chore(deps-dev): bump pyrefly from 1.1.1 to 1.3.0

[dependabot]

Bumps pyrefly from 1.1.1 to 1.3.0.

Release notes

Sourced from pyrefly's releases.

Pyrefly v1.3.0

Release date: September 10, 2026

Pyrefly v1.3.0 bundles 934 commits from 71 contributors.

---

🔍Release Highlights

Type Checking

• New diagnostics and more accurate type inference. Pyrefly now catches invalid literal regular expressions, invalid mock.patch targets, unsupported dataclass_transform arguments, incompatible Protocol.__call__ overrides, and unimplemented abstract methods. Pattern-match exhaustiveness, overload resolution, narrowing, and generic inference are also more accurate.
• Better support for major Python frameworks. Pyrefly understands same-file Django reverse relationships, checks SQLAlchemy updates against model fields, and recognizes attributes registered on PyTorch modules.

Language Server

• Search the whole workspace for methods and nested definitions. Workspace symbol search now covers methods, nested classes and functions, and class attributes even in unopened files.
• New editor refactorings and quick fixes. Change Signature updates a function and its call sites together, while new quick fixes remove unused imports and insert assert x is not None. Inlay hints can also insert required imports and link to definitions.

Configuration & CLI

• Target individual Pyrefly errors with standard suppression comments. # type: ignore[pyrefly:<code>] suppresses a specific Pyrefly diagnostic without hiding unrelated errors on the same line.
• Choose how Pyrefly handles untyped dependencies. The new --replace-untyped-imports-with-any option replaces selected third-party packages that lack stubs or a py.typed marker with Any, and pyrefly init translates mypy's follow_untyped_imports setting automatically.
• Baseline files are easier to maintain and review. Baselines can match by concise description instead of source position, use a compact format, show existing errors at reduced severity, remove stale entries with --prune-baseline, and reject them in CI with --error-stale-baseline.

Experimental Extensions

• Much broader shape-aware JAX and NumPy support. New JAX stubs cover array creation, manipulation, and linear algebra, while the new pyrefly-numpy-stubs package brings shape checking to NumPy. These stubs use a new type-level shape DSL, which replaces the old @shaped_array API.
• Expanded Polars and pandas DataFrame schema support. Pyrefly tracks Polars schemas through common DataFrame transformations, with support for typed Series and schema annotations. pandas columns= projections now preserve the requested schema as well.

---

✨ New & Improved

Type Checking

• Pattern matching gained stronger exhaustiveness checking, including tuple subjects and open types such as unions. Open-type exhaustiveness now has its own configurable non-exhaustive-match-open-type error kind.
• Overload selection now follows the latest typing specification more closely, producing a safe common return type for gradual arguments and reducing false positives in complex overloads.
• Type inference and narrowing are more precise for membership tests, equality checks, hasattr, wide Literal unions, callable values, reverse tuple slices, and values assigned from Any.
• Dataclass fields backed by descriptors are now checked for incompatible read and write types under the new bad-dataclass-descriptor error kind.
• String targets passed to unittest.mock.patch are validated, with nonexistent attributes reported as missing-attribute-patch-target warnings.
• Literal regular expressions are checked for invalid patterns and capturing groups under the new regex error kind.
• Django support now understands reverse ForeignKey, OneToOneField, and ManyToManyField relationships in the same file, while Django REST Framework serializers avoid false override errors for common Meta and field patterns.
• SQLAlchemy update().values() checks values against mapped model fields.
• PyTorch modules recognize attributes registered through register_buffer and register_parameter.

Language Server

• Workspace symbol search now includes methods, nested classes, nested functions, and class attributes.
• Cross-file call hierarchy, type hierarchy, and find-references now work without first opening every relevant file.

... (truncated)

Commits

• 624bdc4 cut 1.3.0
• ad6958c feat: support Pyrefly-specific type ignore codes
• f1d8f62 Bump fast-uri from 3.1.5 to 3.1.7 in /website (#4789)
• cb178b9 add type stubs for remaining jax.lax APIs (#4875)
• 8ee41ca Model polars join(..., coalesce=...) (#4833) (#4859)
• 5d00010 Find methods and other nested definitions in workspace symbols
• 5b392ca Cache flat symbols for first-party modules
• eaa1fd2 Trim the add_var_bound doc comment to its invariant
• df4cfe0 Add build system integration tests (#3628)
• aec8224 Deduplicate and stably rank workspace symbol results
• Additional commits viewable in compare view

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

[RyanMorash]

The CI run on this PR was cancelled, not failed — it hung for ~16 minutes on 2026-08-06 and never reported a result, so the red X is misleading. The original run is now too old for GitHub to re-run directly.

Verified locally on this branch against main (acac68a, which it is already even with):

• pyrefly check with 1.2.0 → 0 errors (14 suppressed, all pre-existing frozen-dataclass mutation tests plus the call-overload in civicrm/client.py)
• ruff check . → All checks passed
• pytest → 354 passed

@dependabot recreate

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: 10aa27cc-490b-422d-ab72-720fe40e7ac9

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[github-code-quality]

Code Coverage Overview

Languages: Python

Python / code-coverage/pytest

The overall line coverage in commit fe6eb8c in the dependabot/uv/pyrefl... branch remains at 93%, unchanged from commit acac68a in the main branch.