build(deps): bump the python group with 3 updates

[dependabot]

Bumps the python group with 3 updates: geoip2, publicsuffixlist and ruff.

Updates geoip2 from 5.2.0 to 5.3.0

Release notes

Sourced from geoip2's releases.

5.3.0

• The version is now retrieved from package metadata at runtime using importlib.metadata. This reduces the chance of version inconsistencies during releases.
• The async client now builds its Authorization header with aiohttp.encode_basic_auth() instead of the aiohttp.BasicAuth / auth= parameter, which are deprecated as of aiohttp 3.14.0. As a result, the minimum required aiohttp version is now 3.14.0.
• A new residential attribute has been added to geoip2.records.Anonymizer. This is a geoip2.records.AnonymizerFeed object providing residential proxy data for the network and contains the following fields: confidence, network_last_seen, and provider_name. This attribute may be populated even when no other anonymizer attributes are set, so the anonymizer object may now contain only this attribute.

Changelog

Sourced from geoip2's changelog.

5.3.0 (2026-07-16) ++++++++++++++++++

• The version is now retrieved from package metadata at runtime using importlib.metadata. This reduces the chance of version inconsistencies during releases.
• The async client now builds its Authorization header with aiohttp.encode_basic_auth() instead of the aiohttp.BasicAuth / auth= parameter, which are deprecated as of aiohttp 3.14.0. As a result, the minimum required aiohttp version is now 3.14.0.
• A new residential attribute has been added to geoip2.records.Anonymizer. This is a geoip2.records.AnonymizerFeed object providing residential proxy data for the network and contains the following fields: confidence, network_last_seen, and provider_name. This attribute may be populated even when no other anonymizer attributes are set, so the anonymizer object may now contain only this attribute.

Commits

• 9346701 Update for v5.3.0
• 38d6b9a Update copyright years
• 5e265ea Set release date
• a2998b5 Merge pull request #440 from maxmind/greg/stf-997-add-residential-to-anonymizer
• a1e227a Replace Any with object for unused kwargs
• 635bcb7 Add residential sub-object to anonymizer for Insights
• bfc90e4 Merge pull request #441 from maxmind/dependabot/github_actions/astral-sh/setu...
• 4a9a252 Bump astral-sh/setup-uv from 8.2.0 to 8.3.0
• 911d4d2 Merge pull request #437 from maxmind/dependabot/github_actions/github/codeql-...
• 607d058 Merge pull request #438 from maxmind/dependabot/github_actions/github/codeql-...
• Additional commits viewable in compare view

Updates publicsuffixlist from 1.0.2.20260710 to 1.0.2.20260716

Commits

• See full diff in compare view

Updates ruff from 0.15.21 to 0.15.22

Release notes

Sourced from ruff's releases.

0.15.22

Release Notes

Released on 2026-07-16.

Preview features

• [pycodestyle] Add an autofix for E402 (#22212)
• [refurb] Allow subclassing builtins in stub files (FURB189) (#26812)
• [ruff] Add rule to replace noqa comments with ruff:ignore (RUF105) (#26423)
• [ruff] Add rule to use human-readable names in ruff:ignore comments (RUF106) (#26682)
• [ruff] Add rule to use human-readable names in configuration selectors (RUF201) (#26772)

Bug fixes

• [flake8-pyi] Fix false positive in __all__ (PYI053) (#26872)

Rule changes

• [pylint] Ignore mutable type updates in redefined-loop-name (PLW2901) (#25733)

Performance

• Avoid redundant lexer token bookkeeping (#26765)
• Avoid redundant pending-indentation writes (#26774)
• Avoid unnecessary identifier lookahead (#26525)
• Reuse parser scratch buffers (#26798)

Documentation

• Document argfile support (#26803)
• [flake8-datetimez] Clarify naming guidance for datetime.today (DTZ002) (#26658)
• [pycodestyle] Document E731 fix safety (#26847)
• [ruff] Clarify intentional async contexts for unused-async (RUF029) (#26641)

Contributors

• @​dwego
• @​MichaReiser
• @​Joosboy
• @​KaufmanDmitriy
• @​PeterJCLaw
• @​ntBre
• @​charliermarsh

Install ruff 0.15.22

Install prebuilt binaries via shell script

</tr></table> 

... (truncated)

Changelog

Sourced from ruff's changelog.

0.15.22

Released on 2026-07-16.

Preview features

• [pycodestyle] Add an autofix for E402 (#22212)
• [refurb] Allow subclassing builtins in stub files (FURB189) (#26812)
• [ruff] Add rule to replace noqa comments with ruff:ignore (RUF105) (#26423)
• [ruff] Add rule to use human-readable names in ruff:ignore comments (RUF106) (#26682)
• [ruff] Add rule to use human-readable names in configuration selectors (RUF201) (#26772)

Bug fixes

• [flake8-pyi] Fix false positive in __all__ (PYI053) (#26872)

Rule changes

• [pylint] Ignore mutable type updates in redefined-loop-name (PLW2901) (#25733)

Performance

• Avoid redundant lexer token bookkeeping (#26765)
• Avoid redundant pending-indentation writes (#26774)
• Avoid unnecessary identifier lookahead (#26525)
• Reuse parser scratch buffers (#26798)

Documentation

• Document argfile support (#26803)
• [flake8-datetimez] Clarify naming guidance for datetime.today (DTZ002) (#26658)
• [pycodestyle] Document E731 fix safety (#26847)
• [ruff] Clarify intentional async contexts for unused-async (RUF029) (#26641)

Contributors

• @​dwego
• @​MichaReiser
• @​Joosboy
• @​KaufmanDmitriy
• @​PeterJCLaw
• @​ntBre
• @​charliermarsh

Commits

• 0177a7e Bump 0.15.22 (#26884)
• fe8ba85 [pycodestyle] Document E731 fix safety (#26847)
• f3cf7c8 [ruff] Add rule-codes-in-selectors (RUF201) (#26772)
• d244fd7 Document argfile support (#26803)
• f239758 [flake8-pyi] Fix false positive in __all__ (PYI053) (#26872)
• 54acbcd [ty] Support TypeVarTuple and Unpack (#25240)
• 87fc38c [ty] Parallelize subtype hierarchy search (#26875)
• e454f91 [ty] Share interned query keys across Salsa queries (#26794)
• 6f361a7 [ty] only collect expected types for files open in the editor (#25546)
• 6d6b2b3 [ty] Avoid allocations during Salsa interned lookups (#26877)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions