build(deps-dev): bump the dependencies group with 2 updates

[dependabot]

Bumps the dependencies group with 2 updates: ruff and tox.

Updates ruff from 0.16.4 to 0.16.5

Release notes

Sourced from ruff's releases.

0.16.5

Release Notes

Released on 2026-08-27.

Preview features

• Allow rules without codes (#28049)
• Introduce category selectors (#27666)
• Update preview default rules and categories (#27877)

Bug fixes

• [flake8-async] Detect blocking generic HTTP requests (ASYNC210) (#28024)
• [flake8-datetimez] Allow timezone-safe strptime chains (DTZ007) (#28023)
• [flake8-simplify] Respect side effects in lambda defaults (SIM401) (#28000)

Server

• Fix duplicated "of" in ClientOptions doc comment (#27978)

Documentation

• Document rule acceptance guidelines (#27910)
• Document the new category selectors (#27906)

Contributors

• @​AlexWaygood
• @​sharkdp
• @​jelle-openai
• @​charliermarsh
• @​ntBre
• @​aarushkandukoori

Install ruff 0.16.5

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ruff/releases/download/0.16.5/ruff-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/ruff/releases/download/0.16.5/ruff-installer.ps1 | iex"

Download ruff 0.16.5

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.5

Released on 2026-08-27.

Preview features

• Allow rules without codes (#28049)
• Introduce category selectors (#27666)
• Update preview default rules and categories (#27877)

Bug fixes

• [flake8-async] Detect blocking generic HTTP requests (ASYNC210) (#28024)
• [flake8-datetimez] Allow timezone-safe strptime chains (DTZ007) (#28023)
• [flake8-simplify] Respect side effects in lambda defaults (SIM401) (#28000)

Server

• Fix duplicated "of" in ClientOptions doc comment (#27978)

Documentation

• Document rule acceptance guidelines (#27910)
• Document the new category selectors (#27906)

Contributors

• @​AlexWaygood
• @​sharkdp
• @​jelle-openai
• @​charliermarsh
• @​ntBre
• @​aarushkandukoori

Commits

• 9e4938c Bump 0.16.5 (#28110)
• aad0e90 Allow rules without codes (#28049)
• 5fdab73 Update preview default rules and categories (#27877)
• 29c8e5b Document rule acceptance guidelines (#27910)
• 50a4d7f Document the new category selectors (#27906)
• ada8795 Introduce category selectors (#27666)
• d894723 [ty] Infer lambda parameters through callable type aliases (#28109)
• 2685fde [ty] Narrow functional enum members in == and match (#28103)
• efcffd2 [ty] Intersection simplifications with subtype-related generic specialization...
• eb78048 [ty] Bump ecosystem-analyzer for HTML escaping (#28104)
• Additional commits viewable in compare view

Updates tox from 4.60.1 to 4.61.2

Release notes

Sourced from tox's releases.

v4.61.2

What's Changed

• chore: add license-files, remove licence classifier (PEP 639) by @​mwtoews in tox-dev/tox#4052
• 🐛 fix(config): stop splitting factor names that look like ranges by @​MohammedAlkindi in tox-dev/tox#4053
• 📝 docs(config): cover the keys that had no reference entry by @​gaborbernat in tox-dev/tox#4056
• 📝 docs(config): document how factors work by @​gaborbernat in tox-dev/tox#4055
• 📝 docs: name the actor in the factor and schema prose by @​gaborbernat in tox-dev/tox#4057

New Contributors

• @​mwtoews made their first contribution in tox-dev/tox#4052

Full Changelog: tox-dev/tox@4.61.1...4.61.2

v4.61.1

What's Changed

• 🐛 fix(schema): declare prefix in the labeled factor group's not clause by @​gaborbernat in tox-dev/tox#4051

Full Changelog: tox-dev/tox@4.61.0...4.61.1

v4.61.0

What's Changed

• docs: fix dead virtualenv discovery link in explanation.rst by @​CAOShurong in tox-dev/tox#4042
• Replace deprecated load_module in docs conf by @​gaborbernat in tox-dev/tox#4043
• ✨ feat(toml): allow labeling a range factor group by @​gaborbernat in tox-dev/tox#4049
• 🐛 fix(config): substitute inside override values by @​gaborbernat in tox-dev/tox#4048
• ✨ feat(toml): declare factor group defaults and per-run overrides by @​gaborbernat in tox-dev/tox#4050

Full Changelog: tox-dev/tox@4.60.1...4.61.0

Changelog

Sourced from tox's changelog.

Bug fixes - 4.61.2

• tox now expands a generative digit range only where a factor starts, so an environment such as py313-django4-2 keeps its name rather than becoming py313-django4, 3 and 2 - by :user:MohammedAlkindi. (:issue:4053)

Improved documentation - 4.61.2

• Document how factors work in one place, covering what a factor is, the characters tox accepts in one, the platform and architecture factors that apply to conditions without appearing in a name, and how selecting by factor differs from selecting by name - by :user:gaborbernat. (:issue:4055)
• Give a reference entry to the configuration keys that had none. interrupt_post_commands runs commands_post after an interrupt, and config_file_path, host_python, home and tox_root_name are constants a configuration can substitute - by :user:gaborbernat. (:issue:4056)

Contributor-facing changes - 4.61.2

• Declare license metadata per PEP 639, adding license-files and dropping the license classifier in pyproject.toml - by :user:mwtoews. (:issue:4052)

---

v4.61.1 (2026-08-28)

---

Bug fixes - 4.61.1

• Publish a JSON Schema that compiles under SchemaStore's validator again, so editors pick up the configuration keys added since 4.56 - by :user:gaborbernat. (:issue:4051)

Contributor-facing changes - 4.61.1

• Check tox's JSON Schema with SchemaStore's own validator on every pull request that changes it, and again before the release sync opens a pull request there - by :user:gaborbernat. (:issue:4051)

---

v4.61.0 (2026-08-28)

---

Features - 4.61.0

• A labeled factor group can now declare a default for {factor:label} to fall back on when no factor of that group is active in the environment name. Setting TOX_FACTOR_<label> resolves that label to a given value for a single run - by :user:gaborbernat. (:issue:4045)
• A factor range now takes a label when you nest it under one, as in factors = [{ py_version = { prefix = "3.", start = 12, stop = 14 } }], which makes {factor:py_version} available for ranges - by :user:gaborbernat.

... (truncated)

Commits

• 44fc6ac release 4.61.2
• e28d9cf 📝 docs: name the actor in the factor and schema prose (#4057)
• c808c2d [pre-commit.ci] pre-commit autoupdate (#4054)
• 3aa0b69 📝 docs(config): document how factors work (#4055)
• 12b4270 📝 docs(config): cover the keys that had no reference entry (#4056)
• f31ebed 🐛 fix(config): stop splitting factor names that look like ranges (#4053)
• 96e2d71 chore: add license-files, remove licence classifier (PEP 639) (#4052)
• c8c010a release 4.61.1
• cd8c1fa 🐛 fix(schema): declare prefix in the labeled factor group's not clause (#4051)
• aa8f46c release 4.61.0
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.