Update dependency ty to v0.0.84

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
ty (changelog)	==0.0.83 → ==0.0.84

---

Release Notes

astral-sh/ty (ty)

v0.0.84

Compare Source

Released on 2026-09-24.

This release addresses GHSA-vxvm-j4xq-q7m4, a use-after-free vulnerability during incremental type checking that can result in arbitrary code execution when analyzing a specially crafted Python project. Users who run ty on untrusted code should upgrade to 0.0.84 or newer.

Bug fixes

• Fix stale diagnostics from the LSP server after toggling showSyntaxErrors (#​28759)

LSP server

• Complete string keys from dictionary initializers (#​28820)
• Support LSP requests against closed documents (#​28595)
• Select projects for external files using import search paths (#​28594)
• Use workspace editor settings for external files (#​28639)

Performance

• Avoid repeated subtyping checks for materialized recursive protocols (#​28774)
• Skip reading notebooks when discovering scripts (#​28781)

Core type checking

• Avoid incorrect simplification of TypeIs materializations (#​28817)
• Fix disjointness of generic class types (#​28787)
• Fix staticmethod shadowing through generic receivers and unions (#​28766)
• Infer callable signatures from bounded type variables (#​28599)
• Infer constant membership in inline list and set literals (e.g. "foo" in ["foo"] is now inferred as Literal[True]) (#​28676)
• Infer through optional generic containers in the legacy solver (#​28791)
• Preserve call narrowing during cyclic inference (#​28708)
• Preserve intersections of type guard return types (#​28796)
• Use subtyping for constraint-set implication (#​28657)

Configuration

• Disable invalid-legacy-positional-parameter by default (#​28834)

Other changes

• Only consider reachable definitions when determining whether a condition should be exempted from redundant-condition(-strict) due to the condition being defined relative to sys.version_info, sys.platform, os.name or typing.TYPE_CHECKING (#​28788)

Contributors

• @​ibraheemdev
• @​zsol
• @​charliermarsh
• @​lerebear
• @​MichaReiser
• @​ewdurbin
• @​carljm
• @​sharkdp

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "before 4am"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.