deps: bump ruff to 0.17.2

The commit gateway pins its hooks to the same versions as pdm.lock (see
prek.toml), so both ruff pins move together and `pdm lock` follows.
0.17.2 finds nothing new in src or tests, and `prek run --all-files` is green
on it.

prek.toml

@@ -23,7 +23,7 @@ repos = [
         types_or = ["python", "pyi"],
         args = [],
         require_serial = true,
-        additional_dependencies = ["ruff==0.16.10"],
+        additional_dependencies = ["ruff==0.17.2"],
       },
       {
         id = "ruff-format",
@@ -32,7 +32,7 @@ repos = [
         language = "python",
         types_or = ["python", "pyi"],
         require_serial = true,
-        additional_dependencies = ["ruff==0.16.10"],
+        additional_dependencies = ["ruff==0.17.2"],
       },
       {
         id = "basedpyright",