chore(deps): bump the production group in /backend with 3 updates

[dependabot]

Bumps the production group in /backend with 3 updates: boto3, coverage and ty.

Updates boto3 from 1.43.64 to 1.43.66

Commits

• f53e30a Merge branch 'release-1.43.66'
• 7ac6cf8 Bumping version to 1.43.66
• c69aee1 Add changelog entries from botocore
• b74eb20 Merge branch 'release-1.43.65'
• 75469d6 Merge branch 'release-1.43.65' into develop
• d25fa39 Bumping version to 1.43.65
• 6081dfd Add changelog entries from botocore
• c7b4afa Merge branch 'release-1.43.64' into develop
• See full diff in compare view

Updates coverage from 7.15.3 to 7.15.4

Release notes

Sourced from coverage's releases.

7.15.4

Version 7.15.4 — 2026-08-06

• Fix: in the HTML report, a source file name containing a double quote (legal on POSIX) wasn’t escaped where it’s dropped into the href of the index and prev/next links, so it could close the attribute early and inject markup. Page URLs are now escaped. Thanks, Rajath Mohare.
• Fix: the LCOV report wrote file names and other fields into its line-oriented records without neutralizing control characters. A measured file whose name contained a newline (legal on POSIX) could forge extra records, inflating the coverage seen by tools that read the report. Control characters in a field are now replaced. Thanks, Rajath Mohare.
• Wheels are now provided for Python 3.15.

➡️  PyPI page: coverage 7.15.4. :arrow_right:  To install: python3 -m pip install coverage==7.15.4

Changelog

Sourced from coverage's changelog.

Version 7.15.4 — 2026-08-06

• Fix: in the HTML report, a source file name containing a double quote (legal on POSIX) wasn't escaped where it's dropped into the href of the index and prev/next links, so it could close the attribute early and inject markup. Page URLs are now escaped. Thanks, Rajath Mohare <pull 2227_>_.

• Fix: the LCOV report wrote file names and other fields into its line-oriented records without neutralizing control characters. A measured file whose name contained a newline (legal on POSIX) could forge extra records, inflating the coverage seen by tools that read the report. Control characters in a field are now replaced. Thanks, Rajath Mohare <pull 2226_>_.

• Wheels are now provided for Python 3.15.

.. _pull 2226: coveragepy/coveragepy#2226 .. _pull 2227: coveragepy/coveragepy#2227

.. _changes_7-15-3:

Commits

• 4c0e7ff docs: sample HTML for 7.15.4
• db4cc32 docs: prep for 7.15.4
• c33085c style: start gradual move to ruff 0.16
• 53a0fd5 fix: neutralize control characters in lcov report fields (#2226)
• b64d53d build: make 3.15 wheels
• 53792ab build: show the python version for kits
• f6b03c7 chore: make upgrade_one package=cibuildwheel
• d9b660a chore: make upgrade
• b128a31 docs: oops, move this entry to the correct place
• a7a2c15 fix: escape filename urls in html report href attributes (#2227)
• Additional commits viewable in compare view

Updates ty from 0.0.66 to 0.0.69

Release notes

Sourced from ty's releases.

0.0.69

Release Notes

Released on 2026-08-06.

Core type checking

• isinstance narrowing for generic classes is now more gradual by default (#27308)

  This new behavior is more similar to what other major type checkers do. For example:

  def f(xs: object):
      if isinstance(xs, list):
          reveal_type(xs)  # now: `list[Unknown]`, before: `Top[list[Unknown]]`

  Note: you might consider enabling analysis.strict-generic-narrowing if you prefer the strictly correct behavior.

Contributors

• @​sharkdp

Install ty 0.0.69

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ty/releases/download/0.0.69/ty-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/ty/releases/download/0.0.69/ty-installer.ps1 | iex"

Download ty 0.0.69

File	Platform	Checksum
ty-aarch64-apple-darwin.tar.gz	Apple Silicon macOS	checksum
ty-x86_64-apple-darwin.tar.gz	Intel macOS	checksum
ty-aarch64-pc-windows-msvc.zip	ARM64 Windows	checksum
ty-i686-pc-windows-msvc.zip	x86 Windows	checksum
ty-x86_64-pc-windows-msvc.zip	x64 Windows	checksum
ty-aarch64-unknown-linux-gnu.tar.gz	ARM64 Linux	checksum
ty-i686-unknown-linux-gnu.tar.gz	x86 Linux	checksum
ty-powerpc64-unknown-linux-gnu.tar.gz	PPC64 Linux	checksum

... (truncated)

Changelog

Sourced from ty's changelog.

0.0.69

Released on 2026-08-06.

Core type checking

• isinstance narrowing for generic classes is now more gradual by default (#27308)

  This new behavior is more similar to what other major type checkers do. For example:

  def f(xs: object):
      if isinstance(xs, list):
          reveal_type(xs)  # now: `list[Unknown]`, before: `Top[list[Unknown]]`

  Note: you might consider enabling analysis.strict-generic-narrowing if you prefer the strictly correct behavior.

Contributors

• @​sharkdp

0.0.68

Released on 2026-08-05.

Diagnostics

• Preserve property getter call errors (#27509)
• Simplify numeric tower displays (e.g., float over int | float) (#27406)
• Suggest closing open TypedDict types for Mapping compatibility (#27512)

Core type checking

• Avoid double inference of Unpack operands in Union (#27525)
• Fix panic from mismatched OR-pattern bindings (#27533)

Contributors

• @​AlexWaygood
• @​charliermarsh
• @​carljm

0.0.67

Released on 2026-08-05.

LSP server

... (truncated)

Commits

• 1dca844 Bump version to 0.0.69 (#4202)
• 557a078 Link to actual docs page rather than README in issue creation menu "Documenta...
• 23a6000 Bump version to 0.0.68 (#4199)
• dc3b7af Update typing FAQ for numeric tower displays (#4198)
• 261fd8f Bump version to 0.0.67 (#4192)
• 91ded4e release: use self-repo references (#4190)
• 83bd8c8 Update bug report issue template (#4189)
• 7ce0eee Update prek dependencies (#4178)
• 6320327 Update dependency prek to v0.4.11 (#4177)
• c572fd5 Update docker/login-action action to v4.5.2 (#4179)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Labels

The following labels could not be found: dependencies, python. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.