chore(deps-dev)(deps-dev): bump the python-dependencies group with 2 updates

[dependabot]

Bumps the python-dependencies group with 2 updates: marimo and ty.

Updates marimo from 0.23.14 to 0.23.15

Release notes

Sourced from marimo's releases.

0.23.15

What's Changed

✨ Enhancements

• Prefill issue-report fields via include toggles (#10307)
• Searchable combobox for secret/env fields (#10253)
• Support default file browser selection (#10255)
• Previewable issue diagnostics in the feedback modal (#10251)
• Stream file-browser downloads from disk (#10247)
• Support theme override via query param (#10196)
• Target the current session so agents connect to the right notebook (#10169)
• Propagate request trace context to the kernel (#10166)
• Add deck-level content alignment control (#10176)
• Update LLM model catalog (#10157)
• Queue follow-up messages while assistant is streaming (#10174)

🐛 Bug fixes

• Data_editor corrupting int8/uint8/float16 columns on edit (#10211)
• Reject catch-all getattr objects as DB connections (#10301)
• Clamp dropdown to viewport and portal into fullscreen root (#10297)
• Retain static output through initial hydration (#10298)
• Exclude marimo package from modulefinder crawl (#10249)
• Harden create-test-release action (#10278)
• Remeasure container-width Vega charts when host gains size (#10266)
• Avoid recursively scanning anywidget state (#10254)
• Retry invalid anywidget modules (#10259)
• Resolve pytest race condition during edit (#10139)
• Canonicalize widget files in HTML exports (#10261)
• Resolve version from marimo-base (#10260)
• Handle PEP 695 TypeAlias in DeprivateVisitor (#10227)
• Support Google Vertex with Pydantic-AI v2 (#10256)
• Pin pydantic-ai instrumentation version (#10239)
• Stringify bare pint values in JSON encoding (#10242)
• Restore retina rendering for matplotlib figures (#10246)
• Make long error toasts readable and copyable (#10243)
• Serialize pandas via Arrow IPC instead of deprecated feather (#10244)
• Data_editor corrupting int8/uint8/float16 columns on edit (#10211)
• Dismiss Jedi signature hint on Escape and closing paren (#10162)
• prevent AI in-editor input from disappearing on rejection (#10206)
• Disable scroll view on mobile to prevent crash (#10212)
• Surface load errors instead of rendering a silent blank (#10121)
• Scope skew-protection exemption to login form (#10164)
• Skip missing-package nudge for marimo.* imports (#10167)
• Resolve normalized package names to their module (#10165)
• Sort packages panel list case-insensitively (#10168)
• Do not fire anywidget change listeners at mount (#10179)
• Preserve output DOM across present/edit mode toggles (#10160)
• Do not broadcast anywidget echo_update acks back to clients (#10178)
• Preserve leading underscores in to_camel_case (#10170)
• Prevent marimo check from formatting regular markdown files (#10138)

... (truncated)

Commits

• d8789da release: 0.23.15 (#10308)
• 0f481eb fix: prefill issue-report fields via include toggles (#10307)
• ac5f44e fix: data_editor corrupts float16 columns on edit (follow-up to #10211) (#10304)
• 86f90f0 docs: marimo glance (#10282)
• afa630f docs: pycharm plugin (#10283)
• 367e5b9 Make control loop test deterministic (#10280)
• 69b0e90 docs: marimo pair (#10288)
• c21a67f docs: consolidate AI guides and route readers to marimo pair (#10293)
• eddce3b fix(sql): reject catch-all getattr objects as DB connections (#10301)
• f08787a fix: handle private imports (#9704)
• Additional commits viewable in compare view

Updates ty from 0.0.61 to 0.0.64

Release notes

Sourced from ty's releases.

0.0.64

Release Notes

Released on 2026-07-27.

Bug fixes

• Fix identity narrowing for NewTypes (#26439)
• Make reachability analysis idempotent (#27163)

LSP server

• Fix ParamSpec declaration hover and type navigation (#27183)
• Implement LSP textDocument/implementation request (#25410)
• Introduce shared primitives for parsing backticks in docstrings (#26928)
• Render NumPy docstrings as structured Markdown (#25925)

CLI

• Add --exclude-scripts and --include-scripts (#27169)
• Discover uv workspace roots (#25551)

Diagnostics

• Add a lint rule for combined abstract and final decorators (#26932)
• Change --add-ignore to add space after the colon for ty: ignore (#27120)
• Fix missing-override-decorator suggestion before Python 3.12 (#27166)
• Reuse full call diagnostics for implicit setter calls (#27115)

Configuration

• Allow unresolved unused venv home paths (#27162)
• Simplify script metadata query (#27121)

Core type checking

• Decorate only overload implementation signatures (#27147)
• Don't consider known-instance types, generic aliases or non-singleton special-form types to be single-valued (#27137)
• Improve identity comparison inference for singleton types (#27126)
• Improve tuple membership and rich comparison inference (#27164)
• Model walrus bindings from comprehensions (#26466)
• Narrow tagged unions using identity comparisons (#27130)
• Preserve Self in __new__ calls (#27003)
• Preserve receiver constraints when binding overloaded methods (#27038)
• Support generic manual PEP 695 type aliases (#27083)
• Treat bivariance as covariant (#24319)

Performance

• Avoid cycles when resolving ModuleType globals (#27182)

... (truncated)

Changelog

Sourced from ty's changelog.

0.0.64

Released on 2026-07-27.

Bug fixes

• Fix identity narrowing for NewTypes (#26439)
• Make reachability analysis idempotent (#27163)

LSP server

• Fix ParamSpec declaration hover and type navigation (#27183)
• Implement LSP textDocument/implementation request (#25410)
• Introduce shared primitives for parsing backticks in docstrings (#26928)
• Render NumPy docstrings as structured Markdown (#25925)

CLI

• Add --exclude-scripts and --include-scripts (#27169)
• Discover uv workspace roots (#25551)

Diagnostics

• Add a lint rule for combined abstract and final decorators (#26932)
• Change --add-ignore to add space after the colon for ty: ignore (#27120)
• Fix missing-override-decorator suggestion before Python 3.12 (#27166)
• Reuse full call diagnostics for implicit setter calls (#27115)

Configuration

• Allow unresolved unused venv home paths (#27162)
• Simplify script metadata query (#27121)

Core type checking

• Decorate only overload implementation signatures (#27147)
• Don't consider known-instance types, generic aliases or non-singleton special-form types to be single-valued (#27137)
• Improve identity comparison inference for singleton types (#27126)
• Improve tuple membership and rich comparison inference (#27164)
• Model walrus bindings from comprehensions (#26466)
• Narrow tagged unions using identity comparisons (#27130)
• Preserve Self in __new__ calls (#27003)
• Preserve receiver constraints when binding overloaded methods (#27038)
• Support generic manual PEP 695 type aliases (#27083)
• Treat bivariance as covariant (#24319)

Performance

• Avoid cycles when resolving ModuleType globals (#27182)
• Avoid expanding optional enum comparisons (#27105)

... (truncated)

Commits

• 5e64a13 Bump version to 0.0.64 (#4097)
• 46f4915 Bump version to 0.0.63 (#4071)
• df75992 Bump version to 0.0.62 (#4057)
• 48dd1fd Update prek dependencies (#4059)
• f53a95e Update astral-sh/setup-uv action to v9 (#4060)
• 17d1791 Update dependency prek to v0.4.9 (#4058)
• eb7e7ba Update documentation on mypy/pyright --strict parity, and achieving maximum...
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Labels

The following labels could not be found: dependencies, python. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.