chore(deps): update dependency ruff to v0.16.6

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
ruff (source, changelog)	==0.16.5 → ==0.16.6

---

Release Notes

astral-sh/ruff (ruff)

v0.16.6

Compare Source

Released on 2026-09-03.

Preview features

• Move pytest-fixture-autouse to the restriction category (#​28219)
• [flake8-pytest-style] Add an autofix for PT020 (#​27993)
• [flake8-tidy-imports] Prevent fix loop between TID254 and TID255 (#​28262)
• [isort] Exclude pragma comments from line length calculation (I001) (#​27313)

Bug fixes

• Validate unary expressions when parsing (#​28233)
• [flake8-async, pylint] Recognize builtins.open (ASYNC230, PLW1514) (#​28021)
• [flake8-bugbear] Fix panic on match subjects (B031) (#​27781)
• [flake8-datetimez] Reject tzinfo=None for datetime bounds (DTZ901) (#​28022)
• [flake8-pytest-style] Avoid duplicate PT017 diagnostics (#​27918)
• [ruff] Remove lint.external hint for Ruff-specific suppressions (RUF102) (#​27923)

Rule changes

• [flake8-use-pathlib] Add display-only fix for os.listdir (PTH208) (#​28027)

Documentation

• Add another example and glob reference for lint.per-file-ignores (#​28106)
• Add duplicate work guidance (#​28229)
• [flake8-async] Document thread offloading (ASYNC240) (#​28008)
• [pyupgrade] Clarify default encoding argument handling (UP012) (#​27315)

Other changes

• Allow unary plus in match patterns on Python 3.15 (#​28231)

Contributors

• @​flying-sheep
• @​pikammmmm
• @​fly1d
• @​waterWang
• @​Pierre-Sassoulas
• @​ntBre
• @​jelle-openai
• @​ericbuehl
• @​tjkuson
• @​AbhinavMir
• @​Whning0513
• @​chirizxc

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[claude]

⚠️ Code review skipped — your organization's overage spend limit has been reached.

Code review is billed via overage credits. To resume reviews, an organization admin can raise the monthly limit at claude.ai/admin-settings/claude-code.

Once credits are available, push a new commit or reopen this pull request to trigger a review.

[claude]

Looks good, trivial dev-dependency version bump.

What was reviewed: the single-line change to requirements-dev.txt bumping ruff from 0.16.5 to 0.16.6 (dev-only lint tool pin, # via pyuspto). Confirmed no other lines in the lockfile changed and no source, test, or config files are touched.

Extended reasoning...

Overview

The diff is a single-line change to requirements-dev.txt, bumping the pinned version of ruff (a dev-only lint/format tool) from 0.16.5 to 0.16.6, generated by Renovate. No application source code, tests, or runtime configuration is touched.

Security risks

None. ruff is a dev-time linting tool not shipped in the runtime dependency set, and the version is a normal patch release from the upstream astral-sh/ruff project on PyPI. There is no injection, auth, or data-exposure surface here.

Level of scrutiny

This warrants minimal scrutiny — it is a mechanical, automated dependency bump with a one-line diff and no functional code impact.

Other factors

The prior bot event on this PR was a "review skipped" notice due to an overage limit, not an actual review, so this is effectively the first substantive automated review of this PR. Bug hunting reported no findings, consistent with the trivial nature of the change.