (#26196)
Box large semantic index builders (#26186)
Build frozen definition maps directly (#26188)
Compact use-def binding interner keys ([#26193

✂ Note

PR body was truncated to here.

socket-security · 2026-08-11T18:22:03Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	ty@0.0.23 ⏵ 0.0.70	⁺¹

View full report

socket-security · 2026-08-11T18:22:04Z

Caution

Review the following alerts detected in dependencies.

According to your organization's Security Policy, you must resolve all "Block" alerts before proceeding. It is recommended to resolve "Warn" alerts too. Learn more about Socket for GitHub.

Action	Severity	Alert (click "▶" to expand/collapse)
Block		Potential code anomaly (AI signal): pypi `ty` is 66.0% likely to have a medium risk anomaly Notes: The fragment is best characterized as a test-like script: it primarily prints messages (including probabilistic variations) and contains unsafe operational constructs (infinite loops and hardcoded absolute file overwrites/copying). While it does not show typical malware indicators such as network access, credential theft, or dynamic code execution, the infinite loops can cause denial-of-service via unbounded output/CPU usage, and the hardcoded file writes can clobber local files if executed in the wrong environment. Overall risk is driven by availability and local file integrity concerns rather than clear malicious intent. Confidence: 0.66 Severity: 0.56 From: pyproject.toml → `pypi/ty@0.0.70` ℹ Read more on: This package \| This alert \| What is an AI-detected potential code anomaly? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: An AI system found a low-risk anomaly in this package. It may still be fine to use, but you should check that it is safe before proceeding. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore pypi/ty@0.0.70`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		Network access: pypi `ty` Location: Package overview From: pyproject.toml → `pypi/ty@0.0.70` ℹ Read more on: This package \| This alert \| What is network access? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Packages should remove all network access that is functionally unnecessary. Consumers should audit network access to ensure legitimate use. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore pypi/ty@0.0.70`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

davidmytton · 2026-08-11T18:29:08Z

Looks like a lot of changes since we first set this up.

qw-in · 2026-08-11T20:33:00Z

@davidmytton yeah, not surprising for pre 0.1 I guess. Luckily we run pyright (or whatever its called) as well

renovate Bot enabled auto-merge August 11, 2026 18:21

renovate Bot force-pushed the renovate/ty-0.x branch 4 times, most recently from 7b904b8 to 959f32e Compare August 11, 2026 19:06

renovate Bot force-pushed the renovate/ty-0.x branch 2 times, most recently from 25390f5 to 8a1001c Compare August 13, 2026 00:55

renovate Bot changed the title ~~deps: update dependency ty to v0.0.66~~ deps: update dependency ty to v0.0.67 Aug 13, 2026

renovate Bot force-pushed the renovate/ty-0.x branch from 8a1001c to 2847f78 Compare August 13, 2026 11:53

renovate Bot changed the title ~~deps: update dependency ty to v0.0.67~~ deps: update dependency ty to v0.0.69 Aug 13, 2026

renovate Bot force-pushed the renovate/ty-0.x branch from 2847f78 to 7276fa6 Compare August 15, 2026 00:10

arcjet-review Bot added needs review Awaiting human review and removed needs review Awaiting human review labels Aug 15, 2026

renovate Bot force-pushed the renovate/ty-0.x branch from 7276fa6 to 2bd9b5a Compare August 15, 2026 20:18

arcjet-review Bot added needs review Awaiting human review and removed needs review Awaiting human review labels Aug 15, 2026

deps: update dependency ty to v0.0.70

82d96f6

renovate Bot force-pushed the renovate/ty-0.x branch from 2bd9b5a to 82d96f6 Compare August 18, 2026 00:57

arcjet-review Bot added the needs review Awaiting human review label Aug 18, 2026

renovate Bot changed the title ~~deps: update dependency ty to v0.0.69~~ deps: update dependency ty to v0.0.70 Aug 18, 2026

arcjet-review Bot removed needs review Awaiting human review labels Aug 18, 2026

Navigation Menu

Uh oh!

deps: update dependency ty to v0.0.70 - #182

deps: update dependency ty to v0.0.70#182
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/ty-0.x

renovate Bot commented Aug 11, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented Aug 11, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented Aug 11, 2026 •

edited

Loading

Uh oh!

davidmytton commented Aug 11, 2026

Uh oh!

qw-in commented Aug 11, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Uh oh!

Conversation

renovate Bot commented Aug 11, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

LSP server

CLI

Diagnostics

Core type checking

Contributors

Core type checking

Contributors

Diagnostics

Core type checking

Contributors

LSP server

Diagnostics

Configuration

Core type checking

Performance

Contributors

LSP server

Library support

Diagnostics

Core type checking

Contributors

LSP server

Library support

Diagnostics

Core type checking

Performance

Contributors

Bug fixes

LSP server

CLI

Diagnostics

Configuration

Core type checking

Performance

Contributors

Core type checking

Library support

Performance

Contributors

Bug fixes

Diagnostics

Configuration

Core type checking

Performance

Contributors

Bug fixes

LSP server

Library support

Diagnostics

Core type checking

Performance

Contributors

Bug fixes

LSP server

Library support

Diagnostics

Core type checking

Performance

Contributors

Bug fixes

Library support

Core type checking

LSP server

CLI

Performance

Contributors

Bug fixes

Diagnostics

Library support

Core type checking

Performance

Contributors

Bug fixes

LSP server

Documentation

renovate Bot commented Aug 11, 2026 •

edited

Loading

socket-security Bot commented Aug 11, 2026 •

edited

Loading

socket-security Bot commented Aug 11, 2026 •

edited

Loading