Lockfile linting and dependency updates

[asnare]

Changes

This primary purpose of this PR is:

• Fixing some changes to uv.lock that were inadvertently introduced in Add SQL Server Profiler #2151.
• Updating our CI to detect issues in PRs relating to the lock-files.

The intention within this repo is:

• The lock-files should only update under 2 circumstances:

  • A refresh-only update of the lock-files.
  • A dependency in pyproject.toml has been changed.

• Outside of this, uv.lock and .build-constraints.txt should not be changing.

• When they change, it should be via make lock-dependencies which ensures uv.lock refers to PyPI properly. (Manual review is unlikely to spot the error if a dev proxy is in there, so this PR automates the check.)

Further to these linting-releated changes:

• Running make lock-dependencies now locks to the latest versions of dependencies instead of keeping the existing versions if they're still within their allowed version range.
• The use of databricks-bb-analyzer==0.3.1 is blocked: the analyzer binary in this release doesn't work properly. (Issue [BUG]: Analyzer crash on macOS reading Windows-1252-encoded Informatica XML #2373.)

Finally, to verify the linting this PR updates some dependencies:

• Versions are locked against the highest version.
• Outstanding dependabot updates are included.

Relevant implementation details

The linting script has been written so that it can be run locally by developers, it doesn't require the GHA environment to be in place.

Linked Issues

Resolves: #2373

Subsumes:

• Bump ruff from 0.13.3 to 0.15.12 #2409
• Bump faker from 40.12.0 to 40.15.0 #2410
• Bump types-pytz from 2026.1.1.20260408 to 2026.2.0.20260506 #2411
• Bump mypy from 1.18.2 to 1.20.2 #2412
• Bump cattrs from 25.3.0 to 26.1.0 #2413
• Bump pip from 26.0.1 to 26.1 #2415

Tests

• manually tested
• new CI check

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 64.76%. Comparing base (a8ff8a2) to head (c8c6d32).

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #2434   +/-   ##
=======================================
  Coverage   64.76%   64.76%           
=======================================
  Files         104      104           
  Lines        9457     9457           
  Branches      994      994           
=======================================
  Hits         6125     6125           
  Misses       3156     3156           
  Partials      176      176           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[github-actions]

✅ 154/154 passed, 4 flaky, 3 skipped, 1h47m52s total

Flaky tests:

• 🤪 test_recon_sql_server_job_succeeds (20m34.258s)
• 🤪 test_recon_databricks_job_succeeds (20m42.632s)
• 🤪 test_recon_redshift_job_succeeds (20m34.569s)
• 🤪 test_recon_oracle_job_succeeds (20m38.01s)

_{Running from acceptance #4376}

[gueniai]

LGTM

[simone-dbx-labs]

LGTM

[dgomez04]

Very interesting. Looks good to me!