Bump pyrefly from 0.29.1 to 0.33.0

[dependabot]

Bumps pyrefly from 0.29.1 to 0.33.0.

Release notes

Sourced from pyrefly's releases.

Pyrefly v0.32.0

Status : ALPHA
Release date: 08 September 2025

Pyrefly v0.32.0 bundles 70 commits from 18 contributors

---

🚨Major Change for IDE extension

With this release type errors are now disabled by default in IDE when there is no config present ( in pyrefly.toml or pyproject.toml). This change was made based on feedback that displaying type errors by default in the IDE (i.e. red squiggles) was a nuisance for new users, especially those looking only for language services. Users are still able to enable type checking without a configuration file if they wish by updating their config (either in their pyproject.toml, pyrefly.toml or VSCode settings):

# to enable type errors
"python.pyrefly.displayTypeErrors": "force-on"

---

✨ New & Improved

Area	What’s new
Type Checker Behavior	- Implicit return validation is now performed even when untyped-def-behavior is set to check-and-infer-return-any for functions with explicit return annotations. This fixes a conflation issue where return type inference being disabled also disabled implicit return validation. - Improved handling of calls on type[...] including cls (typed as type[Self]). - Deprecation warnings are now emitted when a deprecated function is referred to, not just called. Scoping for class fields in nested scopes is now correctly handled.
IDE Integration	- Type errors now disabled by default in IDE (see details above). - Users can now see in their IDE status bar whether the current file has type errors enabled/disabled - Improved hover for Union types, so hover display now merges identical elements.
Build Systems & Security	- Further improvements made to emulate Buck’s build system file mappings within Pyrefly. This improves Pyrefly's integration with various build systems in OSS and IDEs, though build system support is still in progress. - The tracing-subscriber crate was updated from 0.3.19 to 0.3.20 to fix RUSTSEC-2025-0055, addressing a vulnerability related to ANSI escape sequence injection attacks in logs.

---

🐛 Other bug fixes

We’ve closed 10 bug issues since our last minor release 👏

• #1036 - class property on enums incorrectly typed as Literal
• #1016 - pyrefly process not terminating and consuming significant CPU and memory
• #977 - issue handling attributes in dataclasses
• panics resolved: #509, #962
• Other bugs fixed: #980, #647, #264

Thank-you to all our contributors who found these bugs and reported them! Did you know this is one of the most helpful contributions you can make to an open-source project? If you find any bugs in Pyrefly we want to know about them! Please open a bug report issue here

---

📦 Upgrade

pip install --upgrade pyrefly==0.32.0

How to safely upgrade your codebase

... (truncated)

Commits

• 718c0ae Update pyrefly version]
• 11a6e09 Distinguish between Any as a value and as a type
• eae1c39 Remove unnecessary case when handling explicit legacy type aliases
• 5a71639 expect_configuration_request takes a list of scope uris
• d162a2b Document a mutable capture bug in class fields
• 41e6997 Document a bug in name lookup logic
• 796a759 Improve doc comment a bit
• 09370b2 Use name for a name
• aae9cd7 Explain what's going on in class body / static-lookup rules
• 97c9f40 Add a note about barrier update on the continue
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #169.