Bump the all group with 3 updates

Bumps the all group with 3 updates: [ruff](https://github.com/astral-sh/ruff), [ty](https://github.com/astral-sh/ty) and [huggingface-hub](https://github.com/huggingface/huggingface_hub).


Updates `ruff` from 0.15.13 to 0.15.14
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.15.13...0.15.14)

Updates `ty` from 0.0.38 to 0.0.40
- [Release notes](https://github.com/astral-sh/ty/releases)
- [Changelog](https://github.com/astral-sh/ty/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ty@0.0.38...0.0.40)

Updates `huggingface-hub` from 1.16.0 to 1.16.4
- [Release notes](https://github.com/huggingface/huggingface_hub/releases)
- [Commits](huggingface/huggingface_hub@v1.16.0...v1.16.4)

---
updated-dependencies:
- dependency-name: ruff
  dependency-version: 0.15.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: ty
  dependency-version: 0.0.40
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: huggingface-hub
  dependency-version: 1.16.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>

Author: dependabot[bot]

pickle_scanning_benchmark/requirements.txt

@@ -1,5 +1,5 @@
 fickling @ git+https://github.com/trailofbits/fickling.git@master
-huggingface_hub==1.16.0
+huggingface_hub==1.16.4
 model_unpickler==0.1
 modelscan==0.8.8
 picklescan==1.0.4