chore(deps): update dependency ruff to v0.16.7

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
ruff (source, changelog)	==0.16.6 → ==0.16.7

---

Release Notes

astral-sh/ruff (ruff)

v0.16.7

Compare Source

Released on 2026-09-10.

Preview features

• [ruff] Add rule for default values on method receivers (RUF077) (#​26700)
• [ruff] Recognize re.prefixmatch (RUF039, RUF055) (#​28311)

Bug fixes

• Alternate nested quotes inside format spec interpolations (#​28259)
• [flake8-implicit-str-concat] Mark fix unsafe when it creates a docstring (ISC003) (#​27981)
• [flake8-tidy-imports] Skip fixes for multi-member imports (TID254) (#​26584)
• [pylint] Gate ImportCycleError on Python 3.15 (PLW0133) (#​28310)

Rule changes

• Correct D211 and D203 rule conflict diagnostic (#​28444)
• Recognize slice and frozendict generics (#​28477)
• Stop defining __cached__ for Python 3.15 (#​28476)
• [pyupgrade] Stop recommending removed typing.no_type_check_decorator (UP035) (#​28475)

Performance

• Reuse parser name lookups when interning (#​28399)
• Speed up inherited configuration resolution (#​28299)

Documentation

• Fix line-length path in --config example (#​28392)
• Remove the "Who’s Using Ruff?" list (#​28455)

Other changes

• Embed archive checksums in the shell installer (#​28281)

Contributors

• @​The-Compiler
• @​mdiniz97
• @​zsol
• @​gorewilliams
• @​RafaelJohn9
• @​qatcod
• @​zanieb
• @​MichaReiser
• @​ntBre
• @​charliermarsh
• @​nightt5879
• @​jonathandung
• @​jogo-openai

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[claude]

LGTM, straightforward dev-dependency version bump.

What was reviewed: the single-line change in requirements-dev.txt bumping ruff from 0.16.6 to 0.16.7 (dev-only tool, pinned via pip-compile). Confirmed no other lines in the lockfile or any source/config files changed. Checked the ruff 0.16.7 release notes referenced in the PR description for anything security-relevant — it contains only lint rule tweaks, bug fixes, and performance/documentation changes, nothing affecting the runtime behavior of pyUSPTO itself.

Extended reasoning...

Overview

The entire diff is a one-line change in requirements-dev.txt, a pip-compile-generated lock file, bumping the pinned version of ruff (a dev-only linting tool) from 0.16.6 to 0.16.7. No application source code, tests, or runtime configuration is touched.

Security risks

None identified. ruff is a development-time linter, not a runtime dependency, so it has no exposure to production data flows, auth, or crypto paths. The version bump is a patch release from the upstream project (astral-sh/ruff) with only lint rule additions, bug fixes, and performance improvements per the changelog in the PR description.

Level of scrutiny

Minimal scrutiny is appropriate here. This is a mechanical, automated dependency bump opened by Renovate, affecting only a lock file entry for a dev tool. There is no ambiguity in intent and no code logic to evaluate.

Other factors

The bug hunter found no issues, and there is nothing in the PR conversation timeline suggesting outstanding objections. Given the trivial, self-contained nature of the change, this does not warrant deferral to a human.