chore(deps): bump the minor-and-patch group with 3 updates

[dependabot]

Bumps the minor-and-patch group with 3 updates: zarr-metadata, ml-dtypes and ruff.

Updates zarr-metadata from 0.4.0 to 0.5.0

Commits

• f4a239c chore(zarr-metadata): build 0.5.0 changelog (#4266)
• b1d4132 fix(zarr-metadata): make JSONValue's array arm covariant (#4264)
• 4aba691 fix(build): add an sdist allowlist to zarr-http-server (#4262)
• bd3e398 docs: link the zarr-http-server docs site, and fix dead links across subpacka...
• 5b9c09f fix(docs): build subpackage docs from the package directory (#4252)
• d9af955 feat(zarr-indexing): LazyArray — generic lazy indexing over array-API arrays ...
• 0f7c883 HTTP server that exposes stores, arrays, groups (#3732)
• 5abdee2 build(zarr-metadata): the sdist ships an allowlist, not whatever is lying aro...
• f63e61d docs: add a page linking to the companion packages (#4247)
• 5a4767b refactor(zarr-metadata)!: unify constant naming grammar with type names (#4232)
• Additional commits viewable in compare view

Updates ml-dtypes from 0.5.4 to 0.6.0

Changelog

Sourced from ml-dtypes's changelog.

[0.6.0] - 2026-08-13

• Added new 16-bit complex types: ml_dtypes.complex32 (based on float16) and ml_dtypes.bcomplex32 (based on bfloat16) (#351).
• Added new 1-bit integer types: ml_dtypes.int1 and ml_dtypes.uint1.
• Added __format__ method to custom float, complex, and integer types (#341). Previously, formatting custom scalars (e.g. in f-strings) fell back to string formatting, which could truncate exponents or fail on numeric format specifiers.
• ml_dtypes.finfo and ml_dtypes.iinfo now allow passing an array object to their constructor (#350).
• Fixed equality comparison (==, !=) when comparing custom dtypes against incompatible types like strings or None.
• Dropped support for Python 3.9, which reached end-of-life in October 2025.
• Dropped support for Python 3.13 free-threading, because cibuildwheel dropped support.
• Dropped support for NumPy < 2.0.
• Added support for Python 3.15.
• Switched build system to scikit-build-core and CMake (#361).
• Updated Eigen dependency to v5.0.1.

Commits

• 6bc762d Merge pull request #389 from hawkinsp:release
• ce2c7bf Prepare v0.6.0 release.
• 66a7982 Merge pull request #390 from hawkinsp:npy2
• 2c29114 Drop support for NumPy 1.x.
• 3a8d5da Merge pull request #388 from hawkinsp:build
• dec45f7 Merge pull request #387 from hawkinsp:format
• 2e0e13e Clean up scikit-build-core configuration in pyproject.toml.
• 90bebd5 Implement format for custom float, complex, and int dtypes.
• f9c6392 Merge pull request #368 from jax-ml:dependabot/github_actions/actions/downloa...
• 14396b0 Merge pull request #384 from jax-ml:dependabot/github_actions/actions/setup-p...
• Additional commits viewable in compare view

Updates ruff from 0.16.2 to 0.16.3

Release notes

Sourced from ruff's releases.

0.16.3

Release Notes

Released on 2026-08-13.

Preview features

• [pylint] Fix false negatives on negative numbers (PLR6104) (#27251)
• [pyupgrade] Add rule to replace while 1 with while True (UP048) (#27190)

Bug fixes

• [flake8-bandit] Also check keyword arguments (S602, S603, S607, S609) (#27687)
• [pylint] Allow continue in finally on Python 3.8 (#27626)
• [pylint] Fix PLE1307 false positive with bools (#27651)
• [pylint] Fix false positives and negatives with %b format character (PLE1300, PLE1307) (#27560)
• [pylint] Improve handling of concatenated strings (PLE1300) (#27659)

Rule changes

• [numpy] Make np.chararray autofix backwards-compatible (NPY201) (#27527)

Performance

• Enable PGO for Linux x86-64 Ruff releases (#27570)
• Enable PGO for Linux ARM64 Ruff releases (#27574)
• Enable PGO for Windows x86-64 Ruff releases (#27573)
• Enable PGO for macOS ARM64 Ruff releases (#27572)
• Reduce Expr size to 64 bytes (#27591)

CLI

• Hyperlink rule codes in ruff check --statistics output (#27646)

Documentation

• [ruff] Also suggest asyncio.TaskGroup (RUF006) (#27461)

Other changes

• Use mimalloc v3 (#27586)

Contributors

• @​Andrej730
• @​alonfaraj
• @​romero-deshaw
• @​Avasam
• @​tjkuson
• @​charliermarsh

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.3

Released on 2026-08-13.

Preview features

• [pylint] Fix false negatives on negative numbers (PLR6104) (#27251)
• [pyupgrade] Add rule to replace while 1 with while True (UP048) (#27190)

Bug fixes

• [flake8-bandit] Also check keyword arguments (S602, S603, S607, S609) (#27687)
• [pylint] Allow continue in finally on Python 3.8 (#27626)
• [pylint] Fix PLE1307 false positive with bools (#27651)
• [pylint] Fix false positives and negatives with %b format character (PLE1300, PLE1307) (#27560)
• [pylint] Improve handling of concatenated strings (PLE1300) (#27659)

Rule changes

• [numpy] Make np.chararray autofix backwards-compatible (NPY201) (#27527)

Performance

• Enable PGO for Linux x86-64 Ruff releases (#27570)
• Enable PGO for Linux ARM64 Ruff releases (#27574)
• Enable PGO for Windows x86-64 Ruff releases (#27573)
• Enable PGO for macOS ARM64 Ruff releases (#27572)
• Reduce Expr size to 64 bytes (#27591)

CLI

• Hyperlink rule codes in ruff check --statistics output (#27646)

Documentation

• [ruff] Also suggest asyncio.TaskGroup (RUF006) (#27461)

Other changes

• Use mimalloc v3 (#27586)

Contributors

• @​Andrej730
• @​alonfaraj
• @​romero-deshaw
• @​Avasam
• @​tjkuson
• @​charliermarsh
• @​chirizxc

... (truncated)

Commits

• b0e4702 Bump 0.16.3 (#27723)
• ecdd401 [ty] Separate script and uv modules from project metadata (#27720)
• 1263524 [ty] Simplify display implementations with std::fmt::from_fn (#27718)
• 59196ba [ty] Unify polarity-aware relation construction (#27707)
• b8c5e73 [ty] Disable CodSpeed cycle estimation for instrumented benchmarks (#27706)
• 2b0d210 [ty] Centralize matched argument relations (#27705)
• a9130f3 [pyupgrade] Add rule to replace while 1 with while True (while-one, `...
• c64c7d6 [ty] Model try exception flow with operation checkpoints (#27471)
• 9dea5ef [ty] Avoid deriving sequents for typevars with concrete bounds (#27587)
• 9798e88 [ty] Preserve enum exhaustiveness with custom missing methods (#27700)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions