bump dependencies

pyproject.toml

@@ -63,10 +63,10 @@ dev = [
     "pyright>=1.1.411",
     "pytest>=9.1.1",
     "pytest-cov>=7.1.0",
-    "ruff>=0.15.21",
-    "ty>=0.0.59",
+    "ruff>=0.16.3",
+    "ty>=0.0.73",
     "setuptools>=83.0.0",
-    "mypy>=2.3.0",
+    "mypy>=2.3.1",
     "cloudpickle",  # optional "extra" from construct that the user may or may not have installed
     "cryptography",  # optional "extra" from construct that the user may or may not have installed
     "lz4",  # optional "extra" from construct that the user may or may not have installed
@@ -86,6 +86,9 @@ packages=[
 ]
 
 [tool.uv]
+# Use a 1 week cooldown phase to prevent potential supply chain attacks.
+# See for example: https://blog.yossarian.net/2025/11/21/We-should-all-be-using-dependency-cooldowns
+exclude-newer = "1w"
 # mypy will only find the stubs from "construct-stubs" when using "compat" mode during development.
 config-settings = { editable_mode = "compat" }
 

tests/test_core.py

@@ -214,7 +214,10 @@ def test_bytes_issue_827() -> None:
 
 
 def test_bitwise() -> None:
-    common(Bitwise(Bytes(8)), b"\xff", b"\x01\x01\x01\x01\x01\x01\x01\x01", 1)
+    # There's a problem in `ty` (confirmed in 0.0.73) : inlining `bitwise` (ie. writing `common(Bitwise(Bytes(8)), ...)`) leads to:
+    # "error[no-matching-overload] No overload of function `common` matches arguments"
+    bitwise = Bitwise(Bytes(8))
+    common(bitwise, b"\xff", b"\x01\x01\x01\x01\x01\x01\x01\x01", 1)
     common(Bitwise(Array(8, Bit)), b"\xff", [1, 1, 1, 1, 1, 1, 1, 1], 1)
     common(Bitwise(Array(2, Nibble)), b"\xff", [15, 15], 1)
     common(Bitwise(Array(1, Octet)), b"\xff", [255], 1)