TST: Pin test dependencies to exact versions (#2230)

* TST: Pin test dependencies to exact versions; add dependabot pip monitoring

Pin all unpinned test dependency specifiers in [dependency-groups] to
exact versions (==) across cuda_bindings, cuda_core, and cuda_pathfinder.
Also add pip ecosystem entries to dependabot.yml so PRs are opened when
newer versions become available on PyPI.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

* Move matplotlib down

* Move numpy back for Python 3.10 compat

* Loosen Numpy because of broad range of Python support required

* Loosen numpy and matplotlib dependencies

* Allow newer version of numpy

---------

Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>
Co-authored-by: Ralf W. Grosse-Kunstleve <rgrossekunst@nvidia.com>

Author: 3 people

.github/dependabot.yml

@@ -1,9 +1,51 @@
-# SPDX-FileCopyrightText: Copyright (c) 2025 NVIDIA CORPORATION & AFFILIATES. All rights reserved.
+# SPDX-FileCopyrightText: Copyright (c) 2025-2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.
 #
 # SPDX-License-Identifier: Apache-2.0
 
 version: 2
 updates:
+  # Python test-dependency updates for cuda_bindings
+  - package-ecosystem: pip
+    directory: /cuda_bindings
+    schedule:
+      interval: "monthly"
+      time: "09:00"
+      timezone: "America/Los_Angeles"
+    open-pull-requests-limit: 5
+    groups:
+      test-deps:
+        applies-to: version-updates
+        patterns: ["*"]
+        update-types: ["major", "minor", "patch"]
+
+  # Python test-dependency updates for cuda_core
+  - package-ecosystem: pip
+    directory: /cuda_core
+    schedule:
+      interval: "monthly"
+      time: "09:00"
+      timezone: "America/Los_Angeles"
+    open-pull-requests-limit: 5
+    groups:
+      test-deps:
+        applies-to: version-updates
+        patterns: ["*"]
+        update-types: ["major", "minor", "patch"]
+
+  # Python test-dependency updates for cuda_pathfinder
+  - package-ecosystem: pip
+    directory: /cuda_pathfinder
+    schedule:
+      interval: "monthly"
+      time: "09:00"
+      timezone: "America/Los_Angeles"
+    open-pull-requests-limit: 5
+    groups:
+      test-deps:
+        applies-to: version-updates
+        patterns: ["*"]
+        update-types: ["major", "minor", "patch"]
+
   # GitHub Actions updates targeting the default branch (main)
   - package-ecosystem: github-actions
     directory: /

cuda_bindings/pyproject.toml

@@ -46,15 +46,15 @@ all = [
 [dependency-groups]
 test = [
     "cython>=3.2,<3.3",
-    "setuptools>=77.0.0",
+    "setuptools>=80.0.0",
     # TODO: remove the Python 3.15 guard once 3.15 is officially supported
-    "matplotlib>=3.5.0; python_version < '3.15'",
-    "numpy>=1.21.1",
-    "pytest>=6.2.4",
-    "pytest-benchmark>=3.4.1",
-    "pytest-repeat",
-    "pytest-randomly",
-    "pyglet>=2.1.9",
+    "matplotlib>=3.5.0,<=3.10.9; python_version < '3.15'",
+    "numpy>=1.21.1,<=2.5.0",
+    "pytest==9.1.0",
+    "pytest-benchmark==5.2.3",
+    "pytest-repeat==0.9.4",
+    "pytest-randomly==4.1.0",
+    "pyglet==2.1.14",
 ]
 
 [project.urls]

cuda_core/pyproject.toml

@@ -60,11 +60,18 @@ cu13 = ["cuda-bindings[all]==13.*", "cuda-toolkit==13.*"]
 
 [dependency-groups]
 test = [
-    "cython>=3.2,<3.3", "setuptools", "pytest>=6.2.4", "pytest-benchmark",
-    "pytest-randomly", "pytest-repeat", "pytest-rerunfailures", "pytest-timeout",
-    "cloudpickle", "psutil",
+    "cython>=3.2,<3.3",
+    "setuptools>=80",
+    "pytest==9.1.0",
+    "pytest-benchmark==5.2.3",
+    "pytest-randomly==4.1.0",
+    "pytest-repeat==0.9.4",
+    "pytest-rerunfailures==16.3",
+    "pytest-timeout==2.4.0",
+    "cloudpickle==3.1.2",
+    "psutil==7.2.2",
     # TODO: remove the Python 3.15 guard once 3.15 is officially supported
-    "cffi; python_version < '3.15'",
+    "cffi==2.0.0; python_version < '3.15'",
 ]
 ml-dtypes = ["ml-dtypes>=0.5.4,<0.6.0"]
 test-cu12 = [ {include-group = "ml-dtypes" }, {include-group = "test" }, "cupy-cuda12x; python_version < '3.14'", "cuda-toolkit[cudart]==12.*"]  # runtime headers needed by CuPy

cuda_pathfinder/pyproject.toml

@@ -12,10 +12,10 @@ dependencies = []
 
 [dependency-groups]
 test = [
-    "pytest>=6.2.4",
-    "pytest-mock",
-    "pytest-repeat",
-    "pytest-randomly",
+    "pytest==9.1.0",
+    "pytest-mock==3.15.1",
+    "pytest-repeat==0.9.4",
+    "pytest-randomly==4.1.0",
 ]
 # Internal organization of test dependencies.
 cu12 = [